trk.b.oriental-trading.com/ss/c/3SFEK_6w7bq8k-Tf1pQvBJ6_qiWGstdaXhOOPGrCPBB6jWKP-0qRHADx1BXMvkEL1LoAKr08i0Ee4pLD8vuUyA/3re/sWJE852OSfeFNdC1I734_g/h15/hEGWr54jPrpHXvMD0kcaDwG7byQ-EfnOv35gPAcr3y4
302 Found 72 B URL HTTP/1.1 trk.b.oriental-trading.com/ss/c/3SFEK_6w7bq8k-Tf1pQvBJ6_qiWGstdaXhOOPGrCPBB6jWKP-0qRHADx1BXMvkEL1LoAKr08i0Ee4pLD8vuUyA/3re/sWJE852OSfeFNdC1I734_g/h15/hEGWr54jPrpHXvMD0kcaDwG7byQ-EfnOv35gPAcr3y4
IP
File type HTML document, ASCII text
Hash 224e0f7aaeccdcd0e00206c0ff26a752
96d50027dacbe572ddd039f3915988e32fd7ef21
992b42a81121f2ace9f2298477a4e808a7b5bb248524ca02665bdde1658c1eb9
GET /ss/c/3SFEK_6w7bq8k-Tf1pQvBJ6_qiWGstdaXhOOPGrCPBB6jWKP-0qRHADx1BXMvkEL1LoAKr08i0Ee4pLD8vuUyA/3re/sWJE852OSfeFNdC1I734_g/h15/hEGWr54jPrpHXvMD0kcaDwG7byQ-EfnOv35gPAcr3y4 HTTP/1.1
Host: trk.b.oriental-trading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 30 Nov 2022 04:33:34 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 72
Connection: keep-alive
Location: https://s.bluecore.com/AautUB29txagUwTVtTTji91RmR
X-Robots-Tag: noindex, nofollow
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4055
Expires: Wed, 30 Nov 2022 05:41:09 GMT
Date: Wed, 30 Nov 2022 04:33:34 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4ed065cb23b5fca1a179dd73b3c5b7b2
4422eb24688f5e056fc1b18b127c7f63b1dbf5e0
b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 714
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:34 GMT
Last-Modified: Wed, 30 Nov 2022 04:21:40 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8896
Expires: Wed, 30 Nov 2022 07:01:51 GMT
Date: Wed, 30 Nov 2022 04:33:35 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 04:19:39 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 836
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: n3jl4ENSAdr2Xj6B1mGJqUbJK4/RPlsE2qZWDkxVbttwWdSAvD5ADqqcybigkjAUve14HILoHIM=
x-amz-request-id: 76Y6RF67D1KBSB8T
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 03:45:43 GMT
age: 2872
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 04:33:35 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 04:11:13 GMT
cache-control: public,max-age=3600
age: 1342
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b8cd0bfe9229d25efc32f79130382855
dc70cf8d650cf0eb5b8a23620300344ae43d230e
6efe28632fd1dd2c74aa6109145972b383052802df2a506bd75aa936d319fb25
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6EFE28632FD1DD2C74AA6109145972B383052802DF2A506BD75AA936D319FB25"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13593
Expires: Wed, 30 Nov 2022 08:20:08 GMT
Date: Wed, 30 Nov 2022 04:33:35 GMT
Connection: keep-alive
s.bluecore.com/AautUB29txagUwTVtTTji91RmR
308 Permanent Redirect 450 B URL HTTP/2 s.bluecore.com/AautUB29txagUwTVtTTji91RmR
IP
File type HTML document, ASCII text, with very long lines (448)
Hash af1fbe44398d225a7cfca57db56d1f4c
f07af1d8b7f94fc00c8bec0500fb214435c6ee10
34b0f2798c8ec35d822995f89c7b7c1962a72ead6f66fd73d64ddae39b2382e0
GET /AautUB29txagUwTVtTTji91RmR HTTP/1.1
Host: s.bluecore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 308 Permanent Redirect
content-type: text/html; charset=utf-8
location: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
date: Wed, 30 Nov 2022 04:33:35 GMT
content-length: 450
x-envoy-upstream-service-time: 13
server: istio-envoy
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 710
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:35 GMT
Last-Modified: Wed, 30 Nov 2022 04:21:45 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sWngJXgCL05LyLi6rgTUIw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fWql1L4VWajk33i+A+i0b4KjmI0=
www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
200 OK 17 kB URL HTTP/2 www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4271)
Hash d851d4fe5496acd98f4cea16610e41bf
e2e5180a96dbefceedd36823ef1c2249b94da893
6c7ff8baaa185025f3830db8535c08beba1e56e25d1fcfb8e183424d5ccf2d8b
GET /jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904 HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
cache-control: max-age=0, no-cache, no-store
p3p: CP=CAO DSP COR CURa ADMa DEVa TAIa OUR DELa BUS PHY ONL UNI PUR COM NAV INT DEM STA
link: </assets/dist/css/styles-otc_adapt-desktop.min_102722.css>; rel=preload; as=style, <https://cdn.quantummetric.com/qscripts/quantum-otc.js>;rel="preload"; as="script, <https://sb.monetate.net/js/1/a-835fc909/p/orientaltrading.com/438593/g>;rel="preload"; as="script, <https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js>;rel="preload"; as="script, <https://libs.coremetrics.com/eluminate.js>;rel="preload"; as="script, <https://s2.go-mpulse.net>; rel="preconnect",<https://f.monetate.net>; rel="preconnect",<https://c.go-mpulse.net>; rel="preconnect",<https://manage.hawksearch.com>; rel="preconnect", <https://www.orientaltrading.com/assets/dist/icons/icomoon/fonts/icomoon.woff2?oxr650>;rel="preload";as="font";type="font/woff2";crossorigin,<https://www.orientaltrading.com/assets/dist/fonts/global/source-sans-pro-regular-webfont.ttf>;rel="preload";as="font";type="font/ttf";crossorigin,<https://www.orientaltrading.com/assets/dist/fonts/global/source-sans-pro-bold-webfont.ttf>;rel="preload";as="font";type="font/ttf";crossorigin,<https://www.orientaltrading.com/assets/dist/fonts/otc/robotocondensed-bold-webfont.woff2>;rel="preload";as="font";type="font/woff2";crossorigin, <https://cdn.quantummetric.com>;rel="preconnect",<https://sb.monetate.net>;rel="preconnect",<https://ajax.googleapis.com>;rel="preconnect", <http://s7.orientaltrading.com>; rel=preconnect; crossorigin, <http://tags.tiqcdn.com>; rel=preconnect; crossorigin, <https://code.jquery.com>; rel=preconnect; crossorigin, <https://ajax.googleapis.com>; rel=preconnect; crossorigin
x-oracle-dms-ecid: b330638a-7f6e-4b53-b775-8b432e9de327-00612e8c
content-language: en-US
x-oracle-dms-rid: 0
x-mod-pagespeed: 1.13.35.2-0
content-type: text/html; charset=UTF-8
x-akamai-transformed: 9 15578 0 pmb=mNONE,1mRUM,2
content-encoding: gzip
date: Wed, 30 Nov 2022 04:33:36 GMT
content-length: 17285
set-cookie: lastvisitedbrand=otc; domain=orientaltrading.com; expires=Thu, 30-Nov-2023 04:33:36 GMT; path=/; secure; HttpOnly
JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; domain=.orientaltrading.com; path=/; secure; HttpOnly
otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; domain=orientaltrading.com; expires=Thu, 30-Nov-2023 04:33:36 GMT; path=/; secure; HttpOnly
temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; domain=orientaltrading.com; expires=Thu, 30-Nov-2023 04:33:36 GMT; path=/; secure; HttpOnly
visitor_modal=true; domain=orientaltrading.com; expires=Thu, 30-Nov-2023 04:33:36 GMT; path=/; secure; HttpOnly
otc_web_persist=58184-1379541388631426048; Path=/; Domain=orientaltrading.com
AKA_A2=A; expires=Wed, 30-Nov-2022 05:33:36 GMT; path=/; domain=orientaltrading.com; secure; HttpOnly
ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe; Domain=.orientaltrading.com; Path=/; Expires=Wed, 30 Nov 2022 06:33:36 GMT; Max-Age=7200; HttpOnly
server-timing: cdn-cache; desc=MISS, edge; dur=155, origin; dur=143
x-akam-sw-version: 0.5.0
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/fonts/global/source-sans-pro-bold-webfont.ttf
200 OK 71 kB URL HTTP/2 www.orientaltrading.com/assets/dist/fonts/global/source-sans-pro-bold-webfont.ttf
IP
File type TrueType Font data, digitally signed, 19 tables, 1st "BASE", 36 names, Macintosh, Copyright 2010, 2012 Adobe Systems Incorporated. All Rights Reserved.Source Sans ProBold1.050;AD\012- data
Hash f6945cf833895a6568f8e6f50c019b68
cd4af081aee0070a349ef90490f8c4f7728bb923
b8e5ec2550fd8dde71c73b5883d51e9dbae6e305ead387e3f6cf0e674f2445c7
GET /assets/dist/fonts/global/source-sans-pro-bold-webfont.ttf HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Tue, 12 Feb 2019 19:52:31 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: application/font-sfnt
content-length: 70551
expires: Thu, 30 Nov 2023 04:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/icons/icomoon/fonts/icomoon.woff2?oxr650
200 OK 40 kB URL HTTP/2 www.orientaltrading.com/assets/dist/icons/icomoon/fonts/icomoon.woff2?oxr650
IP
File type Web Open Font Format (Version 2), TrueType, length 39428, version 1.0\012- data
Hash 77e77bef2eb7b92840d7d30c6e6ce597
6ef8181a9525d518d4e6482b72e9bc20a596c2a6
08f314d198ff98867b109547696e05bc471a8f76cbd442e47144d87b055a586b
GET /assets/dist/icons/icomoon/fonts/icomoon.woff2?oxr650 HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 22 Sep 2022 16:57:40 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 39456
expires: Thu, 30 Nov 2023 04:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/fonts/otc/robotocondensed-bold-webfont.woff2
200 OK 20 kB URL HTTP/2 www.orientaltrading.com/assets/dist/fonts/otc/robotocondensed-bold-webfont.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19804, version 2.0\012- data
Hash 9006e887c4fb5090d90d319e35896081
a90aee6478944bc39d4388299640fe0d9cc340d5
1babb5dc57f765dfbed7bc52bffc415e0fcfd365f1dc3c6de20fd0a871039d56
GET /assets/dist/fonts/otc/robotocondensed-bold-webfont.woff2 HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Tue, 12 Feb 2019 19:52:31 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 19827
expires: Thu, 30 Nov 2023 04:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/legacy/css/legacy-styles-shared_desktop.min_102722.css
200 OK 125 kB URL HTTP/2 www.orientaltrading.com/assets/dist/legacy/css/legacy-styles-shared_desktop.min_102722.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 125 kB (124700 bytes)
Hash fd0fb4db21c3603cf4963e0d8a2c057b
84926e9206fc326cbf1959ce1a2371aa8ccc51e3
37191c270483e02dfe0f13cca288beb91af024945b60fcc9b97dc46151c6a590
GET /assets/dist/legacy/css/legacy-styles-shared_desktop.min_102722.css HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 27 Oct 2022 17:40:33 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: text/css; charset=utf-8
content-length: 124700
expires: Thu, 30 Nov 2023 04:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/css/styles-otc_adapt-desktop.min_102722.css
200 OK 286 kB URL HTTP/2 www.orientaltrading.com/assets/dist/css/styles-otc_adapt-desktop.min_102722.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 286 kB (286492 bytes)
Hash bfd148c59e3641761c154d6cc7c50458
cbcd6288e10aea20fdc0fc8768312e5c8fb8dcaa
5f0325c86ea6cdaec90998432044efd51da41d7bb7fbbc3220dde3b296cbe923
GET /assets/dist/css/styles-otc_adapt-desktop.min_102722.css HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 27 Oct 2022 17:40:32 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: text/css; charset=utf-8
content-length: 286492
expires: Thu, 30 Nov 2023 04:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/fonts/global/source-sans-pro-regular-webfont.ttf
200 OK 71 kB URL HTTP/2 www.orientaltrading.com/assets/dist/fonts/global/source-sans-pro-regular-webfont.ttf
IP
File type TrueType Font data, digitally signed, 19 tables, 1st "BASE", 36 names, Macintosh, Copyright 2010, 2012 Adobe Systems Incorporated. All Rights Reserved.Source Sans ProRegular1.050\012- data
Hash 0d76bd1a8d457e7b32fd04cee51bc1cd
ca519cf87b379c07f6e9b875ed49d07a5f386464
ba9865ccc1c54091dd328f8498dd00b460d23517cfefe0f40d94cc7fde3cf7ea
GET /assets/dist/fonts/global/source-sans-pro-regular-webfont.ttf HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Tue, 12 Feb 2019 19:52:31 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: application/font-sfnt
content-length: 71380
expires: Thu, 30 Nov 2023 04:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/legacy/js/shared.min_102722.js
200 OK 141 kB URL HTTP/2 www.orientaltrading.com/assets/dist/legacy/js/shared.min_102722.js
IP
File type Unicode text, UTF-8 text, with very long lines (22042)
Size 141 kB (141157 bytes)
Hash fdc846f5ffce475429e66d2cf0c7d316
0e5c9739cf8abc5f40a289befde626ef50d2d2d3
910dd9609ed4bfa411581e22e364c562b34b838e370a6e745b0637d475a937dc
GET /assets/dist/legacy/js/shared.min_102722.js HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 27 Oct 2022 17:40:33 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: application/javascript; charset=utf-8
content-length: 141157
expires: Thu, 30 Nov 2023 04:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/legacy/js/shop.min_102722.js
200 OK 29 kB URL HTTP/2 www.orientaltrading.com/assets/dist/legacy/js/shop.min_102722.js
IP
File type ASCII text, with very long lines (65071)
Hash 991a12992139aab36c0fdd8321f6a0cf
4c3c2bde338b77d3ca1965cec3878f850119da59
10fe7e1d426d3680e8d0b46918493bc6a8d2e720f7d2c6d93f5ca60e5ea898f0
GET /assets/dist/legacy/js/shop.min_102722.js HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 27 Oct 2022 17:40:33 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 29092
content-type: application/javascript; charset=utf-8
expires: Thu, 30 Nov 2023 04:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/js/main.min_102722.js
200 OK 14 kB URL HTTP/2 www.orientaltrading.com/assets/dist/js/main.min_102722.js
IP
File type HTML document, ASCII text, with very long lines (48196), with no line terminators
Hash 20b19232dd268493cfcfb9e468b2a10d
b3fa0131f544648b2d1c9d618d101653b96d9c73
44dbbe0649ae991ca159301be41b6ec9f12653c2eb31577f1c9b340a530a0fb8
GET /assets/dist/js/main.min_102722.js HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 27 Oct 2022 17:40:32 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 13891
content-type: application/javascript; charset=utf-8
expires: Thu, 30 Nov 2023 04:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/js/pages/pdp.min_102722.js
200 OK 1.6 kB URL HTTP/2 www.orientaltrading.com/assets/dist/js/pages/pdp.min_102722.js
IP
File type ASCII text, with very long lines (3746), with no line terminators
Hash 562c57119fb49374f6738c0fc55bded5
ca523e72df4d06739264d76ff12a0e5d84dd7847
b3b43712a27deab05058c3858cca6819d5a4263c9da3fb04f0f22e0ea8a9a760
GET /assets/dist/js/pages/pdp.min_102722.js HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 27 Oct 2022 17:40:33 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 1610
content-type: application/javascript; charset=utf-8
expires: Thu, 30 Nov 2023 04:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/legacy/js/pdp.min_102722.js
200 OK 47 kB URL HTTP/2 www.orientaltrading.com/assets/dist/legacy/js/pdp.min_102722.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 43e39a58ee01f6824f03c1a65559fa91
c7215672c47cc20b0b525611f224ef6f80bbec61
ad1c1ca5435a9e8f367bbc0570425469c2218365cfba949545673e1265198d21
GET /assets/dist/legacy/js/pdp.min_102722.js HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 27 Oct 2022 17:40:33 GMT
accept-ranges: bytes
content-encoding: gzip
content-length: 47345
content-type: application/javascript; charset=utf-8
expires: Thu, 30 Nov 2023 04:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sb.monetate.net/js/1/a-835fc909/p/orientaltrading.com/438593/g
200 OK 77 kB URL HTTP/2 sb.monetate.net/js/1/a-835fc909/p/orientaltrading.com/438593/g
IP
File type ASCII text, with very long lines (2475)
Hash bc205aa647613ae35aa0fad52e415ac2
ade7c00266ca307a4529328ad00b58d99c4736d6
3072261b1afa21bf4ca48b1956b6f1db6581888111587068291d28f933ba3fac
GET /js/1/a-835fc909/p/orientaltrading.com/438593/g HTTP/1.1
Host: sb.monetate.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/x-javascript;charset=utf-8
timing-allow-origin: *
content-encoding: gzip
content-length: 76919
vary: Accept-Encoding
cache-control: max-age=3600
expires: Wed, 30 Nov 2022 05:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
X-Firefox-Spdy: h2
s7.orientaltrading.com/is/image/OrientalTrading/PDP_VIEWER_IMAGE/jingle-bell-necklaces-12-pc-~13615554
200 OK 77 kB URL HTTP/2 s7.orientaltrading.com/is/image/OrientalTrading/PDP_VIEWER_IMAGE/jingle-bell-necklaces-12-pc-~13615554
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 825x825, components 3\012- data
Hash 7e9a4ea56855f7fdccb36191b8f6fd3d
428c22a42f55d1ceb8b28345f10198c41ed9a352
86b27ed87af163307bed953e380631d603796ee910625d58cb406326fc66800e
GET /is/image/OrientalTrading/PDP_VIEWER_IMAGE/jingle-bell-necklaces-12-pc-~13615554 HTTP/1.1
Host: s7.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 76552
access-control-allow-origin: *
last-modified: Tue, 28 Sep 2021 18:02:00 GMT
etag: "7e9a4ea56855f7fdccb36191b8f6fd3d"
server: Unknown
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: private, max-age=1350698
expires: Thu, 15 Dec 2022 19:45:14 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=2
X-Firefox-Spdy: h2
libs.coremetrics.com/eluminate.js
200 OK 44 kB URL HTTP/1.1 libs.coremetrics.com/eluminate.js
IP
File type ASCII text, with very long lines (65012), with CRLF line terminators
Hash 33fb06791e1e18cc8a1cab5002f2a158
5122b8edc24d6d7f2d027f00a99493040ac0fd5c
3ace04894bd6eeb731c097b1edb44bdec42b7fa83d364cd8705aa6b8eb5120c9
GET /eluminate.js HTTP/1.1
Host: libs.coremetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "83394aeb894a3082735d0600850908f4:1634567904.960225"
Last-Modified: Mon, 18 Oct 2021 14:38:24 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 30 Nov 2022 04:33:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s7.orientaltrading.com/is/image/OrientalTrading/PDP_VIEWER_THUMB$NOWA$/jingle-bell-necklaces-12-pc-~13615554
200 OK 2.0 kB URL HTTP/2 s7.orientaltrading.com/is/image/OrientalTrading/PDP_VIEWER_THUMB$NOWA$/jingle-bell-necklaces-12-pc-~13615554
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 458d61c1f363826367c6513f04fdfce5
78b7f4491eaae518531e465d028564e37315567e
59b00e4e4a5fc9ee0bb4b7c99c4dcc0a48935fd28f7398245c7052caeb6dfd4d
GET /is/image/OrientalTrading/PDP_VIEWER_THUMB$NOWA$/jingle-bell-necklaces-12-pc-~13615554 HTTP/1.1
Host: s7.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2030
access-control-allow-origin: *
last-modified: Tue, 28 Sep 2021 18:02:00 GMT
etag: "458d61c1f363826367c6513f04fdfce5"
server: Unknown
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: private, max-age=2591982
expires: Fri, 30 Dec 2022 04:33:19 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=13, origin; dur=413
X-Firefox-Spdy: h2
cdn.quantummetric.com/qscripts/quantum-otc.js
200 OK 90 kB URL HTTP/2 cdn.quantummetric.com/qscripts/quantum-otc.js
