www.refinansiere.net/med-betalingsanmerkning/
301 Moved Permanently 261 B URL HTTP/1.1 www.refinansiere.net/med-betalingsanmerkning/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3fdc71c0c2aa6fb1b7f86e0cdd2cbfd4
ba896fed716dde3ecebe832483393e787b0579b2
88c33e4be6af2d8224827cc444879aef34a3d6f9a32499f1c41561e7731d6920
GET /med-betalingsanmerkning/ HTTP/1.1
Host: www.refinansiere.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 05 Jan 2023 07:47:38 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.refinansiere.net/med-betalingsanmerkning/
Cache-Control: max-age=0
Expires: Thu, 05 Jan 2023 07:47:38 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gE8Mu7200CE3dXQnfV7ehJITAgU8LVMiJ0iCBzCLw6xpvla67e%2FrH4y%2FaoP9PFvECJD%2Btkl2hiVQeKE8NW41Eww6G5rJmUJco69Mph2qrCDb%2Brp3nt32Z73r8HMQdTLXehyfvZRpXA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 784a9b66af0e0b4d-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 326898eb925368408f6f42ee173b9d89
b8b20ee34b7e7b139e7729b8e46a54ea25f54ac8
96c2c75f700ab55649882111713ca3cfb2eaf08e404c2bc245a641dc12ae168a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96C2C75F700AB55649882111713CA3CFB2EAF08E404C2BC245A641DC12AE168A"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15225
Expires: Thu, 05 Jan 2023 12:01:23 GMT
Date: Thu, 05 Jan 2023 07:47:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ce8af3d72e7e9af609039abee59c8b87
8e1b16591fbc632df35f15e23da55ee86af31bc3
52edddbda4a3a3b778f61a491b21e6ea439e9d8024189e636b1f37b2dd7226fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52EDDDBDA4A3A3B778F61A491B21E6EA439E9D8024189E636B1F37B2DD7226FC"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18022
Expires: Thu, 05 Jan 2023 12:48:00 GMT
Date: Thu, 05 Jan 2023 07:47:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 225d42543c0190cdb3686bf236533f4f
13a0940800fce078487372b6b3ca614dd1ab6c31
766bbe15eb1642ac39e9b71669fbb44252471c8de5adb555cd1a76db44fbe7bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "766BBE15EB1642AC39E9B71669FBB44252471C8DE5ADB555CD1A76DB44FBE7BC"
Last-Modified: Mon, 02 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11757
Expires: Thu, 05 Jan 2023 11:03:35 GMT
Date: Thu, 05 Jan 2023 07:47:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 05 Jan 2023 07:36:27 GMT
content-type: application/json
age: 671
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Bgi8a9WDXmaUKBe8Vz1qtthZpXFM/BtfSqLkO9aW0f7EJkus3Deo5sP4aqv9PKDadUzbDB/Ymnc=
x-amz-request-id: DS1V8WKQ6FM144KJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 05 Jan 2023 06:59:26 GMT
age: 2892
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 84372e32d73714c9ad711fb182aa9af8
2d3f755604ddd25920d59680b2df4647330febbb
257dbe265e265115d53cd35c1f9f70a039d64a560a7701b39d94c3e5d822e275
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=170709
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:38 GMT
Etag: "63b6786f-116"
Expires: Sat, 07 Jan 2023 07:12:47 GMT
Last-Modified: Thu, 05 Jan 2023 07:12:47 GMT
Server: nginx
Content-Length: 278
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 07:47:39 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 84372e32d73714c9ad711fb182aa9af8
2d3f755604ddd25920d59680b2df4647330febbb
257dbe265e265115d53cd35c1f9f70a039d64a560a7701b39d94c3e5d822e275
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=170708
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Etag: "63b6786f-116"
Expires: Sat, 07 Jan 2023 07:12:47 GMT
Last-Modified: Thu, 05 Jan 2023 07:12:47 GMT
Server: nginx
Content-Length: 278
ocsp.digicert.com/
200 OK 471 B IP
Hash 9b79de027ae1c1dd8ae0fbf9fa3c360c
5ae7d126c033c9365156110188d08dc2398751b6
574139b1fd35faccfaf2d7947531f5b6747167d95634b8727d12feb05fa554ee
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6437
Cache-Control: max-age=108388
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Etag: "63b56bda-1d7"
Expires: Fri, 06 Jan 2023 13:54:07 GMT
Last-Modified: Wed, 04 Jan 2023 12:06:50 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash 82b598e640b8c0c1a860de2c4787efe8
73db03f590925a4881e1cd6a54d8ff534ed73859
4d242777e8983d17699117dc6c3f6c88ce3b1348d6bdab30d0a22747465a86e2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6436
Cache-Control: max-age=122434
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Etag: "63b5a2b9-117"
Expires: Fri, 06 Jan 2023 17:48:13 GMT
Last-Modified: Wed, 04 Jan 2023 16:00:57 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a430d46fb27196c8b03f382c1bafbb23
0b31940d1067eb87c24c6d356689d7f9f90231a6
3e9cd331b1c2c1eca94ff12ec1b685e1c1c1909e30e8b3cf4493dc6eac786df8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/6KBNaYo7pMo
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/6KBNaYo7pMo
IP
Hash 8ea1434112985cd6ef6546da5c799031
3d455b612b57d679abb6115c00b2c3c0444f5b0f
2c984a3d2babd7f5c8378eb9ef46425f208f227db46799fdff4bbb5407fd9301
POST /s/gts1d4/6KBNaYo7pMo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-118676932-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-118676932-1
IP
File type ASCII text, with very long lines (1921)
Hash 62de98ed0c90b554fadef1b9466e5228
07f1930eac88a2264ec20ede37fe2f9addf9332c
8f289942e3fc6cbf5766b8a6338db1762eb7d6e7d062aec15e6f0352fd9576ad
GET /gtag/js?id=UA-118676932-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 05 Jan 2023 07:47:39 GMT
expires: Thu, 05 Jan 2023 07:47:39 GMT
cache-control: private, max-age=900
last-modified: Thu, 05 Jan 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43577
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 82b598e640b8c0c1a860de2c4787efe8
73db03f590925a4881e1cd6a54d8ff534ed73859
4d242777e8983d17699117dc6c3f6c88ce3b1348d6bdab30d0a22747465a86e2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6436
Cache-Control: max-age=122434
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Etag: "63b5a2b9-117"
Expires: Fri, 06 Jan 2023 17:48:13 GMT
Last-Modified: Wed, 04 Jan 2023 16:00:57 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 279
www.aservice.tools/cgi-bin/publisher/tools/asjs.pl?id=792
200 OK 3.7 kB URL HTTP/2 www.aservice.tools/cgi-bin/publisher/tools/asjs.pl?id=792
IP
File type ASCII text, with very long lines (7025)
Hash bbaa2071360ea1eb126f46fa7b4ffe23
da02065e30734e6155fed1ea97bf1d0e73ab9f87
1267490ab3514564b9314e9b28f760c8c137ac6de38f5b7ccbc6e9c86ce8e641
GET /cgi-bin/publisher/tools/asjs.pl?id=792 HTTP/1.1
Host: www.aservice.tools
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 07:47:39 GMT
