r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00e304a3fc0c2f01af0e94fcefe0ca40
833969e75e5e13e823c8d97ee59a9821eb157ee3
c2b7f7ae4861f2dd16867de54c7e47d95582de77887f523841d9683a369d20a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2B7F7AE4861F2DD16867DE54C7E47D95582DE77887F523841D9683A369D20A7"
Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5290
Expires: Wed, 22 Mar 2023 10:54:52 GMT
Date: Wed, 22 Mar 2023 09:26:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ec332b81a27117ce9c16b67a5a8e4fac
b6d2afa2c859d000ad830d3d8d73f57bac6ffce2
1dc32c78e4e850303813338fd4e9616a41c8c05d1063748a1e76a92c397a5e8f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F"
Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4646
Expires: Wed, 22 Mar 2023 10:44:08 GMT
Date: Wed, 22 Mar 2023 09:26:42 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 22 Mar 2023 09:15:00 GMT
content-type: application/json
age: 702
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
sewing-yes.blogspot.com/2014/10/blog-post_24.html
200 OK 14 kB URL HTTP/1.1 sewing-yes.blogspot.com/2014/10/blog-post_24.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7395)
Hash bcaf3023e5369f9be0288d921bcedfb8
b19a8b2465fd6f7b2d57f1289d6a9f520eb91bc3
a5a3a718a5e08138d980a3f2bb38f9951b7b17f8313572d1613b2dc4bfe4c1cf
GET /2014/10/blog-post_24.html HTTP/1.1
Host: sewing-yes.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Wed, 22 Mar 2023 09:26:42 GMT
Date: Wed, 22 Mar 2023 09:26:42 GMT
Cache-Control: private, max-age=0
Last-Modified: Thu, 01 Dec 2022 11:01:48 GMT
ETag: W/"cfd6687f34e90700b38639e7609819c153c503a81b13827f56106e0d941530d8"
X-Robots-Tag: all
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 14265
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5285a032a285729d3e4a546310ed052d
d370c14bbc2d168cc3703bcb6b94ea0ece26e69d
a811aac1eb89de0666a7de8d3eda1dc3affa7ce5353219211a1beee1211536b5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A811AAC1EB89DE0666A7DE8D3EDA1DC3AFFA7CE5353219211A1BEEE1211536B5"
Last-Modified: Mon, 20 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16487
Expires: Wed, 22 Mar 2023 14:01:29 GMT
Date: Wed, 22 Mar 2023 09:26:42 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: eMCmzv1JKd0CPwcJAaoEb0KSWJMg7Z0w3xAppVqxIxRzRDvK54WBoxM5LXG2KJNpL1nFmpX3LsY=
x-amz-request-id: GYDDGSY9QBQTKSWQ
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 22 Mar 2023 08:53:34 GMT
age: 1988
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 09:26:42 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
sewing-yes.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 sewing-yes.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: sewing-yes.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/2014/10/blog-post_24.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Wed, 22 Mar 2023 09:26:43 GMT
Expires: Wed, 29 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 22 Mar 2023 06:49:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fabe3fda62c10600656233ff71f1b16
83583a2f2861f67ebe9a5a096142a6645c19907a
68e0de1b62f586024451c984ef2c8969b1530339458105830c30ef64c137aeb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fabe3fda62c10600656233ff71f1b16
83583a2f2861f67ebe9a5a096142a6645c19907a
68e0de1b62f586024451c984ef2c8969b1530339458105830c30ef64c137aeb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fabe3fda62c10600656233ff71f1b16
83583a2f2861f67ebe9a5a096142a6645c19907a
68e0de1b62f586024451c984ef2c8969b1530339458105830c30ef64c137aeb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fabe3fda62c10600656233ff71f1b16
83583a2f2861f67ebe9a5a096142a6645c19907a
68e0de1b62f586024451c984ef2c8969b1530339458105830c30ef64c137aeb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fabe3fda62c10600656233ff71f1b16
83583a2f2861f67ebe9a5a096142a6645c19907a
68e0de1b62f586024451c984ef2c8969b1530339458105830c30ef64c137aeb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
resources.blogblog.com/img/icon18_email.gif
200 OK 164 B URL HTTP/2 resources.blogblog.com/img/icon18_email.gif
IP
File type GIF image data, version 89a, 18 x 13\012- data
Hash 36b9f993db1b953f3b9b08040aaf9af4
18248661b307586dc291fd2dff4bb59cf7579475
1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
GET /img/icon18_email.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 164
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 13:03:23 GMT
expires: Wed, 22 Mar 2023 13:03:23 GMT
cache-control: public, max-age=604800
last-modified: Wed, 15 Mar 2023 00:51:20 GMT
content-type: image/gif
age: 591800
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 15:48:58 GMT
expires: Wed, 22 Mar 2023 15:48:58 GMT
cache-control: public, max-age=604800
last-modified: Wed, 15 Mar 2023 03:50:49 GMT
content-type: image/gif
age: 581865
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3855953344-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/3855953344-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 0b4fa1144018f3ac4c94ef3025feddba
bfb265fb34cf2ddf45913b8d4d21005da524c70e
059211c83ff1b35abf766cb0ad462b1cd9737aef054b04da279b6261d448e869
GET /static/v1/widgets/3855953344-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56913
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Mar 2023 13:47:34 GMT
expires: Tue, 19 Mar 2024 13:47:34 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 19 Mar 2023 23:49:24 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 157149
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 13:08:04 GMT
expires: Thu, 14 Mar 2024 13:08:04 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Mar 2023 21:52:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 591519
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9446303f24a6e8e8d138867549399aa2
410a03d7475ec879b8e346f1706aea491e3f1da5
f7d7017ca9dbdf1822739e9baa6f34868504e6ce0d827aeeef82517c5db72960
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7044c4535f858d3439b8133fefe17513
cd397c98917bb8ee136494830573e14b0c7b8cbf
556b7fc7506669f00295208ea55015780ff1a153adb8cce9cfdec60eb4e4bfc5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img.youtube.com/vi/Zj1lovnVGKg/default.jpg
200 OK 4.1 kB URL HTTP/2 img.youtube.com/vi/Zj1lovnVGKg/default.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 7b11a0aa62f0e0ed39a760665a09a9d3
0405382bc4025bbf555c9ef0109fbbfb603f628a
6ea7c1c26d31fd05684e4a88dc3fc835082344ad929609a66704a372e2848a2b
GET /vi/Zj1lovnVGKg/default.jpg HTTP/1.1
Host: img.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 4053
date: Wed, 22 Mar 2023 09:26:43 GMT
expires: Wed, 22 Mar 2023 11:26:43 GMT
cache-control: public, max-age=7200
etag: "1425817261"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fabe3fda62c10600656233ff71f1b16
83583a2f2861f67ebe9a5a096142a6645c19907a
68e0de1b62f586024451c984ef2c8969b1530339458105830c30ef64c137aeb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1429)
Hash 2e9e150d66328b6b6a88e285fc282762
22b038643bd45f842349cc7a4a7075cc0f074725
30d9bc41eb379b7b441031e0df6d0742df42ca92be34697f729b8eca83dc9d54
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21022
date: Wed, 22 Mar 2023 09:26:43 GMT
expires: Wed, 22 Mar 2023 09:26:43 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "5ebb85d0c8d0a403"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fabe3fda62c10600656233ff71f1b16
83583a2f2861f67ebe9a5a096142a6645c19907a
68e0de1b62f586024451c984ef2c8969b1530339458105830c30ef64c137aeb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fa17d51ce045a45869cbc5d326dc868a
2eaf16a978d322b366d363a1bfa7bdbd14fcf53d
cc197825dccc946c20e0eade993a1fac504dd907418a1c63e4d2bfe34f073bdb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fa17d51ce045a45869cbc5d326dc868a
2eaf16a978d322b366d363a1bfa7bdbd14fcf53d
cc197825dccc946c20e0eade993a1fac504dd907418a1c63e4d2bfe34f073bdb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
go.padstm.com/?id=545989
302 Moved Temporarily 138 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /?id=545989 HTTP/1.1
Host: go.padstm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 22 Mar 2023 09:26:43 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: http://go.padsdel.com/?id=545989
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9446303f24a6e8e8d138867549399aa2
410a03d7475ec879b8e346f1706aea491e3f1da5
f7d7017ca9dbdf1822739e9baa6f34868504e6ce0d827aeeef82517c5db72960
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9446303f24a6e8e8d138867549399aa2
410a03d7475ec879b8e346f1706aea491e3f1da5
f7d7017ca9dbdf1822739e9baa6f34868504e6ce0d827aeeef82517c5db72960
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-G9aysr4gG7c/WRQdWnx-EGI/AAAAAAAAINA/zm77tK4IROgnGTf-VIpkLMvNNreVa_hggCLcB/s72-c/1.jpg
200 OK 3.0 kB URL HTTP/2 1.bp.blogspot.com/-G9aysr4gG7c/WRQdWnx-EGI/AAAAAAAAINA/zm77tK4IROgnGTf-VIpkLMvNNreVa_hggCLcB/s72-c/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash c37c4cec4413c4b51b46e8cf315d8085
1e19b1c59b62aa460467eb1f3cdb5ff374abe2f8
a9d5f15bbedf47a34a2d21462af25000c3fb1d0bf30ef36fc494aee88dea8f3c
GET /-G9aysr4gG7c/WRQdWnx-EGI/AAAAAAAAINA/zm77tK4IROgnGTf-VIpkLMvNNreVa_hggCLcB/s72-c/1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="1.jpg"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2965
x-xss-protection: 0
date: Wed, 22 Mar 2023 06:25:51 GMT
expires: Mon, 13 Mar 2023 21:01:44 GMT
cache-control: public, max-age=86400, no-transform
age: 10852
etag: "v2193"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fa17d51ce045a45869cbc5d326dc868a
2eaf16a978d322b366d363a1bfa7bdbd14fcf53d
cc197825dccc946c20e0eade993a1fac504dd907418a1c63e4d2bfe34f073bdb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
go.padsdel.com/?id=545989
200 OK 8 B URL HTTP/1.1 go.padsdel.com/?id=545989
IP
File type ASCII text, with no line terminators
Hash 3bbbac058fc4ed9e8078f0318d31d9fa
fb3f78865eac1bdd3406f00b9cae5c6cdf6211b8
3938c63e8b782001c4b451b439634c1380b1e262d919e11ba7374862835d83e4
GET /?id=545989 HTTP/1.1
Host: go.padsdel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sewing-yes.blogspot.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 22 Mar 2023 09:26:43 GMT
Content-Type: application/octet-stream
Content-Length: 8
Connection: keep-alive
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 51 kB URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (3599)
Hash 2b4cb3c2b1145b6f1f69fce84d3a028d
e4acab3a365ef4fd4c3fda331e85fa311a8c05c5
774b55f93f948ecc3fd9814e306772f86c9bc710b8483760efb4c9e9bbfab0b9
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Wed, 22 Mar 2023 09:26:43 GMT
Expires: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 10185111772743976161
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 51372
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3e968c0f4319273e79821cbabf3bdbdc
99f1127052594878d49370fdcc61b1e4fbb69e61
82ea5f81bec224fa88a6b83c50481d819586b5de2fbb435d522d24ce1250b6cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-_vxwydu6A2s/VEn8O-yExXI/AAAAAAAAEcM/beKee01Dhf4/s1600/4224__h%3Dx_vykrojka-platya-2.jpg
200 OK 24 kB URL HTTP/1.1 4.bp.blogspot.com/-_vxwydu6A2s/VEn8O-yExXI/AAAAAAAAEcM/beKee01Dhf4/s1600/4224__h%3Dx_vykrojka-platya-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 500x271, components 3\012- data
Hash e477655b73be43fbf776c3fa18a18d3a
89113f7ae322d79fb37e9d8028f624c2cadfd11d
b77dc539ebc52a41f60a3b9c64c2bb81f5acc7f8a3dabbf02577e493253c4ef7
GET /-_vxwydu6A2s/VEn8O-yExXI/AAAAAAAAEcM/beKee01Dhf4/s1600/4224__h%3Dx_vykrojka-platya-2.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v2195"
Expires: Thu, 23 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="4224__h=x_vykrojka-platya-2.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 22 Mar 2023 09:26:43 GMT
Server: fife
Content-Length: 24515
X-XSS-Protection: 0
1.bp.blogspot.com/-BO7ORSW_Kd8/VEn8O46jP5I/AAAAAAAAEcQ/vP260q_ZA4k/s1600/53720495ba001.jpg
200 OK 33 kB URL HTTP/1.1 1.bp.blogspot.com/-BO7ORSW_Kd8/VEn8O46jP5I/AAAAAAAAEcQ/vP260q_ZA4k/s1600/53720495ba001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, software=Google], baseline, precision 8, 450x600, components 3\012- data
Hash 31fe561a32729fdfcd1dce55a68ee5f0
6cbb48df0225e0326416cf840147ec78951fd956
743e64fd7b10b10e8eb608dd0f359e322f460fb7135f445c45857cbd4fc68ad5
GET /-BO7ORSW_Kd8/VEn8O46jP5I/AAAAAAAAEcQ/vP260q_ZA4k/s1600/53720495ba001.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v2195"
Expires: Thu, 23 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="53720495ba001.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 22 Mar 2023 09:26:43 GMT
Server: fife
Content-Length: 33354
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3e968c0f4319273e79821cbabf3bdbdc
99f1127052594878d49370fdcc61b1e4fbb69e61
82ea5f81bec224fa88a6b83c50481d819586b5de2fbb435d522d24ce1250b6cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2
200 OK 30 kB URL HTTP/1.1 fonts.gstatic.com/s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 29868, version 1.0\012- data
Hash 8b26cc331e323dda95ea6d0dcf4d7542
1f6b0e5440044f6aa75b1f73d2f9c63a2f75bba9
2d5059c07b957f989ee2ed276e1f6d20428f4d3ed2523e7c305bd3e3ebc092ec
GET /s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sewing-yes.blogspot.com
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 29868
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 22 Mar 2023 06:21:06 GMT
Expires: Thu, 21 Mar 2024 06:21:06 GMT
Cache-Control: public, max-age=31536000
Age: 11137
Last-Modified: Tue, 19 Apr 2022 19:09:14 GMT
Content-Type: font/woff2
4.bp.blogspot.com/-iUQiW8_Rdxc/VEn8O2r3MpI/AAAAAAAAEcY/HEzYys27AMc/s1600/4223__h%3Dx_vykrojka-platya-1.jpg
200 OK 35 kB URL HTTP/1.1 4.bp.blogspot.com/-iUQiW8_Rdxc/VEn8O2r3MpI/AAAAAAAAEcY/HEzYys27AMc/s1600/4223__h%3Dx_vykrojka-platya-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 500x356, components 3\012- data
Hash 659a89f4caa889b6a6960004402bf638
f338e78392db7c36ed0531414ddcdb0cc1daa1c3
67362393e888e8d70fde82ed442b713b303542131a9e287291e775ed09122ff4
GET /-iUQiW8_Rdxc/VEn8O2r3MpI/AAAAAAAAEcY/HEzYys27AMc/s1600/4223__h%3Dx_vykrojka-platya-1.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v2195"
Expires: Thu, 23 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="4223__h=x_vykrojka-platya-1.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 22 Mar 2023 09:26:43 GMT
Server: fife
Content-Length: 34854
X-XSS-Protection: 0
www.blogblog.com/1kt/transparent/black50.png
200 OK 96 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/black50.png
IP
File type PNG image data, 20 x 20, 1-bit colormap, non-interlaced\012- data
Hash 857cf81cfd3449fd408ac0604cd3a326
69209e67fdd7533fb3c76a7f3e2430a63909e4e9
380be71e72fb28899a6cf71bad4434677a6df3a2fcce56d23c28bc4794549047
GET /1kt/transparent/black50.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 96
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 15 Mar 2023 11:45:21 GMT
Expires: Wed, 22 Mar 2023 11:45:21 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 14 Mar 2023 15:52:29 GMT
Content-Type: image/png
Age: 596482
www.blogblog.com/1kt/transparent/white80.png
200 OK 96 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/white80.png
IP
File type PNG image data, 20 x 20, 1-bit colormap, non-interlaced\012- data
Hash 94a1820903fb1f98de19df188a6ad531
599ad7d04fd5b1fa13f334e95240a5a9f4a66583
6e232a3693a281342acc16b293dddeafcf91579f1b52df2cf22303b17c2a0e57
GET /1kt/transparent/white80.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 96
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 16 Mar 2023 02:23:53 GMT
Expires: Thu, 23 Mar 2023 02:23:53 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 15 Mar 2023 07:52:01 GMT
Content-Type: image/png
Age: 543770
4.bp.blogspot.com/-AE_kGrhJixQ/WFRhqA3FJoI/AAAAAAAAIJA/CV59DiaLzfsZcMyDsfvUpd855W3l5ToJwCLcB/s72-c/085c060503b0t.jpg
200 OK 3.5 kB URL HTTP/2 4.bp.blogspot.com/-AE_kGrhJixQ/WFRhqA3FJoI/AAAAAAAAIJA/CV59DiaLzfsZcMyDsfvUpd855W3l5ToJwCLcB/s72-c/085c060503b0t.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash c408db686e38caeefbe795d2e2b4d336
fd86901e9ab0e7cc9dc62e08d0e136bccc257d28
86a67f34255381f69993f9a95587f7595781bd52c427461c18beee13971b6699
GET /-AE_kGrhJixQ/WFRhqA3FJoI/AAAAAAAAIJA/CV59DiaLzfsZcMyDsfvUpd855W3l5ToJwCLcB/s72-c/085c060503b0t.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v2092"
expires: Thu, 23 Mar 2023 09:26:43 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="085c060503b0t.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 09:26:43 GMT
server: fife
content-length: 3501
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 22 Mar 2023 09:17:23 GMT
age: 560
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