IP
File type ASCII text, with very long lines (3730)
Hash 07ba1b216e07794c7abcdfe0a2b678b6
85c27b9a5212154320cb817375045057ae660b0d
0fdb716e5c9f76b219c56b73ae04465b71c7e5a846d0c349588d50b1de510de5
GET /qscripts/quantum-otc.js HTTP/1.1
Host: cdn.quantummetric.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:37 GMT
content-type: text/javascript
vary: Accept-Encoding
etag: W/"166923513452416678537485031669712402743"
cache-control: public, max-age=300, stale-while-revalidate=21600, stale-if-error=21600
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=31536000
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 7720ddabaa1ab521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s7.orientaltrading.com/is/image/OrientalTrading/PDP_VIEWER_THUMB$NOWA$/jingle-bell-necklaces-12-pc-~13615554-a01
200 OK 3.3 kB URL HTTP/2 s7.orientaltrading.com/is/image/OrientalTrading/PDP_VIEWER_THUMB$NOWA$/jingle-bell-necklaces-12-pc-~13615554-a01
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 6ddba91fb0f2cab28a542f62bb02c347
59f0510ca0abe7361251f43d89c0912736c05246
036180d5e78f720cc12e9c43e5a1f804fa247729226591de562c2054da6a4d7c
GET /is/image/OrientalTrading/PDP_VIEWER_THUMB$NOWA$/jingle-bell-necklaces-12-pc-~13615554-a01 HTTP/1.1
Host: s7.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3301
access-control-allow-origin: *
last-modified: Tue, 14 Sep 2021 14:13:24 GMT
etag: "6ddba91fb0f2cab28a542f62bb02c347"
server: Unknown
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: private, max-age=2591941
expires: Fri, 30 Dec 2022 04:32:38 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=96, origin; dur=421
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9764
Expires: Wed, 30 Nov 2022 07:16:21 GMT
Date: Wed, 30 Nov 2022 04:33:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9764
Expires: Wed, 30 Nov 2022 07:16:21 GMT
Date: Wed, 30 Nov 2022 04:33:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9764
Expires: Wed, 30 Nov 2022 07:16:21 GMT
Date: Wed, 30 Nov 2022 04:33:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9764
Expires: Wed, 30 Nov 2022 07:16:21 GMT
Date: Wed, 30 Nov 2022 04:33:37 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F265a94d3-cdf4-4682-bcea-7cb1b79bc860.png
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F265a94d3-cdf4-4682-bcea-7cb1b79bc860.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9fb14804c284e300f976848e30396e9c
6004b4b7afd22dded903f026d245bc90a6706767
1cf96b0b6c83f182d018fa4ffb9924038bf282755091e7bacff2a624220260d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F265a94d3-cdf4-4682-bcea-7cb1b79bc860.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13195
x-amzn-requestid: 1303b72c-fe18-46a3-b3c1-06f3b8550d90
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvHW6oAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1b3dbbb005a238117076d1f3;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pw2Wm8mI8MxRAOVsdvvWLEuxPN5ffcgWBZ_KecuuS5stoTHF4hxECg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:49 GMT
age: 24528
etag: "6004b4b7afd22dded903f026d245bc90a6706767"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 777ce44582c70bf01a31da4cab366f36
57e1d34f146d5ccd9943aa97bcc3158f7103bb07
fbdc8f65ae74dc13b7aafec464f08fdc9902af519946200ec52432ac3ca55982
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10958
x-amzn-requestid: abfea5b0-58f5-49e1-b78e-7cf456d03cb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFHF9oIAMF5lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a20-5ab719292d440d083b07a478;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: e4GuUolL0WIMXvnF7BZ80j-dMMSILN2gd-1mqFwNns-zCUBsJa8iHQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:43:04 GMT
age: 24633
etag: "57e1d34f146d5ccd9943aa97bcc3158f7103bb07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37883a10-064d-451d-9dd4-bca0a5594e96.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37883a10-064d-451d-9dd4-bca0a5594e96.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0c14828912decf19c9d95fee93e92f00
49a82390cbf2139bf681d896f9467ab736e0b337
bbafc9bd160a30c6a31954bdf66655e1decc59dead3bb94c6fa21cad1cd56fe3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37883a10-064d-451d-9dd4-bca0a5594e96.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11466
x-amzn-requestid: 40ae63d3-397e-4118-90b2-d48b1f4014c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaHUxIAMFxWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-2b309a0a5e93f68312a26fa1;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: s1eFJ0mtTFv3DFwwZ52JWOCDJWFA9IRiJ54L0JSkxzxFLnFIgts2CA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:35 GMT
etag: "49a82390cbf2139bf681d896f9467ab736e0b337"
content-type: image/jpeg
age: 24542
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9b96b63164d7dc37268951510afb359f
5991d60e238558f9fe4e1759fe18dde628cb7be4
cd7a88b3173bae9ad466d41b9ae9a2ed9e18157660697f1f1b070043194c3db4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4706
x-amzn-requestid: ce0b287a-7242-402b-8261-c519a1310309
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhHxETjoAMFcTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bcb-7a69d6d14ad0fd707ede2882;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YOLFLV-a93jrA__gtWEzu2Vz8fpQJgvYGDk5fVsjhKVULRHdnKmfHw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:35 GMT
age: 24542
etag: "5991d60e238558f9fe4e1759fe18dde628cb7be4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cb669522a324cd5d9ba1b1743138d38
71e4307194ea9fb15d29c8a5e35f9bfd3cb0c6e0
a997731964710b80affb001f7f2e2f05a93550b06c1626279516d78b11332803
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8337
x-amzn-requestid: 88e6ec5a-6b04-4787-91e4-02f316d0d6e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhgYHViIAMFZrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867c68-10f0d81a09c0ae930f6be726;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8XATm-S2y3wzXWzJxgof2GIbXx_7WzuEMKrhI5By_tGaB8EiYeGkLg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:59:07 GMT
age: 23670
etag: "71e4307194ea9fb15d29c8a5e35f9bfd3cb0c6e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8af12b89-c1a0-4a2a-aa29-cd6dea02f435.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8af12b89-c1a0-4a2a-aa29-cd6dea02f435.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd563ab005d968185c8d000e38b88c2
268e6202466941e612ff503835de9091ef4d5b38
272c867dcc37d97f8682e8f3aa11a567a401b4d4d78e890b0eb94a3c77ea5000
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8af12b89-c1a0-4a2a-aa29-cd6dea02f435.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8288
x-amzn-requestid: 8b48ce45-1c30-4ea3-8cef-bf3b2e7f106f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEgFcUIAMFkSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1c-20e896a62338c6dc45c1ca2a;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:08 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0bNBjOUnEjVgDrhXO2wYnfemT_030w9kk747Zk9-DTeI0UB-lV073g==
via: 1.1 1570d93226c1bbca2ebaad510cff3e0c.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:26 GMT
age: 24551
etag: "268e6202466941e612ff503835de9091ef4d5b38"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
s2.go-mpulse.net/boomerang/A679F-HECVV-PJT6Q-JGED3-E3CG2
200 OK 50 kB URL HTTP/2 s2.go-mpulse.net/boomerang/A679F-HECVV-PJT6Q-JGED3-E3CG2
IP
File type C source, ASCII text, with very long lines (65103)
Hash 8991c3ec80ec8fbc41382a55679e3911
8cc8cee91d671038acd9e3ae611517d6801b0909
f55bacd4a20fef96f5c736a912d1947be85c268df18003395e511c1e860e8800
GET /boomerang/A679F-HECVV-PJT6Q-JGED3-E3CG2 HTTP/1.1
Host: s2.go-mpulse.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
cache-control: max-age=604800
content-encoding: br
last-modified: Fri, 14 Oct 2022 21:10:43 GMT
timing-allow-origin: *
vary: Accept-Encoding
content-length: 50393
date: Wed, 30 Nov 2022 04:33:37 GMT
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/fonts/otc/roboto-bold-webfont.woff2
200 OK 20 kB URL HTTP/2 www.orientaltrading.com/assets/dist/fonts/otc/roboto-bold-webfont.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19720, version 2.0\012- data
Hash a9ede02b3ce70d31541667a553eb4785
2dd7855346b9a63405f2e2ae4fcbcc17808bb072
7210bb603233c9ac9f1d1d4a334032826f0c5cda137b228eab8784935da065d6
GET /assets/dist/fonts/otc/roboto-bold-webfont.woff2 HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.orientaltrading.com/assets/dist/css/styles-otc_adapt-desktop.min_102722.css
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe; mt.v=2.1120525908.1669782816197
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Tue, 12 Feb 2019 19:52:31 GMT
expires: Thu, 30 Nov 2023 04:33:37 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
content-length: 19720
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
s7.orientaltrading.com/is/image/OrientalTrading/PDP_VIEWER_THUMB$NOWA$/jingle-bell-necklaces-12-pc-~13615554-a02
200 OK 4.4 kB URL HTTP/2 s7.orientaltrading.com/is/image/OrientalTrading/PDP_VIEWER_THUMB$NOWA$/jingle-bell-necklaces-12-pc-~13615554-a02
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 48c660a0f6b2864b58902f525b0c9e9d
6dffa5a3517d2f92d683dd460db0477667e0eae4
24fe36aad358ef810a2bc37795e170f52923ba0c9d8e55bfd016f3a40a7f02c7
GET /is/image/OrientalTrading/PDP_VIEWER_THUMB$NOWA$/jingle-bell-necklaces-12-pc-~13615554-a02 HTTP/1.1
Host: s7.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4426
access-control-allow-origin: *
last-modified: Wed, 15 Sep 2021 19:28:55 GMT
etag: "48c660a0f6b2864b58902f525b0c9e9d"
server: Unknown
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: private, max-age=2592000
expires: Fri, 30 Dec 2022 04:33:37 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=33, origin; dur=742
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/img/meta/OTC/apple-touch-icon.png
200 OK 9.1 kB URL HTTP/2 www.orientaltrading.com/assets/dist/img/meta/OTC/apple-touch-icon.png
IP
File type PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\012- data
Hash 74a5ba69af428327722e99fe05144521
6595ddc6d1a6196e178b68f0b7c78394d3ae9ae0
a07c3bf3b76d515f77d203dd0c1aef1b0888be8e0c09dd3b085e909782c4e1a8
GET /assets/dist/img/meta/OTC/apple-touch-icon.png HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe; mt.v=2.1120525908.1669782816197
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 11 Aug 2022 19:42:06 GMT
accept-ranges: bytes
content-length: 9065
content-type: image/png
expires: Fri, 30 Dec 2022 04:33:37 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/img/meta/OTC/favicon-16x16.png
200 OK 1.2 kB URL HTTP/2 www.orientaltrading.com/assets/dist/img/meta/OTC/favicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash e19475496716074b16cad2df418a9410
4eec1e82bd7d3d6fa4285432725fb4bdc941447f
67cd29ea555d195354a823fc7105959eb408045b8d83555c36eee9d45510da7a
GET /assets/dist/img/meta/OTC/favicon-16x16.png HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe; mt.v=2.1120525908.1669782816197
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 11 Aug 2022 19:42:06 GMT
accept-ranges: bytes
content-length: 1152
content-type: image/png
expires: Fri, 30 Dec 2022 04:33:37 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c3c6fcc1a6ec6e438b371359a220d437
646d2c502eb3579d0c394dbdd16ef10f60f43063
5e75d86847b64e661c218e63d1b4b2c4a9ade7506b3b50fce16dd39ebaa5c5fe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 749
Cache-Control: max-age=104958
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:37 GMT
Etag: "6385d132-1d7"
Expires: Thu, 01 Dec 2022 09:42:55 GMT
Last-Modified: Tue, 29 Nov 2022 09:30:26 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash bbc21ea6b074d226551f8b4b270cc17c
045713249974a0ad6b96427c4f60bc2d4eb7f2c5
67440b6a22a18adad44073fc970ece6e30764820e158df7b3099631e3e516923
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: aedbbf4cd7b7ca947fb797515139709f
etag: "f0e59ecea17cac48a8f85911e3f41e4e"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 30 Nov 2022 04:46:02 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: u8IeprB00iZVH4tLJwzBfA==
x-fb-debug: X3on5X5rrxN/pkXYhF4vtvo9GXUtkPlwRmBnFYHVOqfjXMNrt7kPFYJvcFvcXNcRCmRAp6pvgnmZdZFI2RIE9A==
content-length: 1688
x-fb-trip-id: 1904183273
date: Wed, 30 Nov 2022 04:33:37 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c3c6fcc1a6ec6e438b371359a220d437
646d2c502eb3579d0c394dbdd16ef10f60f43063
5e75d86847b64e661c218e63d1b4b2c4a9ade7506b3b50fce16dd39ebaa5c5fe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 749
Cache-Control: max-age=104958
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:37 GMT
Etag: "6385d132-1d7"
Expires: Thu, 01 Dec 2022 09:42:55 GMT
Last-Modified: Tue, 29 Nov 2022 09:30:26 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js?hash=136a6d3a4896316c4835f9ffbe586933
200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=136a6d3a4896316c4835f9ffbe586933
IP
File type ASCII text, with very long lines (18530)
Hash 6576cd71e21f86000f55f7a02f27b1d4
31b33f8e2a5672bc407a6b3cf8f834862653d49f
9bdfe3b65348d301ee61dd9477a267396e734edf7d83b5ac368eb6bd1a4614b9
GET /en_US/sdk.js?hash=136a6d3a4896316c4835f9ffbe586933 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: fb96289ce641f6719b5d79e8014f0226
etag: "f4c1c24fb49186deede354abe04d9c45"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 29 Nov 2023 22:09:06 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: ZXbNceIfhgAPVfegLyex1A==
x-fb-debug: VvtD007GdJdVRTnYG5Vk7kR5YBok6LEmOEQjfzNrgbqXyO/u/9W2rDRTz+C9UFOhDIJxEVrtLUYrijeyp3O7cw==
content-length: 88355
x-fb-trip-id: 1904183273
date: Wed, 30 Nov 2022 04:33:37 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a026436cdc3d02d2d2e3ded0345ede4c
316aaf54c0db69d05d49addee8495d47ddb5f8f8
c2d442df6c6a5fc0941ad8b601059190efb71a3f4bb4182c1237e596c3dc96de
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 532
Cache-Control: max-age=125995
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:37 GMT
Etag: "63862438-1d7"
Expires: Thu, 01 Dec 2022 15:33:32 GMT
Last-Modified: Tue, 29 Nov 2022 15:24:40 GMT
Server: ECS (amb/6B89)
X-Cache: HIT
Content-Length: 471
s7.orientaltrading.com/is/image/OrientalTrading/VIEWER_ZOOM/jingle-bell-necklaces-12-pc-~13615554
200 OK 224 kB URL HTTP/2 s7.orientaltrading.com/is/image/OrientalTrading/VIEWER_ZOOM/jingle-bell-necklaces-12-pc-~13615554
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1500x1500, components 3\012- data
Size 224 kB (224513 bytes)
Hash 0975c8eb626e52c4e0427ad7103b447d
8daabfc6f24057f581492bfeb46113fde09d457e
4e1849bc392075cf1b4c782ec6b8bbe83fb23e477954c5870db896bc4f0ff852
GET /is/image/OrientalTrading/VIEWER_ZOOM/jingle-bell-necklaces-12-pc-~13615554 HTTP/1.1
Host: s7.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe; mt.v=2.1120525908.1669782816197
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 224513
access-control-allow-origin: *
last-modified: Tue, 28 Sep 2021 18:02:00 GMT
etag: "0975c8eb626e52c4e0427ad7103b447d"
server: Unknown
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: private, max-age=2113377
expires: Sat, 24 Dec 2022 15:36:34 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=21
X-Firefox-Spdy: h2
www.orientaltrading.com/rest/content/megamenu/full?_=1669782816352
200 OK 66 kB URL HTTP/2 www.orientaltrading.com/rest/content/megamenu/full?_=1669782816352
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash a11af6696d37c2987237cd9e4d494d79
000eaa9aa6bf24d4d35cad10724bb7b96ce8a97c
42daa14de98b701fa31c9095c640e3be9fc3d4a1f4287fe6b282ee962491ba08
GET /rest/content/megamenu/full?_=1669782816352 HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe; mt.v=2.1120525908.1669782816197
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
content-encoding: gzip
content-type: application/json;charset=UTF-8
content-length: 65568
cache-control: max-age=3686, s-maxage=10
expires: Wed, 30 Nov 2022 05:35:03 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
set-cookie: bm_sv=A8581CADBA3882194A6A89CCA9D78D74~YAAQz00kFw7YUnqEAQAAK8zPxhGSvlQ8NjOzOlzW33JBBh0F8vMspv2ICQic0XWiCq9eYA+HWpslcSbbREUxTrHnY8vJFJhILXebIflYzcgVmQD5MK8QLaowybRVH8uq60/1M8PKbE6nJgqAEKXEqcjtmAvSMVvYFlUH+sDPQRvXE9bUYInH4qruIZlY3SJfVMxTsx5krj0IlmPMe6tr2takQNJQoa+66iBVdu2Xn4EH/m2Cvb95bx1s2MtObXt6S6vUnbQF5dER~1; Domain=.orientaltrading.com; Path=/; Expires=Wed, 30 Nov 2022 06:33:37 GMT; Max-Age=7200; Secure
X-Firefox-Spdy: h2
f.monetate.net/trk/4/s/a-835fc909/p/orientaltrading.com/1707011549-0?mr=t1634225889&mi=%272.1120525908.1669782816197%27&cs=!t&e=!(gr,viewPage,viewProduct,gt)&p=!((productId:%2713615554%27))&pt=product&r=%27%27&sw=1280&sh=1024&sc=24&j=!f&tg=!(!(53176),!(53178))&u=%27https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904%27&fl=!f&hvc=!t&eoq=!t
200 OK 4.2 kB URL HTTP/1.1 f.monetate.net/trk/4/s/a-835fc909/p/orientaltrading.com/1707011549-0?mr=t1634225889&mi=%272.1120525908.1669782816197%27&cs=!t&e=!(gr,viewPage,viewProduct,gt)&p=!((productId:%2713615554%27))&pt=product&r=%27%27&sw=1280&sh=1024&sc=24&j=!f&tg=!(!(53176),!(53178))&u=%27https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904%27&fl=!f&hvc=!t&eoq=!t
IP
File type ASCII text, with very long lines (19364), with no line terminators
Hash cc92b528a61b91439062821ed2171282
35f7509034c9f546f8da31f6fd48e4487cf08ddb
14981ab3bde58bebdf68887cba87435484bcf4b39341803cf1e8219fc45d8ae5
GET /trk/4/s/a-835fc909/p/orientaltrading.com/1707011549-0?mr=t1634225889&mi=%272.1120525908.1669782816197%27&cs=!t&e=!(gr,viewPage,viewProduct,gt)&p=!((productId:%2713615554%27))&pt=product&r=%27%27&sw=1280&sh=1024&sc=24&j=!f&tg=!(!(53176),!(53178))&u=%27https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904%27&fl=!f&hvc=!t&eoq=!t HTTP/1.1
Host: f.monetate.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 4227
Content-Encoding: gzip
Expires: Tue, 30 Nov 2021 04:33:37 GMT
Vary: Accept-Encoding
Server: Monetate
Server-Timing: total;dur=84.7
Cache-Control: no-cache
Date: Wed, 30 Nov 2022 04:33:37 GMT
Content-Type: application/x-javascript; charset=utf-8
Timing-Allow-Origin: *
sb.monetate.net/img/1/p/64/4244358.css/monetate.c.cr.js
200 OK 8.9 kB URL HTTP/2 sb.monetate.net/img/1/p/64/4244358.css/monetate.c.cr.js