content-type: application/javascript
content-length: 3721
cache-control: no-cache, private
set-cookie: cookie_user_id=508109964; domain=adservicemedia.dk; path=/; expires=Sun, 31-Dec-2023 07:47:39 GMT; SameSite=None; Secure
cookie_user_id_sig=7083ce96bc802c8ce1b56614c877c4c1; domain=adservicemedia.dk; path=/; expires=Sun, 31-Dec-2023 07:47:39 GMT; SameSite=None; Secure
vary: Accept-Encoding
content-encoding: gzip
etag: "b5041c629ef4d586e7d146ceffeba335-gzip"
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a430d46fb27196c8b03f382c1bafbb23
0b31940d1067eb87c24c6d356689d7f9f90231a6
3e9cd331b1c2c1eca94ff12ec1b685e1c1c1909e30e8b3cf4493dc6eac786df8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p3m3a4h9.rocketcdn.me/wp-content/plugins/wp-rocket/assets/js/lazyload/17.5/lazyload.min.js
200 OK 2.9 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/plugins/wp-rocket/assets/js/lazyload/17.5/lazyload.min.js
IP
File type ASCII text, with very long lines (8290)
Hash e829d54451ad2eb2d4f2f137ecfe09e7
110aca8460cdc6d14548bd063346f26b5bc13eb5
1b53d2d3b35f1625aa732df003fbaaa1b5b3cbfe5b77a2185776081841258e00
GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.5/lazyload.min.js HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
etag: "1672893848"
content-encoding: gzip
content-length: 2888
content-type: application/javascript; charset=utf-8
last-modified: Thu, 05 Jan 2023 04:44:08 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O4KwfS%2F1%2BbOseuGOmypU%2Bzw3BK2dISkA20j6TExBaAaoplJe3K%2BhBdofgsQL5G2q6gVQZn5tr3lGiWWrMjl6qe%2BZQGd%2FkzMsUd1osyPSiamw8l9aaJwHqfZz86T%2B1%2BAUNf6IXPNGtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a6aeb98ccb4e8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-sp-metadata: HS256.CKud2p0GEocBCiRmZmMwYThjNS0zMTc0LTQ3NjctOTRhOC1mNGJhZjE4NGY5NjAQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkMjUxMGFkMGYtOGI4Yi00ODAxLTk3YTAtZDBjOThhMzcyODc5GMgWIhgIAhIUY2RzMjM1LnNrMS5od2Nkbi5uZXQ=.phkjvX3me9KoHEkIsUWhggm40unHzCAbXqS5X6i8lyo=
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds235.sk1.c
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/plugins/wp-rocket/assets/js/lazyload/17.5/lazyload.min.js>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
p3m3a4h9.rocketcdn.me/wp-content/plugins/strong-testimonials/public/css/rating-display.css?ver=3.0.2
200 OK 1.0 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/plugins/strong-testimonials/public/css/rating-display.css?ver=3.0.2
IP
Hash e5df41ff9a617b87925e3f98f8cf103f
046c7b3b25fc98d4d788f39f117b169c14a5691a
6b4f36db991d5308555f2a18b7304d373ef273e16e855c3cf114db79c783cac6
GET /wp-content/plugins/strong-testimonials/public/css/rating-display.css?ver=3.0.2 HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
etag: "1672893847"
content-encoding: gzip
content-length: 1037
content-type: text/css; charset=utf-8
last-modified: Thu, 05 Jan 2023 04:44:07 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fTROBSlHkIRna%2BFgxiJpECFGUtGt2Ucsnk49jn1CwL9sKy0Ewhg2lZFVzXJm47RXXEz2Mabu%2FvCC7POO6E73rqRPIUZBJk84sVGHshGWsfA1Wuru9gQmTAZbosx%2BeYG3gYBY1UEq4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a39a708340bc6-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-sp-metadata: HS256.CKud2p0GEocBCiQzMTdkMDM4Ni1lZTI4LTQ2MDItYTkxOC1mMzVjYTI5YzNlMmIQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkMzZmNWE2MzgtMTA4MS00NzhiLTkwMzctYjhiNDM0NjJjZmVjGI0IIhgIAhIUY2RzMjQ2LnNrMS5od2Nkbi5uZXQ=.xAfmdc64dHaZYE64PFqtFxMeDP67oopdW7hJJ/2X6E0=
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds246.sk1.c
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/plugins/strong-testimonials/public/css/rating-display.css>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
p3m3a4h9.rocketcdn.me/wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.css?ver=2.1.4
200 OK 748 B URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.css?ver=2.1.4
IP
File type ASCII text, with very long lines (3029), with no line terminators
Hash 95cb91de0dd4a094679bdc892942c6c3
7e18eff2a1537d0b83593584598f0370ec976d4e
926e37bb8008420342584746d05d72d6857dbf6f43509e9eae4027f328c3ee48
GET /wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.css?ver=2.1.4 HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
etag: "1672893847"
content-encoding: gzip
content-length: 748
content-type: text/css; charset=utf-8
last-modified: Thu, 05 Jan 2023 04:44:07 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VZZ7qlqjCFdFEv%2FSs%2FNF1gjBuZDP44nIpvmJVotc82HYHz595I%2BihwZta49LMRYK%2BpT0F92axfilfrVBKupSh4UFtM6h2k5xnST2BwEGlhPXSmX629iwqYjYy22%2FM5qigf%2FTGA1A%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a6aebe9d60e90-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-sp-metadata: HS256.CKud2p0GEocBCiRjMGZlYjk0Ni1kZGY5LTQ5YTItYmFlZi0yMmYzZjlkODUwMGYQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkMWE4NGY2MGMtYWRjZC00OTQxLTkzM2YtNWE1NzE2N2E0ZTQyGOwFIhgIAhIUY2RzMjUxLnNrMS5od2Nkbi5uZXQ=.Y0dabVWVR1bm9ubUigBY9ya8hJ5SxHhi5j+Yst/zQhk=
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds251.sk1.c
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.css>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
p3m3a4h9.rocketcdn.me/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 31 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
File type ASCII text, with very long lines (65447)
Hash 1b5264c989379b828aff60f65a518a24
98641237f14ccb33ac114f54329a33bd0aa17eb7
6c8e7b78c6dbc13426810c905572db7589cf3e00264e30ce797fddb0b1092237
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
etag: "1667417099"
content-encoding: gzip
content-length: 30995
content-type: application/javascript; charset=utf-8
last-modified: Wed, 02 Nov 2022 19:24:59 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W4dixkk6x4mEVLdHTv4xi8tuDrfGh%2FIqq%2FCiICCs8s1EEFc3XFktvhyvzCRDgJ0K8eOhmxX0d97Gvi2AYEysuaWbEiMpf%2Fm51%2BXI5FBjQYnygi393t4253yB4PfThjs4DCEjiKZe3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a6aeb9b040b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-sp-metadata: HS256.CKud2p0GEocBCiQxZWFiODg1MC0wZDYzLTRlZjctYWJjNi0zNzJiOGQxMDk3YWMQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkNWZhYWRkZTItY2RkYi00ODIzLTllYzYtMDcyMGYzNzE5MzU3GJPyASIYCAISFGNkczIwOS5zazEuaHdjZG4ubmV0.rBD7GaYqkwgboKyoFVF5flxhpEs1HDi0yyOt/rEAB5U=
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds209.sk1.c
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-includes/js/jquery/jquery.min.js>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/6KBNaYo7pMo