go.padstm.com/?id=545989
302 Moved Temporarily 138 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /?id=545989 HTTP/1.1
Host: go.padstm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 22 Mar 2023 09:26:43 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: http://go.padsdel.com/?id=545989
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *
mixmarket.biz/t.php?uid=1294962146&r=&t=1679477208342
500 Internal Server Error 7.3 kB URL HTTP/1.1 mixmarket.biz/t.php?uid=1294962146&r=&t=1679477208342
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c72ae097bc9d2737e20046b0610b9fab
3087154a1d4752afc6cd1043ffed6f9203ad324e
a8a284f377cb9f21c53e5553234ecb693dc4c2c38f3306b6cde4aead5e05e913
GET /t.php?uid=1294962146&r=&t=1679477208342 HTTP/1.1
Host: mixmarket.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 500 Internal Server Error
Date: Wed, 22 Mar 2023 09:26:43 GMT
Server: Apache
Content-Length: 7309
Connection: close
Content-Type: text/html
4.bp.blogspot.com/-WF6RkOZYjco/U3NP3E5aINI/AAAAAAAAByE/yePybdrnwh0/s0/0_b1338_1fc53839_L.jpg
200 OK 130 kB URL HTTP/1.1 4.bp.blogspot.com/-WF6RkOZYjco/U3NP3E5aINI/AAAAAAAAByE/yePybdrnwh0/s0/0_b1338_1fc53839_L.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 500x500, components 3\012- data
Size 130 kB (129924 bytes)
Hash c569886b3e26cbd8667ce9a5951ea664
f167b79c8a4cdc5a478aa052a9bd9ee7de4ac9b8
aec4864d27dffc9014cf61efe4654aa70716c73ad44159a011a88d16ec8425d4
GET /-WF6RkOZYjco/U3NP3E5aINI/AAAAAAAAByE/yePybdrnwh0/s0/0_b1338_1fc53839_L.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v2195"
Expires: Thu, 23 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="0_b1338_1fc53839_L.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 22 Mar 2023 09:26:43 GMT
Server: fife
Content-Length: 129924
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86da0dd278dab61512989673262b7b7
0a9e07a3e3001b0fd895cd6be56f4b6929048e7b
ac48a2d4cff37e533bcead879c78d3a6f937e6c07fe2aa71a7d0aa4cc5181752
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
go.padsdel.com/?id=545989
200 OK 8 B URL HTTP/1.1 go.padsdel.com/?id=545989
IP
File type ASCII text, with no line terminators
Hash 3bbbac058fc4ed9e8078f0318d31d9fa
fb3f78865eac1bdd3406f00b9cae5c6cdf6211b8
3938c63e8b782001c4b451b439634c1380b1e262d919e11ba7374862835d83e4
GET /?id=545989 HTTP/1.1
Host: go.padsdel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sewing-yes.blogspot.com/
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 22 Mar 2023 09:26:43 GMT
Content-Type: application/octet-stream
Content-Length: 8
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86da0dd278dab61512989673262b7b7
0a9e07a3e3001b0fd895cd6be56f4b6929048e7b
ac48a2d4cff37e533bcead879c78d3a6f937e6c07fe2aa71a7d0aa4cc5181752
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3462d41d9283fedf24f278089d5d1570
b8bcea77656f775cdc34620322cc616216ed2b95
55e47b413ba648a98eb6e92ab73aee602912cd13e7da23ef3cea1490c1b9de50
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "55E47B413BA648A98EB6E92AB73AEE602912CD13E7DA23EF3CEA1490C1B9DE50"
Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3902
Expires: Wed, 22 Mar 2023 10:31:45 GMT
Date: Wed, 22 Mar 2023 09:26:43 GMT
Connection: keep-alive
googleads.g.doubleclick.net/pagead/html/r20230320/r20190131/zrt_lookup.html
200 OK 4.5 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20230320/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3205)
Hash bad17ab9662318e8927e5009c83c2ad1
53ded630f95abe04b7b77d43076bf71b9ea71c02
68da39270ebfa6d17f4b765cbe004797a736611585ff0c53213d91f78f13c260
GET /pagead/html/r20230320/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4549
x-xss-protection: 0
date: Tue, 21 Mar 2023 23:36:04 GMT
expires: Tue, 04 Apr 2023 23:36:04 GMT
cache-control: public, max-age=1209600
age: 35439
etag: 2378337311435320485
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ff476bde43022243f6c3f9dddd9360d3
7862bf4ba04f1218f10f85bbddbe2a11aeeeece6
6e8b017b6722c1f95b920e14876ef42e2a38556bbad3b9f4b1b1879634ced74a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f86da0dd278dab61512989673262b7b7
0a9e07a3e3001b0fd895cd6be56f4b6929048e7b
ac48a2d4cff37e533bcead879c78d3a6f937e6c07fe2aa71a7d0aa4cc5181752
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-41575119-3&cid=1734859289.1679477209&jid=2052622604&gjid=359651567&_gid=655340065.1679477209&_u=IEBAAEAAAAAAACAAI~&z=609771167
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-41575119-3&cid=1734859289.1679477209&jid=2052622604&gjid=359651567&_gid=655340065.1679477209&_u=IEBAAEAAAAAAACAAI~&z=609771167
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-41575119-3&cid=1734859289.1679477209&jid=2052622604&gjid=359651567&_gid=655340065.1679477209&_u=IEBAAEAAAAAAACAAI~&z=609771167 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://sewing-yes.blogspot.com
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://sewing-yes.blogspot.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 22 Mar 2023 09:26:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202303150101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-4253551660914569&plah=sewing-yes.blogspot.com&bust=31073176
200 OK 120 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202303150101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-4253551660914569&plah=sewing-yes.blogspot.com&bust=31073176
IP
File type ASCII text, with very long lines (4317)
Size 120 kB (119461 bytes)
Hash 9d9e73795922f78346d36e4d87a48b1a
920f52baff9c8dd25709154b8040b8d76299c6ee
03cbdf8705ddb4705407ba9b958f00ba96f4b0e150804dd0abd05269fc2c7c21
GET /pagead/managed/js/adsense/m202303150101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-4253551660914569&plah=sewing-yes.blogspot.com&bust=31073176 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 22 Mar 2023 09:26:43 GMT
expires: Wed, 22 Mar 2023 09:26:43 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 1825233898745756726
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 119461
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ff476bde43022243f6c3f9dddd9360d3
7862bf4ba04f1218f10f85bbddbe2a11aeeeece6
6e8b017b6722c1f95b920e14876ef42e2a38556bbad3b9f4b1b1879634ced74a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d8076782b7586aea6d69480d5434652e
6bd6f10f27f62711c6783bc8b5ea72cb74622e2f
ab660e165b0044aa0ca16ab2a42ac38a1922a24a6ae6e879d4e3e1e9c19822c2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.people-group.net/183456/4/1/1/
200 OK 6.6 kB URL HTTP/1.1 ads.people-group.net/183456/4/1/1/
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (21417), with no line terminators
Hash 52e950b2cd29217225b828f42f9d83aa
9a41fdfc5c9e6c6ed81f50d6b952232e9c7d094a
ff8ff5af03490b39420cb63e589c44b3637fa6fa5e59506b41907613673b1351
GET /183456/4/1/1/ HTTP/1.1
Host: ads.people-group.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 22 Mar 2023 09:26:44 GMT
Content-Type: application/x-javascript;charset=UTF-8;
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-XSS-Protection: 0;
Set-Cookie: _pgstg=1679477204.2cc40e785a; expires=Sat Mar 16 09:26:44 2024 GMT; path=/; domain=ads.people-group.net;
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fJC+kvSF9zDK35ZQk68nbQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: IH0nq8PMhyRQS5GlAxV/SFCD0n4=
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 667 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash cdb4be6c897d5160a051d25052ceda61
05bf135ba2f92c1a86100b124ff5764d8b4c4271
dcebc16a6a39749db62a1393abdf1b393296be2dab6ff4d6c6400a172116d790
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 22 Mar 2023 09:26:44 GMT
date: Wed, 22 Mar 2023 09:26:44 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 667
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8a237b3ec23da41b2cdefc39b643691f
322b5b2a4fb99140ac53a94058d34a4806133519
4d88ec2ff0cf38948e56dabbd03130bb35850d89921fe80e242e762fedde2468
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=sewing-yes.blogspot.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=sewing-yes.blogspot.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=sewing-yes.blogspot.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Wed, 22 Mar 2023 09:26:44 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ads.people-group.net/?hwn=MTgzNDU2JzQnMSc&xm=1&swf=0&hrf=http%3A%2F%2Fsewing-yes.blogspot.com%2F2014%2F10%2Fblog-post_24.html&stg=1679477204.2cc40e785a&s=MTI4MCUzQTAlM0E5Mzk%3D&h=12%2F01%2F2022%2011%3A01%3A48%27%5E%271%27%5E%27&k=%D0%A8%D0%B8%D1%82%D1%8C%D0%B5%20%D0%B2%20%D0%BF%D0%BE%D0%BC%D0%BE%D1%89%D1%8C%20%D0%B2%D1%8F%D0%B7%D0%B0%D0%BB%D1%8C%D1%89%D0%B8%D1%86%D0%B5%3A%20%D0%9C%D0%BE%D0%B4%D0%B5%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BF%D0%BB%D0%B0%D1%82%D1%8C%D1%8F%20%D1%81%20&0.37622402989123316
200 OK 5.6 kB URL HTTP/1.1 ads.people-group.net/?hwn=MTgzNDU2JzQnMSc&xm=1&swf=0&hrf=http%3A%2F%2Fsewing-yes.blogspot.com%2F2014%2F10%2Fblog-post_24.html&stg=1679477204.2cc40e785a&s=MTI4MCUzQTAlM0E5Mzk%3D&h=12%2F01%2F2022%2011%3A01%3A48%27%5E%271%27%5E%27&k=%D0%A8%D0%B8%D1%82%D1%8C%D0%B5%20%D0%B2%20%D0%BF%D0%BE%D0%BC%D0%BE%D1%89%D1%8C%20%D0%B2%D1%8F%D0%B7%D0%B0%D0%BB%D1%8C%D1%89%D0%B8%D1%86%D0%B5%3A%20%D0%9C%D0%BE%D0%B4%D0%B5%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BF%D0%BB%D0%B0%D1%82%D1%8C%D1%8F%20%D1%81%20&0.37622402989123316
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (14896), with no line terminators
Hash 6176760bbe8eb0e6b7ce1ba08df840e0
9a11a33eaddc67e8064af2843fda55a58cb14a44
3170e66a69c7cbb2aa0467ea6dadc2daae053da8bbc239ef32bba0fb62ba99ea
GET /?hwn=MTgzNDU2JzQnMSc&xm=1&swf=0&hrf=http%3A%2F%2Fsewing-yes.blogspot.com%2F2014%2F10%2Fblog-post_24.html&stg=1679477204.2cc40e785a&s=MTI4MCUzQTAlM0E5Mzk%3D&h=12%2F01%2F2022%2011%3A01%3A48%27%5E%271%27%5E%27&k=%D0%A8%D0%B8%D1%82%D1%8C%D0%B5%20%D0%B2%20%D0%BF%D0%BE%D0%BC%D0%BE%D1%89%D1%8C%20%D0%B2%D1%8F%D0%B7%D0%B0%D0%BB%D1%8C%D1%89%D0%B8%D1%86%D0%B5%3A%20%D0%9C%D0%BE%D0%B4%D0%B5%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BF%D0%BB%D0%B0%D1%82%D1%8C%D1%8F%20%D1%81%20&0.37622402989123316 HTTP/1.1
Host: ads.people-group.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 22 Mar 2023 09:26:44 GMT
Content-Type: text/html;charset=UTF-8;
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-XSS-Protection: 0;
Set-Cookie: _pgutm1=4d9|1|1; path=/; domain=ads.people-group.net;
_pgstg=1679477204.2cc40e785a; expires=Sat Mar 16 09:26:44 2024 GMT; path=/; domain=ads.people-group.net;
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 53c77f4eac44f53913d68abe7c9896d4
27b4242556156f2eaa06ff21ecb364865a50b8d9
15db303474e740477045393c0c00b8d64807d711d65e672e7263427263df6045
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+669; expires=Fri, 21-Mar-2025 09:26:44 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Wed, 22 Mar 2023 09:26:44 GMT
cache-control: private
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=sewing-yes.blogspot.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=sewing-yes.blogspot.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=sewing-yes.blogspot.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Wed, 22 Mar 2023 09:26:44 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=sewing-yes.blogspot.com&callback=_gfp_s_&client=ca-pub-4253551660914569
200 OK 251 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=sewing-yes.blogspot.com&callback=_gfp_s_&client=ca-pub-4253551660914569
IP
File type ASCII text, with very long lines (391), with no line terminators
Hash 128dd7d74301fef18da809f9f12fa55b
d12332c49d64cf938e41ff049f9d8a2ca2c3e6a3
4a55c4becd2f1a1ec84bb07c100ea25ebb685ffdebb0465c4337ba69714f77eb
GET /gampad/cookie.js?domain=sewing-yes.blogspot.com&callback=_gfp_s_&client=ca-pub-4253551660914569 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Wed, 22 Mar 2023 09:26:44 GMT
server: cafe
cache-control: private
content-length: 251
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0086fc6b6b52670b2d7ca51fc65d8d44
1d906db50d0373e0e3e1e85031de970218264f4d
24a9078b3b1b7b060c8e68777d0baaa3651c18cebe9107a2598f07981086f830
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.people-group.net/bann/fonts2.css
200 OK 93 kB URL HTTP/1.1 ads.people-group.net/bann/fonts2.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (33850), with CRLF line terminators
Hash 8fb32ddcad6d21e053e826836814a373
53d4198a8e2e68a2541cd877c179c453651ec1b5
3999b2214fe8faa2b3e3f3b087f4962564e7a002b485cca42921d56a18cb52af
GET /bann/fonts2.css HTTP/1.1
Host: ads.people-group.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ads.people-group.net/?hwn=MTgzNDU2JzQnMSc&xm=1&swf=0&hrf=http%3A%2F%2Fsewing-yes.blogspot.com%2F2014%2F10%2Fblog-post_24.html&stg=1679477204.2cc40e785a&s=MTI4MCUzQTAlM0E5Mzk%3D&h=12%2F01%2F2022%2011%3A01%3A48%27%5E%271%27%5E%27&k=%D0%A8%D0%B8%D1%82%D1%8C%D0%B5%20%D0%B2%20%D0%BF%D0%BE%D0%BC%D0%BE%D1%89%D1%8C%20%D0%B2%D1%8F%D0%B7%D0%B0%D0%BB%D1%8C%D1%89%D0%B8%D1%86%D0%B5%3A%20%D0%9C%D0%BE%D0%B4%D0%B5%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BF%D0%BB%D0%B0%D1%82%D1%8C%D1%8F%20%D1%81%20&0.37622402989123316
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 22 Mar 2023 09:26:44 GMT
Content-Type: text/css
Last-Modified: Fri, 08 Aug 2014 18:44:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"53e51a9b-1e2d2"
Expires: Wed, 22 Mar 2023 10:26:44 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8a237b3ec23da41b2cdefc39b643691f
322b5b2a4fb99140ac53a94058d34a4806133519
4d88ec2ff0cf38948e56dabbd03130bb35850d89921fe80e242e762fedde2468
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.people-group.net/bann/jquery.min.js
200 OK 33 kB URL HTTP/1.1 ads.people-group.net/bann/jquery.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (32086)
Hash f3f99798737334e9d6a59819c7d7590a
4257d1ffd07601b36d1e68c4e9e803196e7db9df
560f5a20ad5d7b5add7aa23e53a0371837a82d6765fc12df5cdfa03bc076e964
GET /bann/jquery.min.js HTTP/1.1
Host: ads.people-group.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ads.people-group.net/?hwn=MTgzNDU2JzQnMSc&xm=1&swf=0&hrf=http%3A%2F%2Fsewing-yes.blogspot.com%2F2014%2F10%2Fblog-post_24.html&stg=1679477204.2cc40e785a&s=MTI4MCUzQTAlM0E5Mzk%3D&h=12%2F01%2F2022%2011%3A01%3A48%27%5E%271%27%5E%27&k=%D0%A8%D0%B8%D1%82%D1%8C%D0%B5%20%D0%B2%20%D0%BF%D0%BE%D0%BC%D0%BE%D1%89%D1%8C%20%D0%B2%D1%8F%D0%B7%D0%B0%D0%BB%D1%8C%D1%89%D0%B8%D1%86%D0%B5%3A%20%D0%9C%D0%BE%D0%B4%D0%B5%D0%BB%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5%20%D0%BF%D0%BB%D0%B0%D1%82%D1%8C%D1%8F%20%D1%81%20&0.37622402989123316
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 22 Mar 2023 09:26:44 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 08 Oct 2014 12:03:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"54352814-1762a"
Expires: Wed, 22 Mar 2023 10:26:44 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 53c77f4eac44f53913d68abe7c9896d4
27b4242556156f2eaa06ff21ecb364865a50b8d9
15db303474e740477045393c0c00b8d64807d711d65e672e7263427263df6045
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js
200 OK 165 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js
IP
File type ASCII text, with very long lines (576)
Size 165 kB (164678 bytes)
Hash f22f07ee02fbeed3958345c90b52b818
2aa44ea19d580589c06c2170103b4d0505e18cdb
dc1eadf37f70bef92766d0c316d1da7af283b84e5c309a4732d8ed35d7bbfb84
GET /recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164678
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 08:21:26 GMT
expires: Thu, 21 Mar 2024 08:21:26 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Mar 2023 02:02:14 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 3918
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c33c89e76415c5940d5d1971f1e2198e
178db9b151d4dee35b27710ceb1f3cc7827f7753
0e5ca2a08544e0947afca36bd46d3b60bc2b9489088e26832ec8612f1abaa667
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c33c89e76415c5940d5d1971f1e2198e
178db9b151d4dee35b27710ceb1f3cc7827f7753
0e5ca2a08544e0947afca36bd46d3b60bc2b9489088e26832ec8612f1abaa667
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20230320/r20110914/client/qs_click_protection_fy2021.js
200 OK 8.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20230320/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (2465)
Hash 9da78d3accd905d5cc426fad37ef9ce9
c1c5ebc107844e165679f2b069763d10cf8d226d
79578369b938e27d7a0e3b6d02e048ef340d848e12e7b2465acb1e52dc24eeaa
GET /pagead/js/r20230320/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 8627
x-xss-protection: 0
date: Tue, 21 Mar 2023 18:36:57 GMT
expires: Tue, 04 Apr 2023 18:36:57 GMT
cache-control: public, max-age=1209600
age: 53387