IP
File type ASCII text, with very long lines (29637), with no line terminators
Hash c1a3ef449ee9cd7ab3f5527f3942f369
e846e7fc023cdba3b5f86992b720198550bb0eb9
780bb01e952f5cb3c29c2eedcfeca5c5de78aedf7163c85dd9cfa3b1747f0f0f
GET /img/1/p/64/4244358.css/monetate.c.cr.js HTTP/1.1
Host: sb.monetate.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/x-javascript;charset=utf-8
timing-allow-origin: *
content-encoding: gzip
content-length: 8942
vary: Accept-Encoding
cache-control: max-age=2045331
expires: Fri, 23 Dec 2022 20:42:28 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
X-Firefox-Spdy: h2
sb.monetate.net/img/1/p/64/4163580.js/monetate.c.cr.js
200 OK 529 B URL HTTP/2 sb.monetate.net/img/1/p/64/4163580.js/monetate.c.cr.js
IP
File type ASCII text, with very long lines (1207), with no line terminators
Hash 2240fc73574e2c336fa944168cbd4754
f90a74ea038602326dc8152d31139dec22fd0cd6
dc2b14848eb1913c37ca264b2902510f80371f7ee3694db110714f03eda5cc2e
GET /img/1/p/64/4163580.js/monetate.c.cr.js HTTP/1.1
Host: sb.monetate.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/x-javascript;charset=utf-8
timing-allow-origin: *
content-encoding: gzip
content-length: 529
vary: Accept-Encoding
cache-control: max-age=305507
expires: Sat, 03 Dec 2022 17:25:24 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
X-Firefox-Spdy: h2
sb.monetate.net/img/1/p/64/2825335.css/monetate.c.cr.js
200 OK 1.4 kB URL HTTP/2 sb.monetate.net/img/1/p/64/2825335.css/monetate.c.cr.js
IP
File type ASCII text, with very long lines (5339), with no line terminators
Hash ef9262a5739c698c6ef644d90d2e2186
bdba267eceb4a2fe5ded259e222928bdfdbef8a1
c17e0daee1770385d5dbb08a865d21c72cc1a472c2390f2c949d15eee7e47f5f
GET /img/1/p/64/2825335.css/monetate.c.cr.js HTTP/1.1
Host: sb.monetate.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/x-javascript;charset=utf-8
timing-allow-origin: *
content-encoding: gzip
content-length: 1358
vary: Accept-Encoding
cache-control: max-age=1257706
expires: Wed, 14 Dec 2022 17:55:23 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
X-Firefox-Spdy: h2
sb.monetate.net/img/1/p/64/4119513.js/monetate.c.cr.js
200 OK 689 B URL HTTP/2 sb.monetate.net/img/1/p/64/4119513.js/monetate.c.cr.js
IP
File type ASCII text, with very long lines (2153), with no line terminators
Hash 19a9fa4a6c580bd14f149d8819a6a436
c2560856325f5ec334250032d578398c56a5a1e4
5d2719bc941334ea2eca0b9a48abd9cf9de53419812577db467e0a8175ab2897
GET /img/1/p/64/4119513.js/monetate.c.cr.js HTTP/1.1
Host: sb.monetate.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/x-javascript;charset=utf-8
timing-allow-origin: *
content-encoding: gzip
content-length: 689
vary: Accept-Encoding
cache-control: max-age=2116067
expires: Sat, 24 Dec 2022 16:21:24 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
X-Firefox-Spdy: h2
sb.monetate.net/img/1/p/64/4318346.js/monetate.c.cr.js
200 OK 2.3 kB URL HTTP/2 sb.monetate.net/img/1/p/64/4318346.js/monetate.c.cr.js
IP
File type ASCII text, with very long lines (8028), with no line terminators
Hash b22d5d24f2a8deba03952db4cc9be5b1
5af4accb90c5aef7a0631b41dd55e0522476f927
4ab7948bdb0cb80c5b32347c3139c0942fb46937d49ee7cda267c783c307dc4c
GET /img/1/p/64/4318346.js/monetate.c.cr.js HTTP/1.1
Host: sb.monetate.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/x-javascript;charset=utf-8
timing-allow-origin: *
content-encoding: gzip
content-length: 2278
vary: Accept-Encoding
cache-control: max-age=2058482
expires: Sat, 24 Dec 2022 00:21:39 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
X-Firefox-Spdy: h2
f.monetate.net/trk/4/i/a-835fc909/p/orientaltrading.com/1707011549-2?mr=t1634225889&mi=%272.1120525908.1669782816197%27&u=%27https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904%27&e=!(xi)&ii=!(%275,1,3981617,op_impression,,,,,1669782817,1,1669782816%27)&eoq=!t
200 OK 36 B URL HTTP/1.1 f.monetate.net/trk/4/i/a-835fc909/p/orientaltrading.com/1707011549-2?mr=t1634225889&mi=%272.1120525908.1669782816197%27&u=%27https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904%27&e=!(xi)&ii=!(%275,1,3981617,op_impression,,,,,1669782817,1,1669782816%27)&eoq=!t
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad6a6cb23b0391c6652e018b9ac3bfc7
d38bd8446c3505f9b4797660388a8d6e8fd3d450
be4f754acf2dd33169add8976c1264f647470efdc993927040e23c4d310a835f
GET /trk/4/i/a-835fc909/p/orientaltrading.com/1707011549-2?mr=t1634225889&mi=%272.1120525908.1669782816197%27&u=%27https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904%27&e=!(xi)&ii=!(%275,1,3981617,op_impression,,,,,1669782817,1,1669782816%27)&eoq=!t HTTP/1.1
Host: f.monetate.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 36
Expires: Wed, 23 Nov 2022 04:33:37 GMT
Vary: Accept-Encoding
Server: Monetate
Cache-Control: no-cache
Date: Wed, 30 Nov 2022 04:33:37 GMT
Content-Type: image/gif
Timing-Allow-Origin: *
f.monetate.net/trk/4/i/a-835fc909/p/orientaltrading.com/1707011549-1?mr=t1634225889&mi=%272.1120525908.1669782816197%27&u=%27https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904%27&e=!(xi)&ii=!(%275,1,4615205,op_impression,,,,,1669782817,0,1669782816%27)&eoq=!t
200 OK 36 B URL HTTP/1.1 f.monetate.net/trk/4/i/a-835fc909/p/orientaltrading.com/1707011549-1?mr=t1634225889&mi=%272.1120525908.1669782816197%27&u=%27https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904%27&e=!(xi)&ii=!(%275,1,4615205,op_impression,,,,,1669782817,0,1669782816%27)&eoq=!t
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad6a6cb23b0391c6652e018b9ac3bfc7
d38bd8446c3505f9b4797660388a8d6e8fd3d450
be4f754acf2dd33169add8976c1264f647470efdc993927040e23c4d310a835f
GET /trk/4/i/a-835fc909/p/orientaltrading.com/1707011549-1?mr=t1634225889&mi=%272.1120525908.1669782816197%27&u=%27https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904%27&e=!(xi)&ii=!(%275,1,4615205,op_impression,,,,,1669782817,0,1669782816%27)&eoq=!t HTTP/1.1
Host: f.monetate.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 36
Expires: Wed, 23 Nov 2022 04:33:37 GMT
Vary: Accept-Encoding
Server: Monetate
Cache-Control: no-cache
Date: Wed, 30 Nov 2022 04:33:37 GMT
Content-Type: image/gif
Timing-Allow-Origin: *
www.orientaltrading.com/rest/account/getAccountDetail?nocache=1669782816757
200 OK 293 B URL HTTP/2 www.orientaltrading.com/rest/account/getAccountDetail?nocache=1669782816757
IP
File type JSON data\012- , ASCII text, with very long lines (461), with no line terminators
Hash 33ad2abfbbc197c1277533ef211b2fc0
8c5e769d5928067edd83af6b069b05a1c368647a
64f6eed6f6a10956986acaa1bbe4232b95d4f0608b577c0ddd3cdffe9c9e1c6d
POST /rest/account/getAccountDetail?nocache=1669782816757 HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe; mt.v=2.1120525908.1669782816197
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
p3p: CP=CAO DSP COR CURa ADMa DEVa TAIa OUR DELa BUS PHY ONL UNI PUR COM NAV INT DEM STA
content-encoding: gzip
content-type: application/json;charset=UTF-8
content-length: 293
date: Wed, 30 Nov 2022 04:33:37 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=119, origin; dur=32
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
set-cookie: lastvisitedbrand=otc; domain=orientaltrading.com; expires=Thu, 30-Nov-2023 04:33:37 GMT; path=/; secure; HttpOnly
bm_sv=131163EBC68DF9458AEF472B7BD6E103~YAAQz00kFw/YUnqEAQAAyMzPxhFxkALBwsLBeTGIApQX7pcPhBIOcG9/bbtyRt/f203qC4Ig5xtj2pqE+IpXwnrJQKdweo4LucHWGlB03wdKP1n/XCNpSsXEpBMy1rGIzns/bMHxQO78+TX2s2xRAMQ7L2pMZk5Ke6Xrum8fdy81hSLvXU5oyVzfe/tySPLchwIhRufW0DJuU8drgjxYaJRFw3mimrVkIS0596x0goviA2WzkYHt8G5kdXkbT16zzzl6Uxu9GAmy~1; Domain=.orientaltrading.com; Path=/; Expires=Wed, 30 Nov 2022 06:33:37 GMT; Max-Age=7200; Secure
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.js
200 OK 21 kB URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.js
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (9144)
Hash 9a7339c5ef6ed75fb8b8e3e8838fd46b
007cb61dea22687a50beb3dfdd60df9e7ecb9cce
6143cfa7be8752b001e044c8c7f1983507a06228b097e8ba276d1470cb3c65d4
GET /utag/otc/merged/prod/utag.js HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "dc073069816ff8db062a150a52d87e04:1669152255.093171"
last-modified: Tue, 22 Nov 2022 21:24:15 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 30 Nov 2022 04:38:37 GMT
date: Wed, 30 Nov 2022 04:33:37 GMT
content-length: 20780
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.641.js?utv=ut4.46.202209231637
200 OK 2.5 kB URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.641.js?utv=ut4.46.202209231637
IP
File type ASCII text, with very long lines (1194)
Hash ddc6aac137b2647d51e893e7595223b8
736971ecbc5d356aceee466411fe9d63f16c336a
6f463f814d1b064bae01ad2b56f3624b03609b708068b18a99f516bda2bdd3bf
GET /utag/otc/merged/prod/utag.641.js?utv=ut4.46.202209231637 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b6a5498d024e68c2bc3841b33f832506:1637602859.085177"
last-modified: Mon, 22 Nov 2021 17:40:59 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Thu, 15 Dec 2022 04:33:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 2457
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.495.js?utv=ut4.46.202202092122
200 OK 8.6 kB URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.495.js?utv=ut4.46.202202092122
IP
File type ASCII text, with very long lines (12423)
Hash 36a566a17804e03b44ec8634ef148952
aabbb5fdc64726f6c9069b41140620b0d4ab5f27
43adeaa8cf6c913d72b385fdd44e549a12bd13bf5c968017e7452624678f7808
GET /utag/otc/merged/prod/utag.495.js?utv=ut4.46.202202092122 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "e557aecc5dfccd3bb6ae274c9bf9fc6a:1642179033.561577"
last-modified: Fri, 14 Jan 2022 16:50:33 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Thu, 15 Dec 2022 04:33:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 8612
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.100.js?utv=ut4.46.202109102236
200 OK 810 B URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.100.js?utv=ut4.46.202109102236
IP
File type ASCII text, with very long lines (444)
Hash 63f75b79ca2bd8f260cea445197b804f
31af5fc38cb5ff4cf7bfcbc055f965b75f1bba2f
ed58bcf2c0aae878849983ea7bead2cfbd5318a5d75a0c52202f7a5626b8d6b3
GET /utag/otc/merged/prod/utag.100.js?utv=ut4.46.202109102236 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "8db6b4b1e04c334f6cf7fabd8a901a9e:1625841569.708836"
last-modified: Fri, 09 Jul 2021 14:39:29 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Thu, 15 Dec 2022 04:33:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 810
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.595.js?utv=ut4.46.202210171442
200 OK 8.6 kB URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.595.js?utv=ut4.46.202210171442
IP
File type ASCII text, with very long lines (6548)
Hash c231955a494eb9730fb93d486f56676d
3ff562bf7c8a5474368193f46672e655b7119d0d
1bc975f4b52854962b36528d29dca06c227c150570fca0ca8f754d32890ec5cd
GET /utag/otc/merged/prod/utag.595.js?utv=ut4.46.202210171442 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "c5b1be6a991b262740ab4a2c2993df7e:1666017762.345807"
last-modified: Mon, 17 Oct 2022 14:42:42 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Thu, 15 Dec 2022 04:33:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 8637
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.605.js?utv=ut4.46.202209231917
200 OK 1.9 kB URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.605.js?utv=ut4.46.202209231917
IP
File type ASCII text, with very long lines (1048)
Hash 239cc6793bb3d6e8ccf42d4be02373a3
2128dadff1d8ed07042bc0fb50005c4bbd035dc4
cbec4df325dc23f18879dca4e443d94f87b9342ef402ae9e7c6efd0d17d59482
GET /utag/otc/merged/prod/utag.605.js?utv=ut4.46.202209231917 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b60627b5d2cf58631bb3eeb1a9c325e3:1636147091.531949"
last-modified: Fri, 05 Nov 2021 21:18:11 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Thu, 15 Dec 2022 04:33:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 1939
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.603.js?utv=ut4.46.202209231917
200 OK 6.4 kB URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.603.js?utv=ut4.46.202209231917
IP
File type ASCII text, with very long lines (18949)
Hash f1891e9cd52ba842116c576f3c534c3e
bc2b8a3a83eeb67f6b233c8b1a2b98f326bf0c79
606f8feee65b421fa1ef6cf3912cbcaefab2775a4290d91626ab41e58001520d
GET /utag/otc/merged/prod/utag.603.js?utv=ut4.46.202209231917 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b6b99837a62e88fdc6cc92f7697102f3:1644441765.515017"
last-modified: Wed, 09 Feb 2022 21:22:45 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Thu, 15 Dec 2022 04:33:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 6390
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.541.js?utv=ut4.46.202211222123
200 OK 1.9 kB URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.541.js?utv=ut4.46.202211222123
IP
File type ASCII text, with very long lines (995)
Hash b6610b89ca082bfc6df9be110a5acab1
8d2efbb6594fa5d715d5ff442d5899a8d24e2af1
0fa5ab91c408e5de587590938aa7571aefcc10d8d3b61cb58d9792201cea2dac
GET /utag/otc/merged/prod/utag.541.js?utv=ut4.46.202211222123 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "71ee60920af858a442eb5ee43d5c0f6d:1625841563.519655"
last-modified: Fri, 09 Jul 2021 14:39:23 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Thu, 15 Dec 2022 04:33:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 1867
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.571.js?utv=ut4.46.202202092122
200 OK 2.2 kB URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.571.js?utv=ut4.46.202202092122
IP
File type ASCII text, with very long lines (5292)
Hash 2cea3228bb49d6fe51e373ded2a767b9
17121cd7716664254fab89e7d3d09efebe0aedc0
1b17a414d9a075ef38aceb4813ff8a5f861dab46fefc23c959f7c72151b2f027
GET /utag/otc/merged/prod/utag.571.js?utv=ut4.46.202202092122 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "a0e53909b6ce3f658fb27405faf790ee:1644441763.35562"
last-modified: Wed, 09 Feb 2022 21:22:43 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Thu, 15 Dec 2022 04:33:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 2237
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.615.js?utv=ut4.46.202210051810
200 OK 1.4 kB URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.615.js?utv=ut4.46.202210051810
IP
File type ASCII text, with very long lines (1048)
Hash b368c53b1166ab077af3704d4a074440
bf4564c0fa8caa9869a891058de394876f9227af
2f18d543262cc18c98416b8da3a778f7c03bb6fb534069d07a4d9bf227e3adb4
GET /utag/otc/merged/prod/utag.615.js?utv=ut4.46.202210051810 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "34825f8e6a0c0cd31a8bbb5a6a5d8537:1645120155.428561"
last-modified: Thu, 17 Feb 2022 17:49:15 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Thu, 15 Dec 2022 04:33:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 1443
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.634.js?utv=ut4.46.202111222254
200 OK 1.2 kB URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.634.js?utv=ut4.46.202111222254
IP
File type ASCII text, with very long lines (472)
Hash bd897e96b48bb513d2c5dc67a01cfc74
0cf4cea249f894edea1d865a71a0e357631d4590
a4a44fcbdf2597250c85a264077d3488a86fd5778dfadbd7cc84cf9a7b2cc1ed
GET /utag/otc/merged/prod/utag.634.js?utv=ut4.46.202111222254 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "f55baab7ae6f0b1471c82ba0bb9b71dc:1631307128.084267"
last-modified: Fri, 10 Sep 2021 20:52:08 GMT
server: AkamaiNetStorage
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Thu, 15 Dec 2022 04:33:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 1165
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.652.js?utv=ut4.46.202209231637
200 OK 1.2 kB URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.652.js?utv=ut4.46.202209231637
IP
File type ASCII text, with very long lines (1341)
Hash a0b5351c665e87cdfb4ed54588980234
fb9e874e5f0d3d35e3580f23c24449ecb87048a2
2647b42785f7d2062e11e7ba812fcc5ff3c11a4ced4db1132dbd8e4d485e3d61
GET /utag/otc/merged/prod/utag.652.js?utv=ut4.46.202209231637 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "108ebfe06b5bdec75641dd276dd62beb:1661780274.324999"
last-modified: Mon, 29 Aug 2022 13:37:54 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Thu, 15 Dec 2022 04:33:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 1195
X-Firefox-Spdy: h2
tags.tiqcdn.com/utag/otc/merged/prod/utag.611.js?utv=ut4.46.202210171408
200 OK 10 kB URL HTTP/2 tags.tiqcdn.com/utag/otc/merged/prod/utag.611.js?utv=ut4.46.202210171408
IP
File type ASCII text, with very long lines (9704)
Hash cc5eeb932193a685d6069b04450bd4e1
53db47f7e8f5030ca9ea905a60cd06cd2c5b3601
e90e3ff6bf9af619e2d243a34e0ab36d3af9fc4461b7ff2bd99961d148b393bb
GET /utag/otc/merged/prod/utag.611.js?utv=ut4.46.202210171408 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "6ebf1ceb807e6f5be9a72a44668acb64:1669152254.959257"
last-modified: Tue, 22 Nov 2022 21:24:14 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=1296000
expires: Thu, 15 Dec 2022 04:33:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 10235
X-Firefox-Spdy: h2
www.facebook.com/x/oauth/status?client_id=162156243805929&input_token&origin=1&redirect_uri=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&sdk=joey&wants_cookie_data=false
200 OK 0 B URL HTTP/2 www.facebook.com/x/oauth/status?client_id=162156243805929&input_token&origin=1&redirect_uri=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&sdk=joey&wants_cookie_data=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /x/oauth/status?client_id=162156243805929&input_token&origin=1&redirect_uri=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&sdk=joey&wants_cookie_data=false HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.orientaltrading.com/
Origin: https://www.orientaltrading.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
access-control-expose-headers: fb-s
access-control-allow-credentials: true
access-control-allow-origin: https://www.orientaltrading.com
fb-s: unknown
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
document-policy: force-load-at-top
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
