go.lnkpth.com/aff_c?offer_id=10000&aff_id=70711&url_id=0&aff_sub5=tiktok&click_id=1uhnfs92femk/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=70711&source=70711&aff_sub2=tiktok&click_id=31_70711_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90
172.255.248.119 394 B URL go.lnkpth.com/aff_c?offer_id=10000&aff_id=70711&url_id=0&aff_sub5=tiktok&click_id=1uhnfs92femk/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=70711&source=70711&aff_sub2=tiktok&click_id=31_70711_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90
IP 172.255.248.119:0
File type HTML document, ASCII text, with very long lines (394), with no line terminators
Hash da74758ac7208619c360c1abf2c42023
547252aa05f83d71335dc413e7c2ec1d00e14125
eaa96d3719c225ad12981dd408c030473482478c071c11117413ee6a7774c343
GET /aff_c?offer_id=10000&aff_id=70711&url_id=0&aff_sub5=tiktok&click_id=1uhnfs92femk/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=70711&source=70711&aff_sub2=tiktok&click_id=31_70711_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90/rd.html?go=https://queitho.com/client?camp=s9&aff_id=2&aff_sub=2&source=2&aff_sub2=tiktok&click_id=31_2_10000_19e16a5df8e6558dd0953cbcb7fd4c90 HTTP/1.1
Host: go.lnkpth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 10 May 2024 10:29:56 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 394
Connection: keep-alive
Content-Security-Policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
Set-Cookie: language=en; Domain=go.lnkpth.com; Path=/; Expires=Sun, 09 Jun 2024 10:29:56 GMT
test=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
10000=32_2_10000_7c020f22995f021b096286e3cbb6003e; Domain=go.lnkpth.com; Path=/; Expires=Sun, 09 Jun 2024 10:29:56 GMT; Secure; SameSite=None
op_10000=0; Domain=go.lnkpth.com; Path=/; Expires=Sun, 09 Jun 2024 10:29:56 GMT
user_id=b0fa8d5a-209f-4ea2-a118-2d8e3a8b06c2_8f453919c959dd54cbd65dfcabd1e64d; Domain=go.lnkpth.com; Path=/; Expires=Wed, 09 May 2029 10:29:56 GMT; Secure; SameSite=None
Location: /rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds9%26aff_id%3D2%26aff_sub%3D2%26source%3D2%26aff_sub2%3Dtiktok%26click_id%3D32_2_10000_7c020f22995f021b096286e3cbb6003e
Vary: Accept
Cache-Control: no-store, no-cache
go.lnkpth.com/rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds9%26aff_id%3D2%26aff_sub%3D2%26source%3D2%26aff_sub2%3Dtiktok%26click_id%3D32_2_10000_7c020f22995f021b096286e3cbb6003e
172.255.248.119 255 B URL go.lnkpth.com/rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds9%26aff_id%3D2%26aff_sub%3D2%26source%3D2%26aff_sub2%3Dtiktok%26click_id%3D32_2_10000_7c020f22995f021b096286e3cbb6003e
IP 172.255.248.119:0
File type HTML document, ASCII text
Hash d032811d8a01caff2a5ce141a657ca0e
7cfb5ac640b5496f18939ee73dc89cccf77125cc
e2efe220662dd9a54582aa6ab3f6d9fcaf0341710d0b01aa051fc09258ff9e6e
GET /rd.html?go=https%3A%2F%2Fqueitho.com%2Fclient%3Fcamp%3Ds9%26aff_id%3D2%26aff_sub%3D2%26source%3D2%26aff_sub2%3Dtiktok%26click_id%3D32_2_10000_7c020f22995f021b096286e3cbb6003e HTTP/1.1
Host: go.lnkpth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: language=en; 10000=32_2_10000_7c020f22995f021b096286e3cbb6003e; op_10000=0; user_id=b0fa8d5a-209f-4ea2-a118-2d8e3a8b06c2_8f453919c959dd54cbd65dfcabd1e64d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 10:29:56 GMT
Content-Type: text/html
Last-Modified: Fri, 13 Aug 2021 14:56:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61168831-149"
Cache-Control: no-store, no-cache
Content-Encoding: gzip
oacenom.com/ckset
172.67.176.78 117 B IP 172.67.176.78:0
Hash 7498e8987b9266cbc3cee991275dd30d
2b8c0bb58e31fa4c21740c8a9e6a3086d80668a2
ccff03df500c8a8d79b389184a76096b6da51e3e8b93600a1ef6cdfdfa63b2fa
POST /ckset HTTP/1.1
Host: oacenom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://queitho.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 201 Created
date: Fri, 10 May 2024 10:29:57 GMT
content-type: application/json; charset=utf-8
content-length: 117
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: mastidencook=81361e07-8ee3-4416-856e-932f7b265c64_82c1347b54d5c68edce0c4b50e282389; Domain=oacenom.com; Path=/; Expires=Wed, 09 May 2029 10:29:57 GMT; Secure; SameSite=None
etag: W/"75-K4wLtY4x+kwhdAyKnmowhtgGaKI"
access-control-allow-origin: https://queitho.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U9MeKhbF%2BvUNVoArHERNmcVHmAwPu1zVPufaFvi5WjIB8H0EJ9TG3VPiUxyzMj6K0mhRQ5xMdatGr%2BjfeICTXMZ7jl%2FyTcbaB%2ByaXzCp%2BWaEDhOrhgS4RU9QPqc1ZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8819404979850b31-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
queitho.com/visit?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=s9&p_camp=&bstep=&sid=&efcn=custom-unknown&cntp=custom-unknown&sch=&scw=&vph=&vpw=<=
104.21.79.101 789 B URL queitho.com/visit?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=s9&p_camp=&bstep=&sid=&efcn=custom-unknown&cntp=custom-unknown&sch=&scw=&vph=&vpw=<=
IP 104.21.79.101:0
Hash c742b6cb7ea795850a90eddd16982f53
63385233c610fc7276b844785a1cce08c8b61c31
07175338761610b69cd94536530ccdbde6e786231495af4910f7791c57066b7f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /visit?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=s9&p_camp=&bstep=&sid=&efcn=custom-unknown&cntp=custom-unknown&sch=&scw=&vph=&vpw=<= HTTP/1.1
Host: queitho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 392
Origin: https://queitho.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 201 Created
date: Fri, 10 May 2024 10:29:57 GMT
content-type: application/json; charset=utf-8
content-length: 789
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: browserLanguage=en; Domain=queitho.com; Path=/; Expires=Sun, 09 Jun 2024 10:29:57 GMT
userId=2d492901-459f-4d3c-a9d1-2c20fbe02fa4_c4cf534cede76d87d454a0211f3976ea; Domain=queitho.com; Path=/; Expires=Wed, 09 May 2029 10:29:57 GMT; Secure; SameSite=None
cache-control: no-store, no-store, no-cache
etag: W/"315-YzhSM8YQ/HJ2uER4WhzOCMi2HDE"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4hsPJMv4Lkg%2FfOzT7qYvDg9CGVMlgXaGz9MVLEEem%2B%2F3mqtbkiM%2FTHuyCpyRXQAA8ZWOUAVJ5Ni4xdeH2u2EsmFl41dm4dHTfbv%2BspGKKDRJlwuhIXETBYBYNKUmvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8819404a29e1b4f9-OSL
alt-svc: h3=":443"; ma=86400
queitho.com/fl?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=f14&sl_cid=9b5c7de3-9f41-4171-b3a3-274f30707fb6_cbc26b50d5d7c5f099d3b202bba2f8c3&p_camp=&bstep=&sid=s9&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=
104.21.79.101 1.3 kB URL queitho.com/fl?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=f14&sl_cid=9b5c7de3-9f41-4171-b3a3-274f30707fb6_cbc26b50d5d7c5f099d3b202bba2f8c3&p_camp=&bstep=&sid=s9&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=