etag: 8620137988422272387
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20230320/r20110914/client/window_focus_fy2021.js
200 OK 1.2 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20230320/r20110914/client/window_focus_fy2021.js
IP
File type ASCII text, with very long lines (1054)
Hash 169edf919beed1ee17c8a752ef12132e
b7fbae15ed7789984ee59618845b914aae37bf3e
2bcf9aebfd80a2558d54f39de59542c3df52610616fb2e4380d9f3d976cc13fc
GET /pagead/js/r20230320/r20110914/client/window_focus_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1236
x-xss-protection: 0
date: Tue, 21 Mar 2023 18:36:57 GMT
expires: Tue, 04 Apr 2023 18:36:57 GMT
cache-control: public, max-age=1209600
age: 53387
etag: 15004572836499977866
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 3183cf5ac9c388c82a7ac16bda1af015
c327d1b8f0aa756004401c6d432ae04adf274870
414cc658da0c8701b50ba591257389b2f3998680c9e1c0771486f58b8950913a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6465
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Last-Modified: Wed, 22 Mar 2023 07:38:59 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 3183cf5ac9c388c82a7ac16bda1af015
c327d1b8f0aa756004401c6d432ae04adf274870
414cc658da0c8701b50ba591257389b2f3998680c9e1c0771486f58b8950913a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6374
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Last-Modified: Wed, 22 Mar 2023 07:40:30 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 313
sewing-yes.blogspot.com/feeds/posts/summary?alt=json-in-script&callback=showpageCount&max-results=99999
200 OK 15 kB URL HTTP/1.1 sewing-yes.blogspot.com/feeds/posts/summary?alt=json-in-script&callback=showpageCount&max-results=99999
IP
File type Unicode text, UTF-8 text, with very long lines (60198)
Hash 1767d85c5b0e23d2b18d2e2a2d9a7558
fc7d8eadbf3dcea25ad3525129ab958024b472a1
b322f2f3de3de3e095255384eb3eb6caabdd1aad0788c4af931d49da8a488d0c
GET /feeds/posts/summary?alt=json-in-script&callback=showpageCount&max-results=99999 HTTP/1.1
Host: sewing-yes.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/2014/10/blog-post_24.html
Cookie: _ga=GA1.3.1734859289.1679477209; _gid=GA1.3.655340065.1679477209; _gat_blogger=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"b8d7c8bdb2720e7519b758af20c5502f9ee7c679d3b444a3047db227955b95fa"
Date: Wed, 22 Mar 2023 09:26:44 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Wed, 22 Mar 2023 09:26:45 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Thu, 01 Dec 2022 11:01:48 GMT
Content-Encoding: gzip
Content-Length: 15254
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash ba105150fe06f5fbb5fabfa187810f8d
5a2b5cbe11c89e6209ea8b22cb04365bd5a7b4e3
6e9a1477b71292266babd80ae34dbe8bd8db5d7ca97a93467be12440dc28fea8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1830
Cache-Control: max-age=137806
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Etag: "641a39fc-1d7"
Expires: Thu, 23 Mar 2023 23:43:30 GMT
Last-Modified: Tue, 21 Mar 2023 23:13:00 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash ba105150fe06f5fbb5fabfa187810f8d
5a2b5cbe11c89e6209ea8b22cb04365bd5a7b4e3
6e9a1477b71292266babd80ae34dbe8bd8db5d7ca97a93467be12440dc28fea8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1830
Cache-Control: max-age=137806
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Etag: "641a39fc-1d7"
Expires: Thu, 23 Mar 2023 23:43:30 GMT
Last-Modified: Tue, 21 Mar 2023 23:13:00 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 471
rtb.nl3.eu.criteo.com/google/auction/notify?profile=14&payload=kM71FLOzWYQC2ASdg2ICAgAAAF_CdE5aBRz0ENPJGmTtj3mThyX4mEpRAAASAAAKDkFRVUJBUVlCQVFFQkFR&wp=ZBrJ1AADlXECHkntAAcnbjgjoJYTWOSmecy8oQ
200 OK 0 B URL HTTP/2 rtb.nl3.eu.criteo.com/google/auction/notify?profile=14&payload=kM71FLOzWYQC2ASdg2ICAgAAAF_CdE5aBRz0ENPJGmTtj3mThyX4mEpRAAASAAAKDkFRVUJBUVlCQVFFQkFR&wp=ZBrJ1AADlXECHkntAAcnbjgjoJYTWOSmecy8oQ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google/auction/notify?profile=14&payload=kM71FLOzWYQC2ASdg2ICAgAAAF_CdE5aBRz0ENPJGmTtj3mThyX4mEpRAAASAAAKDkFRVUJBUVlCQVFFQkFR&wp=ZBrJ1AADlXECHkntAAcnbjgjoJYTWOSmecy8oQ HTTP/1.1
Host: rtb.nl3.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server-processing-duration-in-ticks: 182842
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Kestrel
content-length: 0
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 7fd464cfc824c67a1d8f913dff9f2abc
61ff1011b551915a8c331105dfb075a555233c04
2344e926ed656ac0dcdf2cce94fa07b85007a11b123850ec9c43fc24ee438f9b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6364
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:44 GMT
Last-Modified: Wed, 22 Mar 2023 07:40:41 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 313
ads.eu.criteo.com/delivery/r/afr.php?z=ZBrJ1AADmBgCHkjzAAp1isrBYQd-bM-b920MGg&u=%7C5vrgA7tw0TZOlK6XAxgQHS68AnlZ6bKZ%2FaO9tXOe2E8%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqyDsvBp4X-0QD3WoDqftjeOi_RL70L9weoh4T5QOi36Ae69TcSqA4HGyM447npkfAZxcGtHJey3u7fw0qSEyOBKaWIDAqwnzhxYrLKGixXNJMMqTxgABBhQWvmzl93UC2YMut7BBMBrjUiHD1u1oIGfVuDYhmJDQ_VkpEtUljNPMtzarshBN9q9mzI8pO2gMIEaXRbv7J9iWvuSqiR5womf2igww8i1eX05WAPnmFHKbpdeYAZcqm5QXAcSO07-XMOD2-X1W9rZ0-9AScIltVNuMmsf07dtYtW31zavB9AIu3S-C_f6hVzx4sV9BqB7Rh25Fwd6jsc-BDAfVae6EOzKn33kPVW1jmeVG-8FxVItFXVumzhbl_-un8smGgc-mSb9jp1JcaRbtslcoZhRPdBaKa50ONu-wFBl9GZb6RT6p3Z4GNc0H6O7bK_pN2tdnH6hugf3xaymoiNMuieyPDj9Th09mWNzg3i92nhNkJ55kN_UHdfQPNbcRUoTuy7HrRQ5l0sevn2ESe9cNneiEsYsFfqBLDrzyBSniK8FPCSnA&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCoU6U1MkaZJiwDvOR-cAPiuup-AzJntKxXNWdkfdwwI23ARABIABgw4SAgJgYggEXY2EtcHViLTQyNTM1NTE2NjA5MTQ1NjnIAQmpAq2f90L1ELI-qAMBqgSMAk_QDt5X5dnOsZCjE9GFmjfBd58Qep_1mhBbU6__-AqQb77Mt9o7YnbOIuAEmxe4nMEMQA-i01usWKmiamJP9LGcOnFp36Mv1JSsigx3aVH39yZwhk4MFovR6QjbxNJg-wAkOJCmqqtdtbDW0NW4TRiG8_97gYFAl1f0HxqV8tTVc4bd0KIzP7GvNYe_rhPoyh_KQf8sOLzsP3vg-EY9XLAgdYllMQBP1_SHggXrScTSlBREDJbO2R34J7K52pP4iKiCXa0hbRN_6FDpUYBx3TJehrD9njgsmtHX-dDjAj3OV0oEI1BWpt8G338ZAaYh57ftlFLSNubG9UO29PRMxCKEXhOcQwBlZpWWJmmABv6718udj_-0a6AGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAcBABMgLrAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_1-8d0WFqQEuHNiOZRBKU4CqDrDaQ%26client%3Dca-pub-4253551660914569%26adurl%3D
200 OK 77 kB URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=ZBrJ1AADmBgCHkjzAAp1isrBYQd-bM-b920MGg&u=%7C5vrgA7tw0TZOlK6XAxgQHS68AnlZ6bKZ%2FaO9tXOe2E8%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqyDsvBp4X-0QD3WoDqftjeOi_RL70L9weoh4T5QOi36Ae69TcSqA4HGyM447npkfAZxcGtHJey3u7fw0qSEyOBKaWIDAqwnzhxYrLKGixXNJMMqTxgABBhQWvmzl93UC2YMut7BBMBrjUiHD1u1oIGfVuDYhmJDQ_VkpEtUljNPMtzarshBN9q9mzI8pO2gMIEaXRbv7J9iWvuSqiR5womf2igww8i1eX05WAPnmFHKbpdeYAZcqm5QXAcSO07-XMOD2-X1W9rZ0-9AScIltVNuMmsf07dtYtW31zavB9AIu3S-C_f6hVzx4sV9BqB7Rh25Fwd6jsc-BDAfVae6EOzKn33kPVW1jmeVG-8FxVItFXVumzhbl_-un8smGgc-mSb9jp1JcaRbtslcoZhRPdBaKa50ONu-wFBl9GZb6RT6p3Z4GNc0H6O7bK_pN2tdnH6hugf3xaymoiNMuieyPDj9Th09mWNzg3i92nhNkJ55kN_UHdfQPNbcRUoTuy7HrRQ5l0sevn2ESe9cNneiEsYsFfqBLDrzyBSniK8FPCSnA&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCoU6U1MkaZJiwDvOR-cAPiuup-AzJntKxXNWdkfdwwI23ARABIABgw4SAgJgYggEXY2EtcHViLTQyNTM1NTE2NjA5MTQ1NjnIAQmpAq2f90L1ELI-qAMBqgSMAk_QDt5X5dnOsZCjE9GFmjfBd58Qep_1mhBbU6__-AqQb77Mt9o7YnbOIuAEmxe4nMEMQA-i01usWKmiamJP9LGcOnFp36Mv1JSsigx3aVH39yZwhk4MFovR6QjbxNJg-wAkOJCmqqtdtbDW0NW4TRiG8_97gYFAl1f0HxqV8tTVc4bd0KIzP7GvNYe_rhPoyh_KQf8sOLzsP3vg-EY9XLAgdYllMQBP1_SHggXrScTSlBREDJbO2R34J7K52pP4iKiCXa0hbRN_6FDpUYBx3TJehrD9njgsmtHX-dDjAj3OV0oEI1BWpt8G338ZAaYh57ftlFLSNubG9UO29PRMxCKEXhOcQwBlZpWWJmmABv6718udj_-0a6AGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAcBABMgLrAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_1-8d0WFqQEuHNiOZRBKU4CqDrDaQ%26client%3Dca-pub-4253551660914569%26adurl%3D
IP
Hash ac9a91e4d59f3bc90ed988a0c5563a1d
96517436d9e717046eb80cb58758a00ef67a1836
bca9d205d8e0bff139dd3bab3e1b12c847f2a08055272627c0ef53031fc145ff
GET /delivery/r/afr.php?z=ZBrJ1AADmBgCHkjzAAp1isrBYQd-bM-b920MGg&u=%7C5vrgA7tw0TZOlK6XAxgQHS68AnlZ6bKZ%2FaO9tXOe2E8%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqyDsvBp4X-0QD3WoDqftjeOi_RL70L9weoh4T5QOi36Ae69TcSqA4HGyM447npkfAZxcGtHJey3u7fw0qSEyOBKaWIDAqwnzhxYrLKGixXNJMMqTxgABBhQWvmzl93UC2YMut7BBMBrjUiHD1u1oIGfVuDYhmJDQ_VkpEtUljNPMtzarshBN9q9mzI8pO2gMIEaXRbv7J9iWvuSqiR5womf2igww8i1eX05WAPnmFHKbpdeYAZcqm5QXAcSO07-XMOD2-X1W9rZ0-9AScIltVNuMmsf07dtYtW31zavB9AIu3S-C_f6hVzx4sV9BqB7Rh25Fwd6jsc-BDAfVae6EOzKn33kPVW1jmeVG-8FxVItFXVumzhbl_-un8smGgc-mSb9jp1JcaRbtslcoZhRPdBaKa50ONu-wFBl9GZb6RT6p3Z4GNc0H6O7bK_pN2tdnH6hugf3xaymoiNMuieyPDj9Th09mWNzg3i92nhNkJ55kN_UHdfQPNbcRUoTuy7HrRQ5l0sevn2ESe9cNneiEsYsFfqBLDrzyBSniK8FPCSnA&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCoU6U1MkaZJiwDvOR-cAPiuup-AzJntKxXNWdkfdwwI23ARABIABgw4SAgJgYggEXY2EtcHViLTQyNTM1NTE2NjA5MTQ1NjnIAQmpAq2f90L1ELI-qAMBqgSMAk_QDt5X5dnOsZCjE9GFmjfBd58Qep_1mhBbU6__-AqQb77Mt9o7YnbOIuAEmxe4nMEMQA-i01usWKmiamJP9LGcOnFp36Mv1JSsigx3aVH39yZwhk4MFovR6QjbxNJg-wAkOJCmqqtdtbDW0NW4TRiG8_97gYFAl1f0HxqV8tTVc4bd0KIzP7GvNYe_rhPoyh_KQf8sOLzsP3vg-EY9XLAgdYllMQBP1_SHggXrScTSlBREDJbO2R34J7K52pP4iKiCXa0hbRN_6FDpUYBx3TJehrD9njgsmtHX-dDjAj3OV0oEI1BWpt8G338ZAaYh57ftlFLSNubG9UO29PRMxCKEXhOcQwBlZpWWJmmABv6718udj_-0a6AGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAcBABMgLrAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_1-8d0WFqQEuHNiOZRBKU4CqDrDaQ%26client%3Dca-pub-4253551660914569%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 09:26:44 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=INGerdEJb9KORNg_sI1fqJwWC6Qf0w4VaPyRitWosCwJVId5Yv4ptnH0ZKCyn3Q9YQ8VDl1R-QliWPndOWm7_wWzrlrqJLcFQkx953Lm8wZn_zPyJ5hWP42--_dG5Lef3vAuqCm9LATbTF65IyeGVKOzYE7nLwwN-_bc0C1xgeWKXFXqfWe5KaPIdcE4D-ICKPJgiO_sjNXBHHNCjL5ql5WMGzMm-uKwdu5Fs6-FSpg-8bJpR5yWvSg40QSid8fxv1oUeQ"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 124912286
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
rtb.nl3.eu.criteo.com/google/auction/notify?profile=14&payload=kPjTDrOzWdYImAKdg2ICAgAAAGaQaWE_Imr9ENTJGmSO6X6YZhRh5-nBAAASAAAKDkFRVUJBUVlCQVFFQkFR&wp=ZBrJ1AADWZ8KwkiYAAmypmW5IOEw4-IzZ1sInQ
200 OK 0 B URL HTTP/2 rtb.nl3.eu.criteo.com/google/auction/notify?profile=14&payload=kPjTDrOzWdYImAKdg2ICAgAAAGaQaWE_Imr9ENTJGmSO6X6YZhRh5-nBAAASAAAKDkFRVUJBUVlCQVFFQkFR&wp=ZBrJ1AADWZ8KwkiYAAmypmW5IOEw4-IzZ1sInQ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google/auction/notify?profile=14&payload=kPjTDrOzWdYImAKdg2ICAgAAAGaQaWE_Imr9ENTJGmSO6X6YZhRh5-nBAAASAAAKDkFRVUJBUVlCQVFFQkFR&wp=ZBrJ1AADWZ8KwkiYAAmypmW5IOEw4-IzZ1sInQ HTTP/1.1
Host: rtb.nl3.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server-processing-duration-in-ticks: 129974
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Kestrel
content-length: 0
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
rtb.fr.eu.criteo.com/google/auction/notify?profile=14&payload=kPjTDrOzWdgFWp2DYgICAAAAnfmIKwwLFnwQ08kaZJmj-gziq40P5GMAABIAAAoOQVFVQkJRWUJCUUVCQlE&wp=ZBrJ1AADmBgCHkjzAAp1isrBYQd-bM-b920MGg
200 OK 0 B URL HTTP/2 rtb.fr.eu.criteo.com/google/auction/notify?profile=14&payload=kPjTDrOzWdgFWp2DYgICAAAAnfmIKwwLFnwQ08kaZJmj-gziq40P5GMAABIAAAoOQVFVQkJRWUJCUUVCQlE&wp=ZBrJ1AADmBgCHkjzAAp1isrBYQd-bM-b920MGg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google/auction/notify?profile=14&payload=kPjTDrOzWdgFWp2DYgICAAAAnfmIKwwLFnwQ08kaZJmj-gziq40P5GMAABIAAAoOQVFVQkJRWUJCUUVCQlE&wp=ZBrJ1AADmBgCHkjzAAp1isrBYQd-bM-b920MGg HTTP/1.1
Host: rtb.fr.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server-processing-duration-in-ticks: 327346
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Kestrel
content-length: 0
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 17:56:42 GMT
expires: Fri, 15 Mar 2024 17:56:42 GMT
cache-control: public, max-age=31536000
age: 487802
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
200 OK 4.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/webfont/1.6.28/webfontloader.js
IP
File type ASCII text, with very long lines (2171)
Hash 44c72b9bddfecacc9114e84d685dd085
38f3ff57b9b64a38fc2153eb30564b7fc1c86349
c82afd4f2d89288b4b79244f0c24264810b11326670710ac8e28e7bfc87c7991
GET /ajax/libs/webfont/1.6.28/webfontloader.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 09:26:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 4420
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04030-30d9"
last-modified: Mon, 04 May 2020 16:17:52 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1874955
expires: Mon, 11 Mar 2024 09:26:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x7Ie%2F%2Fzgfy3XvcLr5S6NkalFMD2F4dpvOVjsUbGH2MZnDHfbRBidLESrQddIkGxrIJU%2FK4MelEYR6qz6qCOWxcMgnbSjn7hCshceFbnxAgR3ssZmTS0XGsDxHbybEDtYnuTMDwJx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7abd65130ae71c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 5cd946186beb2d5aaf67bed9e5da5408
2ef7ba5577c3eb69b7829489f33aa5057f84f4ae
5650882d3cb625310e1bfe412dc2a95a9dcc760f4f5002c6d4126abc06ce8c12
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4901
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:45 GMT
Last-Modified: Wed, 22 Mar 2023 08:05:04 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 5cd946186beb2d5aaf67bed9e5da5408
2ef7ba5577c3eb69b7829489f33aa5057f84f4ae
5650882d3cb625310e1bfe412dc2a95a9dcc760f4f5002c6d4126abc06ce8c12
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4901
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:45 GMT
Last-Modified: Wed, 22 Mar 2023 08:05:04 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 5cd946186beb2d5aaf67bed9e5da5408
2ef7ba5577c3eb69b7829489f33aa5057f84f4ae
5650882d3cb625310e1bfe412dc2a95a9dcc760f4f5002c6d4126abc06ce8c12
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4901
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:45 GMT
Last-Modified: Wed, 22 Mar 2023 08:05:04 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 5cd946186beb2d5aaf67bed9e5da5408
2ef7ba5577c3eb69b7829489f33aa5057f84f4ae
5650882d3cb625310e1bfe412dc2a95a9dcc760f4f5002c6d4126abc06ce8c12
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4900
Cache-Control: max-age=120027
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:45 GMT
Etag: "6419e88c-139"
Expires: Thu, 23 Mar 2023 18:47:12 GMT
Last-Modified: Tue, 21 Mar 2023 17:25:32 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 5cd946186beb2d5aaf67bed9e5da5408
2ef7ba5577c3eb69b7829489f33aa5057f84f4ae
5650882d3cb625310e1bfe412dc2a95a9dcc760f4f5002c6d4126abc06ce8c12
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5716
Cache-Control: max-age=120843
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:45 GMT
Etag: "6419e88c-139"
Expires: Thu, 23 Mar 2023 19:00:48 GMT
Last-Modified: Tue, 21 Mar 2023 17:25:32 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 313
static.criteo.net/design/dt/c05716d7ca7548d789c4d0b3d5042816_gotham-black-italic.woff
200 OK 17 kB URL HTTP/2 static.criteo.net/design/dt/c05716d7ca7548d789c4d0b3d5042816_gotham-black-italic.woff
IP
File type Web Open Font Format, CFF, length 17120, version 1.0\012- data
Hash f683179206a26fcb9ef35c6d14f6f7c7
c6da815fa6502dd63eb2606efd112fdd1eb9e79e
a26a23639f1408dca8879503cd479d3f823b085b727437c9d66c33ca3f75c08f
GET /design/dt/c05716d7ca7548d789c4d0b3d5042816_gotham-black-italic.woff HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: text/plain; charset=UTF-8
content-length: 17120
last-modified: Mon, 06 Jul 2020 12:19:39 GMT
etag: "5f0316db-42e0"
expires: Sat, 16 Mar 2024 09:26:45 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/design/dt/0c622d256dee425682575f30240ec196_gotham-black-regular.woff
200 OK 26 kB URL HTTP/2 static.criteo.net/design/dt/0c622d256dee425682575f30240ec196_gotham-black-regular.woff
IP
File type Web Open Font Format, TrueType, length 26324, version 1.0\012- data
Hash 9acd111085f701eaf4fea7135f15ffa7
176a9dd986032b3647d1a40458db1db7d965f8bc
5a4a3459c15a5266e888bb12bbe9041b0f72aed89306411a5d5e69e7a1aa9f4d
GET /design/dt/0c622d256dee425682575f30240ec196_gotham-black-regular.woff HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: text/plain; charset=UTF-8
content-length: 26324
last-modified: Mon, 06 Jul 2020 12:19:39 GMT
etag: "5f0316db-66d4"
expires: Sat, 16 Mar 2024 09:26:45 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/design/dt/4ef456fb9fb14ec5a2da96fe450c24b3_homepagebaukasten-bold.woff
200 OK 20 kB URL HTTP/2 static.criteo.net/design/dt/4ef456fb9fb14ec5a2da96fe450c24b3_homepagebaukasten-bold.woff
IP
File type Web Open Font Format, CFF, length 19492, version 1.0\012- data
Hash fe16408343054418c53b45c76a1892f2
b2f898a889e2164ba7bb7d6676b5a294eb97817b
3b42d14795d22866ea7e9bd3b4259fa75e510bcbbf7ab1861acb9ce2290128f2