strict-transport-security: max-age=15552000; preload
x-fb-debug: rRbug/3qW+qZiU81e+It6YOR3GSmhapC3pOkpUgxowwQAEtP7tlmnQfMJFnHwaaZPZ6uYFDhmyFcXoxrm5ZTSw==
content-length: 0
date: Wed, 30 Nov 2022 04:33:38 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.orientaltrading.com/web/browse/product/13615554/questions?keyword=&filter=&originalkeyword=&categoryId=&rd=&searchTarget=
200 OK 4.1 kB URL HTTP/2 www.orientaltrading.com/web/browse/product/13615554/questions?keyword=&filter=&originalkeyword=&categoryId=&rd=&searchTarget=
IP
File type HTML document, ASCII text, with very long lines (320)
Hash 7e7b58e51b24f554f09194500fde7a13
88833c090d7d870189c4664a22756600b9226cfd
fe701bd2b6ea729643b46474fea631f35242f3be54a4c908c7c8460b2fd2e0bf
GET /web/browse/product/13615554/questions?keyword=&filter=&originalkeyword=&categoryId=&rd=&searchTarget= HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe; mt.v=2.1120525908.1669782816197
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
cache-control: max-age=0, no-cache, no-store
p3p: CP=CAO DSP COR CURa ADMa DEVa TAIa OUR DELa BUS PHY ONL UNI PUR COM NAV INT DEM STA
link: </assets/dist/css/styles-otc_adapt-desktop.min_102722.css>; rel=preload; as=style, <https://cdn.quantummetric.com/qscripts/quantum-otc.js>;rel="preload"; as="script, <https://sb.monetate.net/js/1/a-835fc909/p/orientaltrading.com/438593/g>;rel="preload"; as="script, <https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js>;rel="preload"; as="script, <https://libs.coremetrics.com/eluminate.js>;rel="preload"; as="script, <https://s2.go-mpulse.net>; rel="preconnect",<https://f.monetate.net>; rel="preconnect",<https://c.go-mpulse.net>; rel="preconnect",<https://manage.hawksearch.com>; rel="preconnect", <http://s7.orientaltrading.com>; rel=preconnect; crossorigin, <http://tags.tiqcdn.com>; rel=preconnect; crossorigin, <https://code.jquery.com>; rel=preconnect; crossorigin, <https://ajax.googleapis.com>; rel=preconnect; crossorigin
content-language: en-US
x-mod-pagespeed: 1.13.35.2-0
content-type: text/html; charset=Cp1255
x-akamai-transformed: 9 5118 0 pmb=mNONE,1mRUM,2
content-encoding: gzip
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 4110
server-timing: cdn-cache; desc=MISS, edge; dur=131, origin; dur=158
x-akam-sw-version: 0.5.0
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
set-cookie: bm_sv=2D69A9E58B606ECA44722B53925747E7~YAAQz00kFxDYUnqEAQAAY83PxhFQjMIwF/E0wUXTRsMX/141SNC/9wtFakfmBWpsKFTev1jy2eO6p+WVUVJwX/GEksM+Kvy4KfwhaxJs3O6l2GNZu45Ea/5pWKBiNlKAx+wr+WuLucy0h7PZeJExmzpRDnLFRwEDXlUB1OHDzH+gamIbWzIQSvzpcAph543TefgiTacmQXAe0TJ25VNe68pWsTS582jWRjDUlAQ331rc10WE8+3Fb8ek1U1ymwi/2HaCotPtZR2N~1; Domain=.orientaltrading.com; Path=/; Expires=Wed, 30 Nov 2022 06:33:38 GMT; Max-Age=7200; Secure
X-Firefox-Spdy: h2
www.orientaltrading.com/web/browse/product/13615554/reviews?keyword=&filter=&originalkeyword=&categoryId=&rd=&searchTarget=
200 OK 3.0 kB URL HTTP/2 www.orientaltrading.com/web/browse/product/13615554/reviews?keyword=&filter=&originalkeyword=&categoryId=&rd=&searchTarget=
IP
File type HTML document, ASCII text, with very long lines (499)
Hash f06c72538156d99d37e76b5b38671e15
15610872d813c541f0737637c7b1c1f250594895
e1d265841e4282a136be01839106da2e1e7ca5fc00c9258848dd25c21d6f6ae4
GET /web/browse/product/13615554/reviews?keyword=&filter=&originalkeyword=&categoryId=&rd=&searchTarget= HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe; mt.v=2.1120525908.1669782816197
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
cache-control: max-age=0, no-cache, no-store
p3p: CP=CAO DSP COR CURa ADMa DEVa TAIa OUR DELa BUS PHY ONL UNI PUR COM NAV INT DEM STA
link: </assets/dist/css/styles-otc_adapt-desktop.min_102722.css>; rel=preload; as=style, <https://cdn.quantummetric.com/qscripts/quantum-otc.js>;rel="preload"; as="script, <https://sb.monetate.net/js/1/a-835fc909/p/orientaltrading.com/438593/g>;rel="preload"; as="script, <https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js>;rel="preload"; as="script, <https://libs.coremetrics.com/eluminate.js>;rel="preload"; as="script, <https://s2.go-mpulse.net>; rel="preconnect",<https://f.monetate.net>; rel="preconnect",<https://c.go-mpulse.net>; rel="preconnect",<https://manage.hawksearch.com>; rel="preconnect", <http://s7.orientaltrading.com>; rel=preconnect; crossorigin, <http://tags.tiqcdn.com>; rel=preconnect; crossorigin, <https://code.jquery.com>; rel=preconnect; crossorigin, <https://ajax.googleapis.com>; rel=preconnect; crossorigin
content-language: en-US
x-mod-pagespeed: 1.13.35.2-0
content-type: text/html; charset=Cp1255
x-akamai-transformed: 9 3726 0 pmb=mNONE,1mRUM,2
content-encoding: gzip
date: Wed, 30 Nov 2022 04:33:38 GMT
content-length: 3012
server-timing: cdn-cache; desc=MISS, edge; dur=154, origin; dur=183
x-akam-sw-version: 0.5.0
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
set-cookie: bm_sv=A5E8339F911019EA89BFA151E1310F1C~YAAQz00kFxHYUnqEAQAAi83PxhFzd7NlSSm6DNkseZLWm5Pva4DUicYfZ8lU2Xau6h700OdoEPKFM9qOKYsZELVUtsfePNMkrraK/PZVYwEIydAXIiwJJpwyHpoahbzOaMfTG2JFcWwqPmJ8viRD6aerwC6PN0pgvM+4HuF4be4bk2yWD7bArHdAXq6HltzhLiD6WntgFLRvxGG1YNGbiGL0bVOlOJipr1r6RbKDrSq3xDJx7yqJnPx1NgSnSJPWkHmoxFQ66B1+~1; Domain=.orientaltrading.com; Path=/; Expires=Wed, 30 Nov 2022 06:33:38 GMT; Max-Age=7200; Secure
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 34f5e29055227226252a13b736f9eaf0
225fe6e3f9acba621d867e1be3ece705d6427d77
bd3a89d670790e901acfc605f07f3cdc386033b430750795729a8f82db296b0c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 408
Cache-Control: max-age=111876
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:38 GMT
Etag: "6385ed8e-1d7"
Expires: Thu, 01 Dec 2022 11:38:14 GMT
Last-Modified: Tue, 29 Nov 2022 11:31:26 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
static.atgsvcs.com/js/atgsvcs.js?_=1669782816353
200 OK 33 kB URL HTTP/1.1 static.atgsvcs.com/js/atgsvcs.js?_=1669782816353
IP
File type ASCII text, with very long lines (1133)
Hash 67682cfe38c1f8acc982b4fa31e7af1c
c8624291caced96fb852d9a329d39c0b669db1db
560ed53e1e0be103f729418e357eb89ab58525add047ff8ebbf75dd6903f8084
GET /js/atgsvcs.js?_=1669782816353 HTTP/1.1
Host: static.atgsvcs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "4227222ab8171d02b72d6b4e68789a03:1667801211.248451"
Last-Modified: Mon, 07 Nov 2022 06:06:51 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 30 Nov 2022 04:33:38 GMT
Content-Length: 33061
Connection: keep-alive
P3P: CP="NOI DSP COR NID CUR OUR NOR"
www.googletagmanager.com/gtag/js?id=AW-1045810972
200 OK 68 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-1045810972
IP
File type ASCII text, with very long lines (4105)
Hash 8b18cb0d4fef91dcea514cafc06d2780
02258dcda3d3622f6aac4b169ba2c8c4bce5dfd3
1b6fe7ce1c6c0f37821b6e2a9a25ce8c1408977e3672252f37b6cbaf51c0111f
GET /gtag/js?id=AW-1045810972 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 30 Nov 2022 04:33:38 GMT
expires: Wed, 30 Nov 2022 04:33:38 GMT
cache-control: private, max-age=900
last-modified: Wed, 30 Nov 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68510
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fa86b73f024566580ab51f2272dd1d46
c41f321cd2eaab31155da204c19ad7b6e4e8f077
821c2777fcea1cc9c1c5862ab8e6038900e0b914bbfaedbb8968044392a054c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 33f732b4dfbd5fb3ed7345eba2896fe6
2652f214cf7127302cc65b1d4e42f48a80907d5d
904ce722469d356f8ec20c14bd51ca3ce459012ea0869f7d14821a963310a494
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
triggeredmail.appspot.com/triggermail.js/oriental_trading.js
200 OK 92 kB URL HTTP/2 triggeredmail.appspot.com/triggermail.js/oriental_trading.js
IP
File type ASCII text, with very long lines (31984)
Hash b1747bc71db6a22ccaabb2c4b07a53e8
51a7b46de797aa985b7c95f010bd9afa3d409c71
68b09e9dfac6796ffdecbe93ab774e0ffa23cea749fa62b78940c37450db847f
GET /triggermail.js/oriental_trading.js HTTP/1.1
Host: triggeredmail.appspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
timing-allow-origin: *
x-cloud-trace-context: ca068aee7a462c9c1f77799f8cbcaa78
content-encoding: gzip
server: Google Frontend
date: Wed, 30 Nov 2022 04:14:22 GMT
expires: Wed, 30 Nov 2022 05:14:22 GMT
cache-control: public, max-age=3600
etag: "CgcGgQ"
content-type: application/javascript
content-length: 92466
age: 1156
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fa86b73f024566580ab51f2272dd1d46
c41f321cd2eaab31155da204c19ad7b6e4e8f077
821c2777fcea1cc9c1c5862ab8e6038900e0b914bbfaedbb8968044392a054c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=otc/merged/202211222123&cb=1669782817389
200 OK 2 B URL HTTP/2 tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=otc/merged/202211222123&cb=1669782817389
IP
File type ASCII text, with no line terminators
Hash 7bc0ee636b3b83484fc3b9348863bd22
ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610
a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb
GET /utag/tiqapp/utag.v.js?a=otc/merged/202211222123&cb=1669782817389 HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "7bc0ee636b3b83484fc3b9348863bd22:1460653071"
last-modified: Thu, 14 Apr 2016 16:57:51 GMT
server: AkamaiNetStorage
content-length: 2
unused62: 8096267
cache-control: max-age=600
expires: Wed, 30 Nov 2022 04:43:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
X-Firefox-Spdy: h2
www.orientaltrading.com/akam-sw.js
200 OK 8.5 kB URL HTTP/2 www.orientaltrading.com/akam-sw.js
IP
File type ASCII text, with very long lines (27123), with no line terminators
Hash c89bd8dd5bbc1253e351e9181b68c662
dc0ec44b970fec3d0dac6fe35abc706f9c859003
61b76da6d4d1903199963ec2836405078debc19a22e28da823dfbd9ff06ab8f7
GET /akam-sw.js HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe; mt.v=2.1120525908.1669782816197; bm_sv=A8581CADBA3882194A6A89CCA9D78D74~YAAQz00kFw7YUnqEAQAAK8zPxhGSvlQ8NjOzOlzW33JBBh0F8vMspv2ICQic0XWiCq9eYA+HWpslcSbbREUxTrHnY8vJFJhILXebIflYzcgVmQD5MK8QLaowybRVH8uq60/1M8PKbE6nJgqAEKXEqcjtmAvSMVvYFlUH+sDPQRvXE9bUYInH4qruIZlY3SJfVMxTsx5krj0IlmPMe6tr2takQNJQoa+66iBVdu2Xn4EH/m2Cvb95bx1s2MtObXt6S6vUnbQF5dER~1
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 05 Oct 2021 03:12:02 GMT
etag: "0bd9e9e6c2e9ce340e6e1c7754b228ce5bb931351fb503a6d95b245f121c9540"
server: dbattery/2.54
support-id: V1GT16538923646180001376313-104.122.95.4
stored-attribute-sw-version: 1.3.6
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
content-length: 8467
cache-control: max-age=300
expires: Wed, 30 Nov 2022 04:38:38 GMT
date: Wed, 30 Nov 2022 04:33:38 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=517
x-akam-sw-version: 0.5.0, 0.5.0
device_type: DESKTOP
vary: User-Agent
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 0279d630b9e7e757929c26a61a5a28c4
dfcc3b7d65a716c74e07959354af19671a703996
3ac76609158e80aa3b4021f2491de48445c42cf4bc04a67150de5bc66d718ecb
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 30 Nov 2022 04:33:38 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 29 Nov 2022 22:09:03 GMT
Expires: Wed, 30 Nov 2022 22:09:03 GMT
ETag: "dfcc3b7d65a716c74e07959354af19671a703996"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3247c7cea67c00e3b8bd857aee10b56c
1ee1085bd71ae68b41bc67eaa28506c2b6ed62d6
f55f89a7ecd613b2a3d2862cdc482f15dcce65d34c46fb3af1f88e52ef311a53
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 30 Nov 2022 04:33:38 GMT
Last-Modified: Wed, 30 Nov 2022 04:21:53 GMT
Server: ECS (nyb/1D17)
X-Cache: Miss from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fP_f84btsEvXxnsw28e2VQ_ctbRIQP_pusjVyXY1XdUfzv9TujgXhA==
Age: 705
siteintercept.qualtrics.com/dxjsmodule/11.6d6c5ef8794769da04fd.chunk.js?Q_CLIENTVERSION=1.81.0&Q_CLIENTTYPE=web&Q_BRANDID=www.orientaltrading.com
200 OK 20 kB URL HTTP/2 siteintercept.qualtrics.com/dxjsmodule/11.6d6c5ef8794769da04fd.chunk.js?Q_CLIENTVERSION=1.81.0&Q_CLIENTTYPE=web&Q_BRANDID=www.orientaltrading.com
IP
File type ASCII text, with very long lines (62816), with no line terminators
Hash 637b9a5e0709eedd3214da27ba8971bc
6ca7059f6fcce63fea327d51f242a0a7c9774298
9ea60aecb96872e1da234947eaf238af755956d18053feab4452643970f304f8
GET /dxjsmodule/11.6d6c5ef8794769da04fd.chunk.js?Q_CLIENTVERSION=1.81.0&Q_CLIENTTYPE=web&Q_BRANDID=www.orientaltrading.com HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:38 GMT
content-type: application/javascript
cf-ray: 7720ddb7ee76b512-OSL
access-control-allow-origin: *
age: 96469
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"f871-1845383cf10"
last-modified: Mon, 07 Nov 2022 19:14:18 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=63601
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
collect.tealiumiq.com/otc/main/2/i.gif
200 OK 43 B URL HTTP/2 collect.tealiumiq.com/otc/main/2/i.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
POST /otc/main/2/i.gif HTTP/1.1
Host: collect.tealiumiq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------60928759810319070342885697397
Content-Length: 10564
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:38 GMT
content-type: image/gif
content-length: 43
x-acc: otc:main:2:datacloud
x-did: 0184c6cfc8cb00343bec539836ce00050018200900918
x-region: eu-central-1
access-control-allow-origin: https://www.orientaltrading.com
x-serverid: uconnect_i-051c197af47403e3e
pragma: no-cache
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS"
access-control-expose-headers: X-Region
cache-control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0
x-tid: 0184c6cfc8cb00343bec539836ce00050018200900918
access-control-allow-credentials: true
x-ulver: cf3f1085ffdb019d2f47243544d6f9ed56d97859-SNAPSHOT
vary: Origin
expires: Wed, 30 Nov 2022 04:33:38 GMT
x-uuid: 69f767bf-6c8e-4015-9b7f-7f7814bf3ef9
set-cookie: TAPID=otc/main>0184c6cfc8cb00343bec539836ce00050018200900918|; Path=/; Domain=.tealiumiq.com; Expires=Thu, 30-Nov-2023 04:33:38 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2b0a81d71274a2af61fbd77ba7392606
97bf6afe97eaeee1289b73330be70c7742a79e56
9e1bd04a24d38a042673bb29e783fce087dfc5a783d372ab300d75c0ca26bb1f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 30 Nov 2022 04:33:38 GMT
Last-Modified: Wed, 30 Nov 2022 04:21:15 GMT
Server: ECS (nyb/1D2A)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _j6lbbPXGYt1qLt5lQWfpKfynsTmFdQlj-8hI9tirT-d18oSF0kpDQ==
Age: 743
collect.tealiumiq.com/otc/main/2/i.gif
200 OK 43 B URL HTTP/2 collect.tealiumiq.com/otc/main/2/i.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
POST /otc/main/2/i.gif HTTP/1.1
Host: collect.tealiumiq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------179106970931164804152049770846
Content-Length: 12611
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:38 GMT
content-type: image/gif
content-length: 43
x-acc: otc:main:2:datacloud
x-did: 0184c6cfc8cb00343bec539836ce00050018200900918
x-region: eu-central-1
access-control-allow-origin: https://www.orientaltrading.com
x-serverid: uconnect_i-04e1c2764aadbb8de
pragma: no-cache
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS"
access-control-expose-headers: X-Region
cache-control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0
x-tid: 0184c6cfc8cb00343bec539836ce00050018200900918
access-control-allow-credentials: true
x-ulver: cf3f1085ffdb019d2f47243544d6f9ed56d97859-SNAPSHOT
vary: Origin
expires: Wed, 30 Nov 2022 04:33:38 GMT
x-uuid: 0c73ac12-062d-4da7-895c-4794a2432d53
set-cookie: TAPID=otc/main>0184c6cfc8cb00343bec539836ce00050018200900918|; Path=/; Domain=.tealiumiq.com; Expires=Thu, 30-Nov-2023 04:33:38 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
X-Firefox-Spdy: h2
c.go-mpulse.net/api/config.json?key=A679F-HECVV-PJT6Q-JGED3-E3CG2&d=www.orientaltrading.com&t=5565943&v=1.720.0&sl=0&si=dd100b2a-36b6-469f-a54a-5a75e0135cd3-rm58ny&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=486034
200 OK 907 B URL HTTP/1.1 c.go-mpulse.net/api/config.json?key=A679F-HECVV-PJT6Q-JGED3-E3CG2&d=www.orientaltrading.com&t=5565943&v=1.720.0&sl=0&si=dd100b2a-36b6-469f-a54a-5a75e0135cd3-rm58ny&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=486034
IP
File type JSON data\012- , ASCII text, with very long lines (2829), with no line terminators
Hash 69a9729acb040debea72a88e57498df1
b703bc735d32353113bcfc92c29e074655c35abd
f6d13631501b1e48467b8a6c2440ccc23c8f82b3a8e1f7e3fdca5db64256a152
GET /api/config.json?key=A679F-HECVV-PJT6Q-JGED3-E3CG2&d=www.orientaltrading.com&t=5565943&v=1.720.0&sl=0&si=dd100b2a-36b6-469f-a54a-5a75e0135cd3-rm58ny&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=486034 HTTP/1.1
Host: c.go-mpulse.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: private, max-age=300, stale-while-revalidate=60, stale-if-error=120
Timing-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 30 Nov 2022 04:33:38 GMT
Content-Length: 907
Connection: keep-alive
Content-Type: application/json
ocsp.pki.goog/s/gts1d4/F65mti-1ox0
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/F65mti-1ox0
IP
Hash a7d5f57750f9c19656fe2140487de469
ec1dbe833469e25c5a67b965d39e5e4333ebbaff
c53e3be6cd73ab34f509e241ffc109978e46d21fac3586bc696fdb088db240c6
POST /s/gts1d4/F65mti-1ox0 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:38 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
siteassets.bluecore.com/bcQuery.js
200 OK 30 kB URL HTTP/2 siteassets.bluecore.com/bcQuery.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 634d8a49fa17a7431a30d04b604854ae
2ca8e146a80c824d6dda13031d5253e715ed6e55
d602adcaf31179374fbf0fc5ed8ad1ad2d75d1a149ef276c31f43fa043abecde
GET /bcQuery.js HTTP/1.1
Host: siteassets.bluecore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvf89MuZAMv0uIFHDxRdulEuBu4jvyCp77axe9M3Zb2VBGIY5Bd-7SesRfmieWtuHBsqtdHlKY7cD3byPOKQQYz
x-goog-generation: 1669776396640397
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 30287
content-encoding: gzip
x-goog-hash: crc32c=N+gRrQ==, md5=Y02KSfoXp0MaMNBLYEhUrg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
vary: Accept-Encoding
content-length: 30287
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
via: 1.1 google
date: Wed, 30 Nov 2022 04:02:55 GMT
expires: Thu, 01 Dec 2022 04:02:55 GMT
cache-control: public, max-age=86400
age: 1843
last-modified: Wed, 30 Nov 2022 02:46:36 GMT
etag: "634d8a49fa17a7431a30d04b604854ae"