IP 104.21.79.101:0
Hash 2412c0ca02968d75eb401783324a9f52
66f1c6103f5894adc4b5fcfe6bcb14c4fc4eba2d
637f42b100dcc75c902b096e25c4874379c32006396c6ffa1e9f2300ebf6bae6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fl?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=f14&sl_cid=9b5c7de3-9f41-4171-b3a3-274f30707fb6_cbc26b50d5d7c5f099d3b202bba2f8c3&p_camp=&bstep=&sid=s9&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<= HTTP/1.1
Host: queitho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 398
Origin: https://queitho.com
DNT: 1
Connection: keep-alive
Cookie: browserLanguage=en; userId=2d492901-459f-4d3c-a9d1-2c20fbe02fa4_c4cf534cede76d87d454a0211f3976ea
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 201 Created
date: Fri, 10 May 2024 10:29:57 GMT
content-type: application/json; charset=utf-8
content-length: 1274
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: browserLanguage=en; Domain=queitho.com; Path=/; Expires=Sun, 09 Jun 2024 10:29:57 GMT
cache-control: no-store, no-store, no-cache
etag: W/"4fa-ZvHGED9YlK3Etfz+a8sUxPxOui0"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F3aFy66FqgLVgms7EvpTr75oFX%2FfPwEmkc4bA3drs5RaS48vZql1YQfLNKjUPXs9mexd7tkjPJwIYJVzGhRuAEaOzQBrW1tk4mM9uVY6GBWV22pxoVQGeNS0L%2F8wNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8819404a8a63b4f9-OSL
alt-svc: h3=":443"; ma=86400
queitho.com/ofp?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=f14&sl_cid=9b5c7de3-9f41-4171-b3a3-274f30707fb6_cbc26b50d5d7c5f099d3b202bba2f8c3&p_camp=&bstep=0&sid=s9&ofp_id=111&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=0
104.21.79.101 223 B URL queitho.com/ofp?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=f14&sl_cid=9b5c7de3-9f41-4171-b3a3-274f30707fb6_cbc26b50d5d7c5f099d3b202bba2f8c3&p_camp=&bstep=0&sid=s9&ofp_id=111&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=0
IP 104.21.79.101:0
Hash 267ae9e0e939de212e7214089f203239
058632b695d6efe28677205aef6bb599e51ad82a
0603e8ae8cf309d5fa330a23ebbe07e0c7c1541462034bd2dcb6d8cbc7e0b5a6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /ofp?aff_id=2&aff_sub=2&aff_sub2=tiktok&click_id=32_2_10000_7c020f22995f021b096286e3cbb6003e&source=2&ttype=direct&camp=f14&sl_cid=9b5c7de3-9f41-4171-b3a3-274f30707fb6_cbc26b50d5d7c5f099d3b202bba2f8c3&p_camp=&bstep=0&sid=s9&ofp_id=111&efcn=custom-unknown&cntp=custom-unknown&sch=1024&scw=1280&vph=1024&vpw=1280&ref=https%3A%2F%2Fgo.lnkpth.com%2F<=0 HTTP/1.1
Host: queitho.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 405
Origin: https://queitho.com
DNT: 1
Connection: keep-alive
Cookie: browserLanguage=en; userId=2d492901-459f-4d3c-a9d1-2c20fbe02fa4_c4cf534cede76d87d454a0211f3976ea
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 201 Created
date: Fri, 10 May 2024 10:29:57 GMT
content-type: application/json; charset=utf-8
content-length: 223
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: browserLanguage=en; Domain=queitho.com; Path=/; Expires=Sun, 09 Jun 2024 10:29:57 GMT
cache-control: no-store, no-store, no-cache
etag: W/"df-BYYytpXW7+KGdyBa72u1meUa2Co"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j4MXL5p3WPU2xPh9FfrIAI8Aer4cYFx5r78rkG4u28Ct%2FkQc%2BUaSddIQA00SLc1hYHApjeZG2yWbzmxioasTlCZClhGuIdYJfRUqP1T7XeniVue7spvWiPVDgmohQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8819404b5b93b4f9-OSL
alt-svc: h3=":443"; ma=86400
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash 0b534d7c532b40f4dd4a25d391cf810c
e7753d8a7397d5a46f2fac33e3def38a60139ec5
382a77ecf01b7d5dfaf8d1b09bb5ff1b202ef67b6010ca2d4c827d6a0d1c6958
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 10:29:57 GMT
Last-Modified: Fri, 10 May 2024 09:42:59 GMT
Server: ECAcc (ska/F756)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VrwvBSnR95bo1ZK93vb5l0cKzhJWtfHskQ0sTeCek6gXPOy4eW8WZA==
Age: 2818
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash 0b534d7c532b40f4dd4a25d391cf810c
e7753d8a7397d5a46f2fac33e3def38a60139ec5
382a77ecf01b7d5dfaf8d1b09bb5ff1b202ef67b6010ca2d4c827d6a0d1c6958
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 10:29:58 GMT
Last-Modified: Fri, 10 May 2024 09:42:59 GMT
Server: ECAcc (ska/F756)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rrWpgNlvtruHgfBTxUBljQzMZrDTZhdYvIBb9TvbhZARuGhYHfFdBA==
Age: 2819
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash c2c5d1ecf386e2c193ae721fb30ecd85
7d58b6b826a23336343b4cdb7b1fb3883e822439
cae5d7336cfbe8f8faf1a59808e90bc2eab6ca32839a26d506a7470a62bb3b57
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 10:29:58 GMT
Server: ECAcc (amb/6AFD)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0d23jp0pj4lIyHLULLwzmCYfYh-VDe1pw3TGPX6kv3BT20sNOJtKhw==
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash 0b534d7c532b40f4dd4a25d391cf810c
e7753d8a7397d5a46f2fac33e3def38a60139ec5
382a77ecf01b7d5dfaf8d1b09bb5ff1b202ef67b6010ca2d4c827d6a0d1c6958
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 10:29:59 GMT
Last-Modified: Fri, 10 May 2024 10:27:04 GMT
Server: ECAcc (ska/F6D2)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iOeOw09iUcwC0lkead3CC9tFi7VnKObXObnfOu6Utx8GLUuEHOkMnw==
Age: 175
luvwhisper.com/lp-external/index.js
54.230.111.42 1.1 kB URL luvwhisper.com/lp-external/index.js
IP 54.230.111.42:0
File type gzip compressed data, from Unix
Hash f2af316bf23eb6cad12cc2f873dd600a
f927f93cf6a8300d31c7958a191c958dfb4cd424
d48927cfe9fff9fa5c9609d0bd6678be60b1becde3861f80b463630d8651fbf1
GET /lp-external/index.js HTTP/1.1
Host: luvwhisper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://empirelayer.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Fri, 10 May 2024 10:29:59 GMT
server: nginx
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
x-robots-tag: noindex
accept-ranges: bytes
cache-control: public, max-age=3600
last-modified: Thu, 09 May 2024 13:15:55 GMT
etag: W/"8b7-18f5d7efef8"
vary: Accept-Encoding
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: kbcg15ZAbQNrIfHHpZBzzqrKEkOy81EUcr3s46bBZB7osHeeVRbdzw==
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
143.204.53.97 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.53.97:0
Hash c2c5d1ecf386e2c193ae721fb30ecd85
7d58b6b826a23336343b4cdb7b1fb3883e822439
cae5d7336cfbe8f8faf1a59808e90bc2eab6ca32839a26d506a7470a62bb3b57
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 10:29:59 GMT
Server: ECAcc (amb/6AC6)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cDRkj5rhzbYTK0m9DONpwEe0AFGJ-OTQJ76E373ad4a1rm9_fKzBMQ==
cy.trck-capt-prv2.com/click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=4880