GET /design/dt/4ef456fb9fb14ec5a2da96fe450c24b3_homepagebaukasten-bold.woff HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: text/plain; charset=UTF-8
content-length: 19492
last-modified: Mon, 06 Jul 2020 12:29:00 GMT
etag: "5f03190c-4c24"
expires: Sat, 16 Mar 2024 09:26:45 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/close_button.svg
200 OK 308 B URL HTTP/2 static.criteo.net/flash/icon/close_button.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash 1bfe2e290ec4440da74a2e2c249eae2b
0b888a3f9e27d1554f2e21d51e7a1c223d00dbd4
8ec89605fe3d580e9539c7b858e8f69ba4e26fe06377ebe04585397de23a7395
GET /flash/icon/close_button.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: image/svg+xml
content-length: 308
last-modified: Fri, 14 Feb 2020 13:51:32 GMT
etag: "5e46a5e4-134"
expires: Sat, 16 Mar 2024 09:26:45 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/back_button2.svg
200 OK 293 B URL HTTP/2 static.criteo.net/flash/icon/back_button2.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with CRLF line terminators
Hash d9f776bdc698e1bc9c6a1977218019cd
5763cfb5ac79adf0fa7f03a82bad04eea2dca243
725e869434fef8013208ed4c233d29744f9b363f867dcfb8f23e862880fa699a
GET /flash/icon/back_button2.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: image/svg+xml
content-length: 293
last-modified: Thu, 28 Apr 2022 09:09:48 GMT
etag: "626a59dc-125"
expires: Sat, 16 Mar 2024 09:26:45 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
accept-ranges: bytes
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 2da9c0dda22c70a297b151bd6136de0b
03f54710115fdbb3dddd7195d0c63a4d6e771e7b
5b183e55e95f6c1446732fccfab3562675a520a53c3b9c52c1985e8c5ebee5eb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6392
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:45 GMT
Last-Modified: Wed, 22 Mar 2023 07:40:13 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 2da9c0dda22c70a297b151bd6136de0b
03f54710115fdbb3dddd7195d0c63a4d6e771e7b
5b183e55e95f6c1446732fccfab3562675a520a53c3b9c52c1985e8c5ebee5eb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6325
Cache-Control: max-age=92978
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:45 GMT
Etag: "64197952-139"
Expires: Thu, 23 Mar 2023 11:16:23 GMT
Last-Modified: Tue, 21 Mar 2023 09:30:58 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 2da9c0dda22c70a297b151bd6136de0b
03f54710115fdbb3dddd7195d0c63a4d6e771e7b
5b183e55e95f6c1446732fccfab3562675a520a53c3b9c52c1985e8c5ebee5eb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6325
Cache-Control: max-age=92978
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:45 GMT
Etag: "64197952-139"
Expires: Thu, 23 Mar 2023 11:16:23 GMT
Last-Modified: Tue, 21 Mar 2023 09:30:58 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 313
connect.facebook.net/ru_RU/sdk.js
301 Moved Permanently 0 B URL HTTP/1.1 connect.facebook.net/ru_RU/sdk.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ru_RU/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://connect.facebook.net/ru_RU/sdk.js
Content-Type: text/plain
Server: proxygen-bolt
Date: Wed, 22 Mar 2023 09:26:45 GMT
Connection: keep-alive
Content-Length: 0
pix.eu.criteo.net/img/img?h=176&m=0&partner=23519&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F23519%2F221201%2F78224789e70d41118d050b40be08cca7_sledstore-logo.png&v=3&w=256&s=xCTfbnj9SeFvoimBZGeradMJ
200 OK 6.2 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=176&m=0&partner=23519&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F23519%2F221201%2F78224789e70d41118d050b40be08cca7_sledstore-logo.png&v=3&w=256&s=xCTfbnj9SeFvoimBZGeradMJ
IP
File type PNG image data, 256 x 73, 8-bit/color RGBA, non-interlaced\012- data
Hash d42f4819b030e7d7d28cd03b45a29708
ac0aecbdd3d56b5fc6dd7f2900b9b4bd65ffe5de
33fafc643ee479c9cedd2a392b8eb0d71e905bbc2379d735fe7c8bd961b6c8d0
GET /img/img?h=176&m=0&partner=23519&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F23519%2F221201%2F78224789e70d41118d050b40be08cca7_sledstore-logo.png&v=3&w=256&s=xCTfbnj9SeFvoimBZGeradMJ HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=29516446
expires: Tue, 27 Feb 2024 00:27:32 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 6156
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/png
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F7%2F2%2F5%2Ff%2F725f2066eca2faa4a4de29750336acfbb50de312_1_1003_1_S_1_10.png%3Fcb%3D202312&v=3&w=800&s=zYUzie2XBcIoBSajzMTtVztD&b=400
200 OK 18 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F7%2F2%2F5%2Ff%2F725f2066eca2faa4a4de29750336acfbb50de312_1_1003_1_S_1_10.png%3Fcb%3D202312&v=3&w=800&s=zYUzie2XBcIoBSajzMTtVztD&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3ef3e70dbe21049ffd8043cb30c0ac72
f5dea063b84866c7025e6af2ba1064d33221b395
395fcb974871a84ae70d623ffb0d83d869e8d2a65b3fc18f224f8a7607264fc7
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F7%2F2%2F5%2Ff%2F725f2066eca2faa4a4de29750336acfbb50de312_1_1003_1_S_1_10.png%3Fcb%3D202312&v=3&w=800&s=zYUzie2XBcIoBSajzMTtVztD&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31355929
expires: Tue, 19 Mar 2024 07:25:34 GMT
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 18094
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F9%2Fd%2Fd%2F3%2F9dd3cdfdd918501458a05342717e8b8d4383d82b_3_1006_8_M_lis272017.png%3Fcb%3D202312&v=3&w=800&s=XarawJq6ZOCCjvtVb0ZswmDZ&b=400
200 OK 10 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F9%2Fd%2Fd%2F3%2F9dd3cdfdd918501458a05342717e8b8d4383d82b_3_1006_8_M_lis272017.png%3Fcb%3D202312&v=3&w=800&s=XarawJq6ZOCCjvtVb0ZswmDZ&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 37229099b9fd8add3a6e42b8a65e0167
8655c42cb94d855f5b65dbcd22957ecdf2daf238
f33b557dbefba1de8afc5e980c354e826922a4cc342e83c7f86d8bb7f8dcf132
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F9%2Fd%2Fd%2F3%2F9dd3cdfdd918501458a05342717e8b8d4383d82b_3_1006_8_M_lis272017.png%3Fcb%3D202312&v=3&w=800&s=XarawJq6ZOCCjvtVb0ZswmDZ&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31355888
expires: Tue, 19 Mar 2024 07:24:53 GMT
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 9968
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5465
Expires: Wed, 22 Mar 2023 10:57:50 GMT
Date: Wed, 22 Mar 2023 09:26:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 2e9Y7K5xIkpbhFR8a4kGAVX7X2-97lB13zHrjOuqlkalxzdbCDcfPA==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 abbf2df97f9d83839470842dc2e68cb6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:41:23 GMT
age: 42322
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5465
Expires: Wed, 22 Mar 2023 10:57:50 GMT
Date: Wed, 22 Mar 2023 09:26:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5465
Expires: Wed, 22 Mar 2023 10:57:50 GMT
Date: Wed, 22 Mar 2023 09:26:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5465
Expires: Wed, 22 Mar 2023 10:57:50 GMT
Date: Wed, 22 Mar 2023 09:26:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5465
Expires: Wed, 22 Mar 2023 10:57:50 GMT
Date: Wed, 22 Mar 2023 09:26:45 GMT
Connection: keep-alive
counter.yadro.ru/hit?t28.4;r;s1280*1024*24;uhttp%3A//sewing-yes.blogspot.com/2014/10/blog-post_24.html;0.9634625521442272
302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit?t28.4;r;s1280*1024*24;uhttp%3A//sewing-yes.blogspot.com/2014/10/blog-post_24.html;0.9634625521442272
IP
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit?t28.4;r;s1280*1024*24;uhttp%3A//sewing-yes.blogspot.com/2014/10/blog-post_24.html;0.9634625521442272 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
HTTP/1.1 302 Moved Temporarily
Date: Wed, 22 Mar 2023 09:26:45 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit?t28.4;r;s1280*1024*24;uhttp%3A//sewing-yes.blogspot.com/2014/10/blog-post_24.html;0.9634625521442272
Content-Length: 32
Expires: Mon, 21 Mar 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F725f0930-57cc-4b81-8685-8be1acf4b380.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F725f0930-57cc-4b81-8685-8be1acf4b380.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7a9178701002b637a130aec44024349b
d51674c9b6d98baa4ec3905e2982ffecfcb1e9cb
d3888f5cc4aef7239fe7d1ae8cee2f1ca94d1c1524b1629a1da5d6327376b5da
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F725f0930-57cc-4b81-8685-8be1acf4b380.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: ac3a81e6-328d-4944-beda-d9c85de30aff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqP6F8gIAMFoww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a23ff-52d04e4a6adace9e17003e80;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:39:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: WzP3lkcd3AEE-N0bujYeE5UWkvfG5xmGfqLCbIv04YMkJ_E4OaThEg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9adef5b1c5fc9ca80d6f4f8d19e103a2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:59:58 GMT
age: 41207
etag: "d51674c9b6d98baa4ec3905e2982ffecfcb1e9cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F0%2Fb%2F8%2Fd%2F0b8d3d48909f73797247e6849213aaddf423adb6_2_PIA_141722_0_40.PNG%3Fcb%3D202312&v=3&w=800&s=fvy5dxEdP4mnbOOaACTsykuj&b=400
200 OK 30 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F0%2Fb%2F8%2Fd%2F0b8d3d48909f73797247e6849213aaddf423adb6_2_PIA_141722_0_40.PNG%3Fcb%3D202312&v=3&w=800&s=fvy5dxEdP4mnbOOaACTsykuj&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash efb3a2d88fff7674e5dbfbfbac37667c
11524637940994d861b3588539888fc9c27448cf
aaa581a4cc086e23de1f2fc03c477bd3a5ac122c9e27c04c3d442acf40927486
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F0%2Fb%2F8%2Fd%2F0b8d3d48909f73797247e6849213aaddf423adb6_2_PIA_141722_0_40.PNG%3Fcb%3D202312&v=3&w=800&s=fvy5dxEdP4mnbOOaACTsykuj&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31356076
expires: Tue, 19 Mar 2024 07:28:01 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 30532
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f0b9e85381489dcf646c251722b21d4
5f7ea91288a2170bcabdca6be296718c4191eacd
911f803271ad9053ebac3787bdde9b75ec604acc6aa28692cc8e4c5c4fb61483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10480
x-amzn-requestid: 58aa8272-4b4e-4a2f-9d6e-d47f70891c49
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJptHG7JoAMFSwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2320-2fd6502b1271d5c13b4ebbe9;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:28 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: hqGFdT1Sk0IcvaNqfvjz5RsGBK-qMBcNKbK9FyZ7OoiH30hDL9ekxA==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 de2dd11312f7d5ad3bcd0cb112c7fd0e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:59:52 GMT
age: 41213
etag: "5f7ea91288a2170bcabdca6be296718c4191eacd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F7%2Ff%2Ff%2Fb%2F7ffb005602ab486d90cf1bc063d0f1e2_1_PIA-293294_1_10.png%3Fcb%3D202312&v=3&w=800&s=d9t4yMwlE9gJLOgmFeGMqeP9&b=400
200 OK 16 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F7%2Ff%2Ff%2Fb%2F7ffb005602ab486d90cf1bc063d0f1e2_1_PIA-293294_1_10.png%3Fcb%3D202312&v=3&w=800&s=d9t4yMwlE9gJLOgmFeGMqeP9&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 763e196785356bb8b8c0bbbfab786185
d80a86cca5a285c4ed886ffb505bab49932d14e7
84e60370212d883cb12bda3fd516395e73e270ab3b49a3b6c3f8617307dc7525
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F7%2Ff%2Ff%2Fb%2F7ffb005602ab486d90cf1bc063d0f1e2_1_PIA-293294_1_10.png%3Fcb%3D202312&v=3&w=800&s=d9t4yMwlE9gJLOgmFeGMqeP9&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31356010
expires: Tue, 19 Mar 2024 07:26:55 GMT
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 15670
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aeb0d8069d746e467fecd886c0e42628
8229b537f84a7418dc67e30691e62db4cea67f0f
24705dc5b7eefd79a35323beee7c741aa041c3bf55801d13b4ffc2b202e6a394
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F882a2ebf-b22a-46de-bf52-8b9a1aaa2743.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8037
x-amzn-requestid: 7a9f7bb5-d810-4831-b5d2-3eead1af864a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJprcGY1IAMFSAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-53cdee4b645ed18e1dfeb92c;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: QW8T5AGg_L1mT4fE8IHeBG9TSiGpbBJpZE2yZdBtAQMJCPV8OKK5Dw==
via: 1.1 a87682502db4b394cc6ba84510da9f98.cloudfront.net (CloudFront), 1.1 ae06b19943a6bad1c1b12b79f7339498.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:43:22 GMT
age: 42203
etag: "8229b537f84a7418dc67e30691e62db4cea67f0f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44275491-68d9-43b4-8a23-8d98e6e935bd.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44275491-68d9-43b4-8a23-8d98e6e935bd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a281f27512fbe07f84702fe8801c4397
a80ecb653048fee95df524941bdac2550f241460
b08919f9cd7c08ad24c3c9e5942c0de1f51f9cf6b7a045244bb31296e151eb90
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44275491-68d9-43b4-8a23-8d98e6e935bd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6822
x-amzn-requestid: 078bf5af-64af-4704-874f-fd88d1022db9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CHqLzEthoAMFUkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64195718-6b8a8d1818d2b1b11c8c5f49;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 07:04:56 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: lp4v-h-_sfUox7cmYPLd9RZ34NexCPwJ0QOzqP-9fdAqxT4pXgOS6g==
via: 1.1 53ee82a7eb57de316cba44c26680b4a6.cloudfront.net (CloudFront), 1.1 3bb2b699cd244bf37141ea08a6a61732.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 07:18:49 GMT
age: 7676
etag: "a80ecb653048fee95df524941bdac2550f241460"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ceeeb08-532b-488e-be1c-b788708d76a2.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ceeeb08-532b-488e-be1c-b788708d76a2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76347a0b2f0908b35321e7a53e5eb91c
2b6f011b911eb48604f22971afb21f61e4a14b70
ac892c186171836289a2ebd733ce96a2659d640f6408527bf8c6422ca31e713b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ceeeb08-532b-488e-be1c-b788708d76a2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5686
x-amzn-requestid: 8e5120a5-ecfd-4850-9560-a71e7bd1940c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CHqH3GHwoAMFVSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641956fe-0a1578d857aa27bb521b4292;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 07:04:30 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: OLBdDXSEiTByfiQh1PHhDVU8PDQa7F9Irau-RrOJWC88bFMMt1FrEA==
via: 1.1 185f4b03b711932fc7e735c08fdc5abe.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 07:19:01 GMT
age: 7664
etag: "2b6f011b911eb48604f22971afb21f61e4a14b70"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2Fc%2Fb%2F0%2Fbcb0b8b1d926f37d6d1841d1fa8e3d45ed2706ea_FuelJugSkoter_KLAR.PNG%3Fcb%3D202312&v=3&w=800&s=qMos2tlCFs7s0s_TzmRn0h_7&b=400
200 OK 23 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2Fc%2Fb%2F0%2Fbcb0b8b1d926f37d6d1841d1fa8e3d45ed2706ea_FuelJugSkoter_KLAR.PNG%3Fcb%3D202312&v=3&w=800&s=qMos2tlCFs7s0s_TzmRn0h_7&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0dc67e7e37057abca22bf86e6eb903c0
4049728b81212c7ac1f80e48b1f7ad2b49d1a429
35e88c28c8c5c176c5d598a46f8ef43cef6773bdb5599b4365f1c4500cf0e564
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2Fc%2Fb%2F0%2Fbcb0b8b1d926f37d6d1841d1fa8e3d45ed2706ea_FuelJugSkoter_KLAR.PNG%3Fcb%3D202312&v=3&w=800&s=qMos2tlCFs7s0s_TzmRn0h_7&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31356075
expires: Tue, 19 Mar 2024 07:28:00 GMT
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 22794
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F3%2Fe%2F2%2Fd%2F3e2de1197e644a8f8ea9e82322dfd2eb_1_PIA-215679_1_10.png%3Fcb%3D202312&v=3&w=800&s=YWj_CxDFppCWmfzmPMMTWGNF&b=400
200 OK 13 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F3%2Fe%2F2%2Fd%2F3e2de1197e644a8f8ea9e82322dfd2eb_1_PIA-215679_1_10.png%3Fcb%3D202312&v=3&w=800&s=YWj_CxDFppCWmfzmPMMTWGNF&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3f227a5d646312fb9e207efa2cc9ffa6
0efebe10b300e2832efc6f5626a2413d5f8c9abf
cc71e5b80efe65baf238cf46eb662bd524e8c03ea6d32b52d860a796a123489c
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F3%2Fe%2F2%2Fd%2F3e2de1197e644a8f8ea9e82322dfd2eb_1_PIA-215679_1_10.png%3Fcb%3D202312&v=3&w=800&s=YWj_CxDFppCWmfzmPMMTWGNF&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31356158
expires: Tue, 19 Mar 2024 07:29:24 GMT
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 12778
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fa%2F2%2Fe%2Fd%2Fa2ed61241dd28913ec99c53963570b7ff389c358_2_PIA_243000_0_20.png%3Fcb%3D202312&v=3&w=800&s=DxAr8V-ggZL1Oa6Rrs4oYmGC&b=400