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/6KBNaYo7pMo
IP
Hash 8ea1434112985cd6ef6546da5c799031
3d455b612b57d679abb6115c00b2c3c0444f5b0f
2c984a3d2babd7f5c8378eb9ef46425f208f227db46799fdff4bbb5407fd9301
POST /s/gts1d4/6KBNaYo7pMo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p3m3a4h9.rocketcdn.me/wp-content/cache/min/1/0f525ac8ab585edeff0ad3891af600d1.css
200 OK 39 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/cache/min/1/0f525ac8ab585edeff0ad3891af600d1.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash ce1dca20d817f2d93fbc4d01c3a12626
c14472ff7971faa27f238cda3ad0a60484b91349
5b8fb551a7a48ae58b941615c4b8e17982a1636b246eaca89c6158f67228e186
GET /wp-content/cache/min/1/0f525ac8ab585edeff0ad3891af600d1.css HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
accept-ranges: bytes
etag: "1672897723"
content-encoding: gzip
content-length: 39060
content-type: text/css; charset=utf-8
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds210.sk1.sc,1672904859.cds210.sk1.p
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/cache/min/1/0f525ac8ab585edeff0ad3891af600d1.css>; rel="canonical"
cache-control: public, max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Rn6xrP%2FIm%2FNWj3gUuROaVVvOt84tYmWtuxdzBPsKlZ%2BfUQi01dcVh%2F4ZGZinRKcjRaWVyjMXeZenGypBhfrPihSX8SwuF5AIqQ4BmMTdOdJnQgA%2B2m4b3Zyd%2FA8jMTlWpqYI7ke4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a9b6bbadd0af6-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
last-modified: Thu, 05 Jan 2023 05:48:43 GMT
x-sp-metadata: HS256.CKud2p0GEocBCiQxNTQ5N2EwNS05YzA0LTQ0YWUtOWZiMi1jZTBlZDljYjk0OGQQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GioSJDc0ZjVlYTU2LTAxNGItNDFjOS04OWVlLWU1MmQzOTY2MGFhMRiUsQIiGggCEhRjZHMyMTAuc2sxLmh3Y2RuLm5ldBgJ.D3bmDq5WKUAKI2ORPv+K6UiDSCENV5KWHZx9jGlPOQQ=
access-control-allow-origin: *
X-Firefox-Spdy: h2
kit.fontawesome.com/7f5043309a.js?ver=6.1.1
200 OK 82 kB URL HTTP/2 kit.fontawesome.com/7f5043309a.js?ver=6.1.1
IP
Hash a85be2548762736bdf147003d168daba
3225e4b5e50c39fe916b160efd256576c791aafc
fb4241684c3666e3270807b731360ff57d67da07f233b805161d872adc7945f3
GET /7f5043309a.js?ver=6.1.1 HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FyfsCayXfiYXs4YF0zoC
cf-cache-status: HIT
server: cloudflare
cf-ray: 784a9b6a79e6b512-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash d621d812baec21661e42149f0571ff88
60c26de9d194f57c93d585bbba23801bda22e014
a5b2d6661aeb50b4af325ff7c2595696f4dc580dfab0b407291769a719e31112
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3823
Cache-Control: max-age=113003
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Etag: "63b58817-116"
Expires: Fri, 06 Jan 2023 15:11:02 GMT
Last-Modified: Wed, 04 Jan 2023 14:07:19 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/s/gts1d4/DiZK-p1gZyM
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/DiZK-p1gZyM
IP
Hash 65cd4ecd98e7147200998db1dcda3a7f
80ef7ea345e9f956f3cf362d2b27146eaa0b7c82
9a2db0fe4940be7a3375e1fe4a28d1f93227741bbd14a938ee0fe9d2e3c8835f
POST /s/gts1d4/DiZK-p1gZyM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash d621d812baec21661e42149f0571ff88
60c26de9d194f57c93d585bbba23801bda22e014
a5b2d6661aeb50b4af325ff7c2595696f4dc580dfab0b407291769a719e31112
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3823
Cache-Control: max-age=113003
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Etag: "63b58817-116"
Expires: Fri, 06 Jan 2023 15:11:02 GMT
Last-Modified: Wed, 04 Jan 2023 14:07:19 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
p3m3a4h9.rocketcdn.me/wp-content/themes/Zephyr/fonts/fa-brands-400.woff2?ver=8.13
200 OK 77 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/themes/Zephyr/fonts/fa-brands-400.woff2?ver=8.13
IP
File type Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196\012- data
Hash ed311c7a0ade9a75bb3ebf5a7670f31d
0613c7ebba55ee47ef302c0f7766324692f899a7
8ea8791754915a898a3100e63e32978a6d1763be6df8e73a39d3a90d691cdeef
GET /wp-content/themes/Zephyr/fonts/fa-brands-400.woff2?ver=8.13 HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.refinansiere.net
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
etag: "1672881776"
content-length: 76736
content-type: font/woff2
last-modified: Thu, 05 Jan 2023 01:22:56 GMT
accept-ranges: bytes
cache-control: max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5VjR9s8dZs1SMjmWd3UdyvUc7z4gcqQOVYKMsgVFM5%2FxpbEXs3AZ0Ee%2FJgECSyFsFmjg%2Bf76G%2FNpPeYxd5r%2FZ7NOrPFCn3xydZf39e5Fy0QEfZWAdNCDVD5FA7Rk3M8sEdtF6FxdZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7849f5b6ad65fabc-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-sp-metadata: HS256.CKud2p0GEocBCiQ3NzlmMTlkZi0wYmQzLTRhNzktYjE3Mi1hOTQ2NjIyOTYzOWMQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkNDUzYzdiYmQtYTNhNC00NzMwLTkzMWYtZGRhMTc1ZTBjMWFiGMDXBCIYCAISFGNkczI2Mi5zazEuaHdjZG4ubmV0.ExOPjGxVYxNMi++hfohx1Y9rr5dZSAIQ5emfJX7wAQY=
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds262.sk1.c
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/themes/Zephyr/fonts/fa-brands-400.woff2>; rel="canonical"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/zVaZBjAGHHM
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/zVaZBjAGHHM
IP
Hash 4e40783b244394a304a1d4722e9550c5
c58fdb0a425e8c89356dc64bb763f111c1a8c680
3727457a7453067e2be9e1351c83705dcb1a26c67ebec2f9808c9ac1741f0da2
POST /s/gts1d4/zVaZBjAGHHM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p3m3a4h9.rocketcdn.me/wp-content/themes/Zephyr/fonts/material-icons.woff2?ver=8.13
200 OK 128 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/themes/Zephyr/fonts/material-icons.woff2?ver=8.13
IP
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /wp-content/themes/Zephyr/fonts/material-icons.woff2?ver=8.13 HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.refinansiere.net
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
etag: "1672881776"
content-length: 128352
content-type: font/woff2
last-modified: Thu, 05 Jan 2023 01:22:56 GMT
accept-ranges: bytes
cache-control: max-age=31536000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gNeho7W5ow5jDsjneyCDlzCCE9Dnn8fNNsX268ompuMU%2BE%2FVqujIRRJs2JKX7jAjvZbBUPNc1TqQbR%2BuOqEcRqYvh3pn3PA3YWv1sKWs5rLINk9aE3CSK43%2Fg%2FGoARqVPcrtRLXe6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7849f5b6aeca0b31-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-sp-metadata: HS256.CKud2p0GEocBCiRmYTExMzRiNC1jOTgxLTRhNjYtYmJjZi01NDE1Yzg4NDA4ODcQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkNTFhNmE1YTAtNDg1My00ZTViLTg5MjgtOGUyNmMyMDdmY2VjGODqByIYCAISFGNkczI2MS5zazEuaHdjZG4ubmV0.Wthglh6+smOmO8Y2PKVZhFoEST5g++Hm1uRcNr1U/3Y=