3.122.47.174 134 B URL cy.trck-capt-prv2.com/click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=4880
IP 3.122.47.174:0
File type HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=4880 HTTP/1.1
Host: cy.trck-capt-prv2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Fri, 10 May 2024 10:29:59 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://cy.trck-capt-prv2.com:443/click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=4880
cy.trck-capt-prv2.com/click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=4880
3.122.47.174 134 B URL cy.trck-capt-prv2.com/click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=4880
IP 3.122.47.174:0
File type HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=4880 HTTP/1.1
Host: cy.trck-capt-prv2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:29:59 GMT
content-type: text/html; charset=UTF-8
location: http://cy.trck-capt-prv2.com/click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=2219
server: nginx/1.24.0
x-debug-tag: 663df727c5659
x-debug-duration: 105
x-debug-link: /v-debugger/default/view?tag=663df727c5659
X-Firefox-Spdy: h2
cy.trck-capt-prv2.com/click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=2202
3.122.47.174 134 B URL cy.trck-capt-prv2.com/click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=2202
IP 3.122.47.174:0
File type HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=2202 HTTP/1.1
Host: cy.trck-capt-prv2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Fri, 10 May 2024 10:30:00 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://cy.trck-capt-prv2.com:443/click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=2202
cy.trck-capt-prv2.com/favicon.ico
3.122.47.174 0 B URL cy.trck-capt-prv2.com/favicon.ico
IP 3.122.47.174:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: cy.trck-capt-prv2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: U-dd28e50635038e9cf3a648c2dd17ad0a=unique; o_dd28e50635038e9cf3a648c2dd17ad0a=7d6b9836-b955-4b91-91d6-970ba488389d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: awselb/2.0
date: Fri, 10 May 2024 10:30:01 GMT
content-type: text/plain; charset=utf-8
content-length: 0
X-Firefox-Spdy: h2
jt.biolpaser.com/c40fc32b-aea7-4400-9940-2d3ec633506e?external_id=7bfd08a26b03681d410336f10355e8a1&source=198_134504_2005070
54.230.111.24302 Found 0 B URL User Request GET HTTP/2 jt.biolpaser.com/c40fc32b-aea7-4400-9940-2d3ec633506e?external_id=7bfd08a26b03681d410336f10355e8a1&source=198_134504_2005070
IP 54.230.111.24:443
Certificate IssuerAmazon
Subjectjt.biolpaser.com
FingerprintE4:AF:25:22:5B:36:F6:F6:31:41:D7:C9:C7:D3:4A:88:6F:23:26:27
ValidityWed, 17 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c40fc32b-aea7-4400-9940-2d3ec633506e?external_id=7bfd08a26b03681d410336f10355e8a1&source=198_134504_2005070 HTTP/1.1
Host: jt.biolpaser.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
location: https://track.kaizenclix.com/sl?id=5de3795b3bf47917e8f25358&pid=1355&sub1=198_134504_2005070&sub3=7bfd08a26b03681d410336f10355e8a1&sub4=w7njj5can70pji613i2a0vlu
date: Fri, 10 May 2024 10:30:01 GMT
cache-control: no-store, no-cache, pre-check=0, post-check=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: c40fc32b-aea7-4400-9940-2d3ec633506e-v4=c4iz61KQQrAY3cJiUmqQYDtHWpPeCcxY4s0qf2yDEwM; Max-Age=86400; Expires=Sat, 11-May-2024 10:30:01 GMT; Domain=jt.biolpaser.com; Path=/; Secure; HttpOnly;SameSite=None
voluum-cid-v4=%7B%22cid%22%3A%22w7njj5can70pji613i2a0vlu%22%2C%22caid%22%3A%22c40fc32b-aea7-4400-9940-2d3ec633506e%22%7D; Max-Age=31536000; Expires=Sat, 10-May-2025 10:30:01 GMT; Domain=jt.biolpaser.com; Path=/; Secure; HttpOnly;SameSite=None
server: nginx
x-cache: Miss from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: w27XGrVN3fypjG7RpAkxdy4d7hUaDKzwY9MVy2an8kcQaGrhcWtWJw==
X-Firefox-Spdy: h2
track.kaizenclix.com/sl?id=5de3795b3bf47917e8f25358&pid=1355&sub1=198_134504_2005070&sub3=7bfd08a26b03681d410336f10355e8a1&sub4=w7njj5can70pji613i2a0vlu
34.147.10.206302 Found 0 B URL User Request GET HTTP/2 track.kaizenclix.com/sl?id=5de3795b3bf47917e8f25358&pid=1355&sub1=198_134504_2005070&sub3=7bfd08a26b03681d410336f10355e8a1&sub4=w7njj5can70pji613i2a0vlu
IP 34.147.10.206:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerSectigo Limited
Subjecttrack.kaizenclix.com
Fingerprint28:23:3F:98:94:9F:88:93:F0:CD:A5:8E:E7:09:2E:34:50:8A:16:3F
ValidityFri, 16 Feb 2024 00:00:00 GMT - Sat, 15 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=5de3795b3bf47917e8f25358&pid=1355&sub1=198_134504_2005070&sub3=7bfd08a26b03681d410336f10355e8a1&sub4=w7njj5can70pji613i2a0vlu HTTP/1.1
Host: track.kaizenclix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 10 May 2024 10:30:01 GMT
content-length: 0
location: https://www.101trck.com/3J67C1/785T8FF/?uid=1475&source_id=1355&sub1=198_134504_2005070&sub5=663df72972a37a000143ca4b
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=663df72972a37a000143ca4b; expires=Sat, 10 May 2025 10:30:01 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.101trck.com/3J67C1/785T8FF/?uid=1475&source_id=1355&sub1=198_134504_2005070&sub5=663df72972a37a000143ca4b
35.233.96.203307 Temporary Redirect 0 B URL User Request GET HTTP/2 www.101trck.com/3J67C1/785T8FF/?uid=1475&source_id=1355&sub1=198_134504_2005070&sub5=663df72972a37a000143ca4b
IP 35.233.96.203:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerLet's Encrypt
Subjectwww.101trck.com
Fingerprint2C:CB:8E:9E:BF:BB:E6:B0:A8:5F:E2:F2:AD:17:C3:50:5C:A7:C6:32
ValidityTue, 09 Apr 2024 11:02:56 GMT - Mon, 08 Jul 2024 11:02:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /3J67C1/785T8FF/?uid=1475&source_id=1355&sub1=198_134504_2005070&sub5=663df72972a37a000143ca4b HTTP/1.1
Host: www.101trck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Fri, 10 May 2024 10:30:01 GMT
content-length: 0
location: https://www.b2ztrk.com/3J67C1/785T8FF/?source_id=1355&sub1=198_134504_2005070&sub5=663df72972a37a000143ca4b&uid=1475
cache-control: no-store
set-cookie: FilterGroupGlobal_FiltersRule1Key67badb1f5561d01cbb8ebc6c6c885080=1; Expires=Fri, 10 May 2024 11:30:01 GMT
vary: Origin
strict-transport-security: max-age=15724800; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, RTT
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.24 2.1 kB IP 192.124.249.24:0
Hash 97ef9966dcdca89c0bc69745ae7adda1
b9665b57400098596570acf4c18dd49bc755dfdd
fd9cd407a8d041b4ed94e1edf2620ab51cbbe177c6b794d7a4960ff6d19a104b
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 74
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 10 May 2024 10:30:01 GMT