200 OK 18 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fa%2F2%2Fe%2Fd%2Fa2ed61241dd28913ec99c53963570b7ff389c358_2_PIA_243000_0_20.png%3Fcb%3D202312&v=3&w=800&s=DxAr8V-ggZL1Oa6Rrs4oYmGC&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8732984d7122abb25797456f46ee2e0c
d675d610839381269a3cab057013f7b987da4020
542f3c916bd780cf4719b7640f406a5e6c0928744eeb9e6ad5787f89114c0f50
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fa%2F2%2Fe%2Fd%2Fa2ed61241dd28913ec99c53963570b7ff389c358_2_PIA_243000_0_20.png%3Fcb%3D202312&v=3&w=800&s=DxAr8V-ggZL1Oa6Rrs4oYmGC&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31356075
expires: Tue, 19 Mar 2024 07:28:00 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 18476
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/animejs/animejs.js
200 OK 30 kB URL HTTP/2 static.criteo.net/animejs/animejs.js
IP
Hash 5bff41f90868600ea7a178e510634387
ab389f125eb99f3f1bdf420bba3f62a20c842403
90ead99a72ca0f617e21105c95966a245a8772b2c47bc80ee7dbb156cd631e6e
GET /animejs/animejs.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: text/javascript
last-modified: Tue, 26 Mar 2019 17:44:11 GMT
etag: W/"5c9a64eb-3181"
expires: Sat, 16 Mar 2024 09:26:45 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/privacy_small.svg
200 OK 5.6 kB URL HTTP/2 static.criteo.net/flash/icon/privacy_small.svg
IP
Hash 16bdd040264697416e47c0bdcf38b71b
d4c90132428a182e26a12d66518fb3b12927d8c1
7ad5efea05caf6be1085350d6c0f8abc3c3e9a7f83968f8b1a312b614338714d
GET /flash/icon/privacy_small.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Feb 2020 14:30:28 GMT
etag: W/"5e42ba84-6aa"
expires: Sat, 16 Mar 2024 09:26:45 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Ff%2F4%2F6%2Fa%2Ff46ac03a523e3cd4d0f23e37eeab068af4db4dbb_1_PIA_171877_1_50.png%3Fcb%3D202312&v=3&w=800&s=eg-mBT6Xrll4hwWQOFp85H6r&b=400
200 OK 11 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Ff%2F4%2F6%2Fa%2Ff46ac03a523e3cd4d0f23e37eeab068af4db4dbb_1_PIA_171877_1_50.png%3Fcb%3D202312&v=3&w=800&s=eg-mBT6Xrll4hwWQOFp85H6r&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b54acd804c84e2a9b03ed754c7c2e762
e57aa2f7f501e989d40b47c4b12f553e5b7a029a
a821cd30c3415ab2d38596ca8c0cff9b0fffa77035b9389aadc967f0ab7a548a
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Ff%2F4%2F6%2Fa%2Ff46ac03a523e3cd4d0f23e37eeab068af4db4dbb_1_PIA_171877_1_50.png%3Fcb%3D202312&v=3&w=800&s=eg-mBT6Xrll4hwWQOFp85H6r&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31356073
expires: Tue, 19 Mar 2024 07:27:58 GMT
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 11298
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fe%2F8%2Fa%2F0%2Fe8a04a64d0db5f254b2cff590dd5989beaa75d8e_2_PIA_10689_0_100.png%3Fcb%3D202312&v=3&w=800&s=kWTWWjmnaHRUrWJaxxBUOjgt&b=400
200 OK 17 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fe%2F8%2Fa%2F0%2Fe8a04a64d0db5f254b2cff590dd5989beaa75d8e_2_PIA_10689_0_100.png%3Fcb%3D202312&v=3&w=800&s=kWTWWjmnaHRUrWJaxxBUOjgt&b=400
IP
File type PNG image data, 400 x 394, 8-bit colormap, non-interlaced\012- data
Hash 320b629beaedb4f6efc0c5f8f7acb970
c806b90861d45cbc54315bd8a12bf4bf5844658c
e22aef57a00d895e0e14ba8ecefac5140fea5ce8548b61a614416f69e16f98b8
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fe%2F8%2Fa%2F0%2Fe8a04a64d0db5f254b2cff590dd5989beaa75d8e_2_PIA_10689_0_100.png%3Fcb%3D202312&v=3&w=800&s=kWTWWjmnaHRUrWJaxxBUOjgt&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31355798
expires: Tue, 19 Mar 2024 07:23:24 GMT
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 16602
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/png
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F4%2Ff%2Fc%2F6%2F4fc6c16948b7dc936b504e7f3ddd39612fd4eb76_PIA_126877.PNG%3Fcb%3D202312&v=3&w=800&s=pJXx235eecVDovACsyPhG1cX&b=400
200 OK 11 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F4%2Ff%2Fc%2F6%2F4fc6c16948b7dc936b504e7f3ddd39612fd4eb76_PIA_126877.PNG%3Fcb%3D202312&v=3&w=800&s=pJXx235eecVDovACsyPhG1cX&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3487752907887482c3dd0aed49fa2766
2b1c76b86961703e5130e9559c548004ea629e64
e7b71949e53aa08ce1e28469d428b6f8a29ed0435bfe52eb412ea1bee3814614
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2F4%2Ff%2Fc%2F6%2F4fc6c16948b7dc936b504e7f3ddd39612fd4eb76_PIA_126877.PNG%3Fcb%3D202312&v=3&w=800&s=pJXx235eecVDovACsyPhG1cX&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31356074
expires: Tue, 19 Mar 2024 07:28:00 GMT
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 11132
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
sewing-yes.blogspot.com/favicon.ico
200 OK 603 B URL HTTP/1.1 sewing-yes.blogspot.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 74aba6be33b1431c7ab778ea2ca63704
d7a88ee7ead4fbcb1f949d47b6ea465b85452ae8
9c7223387de946c6bd66a13554e2d7509deee34dfb412374da28ca1fe1700e62
GET /favicon.ico HTTP/1.1
Host: sewing-yes.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/2014/10/blog-post_24.html
Cookie: _ga=GA1.3.1734859289.1679477209; _gid=GA1.3.655340065.1679477209; _gat_blogger=1
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Wed, 22 Mar 2023 09:26:45 GMT
Date: Wed, 22 Mar 2023 09:26:45 GMT
Cache-Control: private, max-age=86400
Last-Modified: Thu, 01 Dec 2022 11:01:48 GMT
ETag: W/"cfd6687f34e90700b38639e7609819c153c503a81b13827f56106e0d941530d8"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 603
Server: GSE
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2F4%2F0%2F2%2Fb402d771b947f7e6f7fa5ea167ccdf8a7826b501_2_PIA_126896_0_10.PNG%3Fcb%3D202312&v=3&w=800&s=f2nEBeeoZdXZDw0lF08-Jnda&b=400
200 OK 11 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2F4%2F0%2F2%2Fb402d771b947f7e6f7fa5ea167ccdf8a7826b501_2_PIA_126896_0_10.PNG%3Fcb%3D202312&v=3&w=800&s=f2nEBeeoZdXZDw0lF08-Jnda&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2924acc056c6a1ee6e76c74e898c1483
1f8caab9ebf2deefa8f63afd1678e9c042a950eb
184692b48663c35068f47be270ff6d343e6f606a65417db41bd24aef966c7e93
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2F4%2F0%2F2%2Fb402d771b947f7e6f7fa5ea167ccdf8a7826b501_2_PIA_126896_0_10.PNG%3Fcb%3D202312&v=3&w=800&s=f2nEBeeoZdXZDw0lF08-Jnda&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31356069
expires: Tue, 19 Mar 2024 07:27:55 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 10710
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/criteo_logo_2021.svg
200 OK 28 kB URL HTTP/2 static.criteo.net/flash/icon/criteo_logo_2021.svg
IP
Hash 96a1f519316c87768afada220fc675ea
2918b90856a2b07a97ead0fcaa9fc82b55c41fd7
922b47c7ed1e75903644493ec20db3c1af143ea3064450401841459686c0b96b
GET /flash/icon/criteo_logo_2021.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: image/svg+xml
last-modified: Thu, 27 May 2021 13:21:59 GMT
etag: W/"60af9cf7-891"
expires: Sat, 16 Mar 2024 09:26:45 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fd%2F6%2Fa%2F1%2Fd6a1cd0ae8f66971c14753f24e7d5439714d3edb_3_PIA_175702_0_10ab.png%3Fcb%3D202312&v=3&w=800&s=fY2xPU4NqtJbTUD8z50J9RI9&b=400
200 OK 23 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fd%2F6%2Fa%2F1%2Fd6a1cd0ae8f66971c14753f24e7d5439714d3edb_3_PIA_175702_0_10ab.png%3Fcb%3D202312&v=3&w=800&s=fY2xPU4NqtJbTUD8z50J9RI9&b=400
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash dd0a1c840e987576c4524c173f5ba558
661ab4b71e1ccdd618b4273038c2952415caa5c9
ed06f20190828ef63326ca239cfd61cf4049a1c7162640d1059427a5c97f11e2
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fd%2F6%2Fa%2F1%2Fd6a1cd0ae8f66971c14753f24e7d5439714d3edb_3_PIA_175702_0_10ab.png%3Fcb%3D202312&v=3&w=800&s=fY2xPU4NqtJbTUD8z50J9RI9&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31356084
expires: Tue, 19 Mar 2024 07:28:10 GMT
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 23428
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/privacy.svg
200 OK 53 kB URL HTTP/2 static.criteo.net/flash/icon/privacy.svg
IP
Hash 849f50b60dab59ec0d019dfe925c3fc8
30ada194897661700cbbd829599e97a8fcc1ac77
0fb3072f82765efc75496a6cf3ae73bd7c76e64e74d5163fa59324e1acd7ff90
GET /flash/icon/privacy.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: image/svg+xml
last-modified: Wed, 19 Feb 2020 10:57:21 GMT
etag: W/"5e4d1491-646"
expires: Sat, 16 Mar 2024 09:26:45 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2Fc%2Fb%2F0%2Fbcb0b8b1d926f37d6d1841d1fa8e3d45ed2706ea_FuelJugSkoter_KLAR.PNG%3Fcb%3D202312&v=3&w=800&s=qMos2tlCFs7s0s_TzmRn0h_7&b=800
200 OK 58 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2Fc%2Fb%2F0%2Fbcb0b8b1d926f37d6d1841d1fa8e3d45ed2706ea_FuelJugSkoter_KLAR.PNG%3Fcb%3D202312&v=3&w=800&s=qMos2tlCFs7s0s_TzmRn0h_7&b=800
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 838f7792940d8d3e10427fc90a46403d
36e15360da7826af0e49c9d854da03054ed095d8
52400deb3e06e00e02b57ea56f45ab20adb11bc99202ee7225244ce8a8df9300
GET /img/img?c=3&cq=256&h=800&m=0&partner=23519&q=80&r=0&u=https%3A%2F%2Fpierce-images.imgix.net%2Fimages%2Fb%2Fc%2Fb%2F0%2Fbcb0b8b1d926f37d6d1841d1fa8e3d45ed2706ea_FuelJugSkoter_KLAR.PNG%3Fcb%3D202312&v=3&w=800&s=qMos2tlCFs7s0s_TzmRn0h_7&b=800 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31356075
expires: Tue, 19 Mar 2024 07:28:00 GMT
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 57940
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.criteo.net/flash/icon/adchoices_en.svg
200 OK 79 kB URL HTTP/2 static.criteo.net/flash/icon/adchoices_en.svg
IP
Hash 8acb6631d9d9ce0c6be793a8c83d879c
a5d93c7d79f35af979ca0b6c52dc11e6d7e119f6
3d2f4f65ddbc21e76d11b29538fa66ea096f3671e900a0945534091d35ce4f8f
GET /flash/icon/adchoices_en.svg HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Feb 2020 14:27:58 GMT
etag: W/"5e42b9ee-759"
expires: Sat, 16 Mar 2024 09:26:45 GMT
cache-control: max-age=31104000, public
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?h=1200&m=0&partner=91523&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F91523%2F221124%2F38fa9246a8044b9d84346a654df0b3f8_1200x1200_no.png&v=3&w=1200&s=0nrlAVgY0MZUBvNy2SzYbkMm
200 OK 128 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=1200&m=0&partner=91523&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F91523%2F221124%2F38fa9246a8044b9d84346a654df0b3f8_1200x1200_no.png&v=3&w=1200&s=0nrlAVgY0MZUBvNy2SzYbkMm
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 128 kB (128318 bytes)
Hash 9ff2ed9e224d6b96a54afe736c4b0b07
ef6420bcdc5c7b89e892768d26b6156f20896019
3f643c2f2356cf933397bab72e5df5cdec174c7af924d8352390677e56cfbf68
GET /img/img?h=1200&m=0&partner=91523&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F91523%2F221124%2F38fa9246a8044b9d84346a654df0b3f8_1200x1200_no.png&v=3&w=1200&s=0nrlAVgY0MZUBvNy2SzYbkMm HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=29536579
expires: Tue, 27 Feb 2024 06:03:04 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 128318
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fbjorn-borg-footwear%2F1300x1700%2Fbbf1741394803_ctan.jpg&v=3&w=400&s=NTtvgePhF0MNicCYa-0Orwfu&b=400
200 OK 14 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fbjorn-borg-footwear%2F1300x1700%2Fbbf1741394803_ctan.jpg&v=3&w=400&s=NTtvgePhF0MNicCYa-0Orwfu&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x342, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 99693f44b94946304f8bc098974bcdd2
a76990117ddf657cb61f09a8e8011211efc5e897
4f31215492ee8b7855652b8d7f548ffedbbf1b4f6f0ce8077d02264fcdb926b8
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fbjorn-borg-footwear%2F1300x1700%2Fbbf1741394803_ctan.jpg&v=3&w=400&s=NTtvgePhF0MNicCYa-0Orwfu&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31529469
expires: Thu, 21 Mar 2024 07:37:54 GMT
date: Wed, 22 Mar 2023 09:26:44 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 13820
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cat.fr.eu.criteo.com/delivery/lg.php?cppv=3&cpp=Sgt2b993wCs3txwqPiSRw8TATw5AFKoSfJ5dzFowUQanC33BiDEa6odJ72qd749nqtfKwQlttQGhjjjLhbhQisqEdK-QnQM6HEScwptxpaXKku-XQxTUhpjeiIt4CTmnTIdwQ9lAqh4BNEmd5aDm_zgqKcyzpsem0wy9Zsx22kGP5ntrES0obRoOtyClg4rZKFkkeiGsYP021NJ5PRho9j_3mfSRRhs6aECXhyQu8vUOCsQGTesRFW69SLhVdE5coSIv0clreTkCgoAkFkPVATF03tJXIOuEZObJekB58AF8KFd-OOnUxILS_TL0xlC3UF6BrUd7vf6_UN-x7wd48i-uoFc_m0ZcS8WpC2kT9olryR1O8mpQWfFPCKkWqxfYel8h3oP3mCT0fSaNaHXFdO3vP6qfxZaf-d9g_I4MloV0wkwl7B2i9rrYHwVhKpvJiPM1NQ
200 OK 13 kB URL HTTP/2 cat.fr.eu.criteo.com/delivery/lg.php?cppv=3&cpp=Sgt2b993wCs3txwqPiSRw8TATw5AFKoSfJ5dzFowUQanC33BiDEa6odJ72qd749nqtfKwQlttQGhjjjLhbhQisqEdK-QnQM6HEScwptxpaXKku-XQxTUhpjeiIt4CTmnTIdwQ9lAqh4BNEmd5aDm_zgqKcyzpsem0wy9Zsx22kGP5ntrES0obRoOtyClg4rZKFkkeiGsYP021NJ5PRho9j_3mfSRRhs6aECXhyQu8vUOCsQGTesRFW69SLhVdE5coSIv0clreTkCgoAkFkPVATF03tJXIOuEZObJekB58AF8KFd-OOnUxILS_TL0xlC3UF6BrUd7vf6_UN-x7wd48i-uoFc_m0ZcS8WpC2kT9olryR1O8mpQWfFPCKkWqxfYel8h3oP3mCT0fSaNaHXFdO3vP6qfxZaf-d9g_I4MloV0wkwl7B2i9rrYHwVhKpvJiPM1NQ
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 06d4ebd70c6557edb857086ba2e0ac9b
948d38b028cbe4a51aaa75402787d408029dad80
fd77d225042db316d6e98c5b208dafc93121d762b87340e4b50fb99fa51b88eb
GET /delivery/lg.php?cppv=3&cpp=Sgt2b993wCs3txwqPiSRw8TATw5AFKoSfJ5dzFowUQanC33BiDEa6odJ72qd749nqtfKwQlttQGhjjjLhbhQisqEdK-QnQM6HEScwptxpaXKku-XQxTUhpjeiIt4CTmnTIdwQ9lAqh4BNEmd5aDm_zgqKcyzpsem0wy9Zsx22kGP5ntrES0obRoOtyClg4rZKFkkeiGsYP021NJ5PRho9j_3mfSRRhs6aECXhyQu8vUOCsQGTesRFW69SLhVdE5coSIv0clreTkCgoAkFkPVATF03tJXIOuEZObJekB58AF8KFd-OOnUxILS_TL0xlC3UF6BrUd7vf6_UN-x7wd48i-uoFc_m0ZcS8WpC2kT9olryR1O8mpQWfFPCKkWqxfYel8h3oP3mCT0fSaNaHXFdO3vP6qfxZaf-d9g_I4MloV0wkwl7B2i9rrYHwVhKpvJiPM1NQ HTTP/1.1
Host: cat.fr.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
server-processing-duration-in-ticks: 3023963
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fby-malina%2F1300x1700%2Fbma2211116_cfallpaisleymarble.jpg&v=3&w=400&s=SzRE2octQZfgE8hrEYVhxB0Y&b=400
200 OK 19 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fby-malina%2F1300x1700%2Fbma2211116_cfallpaisleymarble.jpg&v=3&w=400&s=SzRE2octQZfgE8hrEYVhxB0Y&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 248x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a8faf01c59bcba0637601b06fc8f097e
6cf597329e10ac7857d80912de7a8119da0e4d92
c7e9ac7c0e01c360260b2a048507a52ffbc4339fb558cefb8dc9c700956d3273
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fby-malina%2F1300x1700%2Fbma2211116_cfallpaisleymarble.jpg&v=3&w=400&s=SzRE2octQZfgE8hrEYVhxB0Y&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=29988841
expires: Sun, 03 Mar 2024 11:40:47 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 18806
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fyas%2F1300x1700%2Fyas26027162_cjellybean_v277877.jpg&v=3&w=400&s=VYiWWcK_DSZ2sJx2Fu2nQZ1g&b=400
200 OK 15 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fyas%2F1300x1700%2Fyas26027162_cjellybean_v277877.jpg&v=3&w=400&s=VYiWWcK_DSZ2sJx2Fu2nQZ1g&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 228x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e6ae9c6c089a07141e640cd8e96cab83
d44292ec49ba90ea56e6256a9e7e8c8d45689c45
d3e2b18ece4fc3f0999b0a2f7cf17a4ccbbe1de162e7ec3ed1b1193f37b7986a
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fyas%2F1300x1700%2Fyas26027162_cjellybean_v277877.jpg&v=3&w=400&s=VYiWWcK_DSZ2sJx2Fu2nQZ1g&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=29020083
expires: Wed, 21 Feb 2024 06:34:49 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 15152
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsail-racing%2F1300x1700%2Fsrg2132102_cpinegreen_v788.jpg&v=3&w=400&s=Oa5z47Y8097tOCVCurRfwpkm&b=400
200 OK 4.9 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsail-racing%2F1300x1700%2Fsrg2132102_cpinegreen_v788.jpg&v=3&w=400&s=Oa5z47Y8097tOCVCurRfwpkm&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 212x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e1111bfa642036eb6602cf00e281a62c
97f6b47343c58c21111cc91f7f82268043812779
8aed27eeb00c10a53ed2d8ee39e87011e561338a5317594e99781f975a060df8
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsail-racing%2F1300x1700%2Fsrg2132102_cpinegreen_v788.jpg&v=3&w=400&s=Oa5z47Y8097tOCVCurRfwpkm&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30666181
expires: Mon, 11 Mar 2024 07:49:47 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 4864
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fdiesel-women%2F1300x1700%2Fdiwa03598_cblackdenim_v069ef.jpg&v=3&w=400&s=9XE4tk6THE75Krd8KsY3Y5S7&b=400
200 OK 2.7 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fdiesel-women%2F1300x1700%2Fdiwa03598_cblackdenim_v069ef.jpg&v=3&w=400&s=9XE4tk6THE75Krd8KsY3Y5S7&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 164x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8ec8b661b9d86ddd172d98059ac22feb