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds261.sk1.c
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/themes/Zephyr/fonts/material-icons.woff2>; rel="canonical"
X-Firefox-Spdy: h2
online.adservicemedia.dk/js/ads.js
200 OK 21 B URL HTTP/2 online.adservicemedia.dk/js/ads.js
IP
File type ASCII text, with no line terminators
Hash 8a68886c66c8ca4dccac563705f5891c
9481593b3ed889a48d7fabe175f419547735f010
abd9155ac0fe0e62fdb9e2c1c333357cd33107972a57eff5224b0f3d0d2df316
GET /js/ads.js HTTP/1.1
Host: online.adservicemedia.dk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 07:47:39 GMT
content-type: application/javascript
content-length: 21
vary: X-Forwarded-Proto
last-modified: Thu, 03 Feb 2022 14:14:38 GMT
etag: "15-5d71dc124ef80"
accept-ranges: bytes
cache-control: no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tools.ascontentcloud.com/cgi-bin/API/Public/Analytics.pl?id=UA-149944810-1
200 OK 44 kB URL HTTP/2 tools.ascontentcloud.com/cgi-bin/API/Public/Analytics.pl?id=UA-149944810-1
IP
File type ASCII text, with very long lines (1921)
Hash 157f86315af1494dd153e79edcc084e2
207b35ca91dd0bad3052517fb21912eb9724a8c3
ca938f895f1f5763add9ccc9366df24df0edfc6e86cb593c8093afe5d5ee570f
GET /cgi-bin/API/Public/Analytics.pl?id=UA-149944810-1 HTTP/1.1
Host: tools.ascontentcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 43671
access-control-allow-origin: *
vary: Accept-Encoding
content-encoding: gzip
via: 1.1 google
date: Thu, 05 Jan 2023 06:27:59 GMT
cache-control: public, max-age=7200
age: 4780
etag: "57ce0d25224b2178f05119ae2e7f1fb7-gzip"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash d621d812baec21661e42149f0571ff88
60c26de9d194f57c93d585bbba23801bda22e014
a5b2d6661aeb50b4af325ff7c2595696f4dc580dfab0b407291769a719e31112
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5119
Cache-Control: max-age=114299
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Etag: "63b58817-116"
Expires: Fri, 06 Jan 2023 15:32:38 GMT
Last-Modified: Wed, 04 Jan 2023 14:07:19 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/s/gts1d4/zVaZBjAGHHM
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/zVaZBjAGHHM
IP
Hash 4e40783b244394a304a1d4722e9550c5
c58fdb0a425e8c89356dc64bb763f111c1a8c680
3727457a7453067e2be9e1351c83705dcb1a26c67ebec2f9808c9ac1741f0da2
POST /s/gts1d4/zVaZBjAGHHM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/DiZK-p1gZyM
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/DiZK-p1gZyM
IP
Hash 65cd4ecd98e7147200998db1dcda3a7f
80ef7ea345e9f956f3cf362d2b27146eaa0b7c82
9a2db0fe4940be7a3375e1fe4a28d1f93227741bbd14a938ee0fe9d2e3c8835f
POST /s/gts1d4/DiZK-p1gZyM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ka-f.fontawesome.com/releases/v6.2.1/css/free.min.css?token=7f5043309a
200 OK 24 kB URL HTTP/2 ka-f.fontawesome.com/releases/v6.2.1/css/free.min.css?token=7f5043309a
IP
File type ASCII text, with very long lines (65321)
Hash e7254e64129d2dfb67c6f8ebf31901e1
56ebc97b3a9ce3c47904e7be2809b4712d70530b
6ca4beffac50793017210dfc977fc08cacc92d9e17fe2a3ab61257a59591e2f8
GET /releases/v6.2.1/css/free.min.css?token=7f5043309a HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.refinansiere.net/
Origin: https://www.refinansiere.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:06:08 GMT
etag: W/"2dbe34367e935e2684b01124b0860d71"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9e93510e33ab69af0de2f41455fbb80.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: yFh71-_GYHElfasqMlzkOwRrZ7d94YLKVpuprfH-3L0gtkUViGzlXw==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=okcUaN8qcA9x%2FD4qdivBQMSoAvJANdLRAGqn7alcZNdlVv0BFO5JmCzkbG6tHUqfqO67oIUJI3WZRhDKzvQnoXPoUyriRS%2BW5otiRAqSTCV%2F6jHKYdEqBg7U5WnPq68mVguGiGYE5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a9b6cdf9d240f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
p3m3a4h9.rocketcdn.me/wp-content/uploads/2023/01/bluestep-liten.gif
200 OK 2.5 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/uploads/2023/01/bluestep-liten.gif
IP
File type GIF image data, version 89a, 120 x 26\012- data
Hash b5d2420ca42e15c472eadae61dd03631
5327298b8b65a25c8c5366f1ac0740665b817a1d
a28e97c484b2ead1e093547d2f9ac38438417a2a58024205a0452ca6c8bea02b
GET /wp-content/uploads/2023/01/bluestep-liten.gif HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
accept-ranges: bytes
etag: "1672882518"
content-length: 2516
content-type: image/gif
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds206.sk1.sc,1672904859.cds206.sk1.p
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/uploads/2023/01/bluestep-liten.gif>; rel="canonical"
cache-control: public, max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qd37LP7stNXiiffMC14Y08iRY9ab0PDeiw5rK%2Fv7pDax9gItBsLNjg1a4yxBBVHcgOOlYNx%2FITcYIf9pV1FKOQIe9%2BcgiUfgYVQcQGpGtSopvENqnsl9AN2Yv0iiakkoPzVvHhtauw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a9b6daeb9b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
last-modified: Thu, 05 Jan 2023 01:35:18 GMT
x-sp-metadata: HS256.CKud2p0GEocBCiQyMWVjOTI2My0wZjNkLTQ0ZGYtOTQ0NC1kOTVkMWIzMjcyMWIQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GikSJDJkZmNhMzgzLTZkYjMtNDNkOC1iYjAyLWI3NWRhZmQ3MzU5ZRjUEyIaCAISFGNkczIwNi5zazEuaHdjZG4ubmV0GAk=.QZlkSnV08B9qjIp0FkqFzwX1joV9Js/8KV+0m03IA9E=
access-control-allow-origin: *
X-Firefox-Spdy: h2
p3m3a4h9.rocketcdn.me/wp-content/uploads/2022/09/okida-logo-liten.png
200 OK 2.9 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/uploads/2022/09/okida-logo-liten.png
IP
File type PNG image data, 120 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash 3e309a3c35df873cfcb96e299cd3358a
69e1fceb1cbdfdedfd0562e0e0aa779f3aa45fc2
55100c3a24c1d977ebd916c1d7d34a51e6be76b6e4f15fa174a10403ff3ac614
GET /wp-content/uploads/2022/09/okida-logo-liten.png HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
accept-ranges: bytes
etag: "1664148643"
content-length: 2889
content-type: image/png
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds261.sk1.sc,1672904859.cds261.sk1.p
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/uploads/2022/09/okida-logo-liten.png>; rel="canonical"
cache-control: public, max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jUrB8DH9V0Y1cR2GhBT5kmnFa%2BNxXdnHv8%2FixPdjwgYSPikUgkCfWJW%2F74nRzSDlyXjkXWY35UaAgSXbtM7Jxm5k%2B1FIXVNcABF2dIUTarO9RBnC5sMB6TNb8I9UBuvE28S89%2FNthA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a9b6df81b0a67-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