content-type: application/javascript
cross-origin-resource-policy: cross-origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=1.81.0&Q_CLIENTTYPE=web&Q_BRANDID=otc
200 OK 33 kB URL HTTP/2 siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=1.81.0&Q_CLIENTTYPE=web&Q_BRANDID=otc
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash ccc0b0f70ba26a3fd1230ba7e89f04f0
5bae13b640944fb79ff944af2960ba4925f5e27e
7a5236920b340f856afd63375cb8c1343d39f4634a51923387e83758ad784f23
GET /dxjsmodule/CoreModule.js?Q_CLIENTVERSION=1.81.0&Q_CLIENTTYPE=web&Q_BRANDID=otc HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:38 GMT
content-type: application/javascript
cf-ray: 7720ddb9ffa5b512-OSL
access-control-allow-origin: *
age: 96419
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"19b73-1845383cf10"
last-modified: Mon, 07 Nov 2022 19:14:18 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=105331
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 05e90516f68627724bf0fbc9ad660ed3
b49b4f17164ce9236a8071fbba227692022b97cd
61878a0da4f84d9761c8ec14a41bb768955fa181fddff41da54f7b99f480c90c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61878A0DA4F84D9761C8EC14A41BB768955FA181FDDFF41DA54F7B99F480C90C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11389
Expires: Wed, 30 Nov 2022 07:43:27 GMT
Date: Wed, 30 Nov 2022 04:33:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 05e90516f68627724bf0fbc9ad660ed3
b49b4f17164ce9236a8071fbba227692022b97cd
61878a0da4f84d9761c8ec14a41bb768955fa181fddff41da54f7b99f480c90c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61878A0DA4F84D9761C8EC14A41BB768955FA181FDDFF41DA54F7B99F480C90C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11389
Expires: Wed, 30 Nov 2022 07:43:27 GMT
Date: Wed, 30 Nov 2022 04:33:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 05e90516f68627724bf0fbc9ad660ed3
b49b4f17164ce9236a8071fbba227692022b97cd
61878a0da4f84d9761c8ec14a41bb768955fa181fddff41da54f7b99f480c90c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61878A0DA4F84D9761C8EC14A41BB768955FA181FDDFF41DA54F7B99F480C90C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11389
Expires: Wed, 30 Nov 2022 07:43:27 GMT
Date: Wed, 30 Nov 2022 04:33:38 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 09e05d0ab2c1514d7b6747052c4f2cb1
5d73ad9e372263bff8e3b6b3696d8c5fda196820
e99d001f3900cf600ac93102e4b70cb77954838b6f8775a950c52cc18e7d5f25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5764
Cache-Control: max-age=112885
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:39 GMT
Etag: "6385dc94-1d7"
Expires: Thu, 01 Dec 2022 11:55:04 GMT
Last-Modified: Tue, 29 Nov 2022 10:19:00 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 09e05d0ab2c1514d7b6747052c4f2cb1
5d73ad9e372263bff8e3b6b3696d8c5fda196820
e99d001f3900cf600ac93102e4b70cb77954838b6f8775a950c52cc18e7d5f25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5764
Cache-Control: max-age=112885
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:39 GMT
Etag: "6385dc94-1d7"
Expires: Thu, 01 Dec 2022 11:55:04 GMT
Last-Modified: Tue, 29 Nov 2022 10:19:00 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
api.bluecore.app/api/track/viewed_product
200 OK 1 B URL HTTP/2 api.bluecore.app/api/track/viewed_product
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /api/track/viewed_product HTTP/1.1
Host: api.bluecore.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2198
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:38 GMT
content-type: text/plain
content-length: 1
x-envoy-upstream-service-time: 18
server: istio-envoy
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
api.bluecore.app/api/track/identify
200 OK 1 B URL HTTP/2 api.bluecore.app/api/track/identify
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /api/track/identify HTTP/1.1
Host: api.bluecore.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1064
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:38 GMT
content-type: text/plain
content-length: 1
x-envoy-upstream-service-time: 16
server: istio-envoy
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
api.bluecore.app/api/track/identify
200 OK 1 B URL HTTP/2 api.bluecore.app/api/track/identify
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /api/track/identify HTTP/1.1
Host: api.bluecore.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1138
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:38 GMT
content-type: text/plain
content-length: 1
x-envoy-upstream-service-time: 20
server: istio-envoy
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
zn2h0sknbfpqufsif-otc.siteintercept.qualtrics.com/WRSiteInterceptEngine/?Q_ZID=ZN_2h0SknBFPqUFSiF&Q_LOC=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904
200 OK 7.4 kB URL HTTP/2 zn2h0sknbfpqufsif-otc.siteintercept.qualtrics.com/WRSiteInterceptEngine/?Q_ZID=ZN_2h0SknBFPqUFSiF&Q_LOC=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904
IP
File type ASCII text, with very long lines (6801)
Hash 00c00fc422f9b068e42be1428698d6ff
fce545bc33a4f96146a8621d2ccf96ee9f252145
a605dd03bac67e88fcfda9c6e25140800c5cd125aadd21be189061ae93168422
GET /WRSiteInterceptEngine/?Q_ZID=ZN_2h0SknBFPqUFSiF&Q_LOC=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904 HTTP/1.1
Host: zn2h0sknbfpqufsif-otc.siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:38 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 7720ddb64dabb512-OSL
access-control-allow-origin: *
age: 14045
cache-control: public, max-age=3600, s-maxage=604800
etag: W/"2127-LVDKuuHvQ2TQYq56S+nFU4A+GWE"
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=8487
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
orientaltrading.custhelp.com/rnt/rnw/javascript/vs/1/vsapi.js
200 OK 4.8 kB URL HTTP/1.1 orientaltrading.custhelp.com/rnt/rnw/javascript/vs/1/vsapi.js
IP
ASN #31898 ORACLE-BMC-31898
File type ASCII text, with very long lines (541)
Hash c27128e4b274561cedc478de71bd9d08
098f0c7d5995d4e8ca37c35618a10d52b40bb756
0c4fa6f610fcf96724a802ebd905580ccb9656338fba54a909a3f39e5baf454a
GET /rnt/rnw/javascript/vs/1/vsapi.js HTTP/1.1
Host: orientaltrading.custhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:33:39 GMT
Content-Type: application/x-javascript
Content-Length: 4811
Connection: keep-alive
Expires: Thu, 01 Dec 2022 00:48:14 GMT
RNT-JN-Int-UUID: 3bb480c0-9a06-4306-b717-819ad114fcc8
Vary: Accept-Encoding
Content-Encoding: gzip
RNT-JN-Int-Machine: 42.3
RNT-CMachine: 0.33
RNT-JN-Ext-Machine: 43.4
Last-Modified: Thu, 05 May 2022 23:04:27 GMT
RNT-JN-Ext-UUID: e0d2dfbf-dbf5-4136-8e58-de224085df0c
RNT-Time: D=9873 t=1669769294304200
RNT-CTime: D=14105 t=1669769294300969
Accept-Ranges: bytes
Cache-Control: max-age=86400
RNT-Machine: 1.151
Age: 13525
orientaltrading.custhelp.com/vs/1/vsopts.js
200 OK 175 B URL HTTP/1.1 orientaltrading.custhelp.com/vs/1/vsopts.js
IP
ASN #31898 ORACLE-BMC-31898
File type ASCII text, with no line terminators
Hash dda8a827fda510386384a8f0946f396b
2374cb5536389edbe7d620066f6987d865eab627
76b911115a78a8bb5c32222211ebb11c3ef017d633165ee9580a04ecbd478cd2
GET /vs/1/vsopts.js HTTP/1.1
Host: orientaltrading.custhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:33:39 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 175
Connection: keep-alive
Expires: Wed, 30 Nov 2022 04:38:38 GMT
RNT-JN-Int-UUID: a977f585-ffba-4aa8-ab88-ba0be95fa1c8
Vary: Accept-Encoding
Content-Encoding: gzip
RNT-JN-Int-Machine: 42.4
RNT-CMachine: 0.31
RNT-JN-Ext-Machine: 43.4
Last-Modified: Wed, 30 Nov 2022 04:33:38 GMT
RNT-JN-Ext-UUID: 5d1617af-3d8b-4619-b894-e4cc0e7beacf
RNT-Time: D=112007 t=1669782818279198
RNT-CTime: D=114997 t=1669782818277543
Cache-Control: max-age=300
RNT-Machine: 0.75
Age: 1
ocsp.pki.goog/s/gts1d4/f_ZOZ7PkgyI
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/f_ZOZ7PkgyI
IP
Hash 2c38591eb8994de4301532feb337a351
498ae91403f7812b8781851c5cd23e815622d100
7a93bca3fd225a6589f7c67d747c86886c8cefe672b32b77ff9c8a9366ae2727
POST /s/gts1d4/f_ZOZ7PkgyI HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:39 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/YCSq4wmSN10
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/YCSq4wmSN10
IP
Hash aaa8d1234ddda796851cf9cd629608dc
63b1a8400213c83b7fd7336340cbec489c3edcb4
960216876a34f35f65b4fe11dc86decea6627bfd6caaf25da31cfb43c4027387
POST /s/gts1d4/YCSq4wmSN10 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:39 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash d20cc48d92789abe042207335b569006
d1750e0543cd467c975953dd211529647907e291
737752f3ba4d96d91e8b31388f0fbbce858db8eae4b182e04618c897855a80b2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:33:39 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 13:02:14 GMT
Expires: Mon, 05 Dec 2022 13:02:13 GMT
Etag: "d1750e0543cd467c975953dd211529647907e291"
Cache-Control: max-age=461913,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7720ddbd69a4b4f9-OSL
onsitestats.bluecore.com/events?ns=oriental_trading&stats_type=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&device_type=desktop&distinct_id=184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D
200 OK 23 B URL HTTP/2 onsitestats.bluecore.com/events?ns=oriental_trading&stats_type=eyJldmVudF90eXBlIjoiaWRlbnRpZnkiLCJ2aXNpdG9yX3R5cGUiOiJrbm93biIsInJlZmVycmFsIjoiZGlyZWN0Iiwic2Vzc2lvbl9pZCI6IjE2Njk3ODI4MTgzNDYiLCJwYWdlX3VybCI6Imh0dHBzOi8vd3d3Lm9yaWVudGFsdHJhZGluZy5jb20vamluZ2xlLWJlbGwtbmVja2xhY2VzLTEyLXBjLS1hMi0xMzYxNTU1NC5mbHRyP2JjX3BpZD1NVE0yTVRVMU5UUSUzRCZjbV9tbWM9RW1haWwtXy0yMDIyMTEyM1N1YnNjcmliZWROb0NvbnQtXy1PVEMtXy1BbGxDaGFubmVsJmNwZ25tPTIwMjItMTEtMjNfU3ViX05vX0NvbnRhY3QmYnA9UkVBQ1QyMjAxNiZzdWJhY3Rpb249c3ViYWN0aW9uXzU5MDkyNTU2MDMwMzYxNjAmZT1KcXZXVExjOFVGZG03VmlLSzdCUEFQSGRKVDNSSkFaOUZqeklraDBaNi1JJTNEJm9iZW09WVc2aUVHbGJlcktZQkdVYW9MSzVWYk9OcHYxa2d0OXRVVmxnMGJtX25STSUzRCZiY19sY2lkPXQ1MjczOTk0NDIyNTkxNDg4bHc0OTA4NzEyODQ0Nzk1OTA0Iiwic2Vzc2lvbl9zb3VyY2UiOiJibHVlY29yZV9lbWFpbCIsInNlc3Npb25fbWVkaXVtIjoiYmx1ZWNvcmVfZW1haWwiLCJvcmlnaW5hbF91c2VyX3R5cGUiOiJrbm93biIsImN1cnJlbnRfdXNlcl90eXBlIjoia25vd24iLCJzZXNzaW9uX3B2YyI6IjEiLCJkYXlfcHZjIjoiMSIsInBhZ2VfdHlwZSI6ImRlZmF1bHQiLCJkaXN0aW5jdF9pZCI6IjE4NGM2Y2ZjYjM1MWU3LTA1ODc1MTVlMzRlMDk0OC1jNTA1NDI1LTE0MDAwMC0xODRjNmNmY2IzNjNiMSIsIm9iZW0iOiJZVzZpRUdsYmVyS1lCR1Vhb0xLNVZiT05wdjFrZ3Q5dFVWbGcwYm1fblJNPSJ9&device_type=desktop&distinct_id=184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D
IP
File type JSON data\012- , ASCII text
Hash c133983455930b5571f045a19f89001f
b5a3eb62fb7667f605308a03eaf0e1a00a4a2429
273521bed7e711c50d14a61c0c00cdee804056167c6b7b430ce2af8820715c25
GET /events?ns=oriental_trading&stats_type=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&device_type=desktop&distinct_id=184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D HTTP/1.1
Host: onsitestats.bluecore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orientaltrading.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/2 200 OK
x-guploader-uploadid: ADPycdui2Dj58L1cMf9m-iy-yd_7aMLXg-vfKhhd00RLf58xl5sE_OwMNkP7edmHg6vbsxKtVslGnXS3rTjmlMxOtQL7Fq3IgcA2
date: Wed, 30 Nov 2022 04:33:39 GMT
cache-control: public, max-age=10
expires: Wed, 30 Nov 2022 04:33:49 GMT
last-modified: Wed, 07 Apr 2021 11:35:15 GMT
etag: "c133983455930b5571f045a19f89001f"
x-goog-generation: 1617795315142943
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 23
content-type: text/javascript
x-goog-hash: crc32c=oWPQig==, md5=wTOYNFWTC1Vx8EWhn4kAHw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 23
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/f_ZOZ7PkgyI
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/f_ZOZ7PkgyI
IP
Hash 2c38591eb8994de4301532feb337a351
498ae91403f7812b8781851c5cd23e815622d100
7a93bca3fd225a6589f7c67d747c86886c8cefe672b32b77ff9c8a9366ae2727
POST /s/gts1d4/f_ZOZ7PkgyI HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:39 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
site.bluecore.com/audience?ns=oriental_trading&distinct_id=184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D
200 OK 69 B URL HTTP/2 site.bluecore.com/audience?ns=oriental_trading&distinct_id=184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D
IP
File type JSON data\012- , ASCII text
Hash 16bcae6655aff100c1057a6eb1c5efdb
e1725fcbe8b39d2f6608d7a944b1cdfd660cbffd
ac057831078e1e107fcc0059b8812a66e64292725b35a78a9bbd69e2fb4df08a
GET /audience?ns=oriental_trading&distinct_id=184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D HTTP/1.1
Host: site.bluecore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orientaltrading.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/2 200 OK
server: meinheld/1.0.2
date: Wed, 30 Nov 2022 04:33:39 GMT
content-type: application/json
content-length: 69
access-control-allow-origin: https://www.orientaltrading.com
vary: Origin
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/YCSq4wmSN10
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/YCSq4wmSN10
IP
Hash aaa8d1234ddda796851cf9cd629608dc
63b1a8400213c83b7fd7336340cbec489c3edcb4
960216876a34f35f65b4fe11dc86decea6627bfd6caaf25da31cfb43c4027387
POST /s/gts1d4/YCSq4wmSN10 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:39 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
44.228.85.26/is
200 OK 32 B IP
File type ASCII text, with no line terminators
Hash 64a1f9c4a941330f3328c7114665cab5
99e95198ebe0bc7b6474d728e4a138fe6a35bd9d
300bc0ff1809d105350d89bf74b7b1e7732aaeb2f019efc3e965bba5b4731376
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 44.228.85.26
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orientaltrading.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 30 Nov 2022 04:33:39 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
ocsp.digicert.com/
200 OK 471 B IP
Hash 83123c88c30be5581661dc6f2b6e7eb8
f49d4e552d634f2c7ff9e452ab523d19154caf30
298c3a1e527875e385a1851fbca84477024532fbb930c798a5545202362c0f01
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:39 GMT
Etag: "6385e937-1d7"
Server: ECS (amb/6B97)
Content-Length: 471
ocsp.sectigo.com/
200 OK 472 B IP
Hash 7d791551cc7702e72975060c6a469d47
0b3232277f65ae6adf53fd750bb9b289eca622f8
8eddbe79d0ea890ac96f02444a25af6778b883cdf396c27405f787a1d8f44725
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:33:39 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 23:27:50 GMT
Expires: Mon, 05 Dec 2022 23:27:49 GMT
Etag: "0b3232277f65ae6adf53fd750bb9b289eca622f8"
Cache-Control: max-age=499449,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7720ddbeea37b4f9-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash 7d791551cc7702e72975060c6a469d47
0b3232277f65ae6adf53fd750bb9b289eca622f8
8eddbe79d0ea890ac96f02444a25af6778b883cdf396c27405f787a1d8f44725
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:33:39 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 23:27:50 GMT
Expires: Mon, 05 Dec 2022 23:27:49 GMT
Etag: "0b3232277f65ae6adf53fd750bb9b289eca622f8"
Cache-Control: max-age=499449,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7720ddbf2abe0b41-OSL
onsitestats.bluecore.com/analytics?ns=oriental_trading&campaign_id=41fa6528-046c-4483-ab5d-7da47bcba9d3&stats_type=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%3D%3D&device_type=desktop&distinct_id=184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D
200 OK 23 B URL HTTP/2 onsitestats.bluecore.com/analytics?ns=oriental_trading&campaign_id=41fa6528-046c-4483-ab5d-7da47bcba9d3&stats_type=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%3D%3D&device_type=desktop&distinct_id=184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D
IP
File type JSON data\012- , ASCII text
Hash c133983455930b5571f045a19f89001f
b5a3eb62fb7667f605308a03eaf0e1a00a4a2429
273521bed7e711c50d14a61c0c00cdee804056167c6b7b430ce2af8820715c25
GET /analytics?ns=oriental_trading&campaign_id=41fa6528-046c-4483-ab5d-7da47bcba9d3&stats_type=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%3D%3D&device_type=desktop&distinct_id=184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D HTTP/1.1
Host: onsitestats.bluecore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orientaltrading.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtd2dotxojcEXphydxgCRVdbzrAjvLliElyK9_befD0zWvUO-OrJz1FQt9Pt1q9-E1c_KMm2avSVMDLE30YLpFvAx0_zg9E
date: Wed, 30 Nov 2022 04:33:40 GMT
cache-control: public, max-age=10
expires: Wed, 30 Nov 2022 04:33:50 GMT
last-modified: Thu, 31 Oct 2019 08:03:07 GMT
etag: "c133983455930b5571f045a19f89001f"
x-goog-generation: 1572508987952776
x-goog-metageneration: 4
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 23
content-type: text/javascript
x-goog-hash: crc32c=oWPQig==, md5=wTOYNFWTC1Vx8EWhn4kAHw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 23
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ingest.quantummetric.com/otc?T=B&u=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&t=1669782817684&v=1669782818303&z=1&S=0&N=0&P=0
200 OK 90 B URL HTTP/2 ingest.quantummetric.com/otc?T=B&u=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&t=1669782817684&v=1669782818303&z=1&S=0&N=0&P=0
IP
File type ASCII text, with no line terminators
Hash aca16335bc386b79fd628bd2a1da04b7
da334bf7931c841c8a19c746b8cb691cdc368a69
c181a685764c073b7485eebe53120a886804becb1fe943084f3b26966ad9c0d3
POST /otc?T=B&u=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&t=1669782817684&v=1669782818303&z=1&S=0&N=0&P=0 HTTP/1.1
Host: ingest.quantummetric.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 19394
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-credentials: true
date: Wed, 30 Nov 2022 04:33:40 GMT
content-length: 90
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
api.bluecore.app/api/track/viewed_onsite
200 OK 1 B URL HTTP/2 api.bluecore.app/api/track/viewed_onsite
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /api/track/viewed_onsite HTTP/1.1
Host: api.bluecore.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1434
Origin: https://www.orientaltrading.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:39 GMT
content-type: text/plain
content-length: 1
x-envoy-upstream-service-time: 24
server: istio-envoy
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