b787d08377d468219100289937eb0d78ed291455
0034e24cc7a9d0ae717375f60e0225e932127deb62a6df5e760de7b30841982c
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fdiesel-women%2F1300x1700%2Fdiwa03598_cblackdenim_v069ef.jpg&v=3&w=400&s=9XE4tk6THE75Krd8KsY3Y5S7&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=30677592
expires: Mon, 11 Mar 2024 10:59:58 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 2652
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fgant-clothing%2F1300x1700%2Fgcl359900_cwhite_v110.jpg&v=3&w=400&s=T737Z6xCX9CpVU-BZ6JEPzl8&b=400
200 OK 2.5 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fgant-clothing%2F1300x1700%2Fgcl359900_cwhite_v110.jpg&v=3&w=400&s=T737Z6xCX9CpVU-BZ6JEPzl8&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 317x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fbbbb17e30b16253d33c344f785b3de5
d34632ea6e51e34e6c98f30a343229af957d840d
7cc307f9bd8f87e35767b59dd304e797db8a629ccdd4df567529e24b1db13de4
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fgant-clothing%2F1300x1700%2Fgcl359900_cwhite_v110.jpg&v=3&w=400&s=T737Z6xCX9CpVU-BZ6JEPzl8&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=29275821
expires: Sat, 24 Feb 2024 05:37:07 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 2474
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fgant%2F1300x1700%2Fgan24537714_cwhitesilverorange.jpg&v=3&w=400&s=8gcAO5vERfeqwdh1SGLbdnsK&b=400
200 OK 10 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fgant%2F1300x1700%2Fgan24537714_cwhitesilverorange.jpg&v=3&w=400&s=8gcAO5vERfeqwdh1SGLbdnsK&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x304, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7c5ab258c3183e650a2a892f669c0baa
eeae2b548cd74087fc288f1f6ef575642ea024d6
ecf5739d67d91ed9ccbd6d615e4402115d87124c0db589e14e6dda00e4d8e1db
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fgant%2F1300x1700%2Fgan24537714_cwhitesilverorange.jpg&v=3&w=400&s=8gcAO5vERfeqwdh1SGLbdnsK&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=29991336
expires: Sun, 03 Mar 2024 12:22:22 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 10482
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsail-racing%2F1300x1700%2Fsrg2132101_cdarknavy_v698.jpg&v=3&w=400&s=NMAarSN972QhbhueymzolGKM&b=400
200 OK 3.6 kB URL HTTP/2 pix.eu.criteo.net/img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsail-racing%2F1300x1700%2Fsrg2132101_cdarknavy_v698.jpg&v=3&w=400&s=NMAarSN972QhbhueymzolGKM&b=400
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 193x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f379c928cd7682eafbe187d2c714cf46
662388aacfc224bcc5291a22482de10e72f3f515
937e9f5d47720b3d00cbcc3ee93efcec1bb698818e29e9cd4a270f7e048a7f19
GET /img/img?c=3&cq=256&h=400&m=0&partner=91523&q=80&r=0&u=https%3A%2F%2Fean-images.booztcdn.com%2Fsail-racing%2F1300x1700%2Fsrg2132101_cdarknavy_v698.jpg&v=3&w=400&s=NMAarSN972QhbhueymzolGKM&b=400 HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=28934292
expires: Tue, 20 Feb 2024 06:44:58 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 3560
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fbedb5447f2c9efe1c8da961f6ea01bc
2da42816748ba0baaebf8416044a37d55a048c8e
b2d0e13f39efed394e1db3f1b05b65c8df063de504a86694c33b65d4accecab7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash e2ba316dbf0d1c231f12512204d0e832
16271f049892b4d07ab70043935b1873a2e423f9
99a5a7e359df4cc82ef7a931bc93c0252f28c938155c1a6bd886550a0709cb11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3994
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:45 GMT
Etag: "6419a392-1d7"
Last-Modified: Wed, 22 Mar 2023 08:20:11 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
pix.eu.criteo.net/img/img?h=116&m=0&partner=91523&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F91523%2F221124%2Fcf4d96ca020d4e318ab97db5ad436112_logo_n_horizontal.jpg&v=3&w=516&s=ZD7nDZtxQ9Pe9QQ3DolUxynp
200 OK 3.3 kB URL HTTP/2 pix.eu.criteo.net/img/img?h=116&m=0&partner=91523&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F91523%2F221124%2Fcf4d96ca020d4e318ab97db5ad436112_logo_n_horizontal.jpg&v=3&w=516&s=ZD7nDZtxQ9Pe9QQ3DolUxynp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 309x116, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7e92a58fe1f7d85e516943a5b5bbed90
2f06120b49ed2d2a483ea30f3850dd750c6fa497
a310f9a8aa39e75839273246c5404a265b0c35a01a9130e3e312d857e58395c4
GET /img/img?h=116&m=0&partner=91523&q=80&r=0&u=http%3A%2F%2Fstatic.fr.eu.criteo.net%2Fdesign%2Fdt%2F91523%2F221124%2Fcf4d96ca020d4e318ab97db5ad436112_logo_n_horizontal.jpg&v=3&w=516&s=ZD7nDZtxQ9Pe9QQ3DolUxynp HTTP/1.1
Host: pix.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=29536839
expires: Tue, 27 Feb 2024 06:07:25 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
cross-origin-resource-policy: cross-origin
content-length: 3324
last-modified: Wed, 4 Jun 2008 06:06:06 GMT
content-type: image/webp
timing-allow-origin: *
vary: Origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
connect.facebook.net/ru_RU/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/ru_RU/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 9abf0fdbbf484500db66821b93395ca6
1c59dc4c9cdf70e856552bad9ece5d3812798f7e
14fbb7a5ff3b7f281f446b2af7c87648e2fa9cb2484a3af3237714576a3701c5
GET /ru_RU/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sewing-yes.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 80f2a6abd2728eab9de36aaaeb7eb7ea
etag: "9258b9a2745338514832cc9315704056"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 22 Mar 2023 09:45:42 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: mr8P279IRQDbZoIbkzlcpg==
x-fb-debug: m2Hd1twyJLWfB+nYrncbyJTOocs9eVyHAhXe2K/FpqGbI9xOeujTKj1X3a3EYyoS5edTxBef34kUfP96mWEifg==
content-length: 1687
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:45 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e2ba316dbf0d1c231f12512204d0e832
16271f049892b4d07ab70043935b1873a2e423f9
99a5a7e359df4cc82ef7a931bc93c0252f28c938155c1a6bd886550a0709cb11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3994
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:45 GMT
Etag: "6419a392-1d7"
Last-Modified: Wed, 22 Mar 2023 08:20:11 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash b95c2dd8210d522e8c5f94f86254a57f
ee8fdf0cc486324c7326c2d8349cf5fd49043105
f081aa88f5be44f33de64683e00924636a11dacfd51a4c81cb54aa8b11cec24c
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Mar 2023 09:26:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 26 Mar 2023 06:34:12 GMT
ETag: "ee8fdf0cc486324c7326c2d8349cf5fd49043105"
Last-Modified: Wed, 22 Mar 2023 06:34:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3441
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7abd65182fb7b515-OSL
connect.facebook.net/ru_RU/sdk.js?hash=bbb8939ccfd982d85e3c8db1e6e3f2be
200 OK 89 kB URL HTTP/2 connect.facebook.net/ru_RU/sdk.js?hash=bbb8939ccfd982d85e3c8db1e6e3f2be
IP
File type ASCII text, with very long lines (18530)
Hash 93f832fdbdcafc2029c15a5c920f0db0
9ed69b3cbbae5a0f5f35429074d86fbb7b475bfe
26565b2798686069bfad62c487da658f6beaab561f46fe12a8c00c478ac7059c
GET /ru_RU/sdk.js?hash=bbb8939ccfd982d85e3c8db1e6e3f2be HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://sewing-yes.blogspot.com
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 4dbca3503f196183f6ecdc2f3c58657c
etag: "1b95fdaac9c9d42b4fa47a8fc1b54f0d"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 21 Mar 2024 05:31:26 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: k/gy/b3K/CApwVpckg8NsA==
x-fb-debug: DN0oPyILNeezqJqb+Zu9GUaDKELfRKhbuipdRFAegteFNF/ua25lHWAH/qeq3KyfodVaWjD8XCXXVxXWDbMdyg==
content-length: 88830
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:45 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
counter.yadro.ru/hit?t28.4;r;s1280*1024*24;uhttp%3A//sewing-yes.blogspot.com/2014/10/blog-post_24.html;0.9634625521442272
200 OK 665 B URL HTTP/1.1 counter.yadro.ru/hit?t28.4;r;s1280*1024*24;uhttp%3A//sewing-yes.blogspot.com/2014/10/blog-post_24.html;0.9634625521442272
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 88 x 120\012- data
Hash 308672ce3514a973f2274eedb9bff601
474764fc06ae1a1635c17d05c13f4a85144ca7fa
e620d30a1dffcd3862d8a425e23b86a51cdb1f2f79c174bbc8fd02beeb90aa2f
GET /hit?t28.4;r;s1280*1024*24;uhttp%3A//sewing-yes.blogspot.com/2014/10/blog-post_24.html;0.9634625521442272 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sewing-yes.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Wed, 22 Mar 2023 09:26:45 GMT
Content-Type: image/gif
Content-Length: 665
Connection: keep-alive
Expires: Mon, 21 Mar 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
csm.eu.criteo.net/all?cppv=3&cpp=INGerdEJb9KORNg_sI1fqJwWC6Qf0w4VaPyRitWosCwJVId5Yv4ptnH0ZKCyn3Q9YQ8VDl1R-QliWPndOWm7_wWzrlrqJLcFQkx953Lm8wZn_zPyJ5hWP42--_dG5Lef3vAuqCm9LATbTF65IyeGVKOzYE7nLwwN-_bc0C1xgeWKXFXqfWe5KaPIdcE4D-ICKPJgiO_sjNXBHHNCjL5ql5WMGzMm-uKwdu5Fs6-FSpg-8bJpR5yWvSg40QSid8fxv1oUeQ&sds=2&rev=85392&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=INGerdEJb9KORNg_sI1fqJwWC6Qf0w4VaPyRitWosCwJVId5Yv4ptnH0ZKCyn3Q9YQ8VDl1R-QliWPndOWm7_wWzrlrqJLcFQkx953Lm8wZn_zPyJ5hWP42--_dG5Lef3vAuqCm9LATbTF65IyeGVKOzYE7nLwwN-_bc0C1xgeWKXFXqfWe5KaPIdcE4D-ICKPJgiO_sjNXBHHNCjL5ql5WMGzMm-uKwdu5Fs6-FSpg-8bJpR5yWvSg40QSid8fxv1oUeQ&sds=2&rev=85392&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=INGerdEJb9KORNg_sI1fqJwWC6Qf0w4VaPyRitWosCwJVId5Yv4ptnH0ZKCyn3Q9YQ8VDl1R-QliWPndOWm7_wWzrlrqJLcFQkx953Lm8wZn_zPyJ5hWP42--_dG5Lef3vAuqCm9LATbTF65IyeGVKOzYE7nLwwN-_bc0C1xgeWKXFXqfWe5KaPIdcE4D-ICKPJgiO_sjNXBHHNCjL5ql5WMGzMm-uKwdu5Fs6-FSpg-8bJpR5yWvSg40QSid8fxv1oUeQ&sds=2&rev=85392&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=alBvQ9EJb9KORNg_p8_D9MB6xNyz2v1kZu3BW2LUhJDwJYxkI3zZv_dpnz8geno4T7AapbxKhFHNRoHC6Av51FxkQvguBKWUdVis7R52qrVYfGqLeljsKcUCV0xPXXtybpAJ3wljbxjBu5YZU8ilO0FkiodZfWAUHvxs0zhO5u0lbCB2kpdgDN_2-GE1rR3a9rjLP0q8gaNNK9wfdFfn2oAZggEIRVLwJF0e6ZWir15MatoC8G_qxQurp1lA5LKjg_NEiw&sds=2&rev=85392&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=alBvQ9EJb9KORNg_p8_D9MB6xNyz2v1kZu3BW2LUhJDwJYxkI3zZv_dpnz8geno4T7AapbxKhFHNRoHC6Av51FxkQvguBKWUdVis7R52qrVYfGqLeljsKcUCV0xPXXtybpAJ3wljbxjBu5YZU8ilO0FkiodZfWAUHvxs0zhO5u0lbCB2kpdgDN_2-GE1rR3a9rjLP0q8gaNNK9wfdFfn2oAZggEIRVLwJF0e6ZWir15MatoC8G_qxQurp1lA5LKjg_NEiw&sds=2&rev=85392&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=alBvQ9EJb9KORNg_p8_D9MB6xNyz2v1kZu3BW2LUhJDwJYxkI3zZv_dpnz8geno4T7AapbxKhFHNRoHC6Av51FxkQvguBKWUdVis7R52qrVYfGqLeljsKcUCV0xPXXtybpAJ3wljbxjBu5YZU8ilO0FkiodZfWAUHvxs0zhO5u0lbCB2kpdgDN_2-GE1rR3a9rjLP0q8gaNNK9wfdFfn2oAZggEIRVLwJF0e6ZWir15MatoC8G_qxQurp1lA5LKjg_NEiw&sds=2&rev=85392&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=AHLmNtEJb9KORNg_6WoVkCqCFqF3RREglJlSPaQEMdfUCSPGF46q82uTo0LFic8y5uP3F2HrYXnkiUGj8b1gK5_1sZm5Z4sj0sfGyvOBBYr-xbTNtBPqXQ_KuF4zotKPDYYkIAjFpGm-Y3LVnM_1grTD7HVsUDJUz51oRwJtq9TmPYwtTbShb4CfzU3xoUqvNDrG4VYR5KegE0Wh_wRP2Ai6ZQ1owkBPzGvy4_AIKqtMqstAl7c6SsQfv6YB9ERpdcdZow&sds=2&rev=85392&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=AHLmNtEJb9KORNg_6WoVkCqCFqF3RREglJlSPaQEMdfUCSPGF46q82uTo0LFic8y5uP3F2HrYXnkiUGj8b1gK5_1sZm5Z4sj0sfGyvOBBYr-xbTNtBPqXQ_KuF4zotKPDYYkIAjFpGm-Y3LVnM_1grTD7HVsUDJUz51oRwJtq9TmPYwtTbShb4CfzU3xoUqvNDrG4VYR5KegE0Wh_wRP2Ai6ZQ1owkBPzGvy4_AIKqtMqstAl7c6SsQfv6YB9ERpdcdZow&sds=2&rev=85392&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=AHLmNtEJb9KORNg_6WoVkCqCFqF3RREglJlSPaQEMdfUCSPGF46q82uTo0LFic8y5uP3F2HrYXnkiUGj8b1gK5_1sZm5Z4sj0sfGyvOBBYr-xbTNtBPqXQ_KuF4zotKPDYYkIAjFpGm-Y3LVnM_1grTD7HVsUDJUz51oRwJtq9TmPYwtTbShb4CfzU3xoUqvNDrG4VYR5KegE0Wh_wRP2Ai6ZQ1owkBPzGvy4_AIKqtMqstAl7c6SsQfv6YB9ERpdcdZow&sds=2&rev=85392&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 36
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 09:26:45 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ccc25647c3390fed42decf921cbe639
798b39cdb69e62e3ff6d167d39f5916dc066768f
5b98adfc8fd72d95730fef353e99ecf0a4e5a4c040b939b3baf3aab477035390
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ccc25647c3390fed42decf921cbe639
798b39cdb69e62e3ff6d167d39f5916dc066768f
5b98adfc8fd72d95730fef353e99ecf0a4e5a4c040b939b3baf3aab477035390
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ccc25647c3390fed42decf921cbe639
798b39cdb69e62e3ff6d167d39f5916dc066768f
5b98adfc8fd72d95730fef353e99ecf0a4e5a4c040b939b3baf3aab477035390
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ccc25647c3390fed42decf921cbe639
798b39cdb69e62e3ff6d167d39f5916dc066768f
5b98adfc8fd72d95730fef353e99ecf0a4e5a4c040b939b3baf3aab477035390
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/a/default-user=s45-c
200 OK 316 B URL HTTP/2 lh3.googleusercontent.com/a/default-user=s45-c
IP
File type PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Hash 9fae1841320a0eaa434a022513f60859
245fac7a1ba86adda5bf5571babef7d5280672a4
1e2ce2743c2908d3aa1ce10a03be76d756eaa493cd41f9dcc94a3cc35cbfa1bd
GET /a/default-user=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 316
x-xss-protection: 0
date: Wed, 22 Mar 2023 06:03:33 GMT
expires: Tue, 21 Mar 2023 14:02:57 GMT
cache-control: public, max-age=86400, no-transform
age: 12193
etag: "v0"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ccc25647c3390fed42decf921cbe639
798b39cdb69e62e3ff6d167d39f5916dc066768f
5b98adfc8fd72d95730fef353e99ecf0a4e5a4c040b939b3baf3aab477035390
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/a-/ACB-R5TtFostX1E1nkudhbf3LXco0bddsCFv3EPD7wG3=s45-c
200 OK 2.0 kB URL HTTP/2 lh3.googleusercontent.com/a-/ACB-R5TtFostX1E1nkudhbf3LXco0bddsCFv3EPD7wG3=s45-c
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google, copyright=COPYRIGHT, 2010], baseline, precision 8, 45x45, components 3\012- data
Hash 58dceef19e82324ef4f4fd06498c7ced
cab4dc02bfb2f8a47e29acaef839c5a430fd6c52
3f9c6534100c17147a39c3b3c3012ea3b8c2ebffb31c29ee48c75422a583daa6
GET /a-/ACB-R5TtFostX1E1nkudhbf3LXco0bddsCFv3EPD7wG3=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v27"
expires: Thu, 23 Mar 2023 09:26:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 09:26:46 GMT
server: fife
content-length: 2018
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ccc25647c3390fed42decf921cbe639
798b39cdb69e62e3ff6d167d39f5916dc066768f
5b98adfc8fd72d95730fef353e99ecf0a4e5a4c040b939b3baf3aab477035390
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 09:26:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/a-/ACB-R5S-tHJJAbtU-VZ2GFiFMhfwIBrxO5XwDpPh7D3i=s45-c
200 OK 1.8 kB URL HTTP/2 lh3.googleusercontent.com/a-/ACB-R5S-tHJJAbtU-VZ2GFiFMhfwIBrxO5XwDpPh7D3i=s45-c
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 8a737cde8a728985aa209d062dab93d6
3562155ceb89ec076e1393dbc74f5ad83a10024b
e3cab2c33aa21c9654fdd0fd2e480da10c1424f8ef47e89932cdf6877847f9fa
GET /a-/ACB-R5S-tHJJAbtU-VZ2GFiFMhfwIBrxO5XwDpPh7D3i=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v17"
expires: Thu, 23 Mar 2023 09:26:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 09:26:46 GMT
server: fife
content-length: 1817
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ACB-R5QufEJCgwg1kEm8oUWRXaVk2Lt7QHRvfO7pja3SPA=s45-c
200 OK 1.9 kB URL HTTP/2 lh3.googleusercontent.com/a-/ACB-R5QufEJCgwg1kEm8oUWRXaVk2Lt7QHRvfO7pja3SPA=s45-c
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 858628bf8f275f77fe43c6e08e19add8
32b83cd49eb146406df73b6cb82d573fd4a92a69
face0aabc7f577d1224952db96e16e86938f60fa4c50f7924abb8b590482e388
GET /a-/ACB-R5QufEJCgwg1kEm8oUWRXaVk2Lt7QHRvfO7pja3SPA=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v68d"
expires: Thu, 23 Mar 2023 09:26:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 09:26:46 GMT
server: fife
content-length: 1852
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ACB-R5Tm1Ku7Ip0U3ryXiz36_fZDxIGQ43XX7e8vjjD8=s45-c
200 OK 2.0 kB URL HTTP/2 lh3.googleusercontent.com/a-/ACB-R5Tm1Ku7Ip0U3ryXiz36_fZDxIGQ43XX7e8vjjD8=s45-c
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash c13612f581a363176c545c94c546e38b
255c3ea7a48a09168e9b85342bdea2368cd7f5dd
29fdf69eb7a8ce8dfd2dac3de0a6343884092825c6fb9bade456c642c97ba032
GET /a-/ACB-R5Tm1Ku7Ip0U3ryXiz36_fZDxIGQ43XX7e8vjjD8=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1b"
expires: Thu, 23 Mar 2023 09:26:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 09:26:46 GMT
server: fife
content-length: 2021
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ACB-R5TqCNE1yxKLPeAkbrB4nGfLMpKZ0Tkdy3vmJpwJSg=s45-c
200 OK 1.6 kB URL HTTP/2 lh3.googleusercontent.com/a-/ACB-R5TqCNE1yxKLPeAkbrB4nGfLMpKZ0Tkdy3vmJpwJSg=s45-c
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 04862c713e2b24ffcfed2d472e2e9466