last-modified: Sun, 25 Sep 2022 23:30:43 GMT
x-sp-metadata: HS256.CKud2p0GEocBCiRkZjI5MTgwZS1lZjVmLTRlMWEtYjQ1OS05NjNiOTUwM2E1ZTYQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GikSJDU2ZjgzZTlmLWQ0MDYtNGEwNy1iYTY3LWJlNjBjNDdmMTc2ORjJFiIaCAISFGNkczI2MS5zazEuaHdjZG4ubmV0GAk=.iEyt/GtxCPBTUy/knsZ3l+qFiDOHrvPdxRU9E6red94=
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fe74c226e54f2f382d278b594df930ae
4e4ebc661443f56b74d7c924ddae50bcb107f0af
511f11fe968867447f6d7e5862d8003e3a5fc18bdb62496ea09d140e9a11f53b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 823
Cache-Control: max-age=91975
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:39 GMT
Etag: "63b541ab-1d7"
Expires: Fri, 06 Jan 2023 09:20:34 GMT
Last-Modified: Wed, 04 Jan 2023 09:06:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
p3m3a4h9.rocketcdn.me/wp-content/uploads/2023/01/sambla-ref.png
200 OK 2.1 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/uploads/2023/01/sambla-ref.png
IP
File type PNG image data, 130 x 30, 8-bit colormap, non-interlaced\012- data
Hash 551321d1c44a8a0c5f91385420c3ef61
02fe398294870f97f6f9ab3285f785e047522b07
bddecfca13dac565c4816866e37065c4bcc965acf2bcd1edece3e32a198fb875
GET /wp-content/uploads/2023/01/sambla-ref.png HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
accept-ranges: bytes
etag: "1672883941"
content-length: 2079
content-type: image/png
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds017.sk1.sc,1672904859.cds017.sk1.p
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/uploads/2023/01/sambla-ref.png>; rel="canonical"
cache-control: public, max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QpzZ6ljpj5BeZDhJIQAKl5l86iA5v7niMJkZU9OiHG3DzS%2B1DcFUSsgJsTz5h2ZGTmwt1LccSIHbahTZX1YslihGO8RMZowK4ajJDDRSLUNYLGu0m7njkX0JehRyAC7N%2Bi0AIB6xbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a9b6e087d0e50-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
last-modified: Thu, 05 Jan 2023 01:59:01 GMT
x-sp-metadata: HS256.CKud2p0GEocBCiQyOTI5MmE1Ny1iMmQ4LTQzNjItYTMwNi1hZDQ5MjdkOGY3OWUQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GikSJDUzZDdjYjI3LWE2ZjAtNGEyMi04ODdhLTNjMjQzMjBkNzJiYhifECIaCAISFGNkczAxNy5zazEuaHdjZG4ubmV0GAk=.TwLpJpXp7bEO29hO3LxXvQlIH48SrTGSXYRKC/d2rNg=
access-control-allow-origin: *
X-Firefox-Spdy: h2
p3m3a4h9.rocketcdn.me/wp-content/uploads/2021/07/refinansiere-300x57.png
200 OK 4.5 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/uploads/2021/07/refinansiere-300x57.png
IP
File type PNG image data, 300 x 57, 8-bit colormap, non-interlaced\012- data
Hash 6078f6f2b3d4f3db1f376770333dd1b4
739339098d7dc7674d23e508fa7d5edf7cd8c174
c40af91c77a70ce21f164b79c6fdb28cbfc6f3b52fa76e3d725e99e9496a2004
GET /wp-content/uploads/2021/07/refinansiere-300x57.png HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
accept-ranges: bytes
etag: "1650967885"
content-length: 4507
content-type: image/png
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds237.sk1.sc,1672904859.cds237.sk1.p
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/uploads/2021/07/refinansiere-300x57.png>; rel="canonical"
cache-control: public, max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v%2Fl16nAl9P6%2B7jRaua4nRp5gRwJtP1tFkQmqLZvd7fPriHHc41LbMRN8wRQQrFpjjzp8%2FIkPo51XPH3nmMKCcAhpSVsXAR2fyOPd%2BTHQTd2lDgJIm6u14vnzv57vOP20sfmTSIe2Ag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a9b6e0dfc1b04-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
last-modified: Tue, 26 Apr 2022 10:11:25 GMT
x-sp-metadata: HS256.CKud2p0GEocBCiRkZmVmNTEyMC0wN2NhLTQ2MTktYjcxMi05MDI2YjVmMTlmMTMQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GikSJDhkODQ3ZWQwLWZiNDUtNDYzNi1iNWIzLWY5MjQxOWZmMTA4NhibIyIaCAISFGNkczIzNy5zazEuaHdjZG4ubmV0GAk=.rt1HsrkCQbd+a5yNpyOO8ginq5fiwzuEkIJOBu176mU=
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.adt598.com/atag/data?as=1603263319
200 OK 4.8 kB URL HTTP/2 cdn.adt598.com/atag/data?as=1603263319
IP
Hash 4c66c1c4f8ad18efc3fb1c3c84d596da
f0dcc6f93fc06c2f743efe89d1a931345cf0ff72
dcbcedaa12c6c73622c56eb6e19b1344a5fe8f6bd472d3f0821028608d0d5c13
Analyzer Verdict Alert fortinet Malware
GET /atag/data?as=1603263319 HTTP/1.1
Host: cdn.adt598.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.refinansiere.net
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
x-traceid: 934a2b86-20e1-4ffd-b989-68ca0d5f6ce8
date: Thu, 05 Jan 2023 07:09:13 GMT
cache-control: max-age=10800, s-maxage=10800
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rTLtiJBRvhVDsrq1IeFW6IACDwOAHbPDudlMJxu8GUdoJez0YWfeyg==
age: 2305
X-Firefox-Spdy: h2
p3m3a4h9.rocketcdn.me/wp-content/plugins/wp-rocket/assets/img/youtube.png
200 OK 1.1 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/plugins/wp-rocket/assets/img/youtube.png
IP
Hash 56bc5cce7a2b807862d78fe0cf808460
6d4aef8bea9caca271f7e0ec8c51784875c0c73b
3993b7650b1b72125ba0e854e3b08d1db68ca4f2729bae3a52067a3b89403b0a
GET /wp-content/plugins/wp-rocket/assets/img/youtube.png HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:40 GMT
accept-ranges: bytes
etag: "1672893848"
content-length: 662
content-type: image/png
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds255.sk1.sc,1672904860.cds255.sk1.p
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/plugins/wp-rocket/assets/img/youtube.png>; rel="canonical"
cache-control: public, max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CchmnrZab%2FFJ9cq7cdkp1seDm6jeI9PlTu%2BjdUguQtRC6ctLpH98yWcjspYKT4uV5FivylL6Ao7xX1p%2BR%2FbNx4fxFZCa%2BMlHMOHpE%2FzLygBzkDvU2sWAHepFyQMcH8Pla%2FLjwp7%2BXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a9b6f6df20e31-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
last-modified: Thu, 05 Jan 2023 04:44:08 GMT
x-sp-metadata: HS256.CKyd2p0GEocBCiQ0YTllNzkzYy0zN2Y3LTQwMjAtYjA1Yy0zODEzNDY5MWY4NGEQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GikSJGVkMTQwNWM5LWRiMDEtNDM4ZS1iOWExLTk3NjM4ODk1NjlhZBiWBSIaCAISFGNkczI1NS5zazEuaHdjZG4ubmV0GAk=.8YCNnG3h0ZaOD4RuExKuLlxj0mnkDv/OSiuHvXsv0uY=
access-control-allow-origin: *
X-Firefox-Spdy: h2
p3m3a4h9.rocketcdn.me/wp-content/uploads/2021/08/favicon3.png
200 OK 10 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/uploads/2021/08/favicon3.png
IP
File type PNG image data, 500 x 529, 8-bit colormap, non-interlaced\012- data
Hash 40fd0f5f7ac7fd05b4c095ba96ce9012
17e7f30a70caf2a6887a4a800400181ea2e8a49d
0ab78e945de2060b1f33c6e311de0f6419077a0cfd9735407b7c3ff55a12d791