Content-Type: application/ocsp-response
Content-Length: 2147
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 10 May 2024 03:05:53 GMT
Expires: Sat, 11 May 2024 03:05:53 GMT
ETag: "b9665b57400098596570acf4c18dd49bc755dfdd"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.b2ztrk.com/3J67C1/785T8FF/?source_id=1355&sub1=198_134504_2005070&sub5=663df72972a37a000143ca4b&uid=1475
34.117.199.78302 Found 278 B URL User Request GET HTTP/2 www.b2ztrk.com/3J67C1/785T8FF/?source_id=1355&sub1=198_134504_2005070&sub5=663df72972a37a000143ca4b&uid=1475
IP 34.117.199.78:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerStarfield Technologies, Inc.
Subjectdql2clk.com
FingerprintC4:F5:42:00:42:B1:37:6B:16:72:F1:D0:64:68:98:C6:DA:6D:9B:F3
ValiditySat, 30 Dec 2023 14:09:27 GMT - Thu, 30 Jan 2025 14:09:27 GMT
File type HTML document, ASCII text
Hash 6ddaff043f7713fe3c1b0976ac06f53e
d00b6903abe056516a9902455cb67320232e9d36
ff6deaa0aaa7814819d679a7787cdd0c5b56077e44602a17e10c8c3218a3a695
GET /3J67C1/785T8FF/?source_id=1355&sub1=198_134504_2005070&sub5=663df72972a37a000143ca4b&uid=1475 HTTP/1.1
Host: www.b2ztrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 10 May 2024 10:30:02 GMT
content-type: text/html; charset=utf-8
content-length: 278
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b
set-cookie: uniqueClick_785T8FF=e5e48925-5032-4f7e-a408-de221e85cb3b:1715337002; Path=/; Expires=Sat, 11 May 2024 10:30:02 GMT; Secure; SameSite=None
transaction_id=b41481a515b8471780dc54f2f855fe67; Path=/; Expires=Thu, 08 Aug 2024 10:30:02 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 24229fea-dc2e-4da0-8131-480416bdc884
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b
3.67.30.122302 Found 46 kB URL User Request GET HTTP/2 www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b
IP 3.67.30.122:443
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
Hash f7c97f8126a56db61b2e0d85a79f6b1a
57ed72951d32aadd6b08aa4034e0292ae1f73c2a
ffa6906203d7ccbf66e959c24074f445422f2f93097d2f03ede7b4b14e4445bc
GET /7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:02 GMT
content-type: text/html; charset=UTF-8
server: Apache/2.4.38 (Debian)
x-powered-by: PHP/7.1.33
location: /7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
X-Firefox-Spdy: h2
www.shagasenior.com/7715/css/style.css
3.67.30.122200 OK 1.9 kB URL GET HTTP/2 www.shagasenior.com/7715/css/style.css
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (6489)
Hash e4002d7729ad7a23b0747da7eb6a40a2
505081c16b91022a18e8bda749dc944a52e64c39
f74910b0aa25b19af20fdbbfc0ed1288487bea1f223c676484673b9363db4f6b
GET /7715/css/style.css HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/css
content-length: 1872
server: Apache/2.4.38 (Debian)
last-modified: Wed, 20 Dec 2023 20:14:42 GMT
etag: "195a-60cf6a223b080-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.shagasenior.com/7715/js/jquery.ccpicker.js
3.67.30.122200 OK 2.2 kB URL GET HTTP/2 www.shagasenior.com/7715/js/jquery.ccpicker.js
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 07f7c15c12e52a775c097144a7c9f637
450189410c05c60dbd799faae9a101943cf49db3
b8147af39cbec46333c1860bc35ed12407bb89bc6a44ab9f2e34d7e8e114aa33
GET /7715/js/jquery.ccpicker.js HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:03 GMT
content-type: application/javascript
content-length: 2228
server: Apache/2.4.38 (Debian)
last-modified: Wed, 20 Dec 2023 20:14:42 GMT
etag: "1e1e-60cf6a223b080-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.shagasenior.com/7715/css/jquery.ccpicker.css
3.67.30.122200 OK 2.3 kB URL GET HTTP/2 www.shagasenior.com/7715/css/jquery.ccpicker.css
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
Hash 9b62f0af877790c2ec7e71c2828a35fc
de8b3d739980792121bc6f4c1a4eaeaef0ea5266
8ee69d346c92229d5d01309f389d4946d616e5e7edef24a18b2e890890f5b59b
GET /7715/css/jquery.ccpicker.css HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/css
content-length: 2278
server: Apache/2.4.38 (Debian)
last-modified: Wed, 20 Dec 2023 20:14:42 GMT
etag: "41fe-60cf6a223b080-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/girl_01.jpg
3.67.30.122302 Found 335 B URL GET HTTP/2 www.shagasenior.com/7715/media/girl_01.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash d2d5951551cc512c8b35d7c4e161324c
a90013519a1ef396858f74be83d8897ed3e66f8e
68f7da318b07106d9fe51ea6703201eff8f3e5797070a30b5e303e81f626ffa9
GET /7715/media/girl_01.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 335
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_01.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/girl_02.jpg
3.67.30.122302 Found 335 B URL GET HTTP/2 www.shagasenior.com/7715/media/girl_02.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 890debe3afd61c004e74906086af3204
6f4c0a52051bfd57162d330b7be16e7a44e83ba9
8cd0a950b4cbe09ef8944fca1930d08855f6472376be2bc60a2883f03d569ec2
GET /7715/media/girl_02.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 335
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_02.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/girl_03.jpg
3.67.30.122302 Found 335 B URL GET HTTP/2 www.shagasenior.com/7715/media/girl_03.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 814424b5928935989236c99d80717107
47bbc6da7973d00055d014373a1a207f3807cd69
42591792fd67416230b90694631e543ccdb399ca9893c0ecf13651f9641f641f
GET /7715/media/girl_03.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 335
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_03.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/girl_04.jpg
3.67.30.122302 Found 335 B URL GET HTTP/2 www.shagasenior.com/7715/media/girl_04.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash bbdb3b30d77bb1624c1a583cba8fd4da
671b708b41a6be490bf73d05868c3a9448440191
c46fb2ea54ef131751f1a913759b2ec50d9ee5c2f89352cc64cda6ef1ae8173c
GET /7715/media/girl_04.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 335
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_04.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/girl_05.jpg
3.67.30.122302 Found 335 B URL GET HTTP/2 www.shagasenior.com/7715/media/girl_05.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 0f80c29bf73fe117b216690280f1fac4
50e678e93c8e272fa57f42b9f0ed34214981dc5b
ec4dbb502c665fb3fff80621fad9fcd86dbdda28e89b14b9fbc8dc103adce139
GET /7715/media/girl_05.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 335
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_05.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/girl_07.jpg
3.67.30.122302 Found 335 B URL GET HTTP/2 www.shagasenior.com/7715/media/girl_07.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 1f7d4827e62e712f1ff198f7f98b7184