279499d9cea4729a6ba985e856e714f97e15f5e7
927e8799b4706750c02c492e6646ef15f4698ff67d0d8f1f375e1a4adca0babe
GET /a-/ACB-R5TqCNE1yxKLPeAkbrB4nGfLMpKZ0Tkdy3vmJpwJSg=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v16ee"
expires: Thu, 23 Mar 2023 09:26:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 09:26:46 GMT
server: fife
content-length: 1634
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=alBvQ9EJb9KORNg_p8_D9MB6xNyz2v1kZu3BW2LUhJDwJYxkI3zZv_dpnz8geno4T7AapbxKhFHNRoHC6Av51FxkQvguBKWUdVis7R52qrVYfGqLeljsKcUCV0xPXXtybpAJ3wljbxjBu5YZU8ilO0FkiodZfWAUHvxs0zhO5u0lbCB2kpdgDN_2-GE1rR3a9rjLP0q8gaNNK9wfdFfn2oAZggEIRVLwJF0e6ZWir15MatoC8G_qxQurp1lA5LKjg_NEiw&sds=2&rev=85392&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=alBvQ9EJb9KORNg_p8_D9MB6xNyz2v1kZu3BW2LUhJDwJYxkI3zZv_dpnz8geno4T7AapbxKhFHNRoHC6Av51FxkQvguBKWUdVis7R52qrVYfGqLeljsKcUCV0xPXXtybpAJ3wljbxjBu5YZU8ilO0FkiodZfWAUHvxs0zhO5u0lbCB2kpdgDN_2-GE1rR3a9rjLP0q8gaNNK9wfdFfn2oAZggEIRVLwJF0e6ZWir15MatoC8G_qxQurp1lA5LKjg_NEiw&sds=2&rev=85392&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=alBvQ9EJb9KORNg_p8_D9MB6xNyz2v1kZu3BW2LUhJDwJYxkI3zZv_dpnz8geno4T7AapbxKhFHNRoHC6Av51FxkQvguBKWUdVis7R52qrVYfGqLeljsKcUCV0xPXXtybpAJ3wljbxjBu5YZU8ilO0FkiodZfWAUHvxs0zhO5u0lbCB2kpdgDN_2-GE1rR3a9rjLP0q8gaNNK9wfdFfn2oAZggEIRVLwJF0e6ZWir15MatoC8G_qxQurp1lA5LKjg_NEiw&sds=2&rev=85392&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 09:26:46 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
csm.eu.criteo.net/all?cppv=3&cpp=AHLmNtEJb9KORNg_6WoVkCqCFqF3RREglJlSPaQEMdfUCSPGF46q82uTo0LFic8y5uP3F2HrYXnkiUGj8b1gK5_1sZm5Z4sj0sfGyvOBBYr-xbTNtBPqXQ_KuF4zotKPDYYkIAjFpGm-Y3LVnM_1grTD7HVsUDJUz51oRwJtq9TmPYwtTbShb4CfzU3xoUqvNDrG4VYR5KegE0Wh_wRP2Ai6ZQ1owkBPzGvy4_AIKqtMqstAl7c6SsQfv6YB9ERpdcdZow&sds=2&rev=85392&sendBeacon=true
200 OK 0 B URL HTTP/2 csm.eu.criteo.net/all?cppv=3&cpp=AHLmNtEJb9KORNg_6WoVkCqCFqF3RREglJlSPaQEMdfUCSPGF46q82uTo0LFic8y5uP3F2HrYXnkiUGj8b1gK5_1sZm5Z4sj0sfGyvOBBYr-xbTNtBPqXQ_KuF4zotKPDYYkIAjFpGm-Y3LVnM_1grTD7HVsUDJUz51oRwJtq9TmPYwtTbShb4CfzU3xoUqvNDrG4VYR5KegE0Wh_wRP2Ai6ZQ1owkBPzGvy4_AIKqtMqstAl7c6SsQfv6YB9ERpdcdZow&sds=2&rev=85392&sendBeacon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /all?cppv=3&cpp=AHLmNtEJb9KORNg_6WoVkCqCFqF3RREglJlSPaQEMdfUCSPGF46q82uTo0LFic8y5uP3F2HrYXnkiUGj8b1gK5_1sZm5Z4sj0sfGyvOBBYr-xbTNtBPqXQ_KuF4zotKPDYYkIAjFpGm-Y3LVnM_1grTD7HVsUDJUz51oRwJtq9TmPYwtTbShb4CfzU3xoUqvNDrG4VYR5KegE0Wh_wRP2Ai6ZQ1owkBPzGvy4_AIKqtMqstAl7c6SsQfv6YB9ERpdcdZow&sds=2&rev=85392&sendBeacon=true HTTP/1.1
Host: csm.eu.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 35
Origin: https://ads.eu.criteo.com
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 09:26:46 GMT
server: Finatra
content-length: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ym/l/0,cross/M1m_oAL4ZnF.css?_nc_x=Ij3Wp8lg5Kz
200 OK 5.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ym/l/0,cross/M1m_oAL4ZnF.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4431)
Hash 235699d638c456c093c6aa992b22afe1
cbf3623e0c13697003c1e996b97bacc054a88db7
8811301460665e66ddc244870420c64e68e4330235dfd43f2407c4d713fdf343
GET /rsrc.php/v3/ym/l/0,cross/M1m_oAL4ZnF.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 20 Mar 2024 17:07:47 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: I1aZ1jjEVsCTxqqZKyKv4Q==
x-fb-debug: nghKMc67aUNHy8RPjtEoSku8F3VL6Uam0J7sYSnNmj/B8OSjFAQAzIY8mN4d60lK5QLL9aYk33yjL2Y9hyN0hA==
content-length: 5081
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ye/l/0,cross/h3x6NT0-_oU.css?_nc_x=Ij3Wp8lg5Kz
200 OK 5.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ye/l/0,cross/h3x6NT0-_oU.css?_nc_x=Ij3Wp8lg5Kz
IP
File type assembler source, ASCII text, with very long lines (4200)
Hash 4e6457e0e97211852f3b5f6a79f6a12a
288f0fb0d31810ee5e63b13ed54e9c029e1bdd35
15f356a207feec0d8fc34098d789b2ef3028bb851428119b830ccaaf799a7bc0
GET /rsrc.php/v3/ye/l/0,cross/h3x6NT0-_oU.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 20 Mar 2024 17:07:47 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: TmRX4OlyEYUvO19qefahKg==
x-fb-debug: SM+4JzawveuuZbZOXiA4F08naIU70JeyePsmnKNiMIqGLw7X44qZR6eY0oE9aW0qfsxDnDKTgEk7XKJantt4xg==
content-length: 5384
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz
200 OK 830 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (724)
Hash d63a02ce87c07ffcfa869fef7fc5f233
cae745fef84088abe3525bb77f75c55cd1d4cc2c
bf9d4d71541a0a1f31b10be351add847ee935da6de355756314c8ca96512444d
GET /rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Mar 2024 01:34:28 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 1joCzofAf/z6hp/vf8XyMw==
x-fb-debug: JykirIjWm+Jqd3gX1LmsOxMfNB2bGGERC4yT05HqQwxcKy1nY5LMF1E42O3L8QHf9RHXCtLGWju+SowxSObiKQ==
content-length: 830
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y_/r/cQ42bRjbU1L.js?_nc_x=Ij3Wp8lg5Kz
200 OK 83 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y_/r/cQ42bRjbU1L.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (18631)
Hash 4aa36c44e7cafe4bc43791979b7a856d
942247a1751bdac1446171bd2a769f898089d9ab
5b17447d4bcada83bb7409346680d7c510820356d64d660c1067bde6ff4f581d
GET /rsrc.php/v3/y_/r/cQ42bRjbU1L.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Mar 2024 21:17:04 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: SqNsROfK/kvEN5GXm3qFbQ==
x-fb-debug: YLyPhcjGJ88xyYgUnhDb+RozsqCHkifWS8jytqyu2QHYq2NYF1SRv6VHx3WxPlqisdRCP20Hk7wMgXQfRB6XHA==
content-length: 83163
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yT/r/OJCMaWZXA92.js?_nc_x=Ij3Wp8lg5Kz
200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yT/r/OJCMaWZXA92.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5542)
Hash 7b5d6f17d6a6871b29b0d08f6b5a4068
323d7d3de48389d16faeabbe00cd28bbd3977c59
3293ea0538ae7251b96682e5c9193a917cad8ad67308dbc317e54656905f9835
GET /rsrc.php/v3/yT/r/OJCMaWZXA92.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Mar 2024 17:00:16 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: e11vF9amhxspsNCPa1pAaA==
x-fb-debug: bVubqDcDt+K/YRcQvbx4NVM2IFMRmAIol+iuK6W/YIlwqkr6bqUCHpEjEyjhcWClheV2eB2NkEiClGXfZJtxUg==
content-length: 12463
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yd/r/uEaQN8rxL6w.js?_nc_x=Ij3Wp8lg5Kz
200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yd/r/uEaQN8rxL6w.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (10442)
Hash c9e33c9f2ec5501f10f56f31f2a4ea20
32e3919833369df42e87183e491f2ecf377f40a3
f32897f017df545e3c9a616783d0b4b8ab20a6e38238df80c4b9ce210dec1184
GET /rsrc.php/v3/yd/r/uEaQN8rxL6w.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 17 Mar 2024 17:23:24 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: yeM8ny7FUB8Q9W8x8qTqIA==
x-fb-debug: /5ZiS49Wv+fP8ssB6hEkw30Whh9MtUk82FXHn1S0IY7AfC+C7JtD6c/rrdTScM7SFA5wsGHKT3fitVtq3+suXw==
content-length: 16106
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yi/r/lBHJxasLvo5.js?_nc_x=Ij3Wp8lg5Kz
200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yi/r/lBHJxasLvo5.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (1984)
Hash bfe25f70763a42364b0bc16a4309b150
f148b2300060c630e88eaf982d5e09541efa473d
89ac1652f0bdf9be4474515a27459b32a5e53be473eed8057d6e6a6a6eb5e595
GET /rsrc.php/v3/yi/r/lBHJxasLvo5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Mar 2024 17:00:16 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: v+JfcHY6QjZLC8FqQwmxUA==
x-fb-debug: vOS4LfgNKxsyUHhjCiSZYZUHNslKeP4fdmQ2htOnCM9F8NlS9jHkrPVqBPLRChFOvte0o+xC/kUNUZf4/iuKsQ==
content-length: 1702
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yq/r/GVfW0kcuU9p.js?_nc_x=Ij3Wp8lg5Kz
200 OK 6.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yq/r/GVfW0kcuU9p.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (5850)
Hash c89abc337263e2e38a7d96fea29dee13
bfe97f247912bf0a767f248fcdc057d09fd7403c
a0f3ea5db613c4c23fe8a9a436c423d341f7a178684455330caac6a85001adad
GET /rsrc.php/v3/yq/r/GVfW0kcuU9p.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 20 Mar 2024 23:05:53 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: yJq8M3Jj4uOKfZb+op3uEw==
x-fb-debug: b0nrlxoCTTTOaohq4bFY+MSTE1pKJsqaEC/jFZ5TEumdiKnIwO6B9dKmqPqG0wfQdvWH3+BpySgftxSMHsqzYQ==
content-length: 6400
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
200 OK 293 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (327)
Hash 2f913d812811ef7e6fca30334c5972e2
d17caaa167443dc08696c672380f237e0db3fb02
ee8918a2f5d163099104b70f79065abc8fd309e69add57170546f2706956eef8
GET /rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 20 Mar 2024 16:10:34 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: L5E9gSgR735vyjAzTFly4g==
x-fb-debug: eBw0Ws2obYOt9mMUd70tF4QjGygyI+VxFRVqRK98lxvSAkxWDJ9dYLluTW8RsRnyPzx7YWKze3HIqBU+kjPCBA==
content-length: 293
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3i_P84/yu/l/ru_RU/6j877F6jo5R.js?_nc_x=Ij3Wp8lg5Kz
200 OK 62 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3i_P84/yu/l/ru_RU/6j877F6jo5R.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (29370)
Hash 9b4cfba3adc7d2d97c71eb1787717ed6
9c685a6beafe4d1dfe97635bd03e86d8209f3003
e9f1ae29414ca8ce37bf347a128fd438f3709b0a25fa1d7bfab4499b03806d9f
GET /rsrc.php/v3i_P84/yu/l/ru_RU/6j877F6jo5R.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 20 Mar 2024 23:24:36 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: m0z7o63H0tl8cesXh3F+1g==
x-fb-debug: znIY2jEkGpiHusLttyum9e5tsUvTgSDGMi5aw299U2Epl2IcRoDzKrVuIHM9HOTJ1wYhSvTNa5iIrmsNd+MLCA==
content-length: 61681
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y9/r/zTAcZgbV8nB.js?_nc_x=Ij3Wp8lg5Kz
200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y9/r/zTAcZgbV8nB.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (15192)
Hash 3524f4254a26691461283cd1b6a7d5a1
1089de0ce74ead6c993ee1e55bc13029fc4b4d08
ac6e4f47d63153eab3a33685e38ae2cafe583c9519f80da2793649857f32eb72
GET /rsrc.php/v3/y9/r/zTAcZgbV8nB.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 20 Mar 2024 20:31:53 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: NST0JUomaRRhKDzRtqfVoQ==
x-fb-debug: sGlkofg60RdtHwAFhyn5F20A5pYuv13i4sBYMAPYoxe6jgdVI6E4HKaDezMxOpu6p1mvNmOyoCJWDioXU1VkfA==
content-length: 16144
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iI4w4/yb/l/ru_RU/RKHWAVnCZvs.js?_nc_x=Ij3Wp8lg5Kz
200 OK 21 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iI4w4/yb/l/ru_RU/RKHWAVnCZvs.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (31036)
Hash 68962d83e8579acccfea9a746bff33a9
c0dbb0083309ba5eeb3006b654090d950c02a7f3
f8a107f0ddef795d67d80b581b669e5f0ce7feb19fa9ceca8e84cef46f149556
GET /rsrc.php/v3iI4w4/yb/l/ru_RU/RKHWAVnCZvs.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 20 Mar 2024 23:14:46 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: aJYtg+hXmszP6pp0a/8zqQ==
x-fb-debug: kYGAZaSxiv0yceDGyafhCbdecd7vsVEn7llM4gv1SjbJ2NmwQa2YCh7PcKCBF38QkSOZcV823cGbV63xm3KLvQ==
content-length: 21119
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3i7dh4/yU/l/ru_RU/SV0HgmB8RsT.js?_nc_x=Ij3Wp8lg5Kz
200 OK 9.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3i7dh4/yU/l/ru_RU/SV0HgmB8RsT.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5962)
Hash 8720159b7356a103ce98f2c09b8da827
b243c4bc9560ed73e51e0de655deda6fbe1c5f72
943bb7b5dc4486288137bafefd7cfdbbab72a01edf05c9bbafeafe679a4896a4
GET /rsrc.php/v3i7dh4/yU/l/ru_RU/SV0HgmB8RsT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Mar 2024 19:55:04 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: hyAVm3NWoQPOmPLAm42oJw==
x-fb-debug: jM8H0RcPLFu1QtU+aVoF7wb5IFJHWObP8HBZyzI7UnlxE805K4byavvF/uLURlC7DrmsPFZaS71bermbg+2gvw==
content-length: 9074
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yR/r/T7DAr9Vaj3m.js?_nc_x=Ij3Wp8lg5Kz
200 OK 7.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yR/r/T7DAr9Vaj3m.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4643)
Hash 77d84b30ec3843e5259f6a11543ccc13
ecdd4cdd4b335676c4384f4e02b74030ae3a2b60
82000e8e0a9d2a621f028b3adbb8b3b29099b5b3f4b5720e7b15a88ba3d605b9
GET /rsrc.php/v3/yR/r/T7DAr9Vaj3m.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 17 Mar 2024 17:23:24 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: d9hLMOw4Q+Uln2oRVDzMEw==
x-fb-debug: BZ7yzE3rM0k2Vjlq9bSorccwW3AK9rEJEiJQBnbzTPxOd9OqmnQJUmsKm9vneeSQf7Iw5CK+dxu2412KA0RgBg==
content-length: 7395
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yY/r/V8jK12UmQ6C.js?_nc_x=Ij3Wp8lg5Kz
200 OK 1.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yY/r/V8jK12UmQ6C.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (1491)
Hash 1bde0ac6621dfc6b3a6e6a5f9b4e3f45
4b50211745019eede9493f2503e7975e71854e2c
f8c8d80f77bb77658e81b5b457481a4a34aa09c7d2e1839fe5e8bb598794c5c8
GET /rsrc.php/v3/yY/r/V8jK12UmQ6C.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 20 Mar 2024 20:46:11 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: G94KxmId/Gs6bmpfm04/RQ==
x-fb-debug: kGk6VL4DgMj6pEyd4jxdwqg4Bb+GzXpuMexL4pWHdCbY3LlgvQXbv5yGp2wYOYC+TW6FYP/TeHciX43KNtGzWA==
content-length: 1248
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y-/r/Wtl6tMxz2hH.js?_nc_x=Ij3Wp8lg5Kz
200 OK 9.0 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y-/r/Wtl6tMxz2hH.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5531)
Hash ceb7a84fd8598da30c60c449d40133ce
4f461d97216d437c00438873a1e0f7b708a39363
69af754dcd499789c8c7803b27e5e83343c8d93ce359e91cf3c274f759730321
GET /rsrc.php/v3/y-/r/Wtl6tMxz2hH.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 12 Mar 2024 15:58:06 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: zreoT9hZjaMMYMRJ1AEzzg==
x-fb-debug: Zr44WqWmpECSBhMXj7azcBQrKIbgWQfXiYEl0zM5WLpNUiKV1z8oPDTot5vT6sHZ7FPxvh24V3/kP/vOJkoXHA==
content-length: 8978
x-fb-trip-id: 1904183273
date: Wed, 22 Mar 2023 09:26:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/v2.0/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfec7cc75785e2c%26domain%3Dsewing-yes.blogspot.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fsewing-yes.blogspot.com%252Ffe5dbfacd4b94a%26relation%3Dparent.parent&color_scheme=light&container_width=205&header=true&height=400&href=https%3A%2F%2Fwww.facebook.com%2Fpages%2F%25D0%259B%25D1%258E%25D0%25B1%25D0%25B8%25D1%2582%25D0%25B5%25D0%25BB%25D0%25B8-%25D1%2580%25D1%2583%25D0%25BA%25D0%25BE%25D0%25B4%25D0%25B5%25D0%25BB%25D0%25B8%25D1%258F%2F377037082352049%3Fref%3Dbookmarks&locale=ru_RU&sdk=joey&show_border=true&show_faces=false&stream=true&width=220
200 OK 32 kB URL HTTP/2 www.facebook.com/v2.0/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfec7cc75785e2c%26domain%3Dsewing-yes.blogspot.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fsewing-yes.blogspot.com%252Ffe5dbfacd4b94a%26relation%3Dparent.parent&color_scheme=light&container_width=205&header=true&height=400&href=https%3A%2F%2Fwww.facebook.com%2Fpages%2F%25D0%259B%25D1%258E%25D0%25B1%25D0%25B8%25D1%2582%25D0%25B5%25D0%25BB%25D0%25B8-%25D1%2580%25D1%2583%25D0%25BA%25D0%25BE%25D0%25B4%25D0%25B5%25D0%25BB%25D0%25B8%25D1%258F%2F377037082352049%3Fref%3Dbookmarks&locale=ru_RU&sdk=joey&show_border=true&show_faces=false&stream=true&width=220
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (57914)
Hash d2f99d718eaf6e17ad526bb77d0c51ba
9b7ae075cf399e85b1e6623458a75e117af59030
78182a4e5497a3cf430fdb8e693fd1f1a118b6a78249431f64636a1fdbc1a84f
GET /v2.0/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfec7cc75785e2c%26domain%3Dsewing-yes.blogspot.com%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fsewing-yes.blogspot.com%252Ffe5dbfacd4b94a%26relation%3Dparent.parent&color_scheme=light&container_width=205&header=true&height=400&href=https%3A%2F%2Fwww.facebook.com%2Fpages%2F%25D0%259B%25D1%258E%25D0%25B1%25D0%25B8%25D1%2582%25D0%25B5%25D0%25BB%25D0%25B8-%25D1%2580%25D1%2583%25D0%25BA%25D0%25BE%25D0%25B4%25D0%25B5%25D0%25BB%25D0%25B8%25D1%258F%2F377037082352049%3Fref%3Dbookmarks&locale=ru_RU&sdk=joey&show_border=true&show_faces=false&stream=true&width=220 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sewing-yes.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v10.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: aN9Gl6p6Py+MU0ApK/BZnmUycF9eEJuzvHzcbnMYRSi89fR2PiymKCP5k+cdg1uJsW4YsYLdcPvmhtyaWbt+JQ==
date: Wed, 22 Mar 2023 09:26:47 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cat.fr.eu.criteo.com/delivery/lg.php?cppv=3&cpp=RUQ_H653B9rnuK1wYYK64mDFXJ4ukWnzd7TSAsSJVoosPCI1VWV1NRVqF6eSDmD6cMuH5Aus4c5CF9Kg7CZz_iOWV_keprakfSm06ZF7SxVQd2grrZFDUGYhlz0RXFWiRmebGHQA87BRs5MHWZIC1PtOqWEpOnG8N-M9zFYPz-McHRyhoqmj8ZIUefxDpR6Xsv4e8rw1VzpXtWdxQspP28S-8YYWdRHMicNb1Uzf-ZaFxaySAUURk3_fv7ttQuNKeJaIHFAGbSGtRf1fxmF2HvHqLAIcrAUllqyOZZ53UtHeIkK6FHVNUF8IVBiP4emMBtK4xDaNSqFcDY8eirED3TPc-LGSJ3T5obgbN_bH20gm1BZjbHVE90-US9A0RTWWy-wMqym3-B_f_y_Vln6EVt5fkuWNZSZrqq7pYfXkB9UMeGFxmyTV8S3eUf-m5Z5i5jjrsQ