GET /wp-content/uploads/2021/08/favicon3.png HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:40 GMT
etag: "1650967885"
content-length: 10082
content-type: image/png
last-modified: Tue, 26 Apr 2022 10:11:25 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d9MiWpVuB4R10xW%2BVIItGRoDOzXwX7wVeYxl0rRCXDWxgWj0WGbKLY4kZuhPdWlkN8ggqiiNqXjOf%2B0mkgB8ajOaSVRQLu6q3zgriOeDbgk6exS4pEkEMvOkxrv%2BPk16umi8ke8WFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a6af3ca310b02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-sp-metadata: HS256.CKyd2p0GEocBCiRmMTNiNDg0ZC0xYjExLTQ5ZWEtOWY1Mi03ZTk0M2Q2ZmFiNjQQwKXbgZjs+wIaBgicgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkYWRmODVlMDItN2Y2ZS00MWI0LWE5YzktZmVjMzg2N2ZiZGNiGOJOIhgIAhIUY2RzMjI4LnNrMS5od2Nkbi5uZXQ=.7aiDpBdkM+CMzZq80yEg04nSIC+8CbM6YvcB5Ohd9O0=
x-hw: 1672904860.cds013.sk1.hn,1672904860.cds228.sk1.c
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/uploads/2021/08/favicon3.png>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
p3m3a4h9.rocketcdn.me/wp-content/uploads/2021/08/favicon3-75x75.png
200 OK 2.2 kB URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/uploads/2021/08/favicon3-75x75.png
IP
File type PNG image data, 75 x 75, 8-bit colormap, non-interlaced\012- data
Hash 907dd032db47fb59ae24a4012c3f91df
2c07e717dfe131f2531dc29a073baa12859eabe7
f1c7e1590cc9761b7d28df6c1cd1bb2578173e2f4e2469890f59c97a637fe03c
GET /wp-content/uploads/2021/08/favicon3-75x75.png HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:40 GMT
etag: "1650967885"
content-length: 2238
content-type: image/png
last-modified: Tue, 26 Apr 2022 10:11:25 GMT
accept-ranges: bytes
cache-control: public, max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kDq%2FbF1M1bc%2Fb9gguWfVYmMpkGKe0QT8%2Bc6ZXiA%2BiPaXi3UpR6S0s82Iqib1RqdSas9TzRFEdktn9BCtccvD7poTVAfezOCp4sgdgLC8oPeK5DUBQs55Opd73CEL57VCukEpE58%2Bgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a6af42a6c0e39-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-sp-metadata: HS256.CKyd2p0GEocBCiQ0OGYyYWQ4Yi0xY2Q5LTQ1MjQtOGY4NC02ZDA5ODI5MTFiNjEQwKXbgZjs+wIaBgicgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkZWFhNDljMmUtMTFhMy00YzdmLWFmNTgtNzQ0YWQxMmQyOGQwGL4RIhgIAhIUY2RzMjE5LnNrMS5od2Nkbi5uZXQ=.fIScU3PkDUxkjPAyRRFuUEiDvaypt8mnMq6Z0zBJCmA=
x-hw: 1672904860.cds013.sk1.hn,1672904860.cds219.sk1.c
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/uploads/2021/08/favicon3-75x75.png>; rel="canonical"
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 05 Jan 2023 06:41:10 GMT
expires: Thu, 05 Jan 2023 08:41:10 GMT
cache-control: public, max-age=7200
age: 3990
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Rv+52KJkBCCDGcBW1MhjYQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZH0v7fAyerVAvtqGnHbY8nP8coI=
ka-f.fontawesome.com/releases/v6.2.1/webfonts/free-fa-solid-900.woff2
200 OK 150 kB URL HTTP/2 ka-f.fontawesome.com/releases/v6.2.1/webfonts/free-fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 150500, version 770.768\012- data
Size 150 kB (150500 bytes)
Hash 69a76555beae5c43a59559396c1aeb54
7d2759002c67a66fc38a72dd0e395e2da3d41474
1494e2691e1c13a3f35cbc3e1b56c5187c10ffe220d1fdc58d99494a666244d4
GET /releases/v6.2.1/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.refinansiere.net
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:40 GMT
content-type: font/woff2
content-length: 150500
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:15:23 GMT
etag: "69a76555beae5c43a59559396c1aeb54"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 d6030d5ab753695c0198f874d4276eb2.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: xRra4Defa7wRSeP05lQduu6uJ0vqG0KDLpwehqeS3Q1WphWji6q1Lg==
age: 7146
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F5SYhCEPhLqBbaRZk%2BGls%2FsN3keagj4SaZL44ItqIIOsRRAoQzKiAiRndJDxfeiiL%2BeYzpE5hPJ1epJx7z%2FSd63QCm3g315KepG9ywQGXfJxUVNe1BwES8l2P8M3L6P4i6v3Q9br2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 784a9b711cbb240f-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b815e7b1a5f00b7cff7f2a68bb723f77
c944dc7284f4758dfebbd1b8ab4b7b327259f651
f1701c75e48206c4405afcd5a60ae3141ff4db9f811ec9ab4cdd9090af666f26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-149944810-1&cid=748115606.1672904850&jid=810601896&gjid=1646329832&_gid=2046243010.1672904850&_u=YADAAUABAAAAACAAI~&z=502179497
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-149944810-1&cid=748115606.1672904850&jid=810601896&gjid=1646329832&_gid=2046243010.1672904850&_u=YADAAUABAAAAACAAI~&z=502179497
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-149944810-1&cid=748115606.1672904850&jid=810601896&gjid=1646329832&_gid=2046243010.1672904850&_u=YADAAUABAAAAACAAI~&z=502179497 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.refinansiere.net
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.refinansiere.net
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 05 Jan 2023 07:47:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 974e444c7b66a760e0fdec04b8bebb82
23d1de086afcfbdedbd5c60fcef69c88b840b448
458cf84b0a13820b027dfeafe101e87d2cc692fc998dc0347268df5afd816aca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b815e7b1a5f00b7cff7f2a68bb723f77
c944dc7284f4758dfebbd1b8ab4b7b327259f651
f1701c75e48206c4405afcd5a60ae3141ff4db9f811ec9ab4cdd9090af666f26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a6cdf191deb0e291350d9d91d9ab97a7
fb82c911866268a7d33d2743dbe0328199c7121a
414acc6f6d050d52d88f9706e71d6a0e3eceb4dc41edcce74ec63eb63d8fb1cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-149944810-1&cid=748115606.1672904850&jid=810601896&_u=YADAAUABAAAAACAAI~&z=1341040319
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-149944810-1&cid=748115606.1672904850&jid=810601896&_u=YADAAUABAAAAACAAI~&z=1341040319
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-149944810-1&cid=748115606.1672904850&jid=810601896&_u=YADAAUABAAAAACAAI~&z=1341040319 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 05 Jan 2023 07:47:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-149944810-1&cid=748115606.1672904850&jid=810601896&_u=YADAAUABAAAAACAAI~&z=1341040319
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-149944810-1&cid=748115606.1672904850&jid=810601896&_u=YADAAUABAAAAACAAI~&z=1341040319
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-149944810-1&cid=748115606.1672904850&jid=810601896&_u=YADAAUABAAAAACAAI~&z=1341040319 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 05 Jan 2023 07:47:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 974e444c7b66a760e0fdec04b8bebb82