e98a739258ce5a063b4199ded5953072c6b84621
42d55af41174a75737428b2c6313e082d961664167ff37a534eb50a644d15b15
GET /7715/media/girl_07.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 335
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_07.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/girl_08.jpg
3.67.30.122302 Found 335 B URL GET HTTP/2 www.shagasenior.com/7715/media/girl_08.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash b405b5bdba5e7e1938dfb9d77248bbdf
d3355b5c95385128d6c8cd139aeba91ff7127c20
810a5ca2077ae78f2ffc178209bbd59d9e06ad3405094013cc9aa4ed7349dc86
GET /7715/media/girl_08.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 335
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_08.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/girl_09.jpg
3.67.30.122302 Found 335 B URL GET HTTP/2 www.shagasenior.com/7715/media/girl_09.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash ad04efa422c6d7d7a67e7fc55d347faa
f791ffd9649436619feaa3584948a0ed7b83118d
76fd503cbddcbca5ea45c711681d97b4d7a706a5656f7f915d01490cfcd1c593
GET /7715/media/girl_09.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 335
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_09.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/girl_06.jpg
3.67.30.122302 Found 335 B URL GET HTTP/2 www.shagasenior.com/7715/media/girl_06.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 31042b7c0418d688827c888b16ef8fb0
5cc20aa82ae8911614c466a0f332ffbfaabe94a3
c1c50c22b0cb0e5a7e7583106ae05c83989cd9ee60a49015b948c3ea06dae1a0
GET /7715/media/girl_06.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 335
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_06.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/girl_10.jpg
3.67.30.122302 Found 335 B URL GET HTTP/2 www.shagasenior.com/7715/media/girl_10.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 41007cd9153ffe3d5779d2e91ccf58c6
ed9dc928ea1431ca438886e137b9ad477bb547cc
c30e33d9feb154148ea076cba8d6f34f3a76e97ae97dc8aef8704729480a3486
GET /7715/media/girl_10.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 335
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_10.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/model_01.jpg
3.67.30.122302 Found 336 B URL GET HTTP/2 www.shagasenior.com/7715/media/model_01.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 167ab154be732dad9a9519e86d1b3432
868a5d1d9d50d487bba0d5f170c16340210131e1
2af239898107b0b3f6198c373879ef9c13e4355ab8c1cc01b0295f8c4146f7d1
GET /7715/media/model_01.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 336
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/model_01.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/model_04.jpg
3.67.30.122302 Found 336 B URL GET HTTP/2 www.shagasenior.com/7715/media/model_04.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 5c91b403137d25be84551222842ea2d0
45372550b0afa8d0bd91c68416591bfac11b35e9
944cc8942d022689f06fcbe335b6818085f27f1652bcdfa6a95ee8f290d838a4
GET /7715/media/model_04.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 336
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/model_04.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/model_03.jpg
3.67.30.122302 Found 336 B URL GET HTTP/2 www.shagasenior.com/7715/media/model_03.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 74f910b6d8d696bb41a94a2145ac0883
007f0d5212df4c27efad53ed1378cfbdae2dbfd4
54e671e24a39571e26215030e4d3114ba622d66931ce9108339f798ec1752b7f
GET /7715/media/model_03.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 336
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/model_03.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/model_06.jpg
3.67.30.122302 Found 336 B URL GET HTTP/2 www.shagasenior.com/7715/media/model_06.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 5f2086a739e386d9e8a509ba100cf1fe
5443840c7928a0b5c9400d8ad561ee43789e7511
b87c06f87d11d959e09da202fe6c440137bdb68ce8984ba9ae08a7444adaabb6
GET /7715/media/model_06.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 336
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/model_06.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/model_02.jpg
3.67.30.122302 Found 336 B URL GET HTTP/2 www.shagasenior.com/7715/media/model_02.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 48e64f1bf51b13b37e57207e3800fbaa
cfaf25cedc4dd2715a8fa4ebea11c2d16c78f941
86bd88d4c22bbfd914b4b22673b9abe4b90e82c965d2ad0e2801156e3c1fe28e
GET /7715/media/model_02.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 336
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/model_02.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/model_07.jpg
3.67.30.122302 Found 336 B URL GET HTTP/2 www.shagasenior.com/7715/media/model_07.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash 8503b5d369cc1d5b52d5a9987bd7767a
fc0f629be0c8f5ed247e4eaa5470eaa82efe7372
a33963999cd880520e5e32234fcd7ff14ba2d1d9c65890a093886f5527412cea
GET /7715/media/model_07.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 336
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/model_07.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/model_05.jpg
3.67.30.122302 Found 336 B URL GET HTTP/2 www.shagasenior.com/7715/media/model_05.jpg
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type HTML document, ASCII text
Hash ee017e98fcd128a2db46fd24af79b86f
4f996057f8826b4efc927ad512189cbdc3044acd
aa6695089023e71791231a145edc729dd2524dd58ea0682c7e06cf00d5f44d83
GET /7715/media/model_05.jpg HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 336
location: https://d1zp0skjzco26d.cloudfront.net/media/7715/media/model_05.jpg
server: Apache/2.4.38 (Debian)
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/themes/smoothness/jquery-ui.css
142.250.74.74200 OK 8.4 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/themes/smoothness/jquery-ui.css
IP 142.250.74.74:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File type ASCII text, with very long lines (2363)
Hash 3c2da607f80184551f63b34ec1333f7a
e6bb00a0ea07daa01a9537fe66a448f77af8ab56
8473ed670b978405cb4ef7a6822385043b30107e0dae82a008326c6ed237ce51
GET /ajax/libs/jqueryui/1.13.2/themes/smoothness/jquery-ui.css HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 8444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:02:14 GMT
expires: Fri, 09 May 2025 02:02:14 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 116869
last-modified: Wed, 20 Jul 2022 08:22:53 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