200 OK 0 B URL HTTP/2 cat.fr.eu.criteo.com/delivery/lg.php?cppv=3&cpp=RUQ_H653B9rnuK1wYYK64mDFXJ4ukWnzd7TSAsSJVoosPCI1VWV1NRVqF6eSDmD6cMuH5Aus4c5CF9Kg7CZz_iOWV_keprakfSm06ZF7SxVQd2grrZFDUGYhlz0RXFWiRmebGHQA87BRs5MHWZIC1PtOqWEpOnG8N-M9zFYPz-McHRyhoqmj8ZIUefxDpR6Xsv4e8rw1VzpXtWdxQspP28S-8YYWdRHMicNb1Uzf-ZaFxaySAUURk3_fv7ttQuNKeJaIHFAGbSGtRf1fxmF2HvHqLAIcrAUllqyOZZ53UtHeIkK6FHVNUF8IVBiP4emMBtK4xDaNSqFcDY8eirED3TPc-LGSJ3T5obgbN_bH20gm1BZjbHVE90-US9A0RTWWy-wMqym3-B_f_y_Vln6EVt5fkuWNZSZrqq7pYfXkB9UMeGFxmyTV8S3eUf-m5Z5i5jjrsQ
IP
GET /delivery/lg.php?cppv=3&cpp=RUQ_H653B9rnuK1wYYK64mDFXJ4ukWnzd7TSAsSJVoosPCI1VWV1NRVqF6eSDmD6cMuH5Aus4c5CF9Kg7CZz_iOWV_keprakfSm06ZF7SxVQd2grrZFDUGYhlz0RXFWiRmebGHQA87BRs5MHWZIC1PtOqWEpOnG8N-M9zFYPz-McHRyhoqmj8ZIUefxDpR6Xsv4e8rw1VzpXtWdxQspP28S-8YYWdRHMicNb1Uzf-ZaFxaySAUURk3_fv7ttQuNKeJaIHFAGbSGtRf1fxmF2HvHqLAIcrAUllqyOZZ53UtHeIkK6FHVNUF8IVBiP4emMBtK4xDaNSqFcDY8eirED3TPc-LGSJ3T5obgbN_bH20gm1BZjbHVE90-US9A0RTWWy-wMqym3-B_f_y_Vln6EVt5fkuWNZSZrqq7pYfXkB9UMeGFxmyTV8S3eUf-m5Z5i5jjrsQ HTTP/1.1
Host: cat.fr.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
server-processing-duration-in-ticks: 2966041
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
cat.fr.eu.criteo.com/delivery/lg.php?cppv=3&cpp=XPorTShz3duLB_cuXiHGfwANVo_-y1M2eKWlXyQ8LlWTvTUFWtLpbt2ard_nGpc2Mk_vACxtsTryh8N7LVaJiWVdogOGhBGWw7oIjzU6VOLXoKn_lUmEQZlskQWslUk94jFQtpIykX_wwMMx3G65mO44s1Y9u_5oag-rFRhQeLMImvNYNNFplGmjbhGezdcOqr34vnaZ5zWzEBnkbZVvl7oZnIF-Bfx6ThWMlQcWGOjMaXH5PLK3pi8T71TtsJ5w4GeRE3suMYZgApKs6NOxTtezjQ0X2v-2zC2_5tsJ6-GnaKL-0SlHa3IW2yyAXEGK9lDNdlIyOQc8yKqgzV4H6unwasi9aLBFNMKXhvaJRQv0bVLRBWxCpyvhnHJrviNWHgBWgu44_i5j3SERFHYwOFFj5aaLmcla6nGtJSfYRahySYgMnXLHbXXGs8rsC-lAyLFPLA
200 OK 0 B URL HTTP/2 cat.fr.eu.criteo.com/delivery/lg.php?cppv=3&cpp=XPorTShz3duLB_cuXiHGfwANVo_-y1M2eKWlXyQ8LlWTvTUFWtLpbt2ard_nGpc2Mk_vACxtsTryh8N7LVaJiWVdogOGhBGWw7oIjzU6VOLXoKn_lUmEQZlskQWslUk94jFQtpIykX_wwMMx3G65mO44s1Y9u_5oag-rFRhQeLMImvNYNNFplGmjbhGezdcOqr34vnaZ5zWzEBnkbZVvl7oZnIF-Bfx6ThWMlQcWGOjMaXH5PLK3pi8T71TtsJ5w4GeRE3suMYZgApKs6NOxTtezjQ0X2v-2zC2_5tsJ6-GnaKL-0SlHa3IW2yyAXEGK9lDNdlIyOQc8yKqgzV4H6unwasi9aLBFNMKXhvaJRQv0bVLRBWxCpyvhnHJrviNWHgBWgu44_i5j3SERFHYwOFFj5aaLmcla6nGtJSfYRahySYgMnXLHbXXGs8rsC-lAyLFPLA
IP
GET /delivery/lg.php?cppv=3&cpp=XPorTShz3duLB_cuXiHGfwANVo_-y1M2eKWlXyQ8LlWTvTUFWtLpbt2ard_nGpc2Mk_vACxtsTryh8N7LVaJiWVdogOGhBGWw7oIjzU6VOLXoKn_lUmEQZlskQWslUk94jFQtpIykX_wwMMx3G65mO44s1Y9u_5oag-rFRhQeLMImvNYNNFplGmjbhGezdcOqr34vnaZ5zWzEBnkbZVvl7oZnIF-Bfx6ThWMlQcWGOjMaXH5PLK3pi8T71TtsJ5w4GeRE3suMYZgApKs6NOxTtezjQ0X2v-2zC2_5tsJ6-GnaKL-0SlHa3IW2yyAXEGK9lDNdlIyOQc8yKqgzV4H6unwasi9aLBFNMKXhvaJRQv0bVLRBWxCpyvhnHJrviNWHgBWgu44_i5j3SERFHYwOFFj5aaLmcla6nGtJSfYRahySYgMnXLHbXXGs8rsC-lAyLFPLA HTTP/1.1
Host: cat.fr.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.eu.criteo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 09:26:45 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
server-processing-duration-in-ticks: 2767286
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ads.eu.criteo.com/delivery/r/afr.php?z=ZBrJ1AADWZ8KwkiYAAmypmW5IOEw4-IzZ1sInQ&u=%7C5vrgA7tw0TadbgZju8%2F6GX9%2FjcusH3FyvmHJRPkEqrA%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqyDsvBp4X-0QD3WoDqftjeOi_RL70L9weoh4T5QOi36Ae69TcSqA4HR2u3FLE3LBNmef0XYRyYguTBnRHbyode7SwesOP8BnDQ9ykPMCklZzI6_tyWcUOspfJnZ7FoEnQAsesk2imxEf-ZLvOgmtOSkXmlUETyGwfGHN0Qpo4khAsvNYwcqXL6AN7t155Fh57SIrIzuOKFmUui1pXuZjiUPxJcg7Jr47-SYJrNO7Z_s1SEt5q2bRS2a0ELBJSa93NbmtqsGwXOuSCcjY_cQztUE5UMTWGCbg0zv561By-YnIk6fv2oXWsSE93jyesJi-Vh0j_v7Z1YH73CrXSRPBiacdD17o4afiOEfsn2lNh7RX8qtEXjibpIbhg0x7dRXjhpKQ3r2v7x7ID5HhnphliddTDShxkD0o64q0Yj3T1PYQM1CmmjqLmIGkRFZxamcINXiVZJRzavQF7VguldTVBaKankgtHLlJ0dsgL_M3-2jF4L1Dl-k0mjNYpt69WCvo5RgdQ-6cvcOmgM19vCUTXGmkj4CwQjBhOLGyLpfZvJLuKzqMQPMvSU&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCGjWO1MkaZJ-zDZiRiQam5abgAcme0rFcpfyT93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItNDI1MzU1MTY2MDkxNDU2OcgBCakCRsxkxXQRsj6oAwGqBIgCT9A2sdb3OIk1MvOkVBhLSMJZzc6g2pZrtKqps-r8MgclNG5_7GzRunuh25AHSwrkRg9GUUy11jItDtlhCXeGqw2-nHbzn4zQhyc9g-wfChZuBz0hlB4pZGNHxYTMEJN2sKQNkN5JVRRo-Gg4Nn_1KuldAKxrsw8R5-nYg8gif_iS0uc36Q7wwHanmTwVVQXcPZpNfU2o3UyRzBYzu0pumuSe48It_w3h5Jczm8WBwxrPXJm8XnmNwjK7UQXEickdBXjN4X1jbaOgDwUPDyu0cf9-lLDQoUCWd5LfF45e7EaF_VhMH41jk1T53jl8XQmQeI2bQdl0GuEHjrRmfP0kCjYzmqilnnXjgAb-u9fLnY__tGugBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggPCIDhgHAQATIC6wI6AoBA-gsCCAGADAHQFQGAFwE%26num%3D1%26sig%3DAOD64_09zqyby3DhvHPa_uWnvF7k_rU2uQ%26client%3Dca-pub-4253551660914569%26adurl%3D
200 OK 0 B URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=ZBrJ1AADWZ8KwkiYAAmypmW5IOEw4-IzZ1sInQ&u=%7C5vrgA7tw0TadbgZju8%2F6GX9%2FjcusH3FyvmHJRPkEqrA%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqyDsvBp4X-0QD3WoDqftjeOi_RL70L9weoh4T5QOi36Ae69TcSqA4HR2u3FLE3LBNmef0XYRyYguTBnRHbyode7SwesOP8BnDQ9ykPMCklZzI6_tyWcUOspfJnZ7FoEnQAsesk2imxEf-ZLvOgmtOSkXmlUETyGwfGHN0Qpo4khAsvNYwcqXL6AN7t155Fh57SIrIzuOKFmUui1pXuZjiUPxJcg7Jr47-SYJrNO7Z_s1SEt5q2bRS2a0ELBJSa93NbmtqsGwXOuSCcjY_cQztUE5UMTWGCbg0zv561By-YnIk6fv2oXWsSE93jyesJi-Vh0j_v7Z1YH73CrXSRPBiacdD17o4afiOEfsn2lNh7RX8qtEXjibpIbhg0x7dRXjhpKQ3r2v7x7ID5HhnphliddTDShxkD0o64q0Yj3T1PYQM1CmmjqLmIGkRFZxamcINXiVZJRzavQF7VguldTVBaKankgtHLlJ0dsgL_M3-2jF4L1Dl-k0mjNYpt69WCvo5RgdQ-6cvcOmgM19vCUTXGmkj4CwQjBhOLGyLpfZvJLuKzqMQPMvSU&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCGjWO1MkaZJ-zDZiRiQam5abgAcme0rFcpfyT93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItNDI1MzU1MTY2MDkxNDU2OcgBCakCRsxkxXQRsj6oAwGqBIgCT9A2sdb3OIk1MvOkVBhLSMJZzc6g2pZrtKqps-r8MgclNG5_7GzRunuh25AHSwrkRg9GUUy11jItDtlhCXeGqw2-nHbzn4zQhyc9g-wfChZuBz0hlB4pZGNHxYTMEJN2sKQNkN5JVRRo-Gg4Nn_1KuldAKxrsw8R5-nYg8gif_iS0uc36Q7wwHanmTwVVQXcPZpNfU2o3UyRzBYzu0pumuSe48It_w3h5Jczm8WBwxrPXJm8XnmNwjK7UQXEickdBXjN4X1jbaOgDwUPDyu0cf9-lLDQoUCWd5LfF45e7EaF_VhMH41jk1T53jl8XQmQeI2bQdl0GuEHjrRmfP0kCjYzmqilnnXjgAb-u9fLnY__tGugBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggPCIDhgHAQATIC6wI6AoBA-gsCCAGADAHQFQGAFwE%26num%3D1%26sig%3DAOD64_09zqyby3DhvHPa_uWnvF7k_rU2uQ%26client%3Dca-pub-4253551660914569%26adurl%3D
IP
GET /delivery/r/afr.php?z=ZBrJ1AADWZ8KwkiYAAmypmW5IOEw4-IzZ1sInQ&u=%7C5vrgA7tw0TadbgZju8%2F6GX9%2FjcusH3FyvmHJRPkEqrA%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqyDsvBp4X-0QD3WoDqftjeOi_RL70L9weoh4T5QOi36Ae69TcSqA4HR2u3FLE3LBNmef0XYRyYguTBnRHbyode7SwesOP8BnDQ9ykPMCklZzI6_tyWcUOspfJnZ7FoEnQAsesk2imxEf-ZLvOgmtOSkXmlUETyGwfGHN0Qpo4khAsvNYwcqXL6AN7t155Fh57SIrIzuOKFmUui1pXuZjiUPxJcg7Jr47-SYJrNO7Z_s1SEt5q2bRS2a0ELBJSa93NbmtqsGwXOuSCcjY_cQztUE5UMTWGCbg0zv561By-YnIk6fv2oXWsSE93jyesJi-Vh0j_v7Z1YH73CrXSRPBiacdD17o4afiOEfsn2lNh7RX8qtEXjibpIbhg0x7dRXjhpKQ3r2v7x7ID5HhnphliddTDShxkD0o64q0Yj3T1PYQM1CmmjqLmIGkRFZxamcINXiVZJRzavQF7VguldTVBaKankgtHLlJ0dsgL_M3-2jF4L1Dl-k0mjNYpt69WCvo5RgdQ-6cvcOmgM19vCUTXGmkj4CwQjBhOLGyLpfZvJLuKzqMQPMvSU&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCGjWO1MkaZJ-zDZiRiQam5abgAcme0rFcpfyT93DAjbcBEAEgAGDDhICAmBiCARdjYS1wdWItNDI1MzU1MTY2MDkxNDU2OcgBCakCRsxkxXQRsj6oAwGqBIgCT9A2sdb3OIk1MvOkVBhLSMJZzc6g2pZrtKqps-r8MgclNG5_7GzRunuh25AHSwrkRg9GUUy11jItDtlhCXeGqw2-nHbzn4zQhyc9g-wfChZuBz0hlB4pZGNHxYTMEJN2sKQNkN5JVRRo-Gg4Nn_1KuldAKxrsw8R5-nYg8gif_iS0uc36Q7wwHanmTwVVQXcPZpNfU2o3UyRzBYzu0pumuSe48It_w3h5Jczm8WBwxrPXJm8XnmNwjK7UQXEickdBXjN4X1jbaOgDwUPDyu0cf9-lLDQoUCWd5LfF45e7EaF_VhMH41jk1T53jl8XQmQeI2bQdl0GuEHjrRmfP0kCjYzmqilnnXjgAb-u9fLnY__tGugBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7EC2AcA0ggPCIDhgHAQATIC6wI6AoBA-gsCCAGADAHQFQGAFwE%26num%3D1%26sig%3DAOD64_09zqyby3DhvHPa_uWnvF7k_rU2uQ%26client%3Dca-pub-4253551660914569%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 09:26:43 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=alBvQ9EJb9KORNg_p8_D9MB6xNyz2v1kZu3BW2LUhJDwJYxkI3zZv_dpnz8geno4T7AapbxKhFHNRoHC6Av51FxkQvguBKWUdVis7R52qrVYfGqLeljsKcUCV0xPXXtybpAJ3wljbxjBu5YZU8ilO0FkiodZfWAUHvxs0zhO5u0lbCB2kpdgDN_2-GE1rR3a9rjLP0q8gaNNK9wfdFfn2oAZggEIRVLwJF0e6ZWir15MatoC8G_qxQurp1lA5LKjg_NEiw"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 147929930
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ads.eu.criteo.com/delivery/r/afr.php?z=ZBrJ1AADlXECHkntAAcnbjgjoJYTWOSmecy8oQ&u=%7C5vrgA7tw0TZueTPzw%2FS6gu9%2FQbyTMvlpH%2BxXmkuyohs%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqBkwvNjl8q6e-4vOkZyr-tuWKbg6CJmKXtoXd-uP2Z8Y1J0k_HgMub9cJES4oIahPk1XgaTne5ajNlXzw-6QlgFNnPTWc6iy1XJ0EVPCMs1ECy2540dx-C2Ww3khlHBmVcjGcUxw_gYKb2XTqhM4hFpXeiFAM3yCdu8-H_3mjsr85OaRMdKSe6zZwcLvtnRWSkma98aZpqhHfxj9C3M86_acIt6ukigi6A9XRFtOm8JgfpDNV-3_xgbivJ6bXomv_0dJB9LgCijTAVUuzLiHyLpSp2T5OzEXPtyhcSyazZoSwzWkrO_dZwiB-ExXff7-RIdP9iRNapRgAQjQpTSCwbXTmkFwKmOnHXPHYB8tZ0qB84YYX5mNTH7CXX9Pceh5gvxGu9sE24GWDxQH9bvn9SodG88ANHXVh6NYRFVfaR1q1LfJx6ljXTfz9p8JulYlMPjkDLkXaH8rxaHYcYTXy64ddX_kRcS17u9kR8EtkbEu8V-89KCL1ARkfXSUwHZXBf7r9kMfBmavRdDS6FXvLaYTLDhjHtNCQywfzWGtUTDtxFCCdtXTtQ&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCx0We1MkaZPGqDu2T-cAP7s6cgA_JntKxXPXqoYaIAcCNtwEQASAAYMOEgICYGIIBF2NhLXB1Yi00MjUzNTUxNjYwOTE0NTY5yAEJqQJGzGTFdBGyPqgDAaoEjQJP0O46vWOckGl0wKjvqoL1_WNjT4ONnXM2NvS7Cp0nv7cZXVnlvd5wzzoMtdHcZmFC5Y5fGBiVaZO-s2JcdiRCflso6wRk3LF7wB7OdWwVM1hWJUltc3uykEzvBjU-hKgAWa7IjahkYV2XaT9_k0UtfjnFUS8rD57xYXJ5Ilzv7y1CxzFWK8LhGYazB5I0-BJLNPyTP-kvsAT03ojtHSZ6xUSkDuxdEGI6sOPDkPkzCMi0-U_tHm8X2_p6EkAV-7SPh6ZSImU4xDxdfFXnc3_ZyleqL0LfDmEKeu8qGAeLTenJ46HDD5Ib9gr9vcn6MGsKnxQvF78jG76YoThqv721fdBB7FeOOMfOSh2awYAG3a3inMabjauLAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAcBABMgLrAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_0fGCP7GTgY_aIUbA8z90X4fyUYfw%26client%3Dca-pub-4253551660914569%26adurl%3D
200 OK 0 B URL HTTP/2 ads.eu.criteo.com/delivery/r/afr.php?z=ZBrJ1AADlXECHkntAAcnbjgjoJYTWOSmecy8oQ&u=%7C5vrgA7tw0TZueTPzw%2FS6gu9%2FQbyTMvlpH%2BxXmkuyohs%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqBkwvNjl8q6e-4vOkZyr-tuWKbg6CJmKXtoXd-uP2Z8Y1J0k_HgMub9cJES4oIahPk1XgaTne5ajNlXzw-6QlgFNnPTWc6iy1XJ0EVPCMs1ECy2540dx-C2Ww3khlHBmVcjGcUxw_gYKb2XTqhM4hFpXeiFAM3yCdu8-H_3mjsr85OaRMdKSe6zZwcLvtnRWSkma98aZpqhHfxj9C3M86_acIt6ukigi6A9XRFtOm8JgfpDNV-3_xgbivJ6bXomv_0dJB9LgCijTAVUuzLiHyLpSp2T5OzEXPtyhcSyazZoSwzWkrO_dZwiB-ExXff7-RIdP9iRNapRgAQjQpTSCwbXTmkFwKmOnHXPHYB8tZ0qB84YYX5mNTH7CXX9Pceh5gvxGu9sE24GWDxQH9bvn9SodG88ANHXVh6NYRFVfaR1q1LfJx6ljXTfz9p8JulYlMPjkDLkXaH8rxaHYcYTXy64ddX_kRcS17u9kR8EtkbEu8V-89KCL1ARkfXSUwHZXBf7r9kMfBmavRdDS6FXvLaYTLDhjHtNCQywfzWGtUTDtxFCCdtXTtQ&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCx0We1MkaZPGqDu2T-cAP7s6cgA_JntKxXPXqoYaIAcCNtwEQASAAYMOEgICYGIIBF2NhLXB1Yi00MjUzNTUxNjYwOTE0NTY5yAEJqQJGzGTFdBGyPqgDAaoEjQJP0O46vWOckGl0wKjvqoL1_WNjT4ONnXM2NvS7Cp0nv7cZXVnlvd5wzzoMtdHcZmFC5Y5fGBiVaZO-s2JcdiRCflso6wRk3LF7wB7OdWwVM1hWJUltc3uykEzvBjU-hKgAWa7IjahkYV2XaT9_k0UtfjnFUS8rD57xYXJ5Ilzv7y1CxzFWK8LhGYazB5I0-BJLNPyTP-kvsAT03ojtHSZ6xUSkDuxdEGI6sOPDkPkzCMi0-U_tHm8X2_p6EkAV-7SPh6ZSImU4xDxdfFXnc3_ZyleqL0LfDmEKeu8qGAeLTenJ46HDD5Ib9gr9vcn6MGsKnxQvF78jG76YoThqv721fdBB7FeOOMfOSh2awYAG3a3inMabjauLAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAcBABMgLrAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_0fGCP7GTgY_aIUbA8z90X4fyUYfw%26client%3Dca-pub-4253551660914569%26adurl%3D
IP
GET /delivery/r/afr.php?z=ZBrJ1AADlXECHkntAAcnbjgjoJYTWOSmecy8oQ&u=%7C5vrgA7tw0TZueTPzw%2FS6gu9%2FQbyTMvlpH%2BxXmkuyohs%3D%7C&c1=jWCgqsKSUoWKRvDssmEQ3dRte9oWhU873PslWXxlgwqBkwvNjl8q6e-4vOkZyr-tuWKbg6CJmKXtoXd-uP2Z8Y1J0k_HgMub9cJES4oIahPk1XgaTne5ajNlXzw-6QlgFNnPTWc6iy1XJ0EVPCMs1ECy2540dx-C2Ww3khlHBmVcjGcUxw_gYKb2XTqhM4hFpXeiFAM3yCdu8-H_3mjsr85OaRMdKSe6zZwcLvtnRWSkma98aZpqhHfxj9C3M86_acIt6ukigi6A9XRFtOm8JgfpDNV-3_xgbivJ6bXomv_0dJB9LgCijTAVUuzLiHyLpSp2T5OzEXPtyhcSyazZoSwzWkrO_dZwiB-ExXff7-RIdP9iRNapRgAQjQpTSCwbXTmkFwKmOnHXPHYB8tZ0qB84YYX5mNTH7CXX9Pceh5gvxGu9sE24GWDxQH9bvn9SodG88ANHXVh6NYRFVfaR1q1LfJx6ljXTfz9p8JulYlMPjkDLkXaH8rxaHYcYTXy64ddX_kRcS17u9kR8EtkbEu8V-89KCL1ARkfXSUwHZXBf7r9kMfBmavRdDS6FXvLaYTLDhjHtNCQywfzWGtUTDtxFCCdtXTtQ&ct0=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCx0We1MkaZPGqDu2T-cAP7s6cgA_JntKxXPXqoYaIAcCNtwEQASAAYMOEgICYGIIBF2NhLXB1Yi00MjUzNTUxNjYwOTE0NTY5yAEJqQJGzGTFdBGyPqgDAaoEjQJP0O46vWOckGl0wKjvqoL1_WNjT4ONnXM2NvS7Cp0nv7cZXVnlvd5wzzoMtdHcZmFC5Y5fGBiVaZO-s2JcdiRCflso6wRk3LF7wB7OdWwVM1hWJUltc3uykEzvBjU-hKgAWa7IjahkYV2XaT9_k0UtfjnFUS8rD57xYXJ5Ilzv7y1CxzFWK8LhGYazB5I0-BJLNPyTP-kvsAT03ojtHSZ6xUSkDuxdEGI6sOPDkPkzCMi0-U_tHm8X2_p6EkAV-7SPh6ZSImU4xDxdfFXnc3_ZyleqL0LfDmEKeu8qGAeLTenJ46HDD5Ib9gr9vcn6MGsKnxQvF78jG76YoThqv721fdBB7FeOOMfOSh2awYAG3a3inMabjauLAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQLYBwDSCA8IgOGAcBABMgLrAjoCgED6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_0fGCP7GTgY_aIUbA8z90X4fyUYfw%26client%3Dca-pub-4253551660914569%26adurl%3D HTTP/1.1
Host: ads.eu.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 09:26:43 GMT
content-type: text/html
server: Kestrel
cache-control: private, max-age=0, no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1000
cross-origin-resource-policy: cross-origin
p3p: CP='CUR ADM OUR NOR STA NID'
report-to: {"endpoints":[{"url":"https://csm.eu.criteo.net/heavyad?cppv=3&cpp=AHLmNtEJb9KORNg_6WoVkCqCFqF3RREglJlSPaQEMdfUCSPGF46q82uTo0LFic8y5uP3F2HrYXnkiUGj8b1gK5_1sZm5Z4sj0sfGyvOBBYr-xbTNtBPqXQ_KuF4zotKPDYYkIAjFpGm-Y3LVnM_1grTD7HVsUDJUz51oRwJtq9TmPYwtTbShb4CfzU3xoUqvNDrG4VYR5KegE0Wh_wRP2Ai6ZQ1owkBPzGvy4_AIKqtMqstAl7c6SsQfv6YB9ERpdcdZow"}], "max_age": 86400}
link: <pix.eu.criteo.net>; rel=preconnect; crossorigin, <static.criteo.net>; rel=preconnect; crossorigin
server-processing-duration-in-ticks: 180606320
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D979245542363102775%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzY2OTkiByMzMzY2OTkqC3RyYW5zcGFyZW50MgcjMzM2Njk5OgcjMzM2Njk5QgcjMzM2Njk5SgcjMDAwMDAwUgcjMzM2Njk5Wgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D235551164109799473%26origin%3Dhttp://sewing-yes.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D979245542363102775%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzY2OTkiByMzMzY2OTkqC3RyYW5zcGFyZW50MgcjMzM2Njk5OgcjMzM2Njk5QgcjMzM2Njk5SgcjMDAwMDAwUgcjMzM2Njk5Wgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D235551164109799473%26origin%3Dhttp://sewing-yes.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&go=true
302 Found 0 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D979245542363102775%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzY2OTkiByMzMzY2OTkqC3RyYW5zcGFyZW50MgcjMzM2Njk5OgcjMzM2Njk5QgcjMzM2Njk5SgcjMDAwMDAwUgcjMzM2Njk5Wgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D235551164109799473%26origin%3Dhttp://sewing-yes.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D979245542363102775%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzY2OTkiByMzMzY2OTkqC3RyYW5zcGFyZW50MgcjMzM2Njk5OgcjMzM2Njk5QgcjMzM2Njk5SgcjMDAwMDAwUgcjMzM2Njk5Wgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D235551164109799473%26origin%3Dhttp://sewing-yes.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&go=true
IP
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D979245542363102775%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzY2OTkiByMzMzY2OTkqC3RyYW5zcGFyZW50MgcjMzM2Njk5OgcjMzM2Njk5QgcjMzM2Njk5SgcjMDAwMDAwUgcjMzM2Njk5Wgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D235551164109799473%26origin%3Dhttp://sewing-yes.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D979245542363102775%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzY2OTkiByMzMzY2OTkqC3RyYW5zcGFyZW50MgcjMzM2Njk5OgcjMzM2Njk5QgcjMzM2Njk5SgcjMDAwMDAwUgcjMzM2Njk5Wgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D235551164109799473%26origin%3Dhttp://sewing-yes.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sewing-yes.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 22 Mar 2023 09:26:45 GMT
location: https://www.blogger.com/followers.g?blogID=979245542363102775&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzY2OTkiByMzMzY2OTkqC3RyYW5zcGFyZW50MgcjMzM2Njk5OgcjMzM2Njk5QgcjMzM2Njk5SgcjMDAwMDAwUgcjMzM2Njk5Wgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&postID=235551164109799473&origin=http://sewing-yes.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.Oupypiulh58.O/d%3D1/rs%3DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-RFHhH5NAvsIpp1OtutusGg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-type: application/binary
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
set-cookie: __Host-GAPS=1:NrU5ypb4rZy_RrRgsJnjeYdJYaMFsg:7KLbIrqZOqidSOgR; Expires=Fri, 21-Mar-2025 09:26:45 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
142.250.74.65
178.250.0.129
31.13.72.12
88.212.201.204
104.17.25.14
139.45.197.238
142.44.227.16
95.217.100.37
23.36.77.32