23d1de086afcfbdedbd5c60fcef69c88b840b448
458cf84b0a13820b027dfeafe101e87d2cc692fc998dc0347268df5afd816aca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7c8811382bcd40ec65e7a6e339e94904
38d741442c52bcdde863d1a2d593ce0c81c7efbd
ce5c1060c028784381224586783b9b0943fd14947bb15bb38e6d401a1a221c23
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 07:47:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-FM3YYJL8HL>m=2oebu0&_p=1524933086&cid=748115606.1672904850&ul=en-us&sr=1280x1024&_s=1&sid=1672904850&sct=1&seg=0&dl=https%3A%2F%2Fwww.refinansiere.net%2Fmed-betalingsanmerkning%2F&dt=Refinansiering%20Med%20Betalingsanmerkning%20(2022)&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-FM3YYJL8HL>m=2oebu0&_p=1524933086&cid=748115606.1672904850&ul=en-us&sr=1280x1024&_s=1&sid=1672904850&sct=1&seg=0&dl=https%3A%2F%2Fwww.refinansiere.net%2Fmed-betalingsanmerkning%2F&dt=Refinansiering%20Med%20Betalingsanmerkning%20(2022)&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-FM3YYJL8HL>m=2oebu0&_p=1524933086&cid=748115606.1672904850&ul=en-us&sr=1280x1024&_s=1&sid=1672904850&sct=1&seg=0&dl=https%3A%2F%2Fwww.refinansiere.net%2Fmed-betalingsanmerkning%2F&dt=Refinansiering%20Med%20Betalingsanmerkning%20(2022)&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.refinansiere.net
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.refinansiere.net
date: Thu, 05 Jan 2023 07:47:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9042
Expires: Thu, 05 Jan 2023 10:18:23 GMT
Date: Thu, 05 Jan 2023 07:47:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9042
Expires: Thu, 05 Jan 2023 10:18:23 GMT
Date: Thu, 05 Jan 2023 07:47:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9042
Expires: Thu, 05 Jan 2023 10:18:23 GMT
Date: Thu, 05 Jan 2023 07:47:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e35c08d-9d47-44e2-a839-cbcbd7ba499e.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e35c08d-9d47-44e2-a839-cbcbd7ba499e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f47bd2c920099c071d5d6d8383915e04
502f6afdccb731d96e5ac3e69dbf91712149fcbc
84bc8c89c2686c1af0796b26c00a032fec455352c6e28f901ff0f49748ac0260
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e35c08d-9d47-44e2-a839-cbcbd7ba499e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10514
x-amzn-requestid: ba145acc-8f57-4ff1-8861-d016b1981f18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePKywH9eIAMFn7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5f1ab-5031d35e2516bdd77e37a5b2;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 21:37:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YrJunMQc2sabIeNnv27zFhzD1P6ixBtEf505GSeIL3yosiy_vpf7Ew==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 21:57:10 GMT
age: 35431
etag: "502f6afdccb731d96e5ac3e69dbf91712149fcbc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4cecd6a1a228ac55f193a180229d3a33
9e5fd5a101828d5491305deb539dc5836c5b3065
7bbd9e261625c2d2a700a817c2f10b779c8463baacda02f9f34161c08487ca31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8721
x-amzn-requestid: 1c24289e-6169-4088-a2b8-311e3640e4bf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eAA7IGTdIAMFzCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63afe1e0-561d5981260c41511219c673;Sampled=0
x-amzn-remapped-date: Sat, 31 Dec 2022 07:16:48 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: qoxCvnR2nVjlCdQJ6Wyq_Ot0p1SVdhl71LEKAm0-tkPMxWHGdIl42w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 548adcda884eed02304ba5d6a1d7f514.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 07:31:55 GMT
age: 946
etag: "9e5fd5a101828d5491305deb539dc5836c5b3065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 008614d302ad57bc6502ad5e07652378
968bc262d2939ec6f0dce9d852682c0aaf86d3d7
5eab9a2591f0f9761ba3b90a5a191b79b6326cccb1ee6b586b00dfc1517c8db6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4248
x-amzn-requestid: 41ee9ad4-ddfd-42a5-b66c-167c4bda9153
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eCvUGHnlIAMFw8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b0f8e6-4ac2abc739dc4ff640301707;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 03:07:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QVwr9xaKtzkI-Lnp683K6kKaWfnnmPs0o6HG7PBuAc9QbcMqczguNw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 06:16:00 GMT
age: 5501
etag: "968bc262d2939ec6f0dce9d852682c0aaf86d3d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb431a43a-b1a3-46f7-8e91-9f652b2d5add.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb431a43a-b1a3-46f7-8e91-9f652b2d5add.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1baebae9058866bc7c9baf0fa75211a9
beab584d0b8be1795ca594d075599e4631cf0224
7ad66c6e81e4f04613b4fcc7273fc631b31e9e20b3f1c749b63dd1245b0cb3c3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb431a43a-b1a3-46f7-8e91-9f652b2d5add.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6834
x-amzn-requestid: 90b5cd1d-ce5a-4e98-b521-b57c49bbfd23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePKyuG_cIAMFrBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5f1aa-57ca38951d902f4e2bcbbfa5;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 21:37:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PVMOxqMGUHtV8nkSf-cjar4ZvtugWyfUV0u8wsTTB_Tz2G3y2krczA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 21:49:21 GMT
age: 35900
etag: "beab584d0b8be1795ca594d075599e4631cf0224"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e832123ea0c92a446b5894e75efc86ae
bb438ca635b43819701067ef07a3d910ad29a0c7
e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vIFVXgt2RmoplkAVOtUrOkXj3LmhRw-XEPe7fugZ2-mv_iDY07XzUg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 23:39:12 GMT
age: 29309
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64c5d475-3153-467d-adb9-7187fd47e2e2.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64c5d475-3153-467d-adb9-7187fd47e2e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 01344b4dc7ce7b28acfc81aa36c7e88a
8482062315fe3251d47722e1df723555bd18d262
68f5bc4ae2c0ffd384c61442515711a0d3ef300f2898cc610a9b70a1ba78e775
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64c5d475-3153-467d-adb9-7187fd47e2e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5443
x-amzn-requestid: 600f3682-bfaf-4e00-8636-a075d5bda623
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eJVYAEYrIAMFl5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b39c33-792df8cc005d1ad5528a35d7;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 03:08:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UorP_k4N65hwuggLXIZ6qyX4cumhoL5_ahxQQF4bOyp7sKJwow11Uw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 03:46:14 GMT