142.250.74.74200 OK 31 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP 142.250.74.74:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 May 2024 07:43:44 GMT
expires: Sat, 10 May 2025 07:43:44 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 9979
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js
142.250.74.74200 OK 68 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js
IP 142.250.74.74:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (64399)
Hash 1e2047978946a1d271356d0b557a84a3
5f29a324c8affb1fdb26ad4564b1e044372beed2
9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd
GET /ajax/libs/jqueryui/1.13.2/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 67865
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:04:03 GMT
expires: Fri, 09 May 2025 02:04:03 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 116760
last-modified: Wed, 20 Jul 2022 08:22:53 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cy.trck-capt-prv2.com/click?o=4691&a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070
3.122.47.174 471 B URL cy.trck-capt-prv2.com/click?o=4691&a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070
IP 3.122.47.174:0
Hash 5fa1f88d7f13e0d92fbfecce4a7e75e2
1402321b70fa260e09265fbf8240b05b0bf48374
b224e56ff5d37aba8e7ed51ab4ac2db0944379c881ade108a5609ca0ef30a963
GET /click?o=4691&a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070 HTTP/1.1
Host: cy.trck-capt-prv2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://empirelayer.club/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 10 May 2024 10:29:59 GMT
content-type: text/html; charset=UTF-8
location: http://cy.trck-capt-prv2.com/click?a=198&sub_id1=xnwbo663df727000f62db&sub_id3=134504_2005070&o=4880
server: nginx/1.24.0
x-debug-tag: 663df727924c1
x-debug-duration: 138
x-debug-link: /v-debugger/default/view?tag=663df727924c1
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/ionicons.esm.js
104.17.245.203200 OK 785 B URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/ionicons.esm.js
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type ASCII text, with very long lines (335), with no line terminators
Hash adb6d48631a4f2341424df91a182231c
eaaedc3ffd963b15df8a28f4fc7e92a09da27091
9164e9e61772747c5cb442694612e0059544001673b79fb88d326b6fc0c008ef
GET /ionicons@5.2.3/dist/ionicons/ionicons.esm.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:03 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "14f-6q7cP/2WOxXfiij0/H6SoJ2icJE"
via: 1.1 fly.io
fly-request-id: 01HWRA5K6X9KTFKAZJT11SS7N2-arn
cf-cache-status: HIT
age: 829076
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881940717bc7568d-OSL
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/mp4/06.mp4
3.67.30.122206 Partial Content 2.6 MB URL GET HTTP/2 www.shagasenior.com/7715/media/mp4/06.mp4
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size 2.6 MB (2597364 bytes)
Hash 812a69fe2b861de1be159089f14331c7
55e39bd8b65699add1033f9b1a39be551fb7e277
069bc5cd6f58577c21000f5eaec894bcd37d70954d273ac7d9549d38f4f28235
GET /7715/media/mp4/06.mp4 HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 10 May 2024 10:30:03 GMT
content-type: video/mp4
content-length: 2597364
server: Apache/2.4.38 (Debian)
last-modified: Wed, 20 Dec 2023 20:14:42 GMT
etag: "27a1f4-60cf6a223b080"
accept-ranges: bytes
content-range: bytes 0-2597363/2597364
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/mp4/04.mp4
3.67.30.122206 Partial Content 24 kB URL GET HTTP/2 www.shagasenior.com/7715/media/mp4/04.mp4
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
Hash d98897f4d0a021a550e17b60031fdf74
91be99e4a341befc62bdbb046f256911a6f204d6
f76558de78e8e833e6178f4937ff1592d56783332426cdac665f9240535f4d24
GET /7715/media/mp4/04.mp4 HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=3014656-
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 10 May 2024 10:30:03 GMT
content-type: video/mp4
content-length: 24364
server: Apache/2.4.38 (Debian)
last-modified: Wed, 20 Dec 2023 20:14:42 GMT
etag: "2e5f2c-60cf6a223b080"
accept-ranges: bytes
content-range: bytes 3014656-3039019/3039020
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/mp4/02.mp4
3.67.30.122206 Partial Content 26 kB URL GET HTTP/2 www.shagasenior.com/7715/media/mp4/02.mp4
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
Hash ff104cb814d96a2fa7f3e506ffd4a2e6
d02481d5f7a1398b3e4f3c2874279219b496cd84
03d531a80dbe64f508768e86d7684e7cf65b9938f0a61ba82468b6848342c137
GET /7715/media/mp4/02.mp4 HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=2719744-
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 10 May 2024 10:30:03 GMT
content-type: video/mp4
content-length: 26454
server: Apache/2.4.38 (Debian)
last-modified: Wed, 20 Dec 2023 20:14:42 GMT
etag: "29e756-60cf6a223b080"
accept-ranges: bytes
content-range: bytes 2719744-2746197/2746198
X-Firefox-Spdy: h2
fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2
216.58.207.227200 OK 39 kB URL GET HTTP/2 fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2
IP 216.58.207.227:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 39124, version 1.0
Hash 86b73ab5f530be7984b704414f2a711d
8e297794ed7b6f5ea476d14b5270df12e8f3e42a
1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f
GET /s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39124
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:54:18 GMT
expires: Fri, 09 May 2025 02:54:18 GMT
cache-control: public, max-age=31536000
age: 113746
last-modified: Thu, 14 Sep 2023 00:02:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/mp4/07.mp4
3.67.30.122206 Partial Content 454 kB URL GET HTTP/2 www.shagasenior.com/7715/media/mp4/07.mp4
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size 454 kB (453754 bytes)
Hash 3fe7304d8a3099fdc16dd9c27868056a
b6a788e12ca9389c35e7c244d7535ffab399c16d
8f73a30545c5c9ee5c86c8544c44218e24a79b715183796151adc060499ae8ab
GET /7715/media/mp4/07.mp4 HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 10 May 2024 10:30:03 GMT
content-type: video/mp4
content-length: 453754
server: Apache/2.4.38 (Debian)
last-modified: Wed, 20 Dec 2023 20:14:42 GMT
etag: "6ec7a-60cf6a223b080"
accept-ranges: bytes
content-range: bytes 0-453753/453754
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/mp4/03.mp4
3.67.30.122206 Partial Content 549 kB URL GET HTTP/2 www.shagasenior.com/7715/media/mp4/03.mp4
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size 549 kB (549000 bytes)
Hash f5634f22a76f7c83da98027bf5e76a6a
759c114dae1c532fbadbb6801e9b727682e0417a
a37559a8a405e43665508b7630f1c8208f222ccb788ee290579662d5499c2b18