otc-sync.quantummetric.com/?T=B&u=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&t=1669782817684&v=1669782818329&z=1&Q=1&Y=1&X=457b4c99a7d44183308b3aa0dfe3b023
200 OK 0 B URL HTTP/2 otc-sync.quantummetric.com/?T=B&u=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&t=1669782817684&v=1669782818329&z=1&Q=1&Y=1&X=457b4c99a7d44183308b3aa0dfe3b023
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /?T=B&u=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&t=1669782817684&v=1669782818329&z=1&Q=1&Y=1&X=457b4c99a7d44183308b3aa0dfe3b023 HTTP/1.1
Host: otc-sync.quantummetric.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 33969
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 04:33:40 GMT
content-type: application/json
content-length: 0
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
track.securedvisit.com/js/sv.js
200 OK 45 kB URL HTTP/2 track.securedvisit.com/js/sv.js
IP
Hash 80cf64259453958086391b69a5727412
6e4b15b33eab2074e763c8ee24363b27ef94f5fc
d7b345a78a15203dcd2a49b2c1a7a0c07e3d27468b9b86ae950296e3ad20f733
GET /js/sv.js HTTP/1.1
Host: track.securedvisit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:38 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.22.0
vary: Accept-Encoding
etag: W/"273cf9801333aefc61a4f311b0692f6a"
last-modified: Wed, 30 Nov 2022 04:33:38 GMT
expires: Wed, 30 Nov 2022 04:33:38 GMT
pragma: no-cache
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, private
content-encoding: gzip
X-Firefox-Spdy: h2
libs.coremetrics.com/configs/52510000.js
200 OK 123 B URL HTTP/1.1 libs.coremetrics.com/configs/52510000.js
IP
File type core file (Xenix)\012- , ASCII text
Hash 3a0040d8ff38bfab70704877dde46fc1
242a91f1d308c53b045352293ef0638dfe0e6409
276d140581a4f2fa8544efa4a73753b6c48fc178eb457cb45a77e408851c8b46
GET /configs/52510000.js HTTP/1.1
Host: libs.coremetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "3a0040d8ff38bfab70704877dde46fc1:1471284325"
Last-Modified: Mon, 15 Aug 2016 18:05:18 GMT
Server: AkamaiNetStorage
Content-Length: 123
Date: Wed, 30 Nov 2022 04:33:40 GMT
Connection: keep-alive
d761erxl2qywg.cloudfront.net/sp.js?v=10-30
200 OK 27 kB URL HTTP/2 d761erxl2qywg.cloudfront.net/sp.js?v=10-30
IP
File type ASCII text, with very long lines (816)
Hash 7a4a80502df5c3e1e2575ffafd694c8d
04e84f447d6fa9d2a3ff91cd2e3593d71e660491
83583801628991f67a6fbb5f6a80a962109834e495f2374158797a4ed6c439e3
GET /sp.js?v=10-30 HTTP/1.1
Host: d761erxl2qywg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 26855
last-modified: Mon, 19 Oct 2020 18:40:06 GMT
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Wed, 30 Nov 2022 00:57:14 GMT
etag: "7a4a80502df5c3e1e2575ffafd694c8d"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -4FhVzWSmanzl2bLLXhoTfSa5hhwxDJ8FW5b8T_ILnTok1-vyuKj9A==
age: 13793
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5d950b70d3b1532276ed817249b72618
dca7faf727b8afdd481c8f8bcc3e9129fdadadc3
afe3fbe5f269179e18a66ca806664b7f96b903150b364129e2f2b30087198e34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 313 B IP
Hash 4ed4504c8b02fc509f234707dc77781f
19acd03459e36691bfe55062056b824e39033cb1
b83b1242e3991a8c4b50fc7218fc5f838baef5281a58f8c4d72409f10e5b9e32
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 752
Cache-Control: max-age=110735
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Etag: "6385e7c3-139"
Expires: Thu, 01 Dec 2022 11:19:15 GMT
Last-Modified: Tue, 29 Nov 2022 11:06:43 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 827249679eb07ed6b12cf75e57a28b31
81d3a58eb17eaeee84f78c8bf82e37edb6e29aa0
f68f55b8a61c54361016a181bf15e099dd95b766bbd03ebd4410de69aeb8d633
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:33:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 04 Dec 2022 02:00:13 GMT
ETag: "81d3a58eb17eaeee84f78c8bf82e37edb6e29aa0"
Last-Modified: Wed, 30 Nov 2022 02:00:14 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1167
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720ddc2ed490b31-OSL
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Hash 22e2e3226eb5ada04929a2e43307eeda
04615fa88f80567974bdeb0f103ca5909746ebd7
41feebdfb0b03cd7fee2eb886adef6f3f1f85d3f14215e9a388d2a50e42efb9b
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11421
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 09 Nov 2022 21:23:50 GMT
accept-ranges: bytes
etag: "077538f81f4d81:0"
vary: Accept-Encoding
set-cookie: MUID=3394E8BAFDA86A6B2C12FAD6FC5D6B96; domain=.bing.com; expires=Mon, 25-Dec-2023 04:33:40 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9B2276868F39427E930947898A06DE2F Ref B: OSL30EDGE0220 Ref C: 2022-11-30T04:33:40Z
date: Wed, 30 Nov 2022 04:33:39 GMT
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1045810972/?random=1669782817539&cv=11&fst=1669782817539&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&auid=571439763.1669782818&data=event%3Dpage_view%3Becomm_prodid%3D13615554%3Becomm_pagetype%3Dproduct%3Becomm_category%3D551147%3Becomm_pvalue%3D5.98&rfmt=3&fmt=4
200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1045810972/?random=1669782817539&cv=11&fst=1669782817539&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&auid=571439763.1669782818&data=event%3Dpage_view%3Becomm_prodid%3D13615554%3Becomm_pagetype%3Dproduct%3Becomm_category%3D551147%3Becomm_pvalue%3D5.98&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2931), with no line terminators
Hash d7dadc803d20e9dbb9ad8babf765e637
2c8bba34b6f50e2b529763a29544f3829e32aa5d
5eeed8e9c5bc16183eb634f581b79fe55c7b3ecf9e696e5ac05c84b24d999527
GET /pagead/viewthroughconversion/1045810972/?random=1669782817539&cv=11&fst=1669782817539&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&auid=571439763.1669782818&data=event%3Dpage_view%3Becomm_prodid%3D13615554%3Becomm_pagetype%3Dproduct%3Becomm_category%3D551147%3Becomm_pvalue%3D5.98&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 04:33:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1234
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 30-Nov-2022 04:48:40 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1045810972/?random=1669782817530&cv=11&fst=1669782817530&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&auid=571439763.1669782818&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1045810972/?random=1669782817530&cv=11&fst=1669782817530&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&auid=571439763.1669782818&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2733), with no line terminators
Hash b47c34f8b669b141200242d4e351d44a
1225d0400d6151ab2089e999e8fe7b7b22871363
25a63e408d2d6a898f7712644cb356c5713116a8910a8d4924dfbb29005f0b82
GET /pagead/viewthroughconversion/1045810972/?random=1669782817530&cv=11&fst=1669782817530&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&auid=571439763.1669782818&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 04:33:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1187
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 30-Nov-2022 04:48:40 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bf0087e4b3f4ea0ad2c4848ecef40ba8
5d9a4d4e17096bbd5c4ed5cb3977e83a19a6c292
cb2f21f62c5f807680f32c2a56627f0a371f84a46468cd4efa7d9083c7278bb4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=103521
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Etag: "6385ce85-1d7"
Expires: Thu, 01 Dec 2022 09:19:01 GMT
Last-Modified: Tue, 29 Nov 2022 09:19:01 GMT
Server: nginx
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
login.dotomi.com/profile/visit/json/ust/ws?dtm_cid=2299&dtm_cmagic=40b5f2&dtm_fid=101&dtm_cookie_id=0184c6cfc8cb00343bec539836ce00050018200900918&cachebuster=2026298999146918&dtmc_loc=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904
200 OK 179 B URL HTTP/2 login.dotomi.com/profile/visit/json/ust/ws?dtm_cid=2299&dtm_cmagic=40b5f2&dtm_fid=101&dtm_cookie_id=0184c6cfc8cb00343bec539836ce00050018200900918&cachebuster=2026298999146918&dtmc_loc=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 3be35630863395b3badb15e931b543a4
d0dd31c1d7ec820811206086c2d9497e3c3cbaeb
5f8295f779bf9986c3cb26ccffead28f2a20b190289a4782b7cd2296e4ebb98a
GET /profile/visit/json/ust/ws?dtm_cid=2299&dtm_cmagic=40b5f2&dtm_fid=101&dtm_cookie_id=0184c6cfc8cb00343bec539836ce00050018200900918&cachebuster=2026298999146918&dtmc_loc=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904 HTTP/1.1
Host: login.dotomi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.orientaltrading.com/
Origin: https://www.orientaltrading.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 04:33:40 GMT
content-type: application/json
content-length: 179
cache-control: no-cache, private, max-age=0, no-store
expires: 0
pragma: no-cache
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: *
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP NID OUR STP"
X-Firefox-Spdy: h2
rules.atgsvcs.com/EERules/xd/3.0/json/200106309877/xd.js
200 OK 84 B URL HTTP/1.1 rules.atgsvcs.com/EERules/xd/3.0/json/200106309877/xd.js
IP
ASN #31898 ORACLE-BMC-31898
File type ASCII text, with no line terminators
Hash 23f42ac4e8e643d0f0d03ca3dc8afee1
361c3b126cf5442f3343801e8fe52964b20c32f0
ff8c12996eb0302dd5a922b849b2612b400458ba1618db716f5e37937710d17b
GET /EERules/xd/3.0/json/200106309877/xd.js HTTP/1.1
Host: rules.atgsvcs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:33:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private
Last-Modified: Wed, 01 May 2013 00:00:00 GMT
Access-Control-Allow-Credentials: true
P3P: CP="NON DSP COR CUR OUR LEG PHY COM",policyref="http://as00.estara.com/w3c/p3p.xml"
Access-Control-Allow-Origin: *
tmscdn.coremetrics.com/tms/dispatcher-v3.js
200 OK 1.2 kB URL HTTP/1.1 tmscdn.coremetrics.com/tms/dispatcher-v3.js
IP
Hash 6a888b8f6fc997c0eb391381cbf84a65
78f108c13b48455117d9eca4a465b8bc117d11ad
6568336f5d7833cea4d2d9ee29616d55b4eb38a51bacabc457cbac91569c8654
GET /tms/dispatcher-v3.js HTTP/1.1
Host: tmscdn.coremetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "ff46bff054ea5901b77922bfcce5a6b1:1602169236.920624"
Last-Modified: Thu, 08 Oct 2020 15:00:35 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 30 Nov 2022 04:33:40 GMT
Content-Length: 1228
Connection: keep-alive
ocsp.digicert.com/
200 OK 314 B IP
Hash c24253e652f836de9438fd366d15167d
f8a2aee142d0d95a2dff2512f9a594c7ddbd50d5
d4fdd71cd09db69b05a1af2d8d6c03a662391d094e2a9023c2565548bd978d13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 694
Cache-Control: max-age=134481
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Etag: "638644bf-13a"
Expires: Thu, 01 Dec 2022 17:55:01 GMT
Last-Modified: Tue, 29 Nov 2022 17:43:27 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 314
ocsp.sca1b.amazontrust.com/
200 OK 87 kB URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
File type gzip compressed data, from Unix\012- data
Hash 7f7573719fb9f86cf1142d72dfa6ca1f
1646b18c5328f86f357905c0342ed9a96ba7ca38
734ddc4308c71b50eb5cfc18bddfb7b284fdd0d6f3a55767b0635444c5d0f67f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=162719
Date: Wed, 30 Nov 2022 04:33:40 GMT
Etag: "6386b3bb-1d7"
Expires: Fri, 02 Dec 2022 01:45:39 GMT
Last-Modified: Wed, 30 Nov 2022 01:36:59 GMT
Server: ECS (nyb/1D1F)
X-Cache: Miss from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: r263zAlBQ6LYiKBxYcj8QfKX9tjGFrH861iH14auV5-aB_6qypQ6Tg==
Age: 520
ocsp.digicert.com/
200 OK 280 B IP
Hash af1136ee836a7f2a1c6e93803335a299
b2f156e8ab28dbe8089ccfba24d2810018303e95
ba3bc59d6d9098c2d1443190ccb5d9da62d90661791b04df1df2e6f85d57b35b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Server: ECS (amb/6B97)
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash af1136ee836a7f2a1c6e93803335a299
b2f156e8ab28dbe8089ccfba24d2810018303e95
ba3bc59d6d9098c2d1443190ccb5d9da62d90661791b04df1df2e6f85d57b35b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=135578
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Etag: "63864bbe-118"
Expires: Thu, 01 Dec 2022 18:13:18 GMT
Last-Modified: Tue, 29 Nov 2022 18:13:18 GMT
Server: nginx
Content-Length: 280
gum.criteo.com/sync?a=1&c=11&r=2&j=utag_handle_criteo_userid
200 OK 8.8 kB URL HTTP/2 gum.criteo.com/sync?a=1&c=11&r=2&j=utag_handle_criteo_userid
IP
File type C source, ASCII text, with very long lines (29476)
Hash 701da3005a839f22ca86de64591e9fd4
1bfc1ac3435d82691a8ee6a23c1aab35b0ef37d1
33b3897f3b8ebf23d3ca3c97c95fd19dbba242104f30891570fa240a2af5d68b
GET /sync?a=1&c=11&r=2&j=utag_handle_criteo_userid HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:40 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
server-processing-duration-in-ticks: 951630
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 26ed2fbb55d15dfc81b90e08a68d9a9c
d75e542756a5d2a4c8ded6a3956bbb40604e4741
b3c18657fd7b1838d4403184b01568204a1a8e3f188508c55c64d25034c2c841
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=162781
Date: Wed, 30 Nov 2022 04:33:40 GMT
Etag: "6386b3bb-1d7"
Expires: Fri, 02 Dec 2022 01:46:41 GMT
Last-Modified: Wed, 30 Nov 2022 01:36:59 GMT
Server: ECS (nyb/1D33)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vR8z643qp6xm0NJCzYgArF5xX9XgYsi38oWTuAM60lJ9cYMkxRTKEg==
Age: 582
ocsp.digicert.com/
200 OK 313 B IP
Hash 60b34924b7fe935aac7bf44c7f7959bd
3a263cf142bed28e88df7d234ce1f7489da87ee0
f38d443a678a3b89470e9fb6e4b6ce0f506ff63e7de60e3cfa72ddddfa78e023
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 734
Cache-Control: max-age=106768
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Etag: "6385d856-139"
Expires: Thu, 01 Dec 2022 10:13:08 GMT
Last-Modified: Tue, 29 Nov 2022 10:00:54 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 60b34924b7fe935aac7bf44c7f7959bd
3a263cf142bed28e88df7d234ce1f7489da87ee0
f38d443a678a3b89470e9fb6e4b6ce0f506ff63e7de60e3cfa72ddddfa78e023
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 734
Cache-Control: max-age=106768
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Etag: "6385d856-139"
Expires: Thu, 01 Dec 2022 10:13:08 GMT
Last-Modified: Tue, 29 Nov 2022 10:00:54 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 313
tmscdn.coremetrics.com/tms/52510000/cp-v3.js?__t=20221130043339402
200 OK 12 B URL HTTP/1.1 tmscdn.coremetrics.com/tms/52510000/cp-v3.js?__t=20221130043339402
IP
File type ASCII text, with no line terminators
Hash bc6573647ae421e4cd14dcdf34c877ce
a567ddefcd1cfc1bbbaf5323bdadba5795c95478
7fd90f2ec178b50f6924b27d80085370abdb66f52947d3a63d7f8e7a8f56512b
GET /tms/52510000/cp-v3.js?__t=20221130043339402 HTTP/1.1
Host: tmscdn.coremetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "bc6573647ae421e4cd14dcdf34c877ce:1456420296"
Last-Modified: Thu, 25 Feb 2016 17:11:36 GMT
Server: AkamaiNetStorage
Content-Length: 12
Date: Wed, 30 Nov 2022 04:33:40 GMT
Connection: keep-alive
libs.coremetrics.com/ddxlibs/yahoo-min.js
200 OK 3.0 kB URL HTTP/1.1 libs.coremetrics.com/ddxlibs/yahoo-min.js
IP
File type ASCII text, with very long lines (6013)
Hash e50d9edc420b41235b5c5e9519c604ed
1836b64e01c7ea96a86febe73044353dc32b0541
b3808ba4336778f7f72268e0f5e187e7df31a65362b91a6c4708ccb079033abb
GET /ddxlibs/yahoo-min.js HTTP/1.1
Host: libs.coremetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "839e18c2abe9817eb0b63acb4f014aa4:1407414707"
Last-Modified: Thu, 07 Aug 2014 12:31:47 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 30 Nov 2022 04:33:40 GMT
Content-Length: 3005
Connection: keep-alive
rules.atgsvcs.com/EERules/view/rules/3.0/json/200106309877/11FBu72u4lySdEUup24aTkWxV6F8AQ-wN1yW-F1FmT73Z3s03DC
200 OK 1.8 kB URL HTTP/1.1 rules.atgsvcs.com/EERules/view/rules/3.0/json/200106309877/11FBu72u4lySdEUup24aTkWxV6F8AQ-wN1yW-F1FmT73Z3s03DC
IP
ASN #31898 ORACLE-BMC-31898
File type JSON data\012- , ASCII text, with very long lines (1836), with no line terminators
Hash ac000561f7df336c26d0a5003314caa3
72680b34b9e1830d5c4fad3608e1c9a4fb188b29
424372fcbc6597e98d93670b7870920e297dcbe2a904aa4e4176f188e9d16351
POST /EERules/view/rules/3.0/json/200106309877/11FBu72u4lySdEUup24aTkWxV6F8AQ-wN1yW-F1FmT73Z3s03DC HTTP/1.1
Host: rules.atgsvcs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 624
Origin: https://www.orientaltrading.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:33:40 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Set-Cookie: E3SessionID=WXPGz9cWmKd9LaNX_xwhybuomtELWEzGhlrpNkG7_EwdqNscyLN_!-1777796268!-137659805; path=/; SameSite=None; secure; HttpOnly
atgRecSessionId=WXPGz9cWmKd9LaNX_xwhybuomtELWEzGhlrpNkG7_EwdqNscyLN_!-1777796268!-137659805; path=/; SameSite=None; secure
X-Oracle-BMC-LBS-Route=92d848740d965b6cc4e4893728bde777ced9b6be42d273474a4479d03ecf28617a13560ed2a0f4de; path=/; SameSite=None; secure; HttpOnly
X-Oracle-BMC-LBS-Route=92d848740d965b6cc4e4893728bde777ced9b6be42d273474a4479d03ecf28617a13560ed2a0f4de; path=/; SameSite=None; secure
P3P: CP="NON DSP COR CUR OUR LEG PHY COM",policyref="http://as00.estara.com/w3c/p3p.xml"
Access-Control-Allow-Origin: https://www.orientaltrading.com
data.coremetrics.com/cm?ci=52510000%7COTCDESKTOP&st=1669782816208&vn1=4.23.201&ec=utf-8&vn2=e4.0&pi=OTD%3APRODUCT%20VIEW%3AJingle%20Bell%20Necklaces%20-%2012%20Pc.(13615554)&ul=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&cjen=1&cjuid=81670760784816697828171&cjsid=48862071669782817174&cjvf=7&tid=6&cg=OTD%3ANecklaces%20--%20551147&rnd=1669791115449&pc=Y&jv=1.8.5&je=n&sw=1280&sh=1024&pd=24&tz=0&pv_a2=CELL_A&pv_a3=0&pv_a4=GUEST&pv_a45=REACT22016&pv_a47=0184c6cfc8cb00343bec539836ce00050018200900918&pv_a48=562946d0-5a13-4aa3-b406-54d67a3e38c9&pv_a49=false
200 OK 43 B URL HTTP/1.1 data.coremetrics.com/cm?ci=52510000%7COTCDESKTOP&st=1669782816208&vn1=4.23.201&ec=utf-8&vn2=e4.0&pi=OTD%3APRODUCT%20VIEW%3AJingle%20Bell%20Necklaces%20-%2012%20Pc.(13615554)&ul=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&cjen=1&cjuid=81670760784816697828171&cjsid=48862071669782817174&cjvf=7&tid=6&cg=OTD%3ANecklaces%20--%20551147&rnd=1669791115449&pc=Y&jv=1.8.5&je=n&sw=1280&sh=1024&pd=24&tz=0&pv_a2=CELL_A&pv_a3=0&pv_a4=GUEST&pv_a45=REACT22016&pv_a47=0184c6cfc8cb00343bec539836ce00050018200900918&pv_a48=562946d0-5a13-4aa3-b406-54d67a3e38c9&pv_a49=false