age: 14487
etag: "8482062315fe3251d47722e1df723555bd18d262"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
p3m3a4h9.rocketcdn.me/wp-content/cache/min/1/e2c7bd236ccb829c51d56bb8a572d285.js
200 OK 0 B URL HTTP/2 p3m3a4h9.rocketcdn.me/wp-content/cache/min/1/e2c7bd236ccb829c51d56bb8a572d285.js
IP
GET /wp-content/cache/min/1/e2c7bd236ccb829c51d56bb8a572d285.js HTTP/1.1
Host: p3m3a4h9.rocketcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
accept-ranges: bytes
etag: "1672904851"
content-encoding: gzip
content-type: application/javascript; charset=utf-8
x-hw: 1672904859.cds013.sk1.hn,1672904859.cds226.sk1.sc,1672904859.cds226.sk1.p
vary: Accept-Encoding
x-powered-by: RocketCDN
link: <https://www.refinansiere.net/wp-content/cache/min/1/e2c7bd236ccb829c51d56bb8a572d285.js>; rel="canonical"
cache-control: public, max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tTIsR0%2Fx1FMbofJMGzb3hp03Zj62r4ac0iZvTy6yof9JUvuiag4sZygmQQM5YwVY%2BXmf4CRufCvYcodTXHKi6hsL4cvHgFe9QSSxGA9qEbNV%2BvPc4pntbu7Tt91H15DDfezp6J5%2BCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a9b6c0aea0b33-AMS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
last-modified: Thu, 05 Jan 2023 07:47:31 GMT
x-sp-metadata: HS256.CKud2p0GEocBCiQyYzFjYTZkMi03YmJjLTQxOWEtYjY3My1jMDNjNTZhMWEyMDkQwKXbgZjs+wIaBgibgdqdBiIMOTEuOTAuNDIuMTU0KNi7AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiYSJDUzZjRkZTZmLWMwNjQtNDk1ZS05NjAyLTJhZGE4Y2ViZThhYSIaCAISFGNkczIyNi5zazEuaHdjZG4ubmV0GAk=.ENEq/9OAbtFkB+3jTO/EbHMGEWNUIU0D7VO+IyPpkKA=
access-control-allow-origin: *
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.2.1/css/free-v4-shims.min.css?token=7f5043309a
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v6.2.1/css/free-v4-shims.min.css?token=7f5043309a
IP
GET /releases/v6.2.1/css/free-v4-shims.min.css?token=7f5043309a HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.refinansiere.net/
Origin: https://www.refinansiere.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:06:08 GMT
etag: W/"0d00741459c51dd7330d97cd19326a7b"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0014cc5ed6f7d7422fe78da5a10aa120.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: M8lkcCKXvrMT4Z4Gn5lzFf_ikO5d7yCF61TY-_3HPSDfd_txCtEEQg==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L7WV1zDx%2F%2Boq5Jay4UwDYZax86Cpu6RhvSyAZPlXK5D%2BkXTIVsl2kOX6Yos%2FQZ8JPQfpG7grvEgm%2BPT7ylnvHE2sXdxwNYgO7PUacP3VNrNG48Rfd1NaY%2BqBLeueIRWnCiXQ4w414Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a9b6cdfab240f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.2.1/css/free-v5-font-face.min.css?token=7f5043309a
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v6.2.1/css/free-v5-font-face.min.css?token=7f5043309a
IP
GET /releases/v6.2.1/css/free-v5-font-face.min.css?token=7f5043309a HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.refinansiere.net/
Origin: https://www.refinansiere.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:06:07 GMT
etag: W/"15e2713dff942747406520edde3fd0bf"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 e72282a38ed8303004dbeb48a5b8fbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C1
x-amz-cf-id: 6kcYlRsU-lNUs2mN7D20ZoSPYlYOgCyrG9zHyL9g9bbEqStk1YLIwQ==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c8zuddvvBvqbcPiN5qX2pCqaOi4%2Feq%2Bl6Amei6J34AS9ICU7P1OAJRoVqXRtWjU7KpwkFS8rfNAhT2FNbTtIovCE%2FaZsJ%2F0Mu3Q2yyBbL8jDtRJgAYJDnbu1JEZHfD4ctgfPvb5o0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 784a9b6cffcb240f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.refinansiere.net/med-betalingsanmerkning/
200 OK 0 B URL HTTP/2 www.refinansiere.net/med-betalingsanmerkning/
IP
GET /med-betalingsanmerkning/ HTTP/1.1
Host: www.refinansiere.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
content-type: text/html; charset=UTF-8
last-modified: Thu, 05 Jan 2023 07:47:36 GMT
cache-control: max-age=0
expires: Thu, 05 Jan 2023 07:47:39 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MoTKKbohl60JMushPFVGRjG%2BPPlV6G2CZ0%2BBqWTVoKdo95vufytKnZzZYEG50nWN6mBA%2BoEUW%2BxOo4FOAEXPSEUReTZkb%2BmzYg67CaaosACTSZ4lEogHOzOhkZ6gXYCZKNOUpUPM0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a9b68f9660afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/page.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/page.js
IP
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
age: 171319
etag: W/"c04-5ee0ab04c6251"
last-modified: Tue, 22 Nov 2022 08:09:18 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 784a9b6abd4d0a3f-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/modules/core.9b4ec89f.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/modules/core.9b4ec89f.js
IP
GET /menu/modules/core.9b4ec89f.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.refinansiere.net
Connection: keep-alive
Referer: https://www.refinansiere.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
content-type: application/javascript; charset=utf-8
cache-control: max-age=315360000, immutable
cf-bgj: minify
access-control-allow-origin: *
age: 3797662
etag: W/"117a5-5ee0ab045ab91"
last-modified: Tue, 22 Nov 2022 08:09:17 GMT
vary: Accept-Encoding
via: e3s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 784a9b6baab89933-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v6.2.1/css/free-v4-font-face.min.css?token=7f5043309a
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v6.2.1/css/free-v4-font-face.min.css?token=7f5043309a
IP
GET /releases/v6.2.1/css/free-v4-font-face.min.css?token=7f5043309a HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.refinansiere.net/
Origin: https://www.refinansiere.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 07:47:39 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:06:07 GMT
etag: W/"075b2106ba08d32bc88fff3724503b1e"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c58391b07051938ceda6615614fbabb0.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: DwzQKelePsn84iUO9_HdKATAhU7dqmj5Q5jhIeKncSTJXTb6ECP_ow==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FfyCi2u0ScQXuunXeu%2B6jUNa6TVxEqxmfiWim6aohOUHoWwjJmyHxkcuDJ86Dno9%2BCojPFNCmLRXKGh9v34kOl381Dy4l6%2FvlhoUgIVi3JZbDiVOKC9sqjzGc%2BaaXCan%2F%2FJAiA0z3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 784a9b6cdfa8240f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.49.32
34.160.144.191
23.36.76.226
93.184.220.29