GET /7715/media/mp4/03.mp4 HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 10 May 2024 10:30:03 GMT
content-type: video/mp4
content-length: 549000
server: Apache/2.4.38 (Debian)
last-modified: Wed, 20 Dec 2023 20:14:42 GMT
etag: "86088-60cf6a223b080"
accept-ranges: bytes
content-range: bytes 0-548999/549000
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/mp4/05.mp4
3.67.30.122206 Partial Content 24 kB URL GET HTTP/2 www.shagasenior.com/7715/media/mp4/05.mp4
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
Hash c16c0ebae0cd1a54133f47ed4fd024ba
0b04eae58c3fe682548fa091d9c205fda1b26d5a
6767a3e82e65580655d2573412e6675b3c12bd09a351fc66f4d7a3c95bd29523
GET /7715/media/mp4/05.mp4 HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=2850816-
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 10 May 2024 10:30:03 GMT
content-type: video/mp4
content-length: 24136
server: Apache/2.4.38 (Debian)
last-modified: Wed, 20 Dec 2023 20:14:42 GMT
etag: "2bde48-60cf6a223b080"
accept-ranges: bytes
content-range: bytes 2850816-2874951/2874952
X-Firefox-Spdy: h2
fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2
216.58.207.227200 OK 39 kB URL GET HTTP/2 fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2
IP 216.58.207.227:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 39124, version 1.0
Hash 86b73ab5f530be7984b704414f2a711d
8e297794ed7b6f5ea476d14b5270df12e8f3e42a
1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f
GET /s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39124
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:54:18 GMT
expires: Fri, 09 May 2025 02:54:18 GMT
cache-control: public, max-age=31536000
age: 113746
last-modified: Thu, 14 Sep 2023 00:02:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_08.jpg
54.230.241.196200 OK 33 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_08.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 500x500, components 3
Hash 52e74fd4ee8fea0ae987a546b936335b
e86a8d4d9fa69939aff1d30d81c255fdc0e23d88
4602e5875e1470e89daa5cbe652456ef4f0bc078357ec7da7e2220b05047a78c
GET /media/7715/media/girl_08.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 32788
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:08 GMT
etag: "52e74fd4ee8fea0ae987a546b936335b"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2Kz6rfY7nUGswdcOh-LwnIrJI7cu_W2I_m-E9h2NGSw2hkjqS-pF9A==
age: 48775
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/p-206e6cb0.entry.js
104.17.245.203200 OK 59 kB URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/p-206e6cb0.entry.js
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type JavaScript source, ASCII text, with very long lines (3832), with no line terminators
Hash 0dbc1ab7bf40071e6454130d83163530
206e6cb088e4b61e3024401e30d7ec99325d0492
a4399d8f8b61e387f5d56bc09d72fb0e9d9305872c0cee23afdb6919c794e492
GET /ionicons@5.2.3/dist/ionicons/p-206e6cb0.entry.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Referer: https://unpkg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:04 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "ef8-IG5ssIjkth4wJEAeMNfsmTJdBJI"
via: 1.1 fly.io
fly-request-id: 01HWRABK2EM82SQANC3BZ3TPKV-arn
cf-cache-status: HIT
age: 828881
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 88194075fa3b568d-OSL
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_09.jpg
54.230.241.196200 OK 28 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_09.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 500x500, components 3
Hash 100767c1940ca1e519cb7f7196862617
1f86681766cc0ff99c0dbd84285ebb35c033202e
fe1b9908447587798f816b6477a14cbdcd00b8f4ff45e548dea5039c6a6ac85f
GET /media/7715/media/girl_09.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 27682
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:12 GMT
etag: "100767c1940ca1e519cb7f7196862617"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 833NzF-fXiousfftCCZ6n_9bN0Ov4nXdnL3yJplycD3VkCVxX-woZg==
age: 48775
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/p-4372c4bc.js
104.17.245.203200 OK 28 kB URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/p-4372c4bc.js
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type JavaScript source, ASCII text, with very long lines (1185), with no line terminators
Hash ea3c112d7ccff97cbda6dd4d35acfddc
78bbfc504bbd70e170ed9718efac09f88451bd82
88432d4a953719ca1962f867cc4166caf9e6cdf2da51a540991256d63935fded
GET /ionicons@5.2.3/dist/ionicons/p-4372c4bc.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Referer: https://unpkg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:03 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "4a1-eLv8UEu9cOFw7ZcY76wJ+IRRvYI"
via: 1.1 fly.io
fly-request-id: 01HWR4TM42XGK5K33NG94PTZ1H-arn
cf-cache-status: HIT
age: 834679
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 88194071ec54568d-OSL
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_06.jpg
54.230.241.196200 OK 26 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_06.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 500x500, components 3
Hash f319337f77a9b65700860689f2436eb1
13cd745ea94e3a31805b33649a8713316e5f4372
acb7c4cec8ea503482dc00bc5a3ec26b675f9ea7412b0b66dcfba2054312ccdd
GET /media/7715/media/girl_06.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 25540
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:06 GMT
etag: "f319337f77a9b65700860689f2436eb1"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GyCLQtfSAdjGntz8PBhb6pxtNXwHCsr1botMMk6c6rlIHB00Pbg_Mg==
age: 48774
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons.js
104.17.245.203200 OK 31 kB URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons.js
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type JavaScript source, ASCII text
Hash 1bc0082a5b1dbbce917ec2269bb121a9
7a436a529b6a0f50047390f47544fa91269c184d
937e1da6a3f1f5f56d7c7f68d47217686d4d73881a6332607eb9769f9e50bc5e
GET /ionicons@5.2.3/dist/ionicons.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:03 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "3c2-ekNqUptqD1AEc5D0dUT6kSacGE0"
via: 1.1 fly.io
fly-request-id: 01HWR1BX6DZS3XZ377772T1S3B-arn
cf-cache-status: HIT
age: 838305
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8819406f18f9b521-OSL
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/model_04.jpg
54.230.241.196200 OK 28 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/model_04.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3
Hash d626dd55293dcbbe5c668020da132696
7e3656e91d0683e5639dbd8b3eeeb70ea11e1ff3
00b5b075b501c66a4386efa1ceab56c1e917791f0492251795cba400534b2780