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /cm?ci=52510000%7COTCDESKTOP&st=1669782816208&vn1=4.23.201&ec=utf-8&vn2=e4.0&pi=OTD%3APRODUCT%20VIEW%3AJingle%20Bell%20Necklaces%20-%2012%20Pc.(13615554)&ul=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&cjen=1&cjuid=81670760784816697828171&cjsid=48862071669782817174&cjvf=7&tid=6&cg=OTD%3ANecklaces%20--%20551147&rnd=1669791115449&pc=Y&jv=1.8.5&je=n&sw=1280&sh=1024&pd=24&tz=0&pv_a2=CELL_A&pv_a3=0&pv_a4=GUEST&pv_a45=REACT22016&pv_a47=0184c6cfc8cb00343bec539836ce00050018200900918&pv_a48=562946d0-5a13-4aa3-b406-54d67a3e38c9&pv_a49=false HTTP/1.1
Host: data.coremetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:33:40 GMT
Server: Apache
Vary: Host
Expires: Tue, 29 Nov 2022 04:33:40 GMT
Cache-Control: no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, no-transform, pre-check=0, post-check=0, private
Pragma: no-cache
Content-Length: 43
P3P: CP="NON DSP COR CUR ADMo DEVo PSAo PSDo OUR IND ONL UNI PUR COM NAV INT DEM STA"
Connection: close
Content-Type: image/gif
bat.bing.com/action/0?ti=4007832&Ver=2&mid=d1445475-8302-4648-9ee9-1ae2dc029682&sid=29748f10706811ed90b9239b9c8b6354&vid=29749340706811ed847d67764a1dc4de&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&p=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&r=<=3290&evt=pageLoad&sv=1&rn=397844
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=4007832&Ver=2&mid=d1445475-8302-4648-9ee9-1ae2dc029682&sid=29748f10706811ed90b9239b9c8b6354&vid=29749340706811ed847d67764a1dc4de&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&p=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&r=<=3290&evt=pageLoad&sv=1&rn=397844
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=4007832&Ver=2&mid=d1445475-8302-4648-9ee9-1ae2dc029682&sid=29748f10706811ed90b9239b9c8b6354&vid=29749340706811ed847d67764a1dc4de&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&p=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&r=<=3290&evt=pageLoad&sv=1&rn=397844 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=19333077AA8B61B63DD9221BAB7E6074; domain=.bing.com; expires=Mon, 25-Dec-2023 04:33:40 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1CAF48984A46423396069D0995B3651D Ref B: OSL30EDGE0220 Ref C: 2022-11-30T04:33:40Z
date: Wed, 30 Nov 2022 04:33:39 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=4007832&Ver=2&mid=d1445475-8302-4648-9ee9-1ae2dc029682&sid=29748f10706811ed90b9239b9c8b6354&vid=29749340706811ed847d67764a1dc4de&vids=0&msclkid=N&pagetype=product&prodid=13615554&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=662336
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=4007832&Ver=2&mid=d1445475-8302-4648-9ee9-1ae2dc029682&sid=29748f10706811ed90b9239b9c8b6354&vid=29749340706811ed847d67764a1dc4de&vids=0&msclkid=N&pagetype=product&prodid=13615554&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=662336
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=4007832&Ver=2&mid=d1445475-8302-4648-9ee9-1ae2dc029682&sid=29748f10706811ed90b9239b9c8b6354&vid=29749340706811ed847d67764a1dc4de&vids=0&msclkid=N&pagetype=product&prodid=13615554&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=662336 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2A0DD37A0DD36D2F04EFC1160C266CAA; domain=.bing.com; expires=Mon, 25-Dec-2023 04:33:40 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BAB6E1CBA35E49509764AA6B24E32ABA Ref B: OSL30EDGE0220 Ref C: 2022-11-30T04:33:40Z
date: Wed, 30 Nov 2022 04:33:39 GMT
X-Firefox-Spdy: h2
data.cmcore.com/cookie-id.js?fn=cmSetAvid
200 OK 49 B URL HTTP/1.1 data.cmcore.com/cookie-id.js?fn=cmSetAvid
IP
File type ASCII text, with no line terminators
Hash 986967a3635ea5bd64c98432ff1fa444
8081a55b7731e1101f87336d026ff00f8dc6f036
0c565577941b3ab40a246b32517e8edced36c7d480d65bd9b1299e7c01fc2176
GET /cookie-id.js?fn=cmSetAvid HTTP/1.1
Host: data.cmcore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:33:40 GMT
Server: Apache
Vary: Host
Content-Length: 49
P3P: CP="NON DSP COR CUR ADMo DEVo PSAo PSDo OUR IND ONL UNI PUR COM NAV INT DEM STA"
Connection: close
Content-Type: application/x-javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f58cd30443a495eed3ec0d9827550c1
fd0f53d2acc63ae015b7b42155136ade5841ebc7
333a3cae36081ea37371e32dc9587faacfda5970daa476b3b36cd6f587ce1594
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 798c6088f000b3a2464e23a92271c24d
2a53b3d3bd4a9104c79595f664276db5b32b9bad
dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3402a11f28d369c1ad537c8e44ba5568
17c9fc852ca71dc4d46f786537adda4ee0e9a3ef
dd142866516f3293fab9f67f092d37b70c39fc58512734c8e88dab5c5faf7264
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
clario.orientaltrading.com/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 clario.orientaltrading.com/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: clario.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.orientaltrading.com/
Origin: https://www.orientaltrading.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:40 GMT
content-length: 0
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 5
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7720ddc48f621c06-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f58cd30443a495eed3ec0d9827550c1
fd0f53d2acc63ae015b7b42155136ade5841ebc7
333a3cae36081ea37371e32dc9587faacfda5970daa476b3b36cd6f587ce1594
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/1045810972/?random=1669782817539&cv=11&fst=1669780800000&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&data=event%3Dpage_view%3Becomm_prodid%3D13615554%3Becomm_pagetype%3Dproduct%3Becomm_category%3D551147%3Becomm_pvalue%3D5.98&fmt=3&is_vtc=1&random=466108086&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1045810972/?random=1669782817539&cv=11&fst=1669780800000&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&data=event%3Dpage_view%3Becomm_prodid%3D13615554%3Becomm_pagetype%3Dproduct%3Becomm_category%3D551147%3Becomm_pvalue%3D5.98&fmt=3&is_vtc=1&random=466108086&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1045810972/?random=1669782817539&cv=11&fst=1669780800000&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&data=event%3Dpage_view%3Becomm_prodid%3D13615554%3Becomm_pagetype%3Dproduct%3Becomm_category%3D551147%3Becomm_pvalue%3D5.98&fmt=3&is_vtc=1&random=466108086&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 04:33:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/1045810972/?random=1669782817539&cv=11&fst=1669780800000&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&data=event%3Dpage_view%3Becomm_prodid%3D13615554%3Becomm_pagetype%3Dproduct%3Becomm_category%3D551147%3Becomm_pvalue%3D5.98&fmt=3&is_vtc=1&random=466108086&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/1045810972/?random=1669782817539&cv=11&fst=1669780800000&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&data=event%3Dpage_view%3Becomm_prodid%3D13615554%3Becomm_pagetype%3Dproduct%3Becomm_category%3D551147%3Becomm_pvalue%3D5.98&fmt=3&is_vtc=1&random=466108086&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1045810972/?random=1669782817539&cv=11&fst=1669780800000&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&data=event%3Dpage_view%3Becomm_prodid%3D13615554%3Becomm_pagetype%3Dproduct%3Becomm_category%3D551147%3Becomm_pvalue%3D5.98&fmt=3&is_vtc=1&random=466108086&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 04:33:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/p/action/4007832.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/4007832.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/4007832.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=21969F3BAAE66C1935E28D57AB136DBA; domain=.bing.com; expires=Mon, 25-Dec-2023 04:33:40 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1877015F15124491816F0A9570FA5731 Ref B: OSL30EDGE0220 Ref C: 2022-11-30T04:33:40Z
date: Wed, 30 Nov 2022 04:33:39 GMT
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1045810972/?random=1669782817530&cv=11&fst=1669780800000&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=904923703&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1045810972/?random=1669782817530&cv=11&fst=1669780800000&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=904923703&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1045810972/?random=1669782817530&cv=11&fst=1669780800000&bg=ffffff&guid=ON&async=1>m=2oabs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&tiba=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=904923703&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 04:33:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 177 B IP
Hash 506b96d7d37fd519272a3bf4bedd5fe8
5219427558415e00ce2dc015f720187b193071af
d8a86fef9a98075f27a7081faa6e0173a852c26d1068be8432b29e90ed88789b
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=y76utl80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3prcU1hamptcEtmUkthcG9id2JtenJ0UW5PdGtxWllvTDRRQVJzS2V4d2o
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:40 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=HOyFel80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3prcU1hamptcEtmUkthcG9id2JtenJNR3FBJTJCUSUyRjhSZG5IM1NUZlJWTUJv; expires=Mon, 25 Dec 2023 04:33:40 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 273942
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
otc-app.quantummetric.com/q3/492d579dd256a2fb923d120e43375210
200 OK 521 B URL HTTP/2 otc-app.quantummetric.com/q3/492d579dd256a2fb923d120e43375210
IP
Hash 8f010d1baf345c5022564148722cb5c4
f368cd25a6d60287aaef80508f0aa183d2b5b72b
2aa92f80fd81bb8177a0e4ad20c250a6fbfb037785862d078cac1e0d5f015988
GET /q3/492d579dd256a2fb923d120e43375210 HTTP/1.1
Host: otc-app.quantummetric.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 04:33:40 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-headers: Content-Type
access-control-allow-methods: GET,POST
access-control-max-age: 31536000
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 39 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c4adc1d59242ada8f9e6d2661d395c59
145cbc580b18c6d0c7cce0486e55200606f7baa7
4695b9fd64548544df44200e2acf9ff7ba8fd08a96c1f2f6333a625429766470
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:39 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 163036
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
clario.orientaltrading.com/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 clario.orientaltrading.com/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: clario.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 2384
Origin: https://www.orientaltrading.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe; mt.v=2.1120525908.1669782816197; bm_sv=A5E8339F911019EA89BFA151E1310F1C~YAAQz00kFxHYUnqEAQAAi83PxhFzd7NlSSm6DNkseZLWm5Pva4DUicYfZ8lU2Xau6h700OdoEPKFM9qOKYsZELVUtsfePNMkrraK/PZVYwEIydAXIiwJJpwyHpoahbzOaMfTG2JFcWwqPmJ8viRD6aerwC6PN0pgvM+4HuF4be4bk2yWD7bArHdAXq6HltzhLiD6WntgFLRvxGG1YNGbiGL0bVOlOJipr1r6RbKDrSq3xDJx7yqJnPx1NgSnSJPWkHmoxFQ66B1+~1; utag_main=v_id:0184c6cfc8cb00343bec539836ce00050018200900918$_sn:1$_se:2$_ss:0$_st:1669784617390$ses_id:1669782816972%3Bexp-session$_pn:1%3Bexp-session$_prevpage:PRODUCT%20VIEW%3AJingle%20Bell%20Necklaces%20-%2012%20Pc.(13615554)%3Bexp-1669786416978$dc_visit:1$dc_event:2%3Bexp-session$dc_region:eu-central-1%3Bexp-session; ga_cid_cookie=0184c6cfc8cb00343bec539836ce00050018200900918; cmTPSet=Y; CoreID6=81670760784816697828171&ci=52510000|OTCDESKTOP; 52510000_clogin=v=7&l=48862071669782817174&e=1669784617179; _gcl_au=1.1.571439763.1669782818; mp_oriental_trading_mixpanel=%7B%22distinct_id%22%3A%20%22184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1%22%2C%22bc_id%22%3A%20-1438252957%7D; RT="z=1&dm=orientaltrading.com&si=cafa441b-cfe8-4cac-9f52-dc2e2947429e&ss=lb35koth&sl=1&tt=2je&bcn=%2F%2F0217990f.akstat.io%2F&ld=466"; QuantumMetricSessionID=492d579dd256a2fb923d120e43375210; QuantumMetricUserID=14ab91aa54f43c8fdbf58bb2448a5e41
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:40 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
set-cookie: sp=4eb19511-3865-4d4d-be0d-8a89894af473; Expires=Thu, 30 Nov 2023 04:33:40 GMT; Domain=orientaltrading.com; Path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-credentials: true
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7720ddc56aacb4f3-OSL
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=rtus&domain=orientaltrading.com&sn=FirefoxSyncframe&so=0&topUrl=www.orientaltrading.com&info=HOyFel80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3prcU1hamptcEtmUkthcG9id2JtenJNR3FBJTJCUSUyRjhSZG5IM1NUZlJWTUJv&idsd=-130988962,1070523213&cw=1&rtusCallerId=11&lsw=1
200 OK 311 B URL HTTP/2 gum.criteo.com/sid/json?origin=rtus&domain=orientaltrading.com&sn=FirefoxSyncframe&so=0&topUrl=www.orientaltrading.com&info=HOyFel80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3prcU1hamptcEtmUkthcG9id2JtenJNR3FBJTJCUSUyRjhSZG5IM1NUZlJWTUJv&idsd=-130988962,1070523213&cw=1&rtusCallerId=11&lsw=1
IP
File type JSON data\012- , ASCII text, with very long lines (388), with no line terminators
Hash 9563e581d7386024cd0cf6af39efb210
9372ddc8069d7acd3ee15787234cd1a21937b426
59b7c41f268d2470bb9d0ef142fe829cc195d9a43c0d1ba712f7bae01888a15c
GET /sid/json?origin=rtus&domain=orientaltrading.com&sn=FirefoxSyncframe&so=0&topUrl=www.orientaltrading.com&info=HOyFel80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3prcU1hamptcEtmUkthcG9id2JtenJNR3FBJTJCUSUyRjhSZG5IM1NUZlJWTUJv&idsd=-130988962,1070523213&cw=1&rtusCallerId=11&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=rtus&topUrl=www.orientaltrading.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:39 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1016851
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
onsitestats.bluecore.com/analytics?ns=oriental_trading&campaign_id=d7c9d594-72cc-4b4d-83c4-aa7c2467abdb&stats_type=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%3D%3D&device_type=desktop&distinct_id=184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D
200 OK 23 B URL HTTP/2 onsitestats.bluecore.com/analytics?ns=oriental_trading&campaign_id=d7c9d594-72cc-4b4d-83c4-aa7c2467abdb&stats_type=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%3D%3D&device_type=desktop&distinct_id=184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D
IP
File type JSON data\012- , ASCII text
Hash c133983455930b5571f045a19f89001f
b5a3eb62fb7667f605308a03eaf0e1a00a4a2429
273521bed7e711c50d14a61c0c00cdee804056167c6b7b430ce2af8820715c25
GET /analytics?ns=oriental_trading&campaign_id=d7c9d594-72cc-4b4d-83c4-aa7c2467abdb&stats_type=eyJldmVudF90eXBlIjoidmlld3MiLCJhdHRyaWJ1dGlvbiI6ZmFsc2UsImdvYWxfaWQiOiJiY2RiIiwidmlzaXRvcl90eXBlIjoia25vd24iLCJyZWZlcnJhbCI6ImRpcmVjdCIsInNlc3Npb25faWQiOiIxNjY5NzgyODE4MzQ2IiwicGFnZV91cmwiOiJodHRwczovL3d3dy5vcmllbnRhbHRyYWRpbmcuY29tL2ppbmdsZS1iZWxsLW5lY2tsYWNlcy0xMi1wYy0tYTItMTM2MTU1NTQuZmx0cj9iY19waWQ9TVRNMk1UVTFOVFElM0QmY21fbW1jPUVtYWlsLV8tMjAyMjExMjNTdWJzY3JpYmVkTm9Db250LV8tT1RDLV8tQWxsQ2hhbm5lbCZjcGdubT0yMDIyLTExLTIzX1N1Yl9Ob19Db250YWN0JmJwPVJFQUNUMjIwMTYmc3ViYWN0aW9uPXN1YmFjdGlvbl81OTA5MjU1NjAzMDM2MTYwJmU9SnF2V1RMYzhVRmRtN1ZpS0s3QlBBUEhkSlQzUkpBWjlGanpJa2gwWjYtSSUzRCZvYmVtPVlXNmlFR2xiZXJLWUJHVWFvTEs1VmJPTnB2MWtndDl0VVZsZzBibV9uUk0lM0QmYmNfbGNpZD10NTI3Mzk5NDQyMjU5MTQ4OGx3NDkwODcxMjg0NDc5NTkwNCIsInNlc3Npb25fc291cmNlIjoiYmx1ZWNvcmVfZW1haWwiLCJzZXNzaW9uX21lZGl1bSI6ImJsdWVjb3JlX2VtYWlsIiwib3JpZ2luYWxfdXNlcl90eXBlIjoia25vd24iLCJjdXJyZW50X3VzZXJfdHlwZSI6Imtub3duIiwic2Vzc2lvbl9wdmMiOiIxIiwiZGF5X3B2YyI6IjEiLCJwYWdlX3R5cGUiOiJkZWZhdWx0IiwiZGlzdGluY3RfaWQiOiIxODRjNmNmY2IzNTFlNy0wNTg3NTE1ZTM0ZTA5NDgtYzUwNTQyNS0xNDAwMDAtMTg0YzZjZmNiMzYzYjEiLCJvYmVtIjoiWVc2aUVHbGJlcktZQkdVYW9MSzVWYk9OcHYxa2d0OXRVVmxnMGJtX25STT0ifQ%3D%3D&device_type=desktop&distinct_id=184c6cfcb351e7-0587515e34e0948-c505425-140000-184c6cfcb363b1&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D HTTP/1.1
Host: onsitestats.bluecore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orientaltrading.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduUPLUbjcNedJSeRX_IMp18OJxR9y9tn46ZLjSreOXABYXyzoZsShAY2_t2BouGARWapee7IUsvoGViXuTmOCHe0vuDwcbi
date: Wed, 30 Nov 2022 04:33:41 GMT
cache-control: public, max-age=10
expires: Wed, 30 Nov 2022 04:33:51 GMT
last-modified: Thu, 31 Oct 2019 08:03:07 GMT
etag: "c133983455930b5571f045a19f89001f"
x-goog-generation: 1572508987952776
x-goog-metageneration: 4
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 23
content-type: text/javascript
x-goog-hash: crc32c=oWPQig==, md5=wTOYNFWTC1Vx8EWhn4kAHw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 23
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dx.mountain.com/spx?dxver=4.0.0&shaid=32118&tdr=&plh=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&cb=29731889268955990
200 4.9 kB URL HTTP/1.1 dx.mountain.com/spx?dxver=4.0.0&shaid=32118&tdr=&plh=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&cb=29731889268955990
IP
Hash 7692a4267e1309fe4daeb74abb873d4c
0c90de489a87cf0932ce26716785383bc2f0371c
64069cf0e58e41438443812427fcee45c57be82170829a9037f4c7b011246d8c
GET /spx?dxver=4.0.0&shaid=32118&tdr=&plh=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&cb=29731889268955990 HTTP/1.1
Host: dx.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Wed, 30 Nov 2022 04:33:38 GMT
connection: close
api.bluecore.app/api/track/viewed_onsite
200 OK 1 B URL HTTP/2 api.bluecore.app/api/track/viewed_onsite
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /api/track/viewed_onsite HTTP/1.1
Host: api.bluecore.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1458
Origin: https://www.orientaltrading.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:40 GMT
content-type: text/plain
content-length: 1
x-envoy-upstream-service-time: 16
server: istio-envoy
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
api.bluecore.app/api/track/viewed_onsite
200 OK 1 B URL HTTP/2 api.bluecore.app/api/track/viewed_onsite
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /api/track/viewed_onsite HTTP/1.1
Host: api.bluecore.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1448
Origin: https://www.orientaltrading.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:40 GMT
content-type: text/plain
content-length: 1
x-envoy-upstream-service-time: 23
server: istio-envoy
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
libs.coremetrics.com/ddxlibs/json-min.js
200 OK 2.2 kB URL HTTP/1.1 libs.coremetrics.com/ddxlibs/json-min.js
IP
File type ASCII text, with very long lines (4764)
Hash 8eda4ce55894f94864386a07c575e246
da79f8af79612b65e21ee10af1cc7b252b553115
dcd6bf364c026bf4d59b4c24015d0f94a69a0a03bf935ccf021b7cd4a5c4b5d0
GET /ddxlibs/json-min.js HTTP/1.1
Host: libs.coremetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "59d3be5741942c7fca3daff0b2d977ef:1407414707"
Last-Modified: Thu, 07 Aug 2014 12:31:47 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 30 Nov 2022 04:33:41 GMT
Content-Length: 2204
Connection: keep-alive
gum.criteo.com/sync?a=1&c=11&r=2&j=utag_handle_criteo_userid
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?a=1&c=11&r=2&j=utag_handle_criteo_userid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync?a=1&c=11&r=2&j=utag_handle_criteo_userid HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-crto-bundle
Referer: https://www.orientaltrading.com/
Origin: https://www.orientaltrading.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:40 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-headers: X-CRTO-SID, X-CRTO-IDCPY, X-CRTO-OPTOUT, X-CRTO-BUNDLE
access-control-allow-origin: https://www.orientaltrading.com
server-processing-duration-in-ticks: 601073
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gum.criteo.com/sync?a=1&c=11&r=2&j=utag_handle_criteo_userid
302 Found 0 B URL HTTP/2 gum.criteo.com/sync?a=1&c=11&r=2&j=utag_handle_criteo_userid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?a=1&c=11&r=2&j=utag_handle_criteo_userid HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-crto-bundle: ceXmJF9kNG83eVBkVGxyUGJLNE0lMkJjS1g1ZjFtcnFhVFlDUHBHNWxOdVc4WEpITkk0TE9uZmxZckdkcFNDTzZHUTVqamM3WFJLakxPZjliMGNZU3lSeXpWbU9WbUo3eWNrbmFtQUxUNmZrTkFDM0J2ZTc3Yjl1ViUyQkpDNkYlMkZ3TjJ0Nk5DQzhBWW1HdXVJcFgyMnlVcUdLNVRlSkElM0QlM0Q
Origin: https://www.orientaltrading.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Wed, 30 Nov 2022 04:33:40 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: /sync?s=1&a=1&c=11&r=2&j=utag_handle_criteo_userid
access-control-allow-credentials: true
access-control-allow-origin: https://www.orientaltrading.com
server-processing-duration-in-ticks: 3195999
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gum.criteo.com/sync?s=1&a=1&c=11&r=2&j=utag_handle_criteo_userid
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?s=1&a=1&c=11&r=2&j=utag_handle_criteo_userid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync?s=1&a=1&c=11&r=2&j=utag_handle_criteo_userid HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-crto-bundle
Referer: https://www.orientaltrading.com/
Origin: https://www.orientaltrading.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:40 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-headers: X-CRTO-SID, X-CRTO-IDCPY, X-CRTO-OPTOUT, X-CRTO-BUNDLE
access-control-allow-origin: https://www.orientaltrading.com
server-processing-duration-in-ticks: 728384
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ingest.quantummetric.com/otc?T=B&u=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&t=1669782817684&v=1669782819798&H=24dd8663e7e944f2e35944b0&s=492d579dd256a2fb923d120e43375210&z=1&S=28278&N=12&P=1
200 OK 0 B URL HTTP/2 ingest.quantummetric.com/otc?T=B&u=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&t=1669782817684&v=1669782819798&H=24dd8663e7e944f2e35944b0&s=492d579dd256a2fb923d120e43375210&z=1&S=28278&N=12&P=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /otc?T=B&u=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&t=1669782817684&v=1669782819798&H=24dd8663e7e944f2e35944b0&s=492d579dd256a2fb923d120e43375210&z=1&S=28278&N=12&P=1 HTTP/1.1
Host: ingest.quantummetric.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 56231
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: https://www.orientaltrading.com
access-control-allow-credentials: true
date: Wed, 30 Nov 2022 04:33:41 GMT
content-length: 0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 258cf78a792bb2a6b7a62d63749c343d
6881f93e416793b66bb940559fa900a7fa6087a1
1bcad7ad00105c8957d5c81ac314be4eb0917213e2661cd02831922e99ec8312
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=99931
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:41 GMT
Etag: "6385c080-1d7"
Expires: Thu, 01 Dec 2022 08:19:12 GMT
Last-Modified: Tue, 29 Nov 2022 08:19:12 GMT
Server: nginx
Content-Length: 471
ocsp.digicert.com/
200 OK 313 B IP
Hash 40fd775d2a827188c815544417cf829b
8cc038bfd1d9c82bc61c01d82593986c6b9f87a0
1803bca86c2793100732d9428ea42ce70682748d651936ac86e73cacfdc34bea
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 745
Cache-Control: max-age=97080
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:33:41 GMT
Etag: "6385b274-139"
Expires: Thu, 01 Dec 2022 07:31:41 GMT
Last-Modified: Tue, 29 Nov 2022 07:19:16 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 313
csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.11.Events.StartInit~1&entry=c~Idfs.Rtus.11.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.11.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.11.Headers.Bundle~1&entry=c~Idfs.Rtus.11.Events.InitiateFetch~1&entry=c~Idfs.Rtus.11.Events.SaveResponseOnLocalStorage~1
200 OK 43 B URL HTTP/2 csm.nl.eu.criteo.net/iev?entry=c~Idfs.Rtus.11.Events.StartInit~1&entry=c~Idfs.Rtus.11.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.11.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.11.Headers.Bundle~1&entry=c~Idfs.Rtus.11.Events.InitiateFetch~1&entry=c~Idfs.Rtus.11.Events.SaveResponseOnLocalStorage~1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /iev?entry=c~Idfs.Rtus.11.Events.StartInit~1&entry=c~Idfs.Rtus.11.Events.SyncframeDropped~1&entry=c~Idfs.Rtus.11.Origin.FromSyncframeBundle~1&entry=c~Idfs.Rtus.11.Headers.Bundle~1&entry=c~Idfs.Rtus.11.Events.InitiateFetch~1&entry=c~Idfs.Rtus.11.Events.SaveResponseOnLocalStorage~1 HTTP/1.1
Host: csm.nl.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:41 GMT
pragma: no-cache
server: Finatra
expires: 0
content-type: image/gif
cache-control: no-cache, no-store, must-revalidate
content-length: 43
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
data.coremetrics.com/cm?tid=5&ci=52510000%7COTCDESKTOP&vn2=e4.0&st=1669782816208&vn1=4.23.201&ec=utf-8&pi=OTD%3APRODUCT%20VIEW%3AJingle%20Bell%20Necklaces%20-%2012%20Pc.(13615554)&pr=13615554&pm=Jingle%20Bell%20Necklaces%20-%2012%20Pc.&cg=OTD%3ANecklaces%20--%20551147&pc=N&cmPageURL=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&rnd=1669788903414&pr_a1=PRODUCT_DETAIL_PAGE&pr_a12=4.46&pr_a13=80&pr_a35=OTC&ul=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&cjen=1&cjuid=81670760784816697828171&cjsid=48862071669782817174&cjvf=7
200 OK 43 B URL HTTP/1.1 data.coremetrics.com/cm?tid=5&ci=52510000%7COTCDESKTOP&vn2=e4.0&st=1669782816208&vn1=4.23.201&ec=utf-8&pi=OTD%3APRODUCT%20VIEW%3AJingle%20Bell%20Necklaces%20-%2012%20Pc.(13615554)&pr=13615554&pm=Jingle%20Bell%20Necklaces%20-%2012%20Pc.&cg=OTD%3ANecklaces%20--%20551147&pc=N&cmPageURL=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&rnd=1669788903414&pr_a1=PRODUCT_DETAIL_PAGE&pr_a12=4.46&pr_a13=80&pr_a35=OTC&ul=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&cjen=1&cjuid=81670760784816697828171&cjsid=48862071669782817174&cjvf=7
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /cm?tid=5&ci=52510000%7COTCDESKTOP&vn2=e4.0&st=1669782816208&vn1=4.23.201&ec=utf-8&pi=OTD%3APRODUCT%20VIEW%3AJingle%20Bell%20Necklaces%20-%2012%20Pc.(13615554)&pr=13615554&pm=Jingle%20Bell%20Necklaces%20-%2012%20Pc.&cg=OTD%3ANecklaces%20--%20551147&pc=N&cmPageURL=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&rnd=1669788903414&pr_a1=PRODUCT_DETAIL_PAGE&pr_a12=4.46&pr_a13=80&pr_a35=OTC&ul=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&cjen=1&cjuid=81670760784816697828171&cjsid=48862071669782817174&cjvf=7 HTTP/1.1
Host: data.coremetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:33:41 GMT
Server: Apache
Vary: Host
Expires: Tue, 29 Nov 2022 04:33:41 GMT
Cache-Control: no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, no-transform, pre-check=0, post-check=0, private
Pragma: no-cache
Content-Length: 43
P3P: CP="NON DSP COR CUR ADMo DEVo PSAo PSDo OUR IND ONL UNI PUR COM NAV INT DEM STA"
Connection: close
Content-Type: image/gif
vsvipph01.rightnowtech.com/vs/site/orientaltrading/visitor/11FBu72u4lySdEUup24aTkWxV6F8AQ-wN1yW-F1FmT73Z3s03DC/session/50cd6cdb:184c4763e30:6341-10.3.49.139/type/PAGE_LOAD?url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&title=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading
200 OK 85 B URL HTTP/1.1 vsvipph01.rightnowtech.com/vs/site/orientaltrading/visitor/11FBu72u4lySdEUup24aTkWxV6F8AQ-wN1yW-F1FmT73Z3s03DC/session/50cd6cdb:184c4763e30:6341-10.3.49.139/type/PAGE_LOAD?url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&title=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading
IP
ASN #31898 ORACLE-BMC-31898
File type ASCII text, with no line terminators
Hash f6f47c7fee681b35913e75a61d6bfc40
3cfb979c854e53d123a9705383186be7d6adb03e
a06a26a19f96135a4766e77e8d716d8fdc01ecb317f5d2009c40de0549ae21f3
GET /vs/site/orientaltrading/visitor/11FBu72u4lySdEUup24aTkWxV6F8AQ-wN1yW-F1FmT73Z3s03DC/session/50cd6cdb:184c4763e30:6341-10.3.49.139/type/PAGE_LOAD?url=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&title=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading HTTP/1.1
Host: vsvipph01.rightnowtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:33:41 GMT
Content-Type: application/javascript;charset=UTF-8
Content-Length: 85
Connection: keep-alive
RNT-JN-Ext-Machine: 43.3
Strict-Transport-Security: max-age=31536000; includeSubDomains
RNT-JN-Ext-UUID: d09d64a1-4ac2-408b-a173-64074b70841c
X-Content-Type-Options: nosniff
px.mountain.com/st?ga_tracking_id=UA-15188070-37&shpt=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22UA-15188070-37%22%2C%22shpt%22%3A%22Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&dxver=4.0.0&shaid=32118&plh=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&cb=29731889268955990&shadditional=googletagmanager%3Dtrue%2Ccriteo%3Dtrue%2Csh_conversion%3DSHBLOCK&shpi=https%3A%2F%2Fs7.orientaltrading.com%2Fis%2Fimage%2FOrientalTrading%2F13615554%3F%24PDP_VIEWER_IMAGE%24&shpn=Jingle%20Bell%20Necklaces%20-%2012%20Pc.&shpp=5.98&shpc=necklaces&shps=13615554&shcq=0
200 OK 1.6 kB URL HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-15188070-37&shpt=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22UA-15188070-37%22%2C%22shpt%22%3A%22Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&dxver=4.0.0&shaid=32118&plh=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&cb=29731889268955990&shadditional=googletagmanager%3Dtrue%2Ccriteo%3Dtrue%2Csh_conversion%3DSHBLOCK&shpi=https%3A%2F%2Fs7.orientaltrading.com%2Fis%2Fimage%2FOrientalTrading%2F13615554%3F%24PDP_VIEWER_IMAGE%24&shpn=Jingle%20Bell%20Necklaces%20-%2012%20Pc.&shpp=5.98&shpc=necklaces&shps=13615554&shcq=0
IP
Hash f266ef8ed3371dab4546cdf83026d69d
c12c5f04d13153e15a58dc19538a5e6b76dac84d
d7ffba71c24ec12c91f37e01d431997b64bb5f36f6db4afec1f44f921e8425d5
GET /st?ga_tracking_id=UA-15188070-37&shpt=Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22UA-15188070-37%22%2C%22shpt%22%3A%22Jingle%20Bell%20Necklaces%20-%2012%20Pc.%20%7C%20Oriental%20Trading%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&dxver=4.0.0&shaid=32118&plh=https%3A%2F%2Fwww.orientaltrading.com%2Fjingle-bell-necklaces-12-pc--a2-13615554.fltr%3Fbc_pid%3DMTM2MTU1NTQ%253D%26cm_mmc%3DEmail-_-20221123SubscribedNoCont-_-OTC-_-AllChannel%26cpgnm%3D2022-11-23_Sub_No_Contact%26bp%3DREACT22016%26subaction%3Dsubaction_5909255603036160%26e%3DJqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%253D%26obem%3DYW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%253D%26bc_lcid%3Dt5273994422591488lw4908712844795904&cb=29731889268955990&shadditional=googletagmanager%3Dtrue%2Ccriteo%3Dtrue%2Csh_conversion%3DSHBLOCK&shpi=https%3A%2F%2Fs7.orientaltrading.com%2Fis%2Fimage%2FOrientalTrading%2F13615554%3F%24PDP_VIEWER_IMAGE%24&shpn=Jingle%20Bell%20Necklaces%20-%2012%20Pc.&shpp=5.98&shpc=necklaces&shps=13615554&shcq=0 HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
HTTP/1.1 200 OK
date: Wed, 30 Nov 2022 04:33:42 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=2b9889f8-7068-11ed-8051-bdf13609894d;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
connection: close
siteintercept.qualtrics.com/dxjsmodule/1.8ce69394dfc154e65174.chunk.js?Q_CLIENTVERSION=1.81.0&Q_CLIENTTYPE=web&Q_BRANDID=otc
200 OK 0 B URL HTTP/2 siteintercept.qualtrics.com/dxjsmodule/1.8ce69394dfc154e65174.chunk.js?Q_CLIENTVERSION=1.81.0&Q_CLIENTTYPE=web&Q_BRANDID=otc
IP
GET /dxjsmodule/1.8ce69394dfc154e65174.chunk.js?Q_CLIENTVERSION=1.81.0&Q_CLIENTTYPE=web&Q_BRANDID=otc HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Referer: https://www.orientaltrading.com/
Connection: keep-alive
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:39 GMT
content-type: application/javascript
cf-ray: 7720ddbb2835b512-OSL
access-control-allow-origin: *
age: 96420
cache-control: public, max-age=604800, s-maxage=604800
etag: W/"7380-1845383cf10"
last-modified: Mon, 07 Nov 2022 19:14:18 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
cf-bgj: minify
cf-polished: origSize=29568
edge-control: max-age=604800
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.orientaltrading.com/assets/dist/js/universal.min_102722.js
200 OK 0 B URL HTTP/2 www.orientaltrading.com/assets/dist/js/universal.min_102722.js
IP
GET /assets/dist/js/universal.min_102722.js HTTP/1.1
Host: www.orientaltrading.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/jingle-bell-necklaces-12-pc--a2-13615554.fltr?bc_pid=MTM2MTU1NTQ%3D&cm_mmc=Email-_-20221123SubscribedNoCont-_-OTC-_-AllChannel&cpgnm=2022-11-23_Sub_No_Contact&bp=REACT22016&subaction=subaction_5909255603036160&e=JqvWTLc8UFdm7ViKK7BPAPHdJT3RJAZ9FjzIkh0Z6-I%3D&obem=YW6iEGlberKYBGUaoLK5VbONpv1kgt9tUVlg0bm_nRM%3D&bc_lcid=t5273994422591488lw4908712844795904
Cookie: lastvisitedbrand=otc; JSESSIONID=q7PGz8VdB3q1YU98k3dqNNJFRI-IKVQf_q-tTPCJ1BNhVHKqQeEx!-2107174768; otc_visitor_id=53a3d18a896cda5e86ef4d05b9ff753b; temp_uuid=83774d742e5ac5067bbc1188f2c3603ed8e4e5ce387cf989945dbb2c98b491fc511527be187a7a1fed26eb938d96decc; visitor_modal=true; otc_web_persist=58184-1379541388631426048; AKA_A2=A; ak_bmsc=6E083DF12DAE7899446FD203CEAA34BB~000000000000000000000000000000~YAAQz00kFwzYUnqEAQAAP8bPxhHhmHXNKvmCMKhgcy+3dvSZR75ADmafE9oiSJyeCcBWz+piC7V+nlbQigemLSTmWzjufBEtLEbOLSpFWmSFGSCdb3hFibcOuADECQPfdxYuJ3bWb32I88TLGZKGfqXArL3HFgnQbouWBpvFA9R7TgFkEMrLUFONV/tz7W4GhimIkEPX1xGMWrP20cuU3ULu/PdbprYScNGjL2438yp6bb6UuYuOrYJmfcnDLqnyjdUFg2QX68029prYiPyITNkgLTOWlY5vDnXVfrhtReItol8tsQvBfltA/s2vqK/ZLo5iPAkfAFzhc1Rl49YOE+uaFzhA5RgT5FpmJKKWvuyGx4fjizmOT1VP0747Vx0w0mA4aHavRrJ0V/1tz412LjYe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 27 Oct 2022 17:40:33 GMT
accept-ranges: bytes
content-encoding: gzip
content-type: application/javascript; charset=utf-8
content-length: 73820
expires: Thu, 30 Nov 2023 04:33:36 GMT
date: Wed, 30 Nov 2022 04:33:36 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
device_type: DESKTOP
vary: User-Agent
content-security-policy: img-src 'self' http://* https://* 'unsafe-inline' data: s7.orientaltrading.com, upgrade-insecure-requests; frame-ancestors 'self'
strict-transport-security: max-age=31536000 ; includeSubDomains
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=rtus&topUrl=www.orientaltrading.com
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=rtus&topUrl=www.orientaltrading.com
IP
GET /syncframe?origin=rtus&topUrl=www.orientaltrading.com HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:39 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=3dacbe1e-ce35-4a1d-a1ce-4417e6d313fd; expires=Mon, 25 Dec 2023 04:33:39 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 505830
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:40 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 110155
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sync?s=1&a=1&c=11&r=2&j=utag_handle_criteo_userid
200 OK 0 B URL HTTP/2 gum.criteo.com/sync?s=1&a=1&c=11&r=2&j=utag_handle_criteo_userid
IP
GET /sync?s=1&a=1&c=11&r=2&j=utag_handle_criteo_userid HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orientaltrading.com
x-crto-bundle: ceXmJF9kNG83eVBkVGxyUGJLNE0lMkJjS1g1ZjFtcnFhVFlDUHBHNWxOdVc4WEpITkk0TE9uZmxZckdkcFNDTzZHUTVqamM3WFJLakxPZjliMGNZU3lSeXpWbU9WbUo3eWNrbmFtQUxUNmZrTkFDM0J2ZTc3Yjl1ViUyQkpDNkYlMkZ3TjJ0Nk5DQzhBWW1HdXVJcFgyMnlVcUdLNVRlSkElM0QlM0Q
Referer: https://www.orientaltrading.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:40 GMT
content-type: text/javascript; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
expires: 60
access-control-allow-credentials: true
access-control-allow-origin: https://www.orientaltrading.com
server-processing-duration-in-ticks: 1300331
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_2h0SknBFPqUFSiF&Q_CLIENTVERSION=1.81.0&Q_CLIENTTYPE=web
200 OK 0 B URL HTTP/2 siteintercept.qualtrics.com/WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_2h0SknBFPqUFSiF&Q_CLIENTVERSION=1.81.0&Q_CLIENTTYPE=web
IP
POST /WRSiteInterceptEngine/Targeting.php?Q_ZoneID=ZN_2h0SknBFPqUFSiF&Q_CLIENTVERSION=1.81.0&Q_CLIENTTYPE=web HTTP/1.1
Host: siteintercept.qualtrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 477
Origin: https://www.orientaltrading.com
Connection: keep-alive
Referer: https://www.orientaltrading.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:33:38 GMT
content-type: application/json
cf-ray: 7720ddb90f36b512-OSL
access-control-allow-origin: https://www.orientaltrading.com
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
timing-allow-origin: *
trace-id: 0227fe8756b2bb54
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
167.89.115.56
104.110.16.174
178.250.6.75
104.88.20.155
52.214.104.135
104.17.208.240
147.154.138.18
93.184.220.29