GET /media/7715/media/model_04.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 28164
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:12 GMT
etag: "d626dd55293dcbbe5c668020da132696"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wL1Z1C55KCKuroOO-3hC3a1QxCWSmrmDRDPYaH6R61ynxsoAs0gZ7Q==
age: 48775
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/model_03.jpg
54.230.241.196200 OK 26 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/model_03.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3
Hash c3de8c212bb88bcf2ad15a5e760d5ed0
70b7b97fa564c15a1c6f7c1b73f69bb22dd30ade
f0f7c86fce1cfd189929471f843a032d9532a75c2c9e317d31544bbb0db2d670
GET /media/7715/media/model_03.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 26231
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:07 GMT
etag: "c3de8c212bb88bcf2ad15a5e760d5ed0"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1FF54FKaYpnscYMMAeyj4_sXwpqCFt92Vq4RFT2ljYDmJ7lfk_RL0Q==
age: 48775
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/model_02.jpg
54.230.241.196200 OK 28 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/model_02.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3
Hash 9ceab73a66cd4511eabc222d05142fa9
387e0fd6f6e50c8d26ff2b3af8afa14b22f0821a
93d83541975aeb7ca21aeca48c15a1175115af57015b88c553356c462ac06e0c
GET /media/7715/media/model_02.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 27511
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:39 GMT
etag: "9ceab73a66cd4511eabc222d05142fa9"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GkJnwNtKZHlXzdC2KLpnJp1Wpn85IeBZXE8B6KXCZ9vzZzhaiQV_qQ==
age: 48775
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/model_05.jpg
54.230.241.196200 OK 30 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/model_05.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3
Hash 62ea41d7b6685d7cfef23c8cc6e02997
bcb9977e36c00f94f7befde0fd817b550f9acf37
f80eedb59587ff998fa4a4bee4690423d49db0a19ef1709c6b736651d4c2d4d0
GET /media/7715/media/model_05.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 30471
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:11 GMT
etag: "62ea41d7b6685d7cfef23c8cc6e02997"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YJH-xm9YRN0b9I7C8f-0yGnljQTGZNRvPDNR2uuyDa0wKG0NY8NmnQ==
age: 48775
X-Firefox-Spdy: h2
empirelayer.club/tds/interlayer/eb/s/a028cddbad6e8f5e07b58bae8c83a154?__t=1715336998028&__l=3600&__c=60fc3ceba029ef223a537ae6e65813be8bd5140f&__u=
143.204.55.80 23 kB URL empirelayer.club/tds/interlayer/eb/s/a028cddbad6e8f5e07b58bae8c83a154?__t=1715336998028&__l=3600&__c=60fc3ceba029ef223a537ae6e65813be8bd5140f&__u=
IP 143.204.55.80:0
File type gzip compressed data, from Unix
Hash a02a5005a145d59db5b21593bd4cdaea
4033e88bca59f22e55deb54b106b86240824ef05
3d29c7e884cfd71b801787764555aaeb9c321a0b3528a57ed177ee6fab3dbdcd
GET /tds/interlayer/eb/s/a028cddbad6e8f5e07b58bae8c83a154?__t=1715336998028&__l=3600&__c=60fc3ceba029ef223a537ae6e65813be8bd5140f&__u= HTTP/1.1
Host: empirelayer.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
date: Fri, 10 May 2024 10:29:58 GMT
server: nginx
access-control-allow-origin: *
p3p: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform, Sec-CH-UA-Wow64, Sec-CH-UA
vary: Accept-Encoding
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: VnjwTtwmsg21o8oBsfQ8rgbYPH-dbyVe6TRTnlDeED9nm7EVMj71Cw==
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/model_07.jpg
54.230.241.196200 OK 22 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/model_07.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3
Hash 612c4f6ae65acc881e41d22d5947145a
1e44d8c5a69ac3de06531b9ff440a03b1b9ce816
9f85b325312db9328b9dc77409d8b8d43d9fca1989444388ad243cdb4bf43adc
GET /media/7715/media/model_07.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 22530
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:07 GMT
etag: "612c4f6ae65acc881e41d22d5947145a"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BMVW5YG-_24p5PuflEU4ogkD_auVEHmNmKOtbnK9fXrWEujlg6N10A==
age: 48774
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_02.jpg
54.230.241.196200 OK 33 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_02.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 500x500, components 3
Hash 45427bbdf0721e59b064053a4d9bb0d1
28fb19bb3dafd572f7ff5e45c521c23550748ef3
e8b471a6d69f99a5635507e0217c8359ff0447bbf80054470a5d1a442f478dff
GET /media/7715/media/girl_02.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 32907
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:11 GMT
etag: "45427bbdf0721e59b064053a4d9bb0d1"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tALc_fQdTGIm9BVoGNYseI-5nUECmsrvp6KlraSTwI_Bk-4OqhEgYg==
age: 48775
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/favicon.ico
3.67.30.122200 OK 1.2 kB URL GET HTTP/2 www.shagasenior.com/7715/media/favicon.ico
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 18c8ba52db1ac2d3ccc020ba3c4a45bd
8820194d2f624ca833b1e1a35dc9def09c168a10
8faeb3f7a932e056b5d3939667c8209c4d8eea833e8d3997e6244493537615ed
GET /7715/media/favicon.ico HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:04 GMT
content-type: image/vnd.microsoft.icon
content-length: 1150
server: Apache/2.4.38 (Debian)
last-modified: Wed, 20 Dec 2023 20:14:42 GMT
etag: "47e-60cf6a223b080"
accept-ranges: bytes
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_04.jpg
54.230.241.196200 OK 54 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_04.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 500x500, components 3
Hash a0f1cc9e1866b7d321f5c4f19fd0c619
8f8d276c719e8965e21a54d9c91432326be980b1
529245dbd19a05218286213e04399b1cb27302fce2d2c3d87fb0ee0f9b057255
GET /media/7715/media/girl_04.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 54520
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:38 GMT
etag: "a0f1cc9e1866b7d321f5c4f19fd0c619"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zjFd0fkJUY5vKknZGQFP6iWd-UXSMxWdA-BPeisyZMpj0mx4u_MFCA==
age: 48775
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_03.jpg
54.230.241.196200 OK 26 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_03.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 500x500, components 3
Hash 92ad221028fc3d9bc388da38c5eda806
f63649c89bdf8d460e11d02627f944db42184979
3dc2963e11f317fbd3bb594f61cd29b5252deea567b9e13bb51cc06e84345434
GET /media/7715/media/girl_03.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 25451
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:38 GMT
etag: "92ad221028fc3d9bc388da38c5eda806"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: a_8jpZNPZcATihY5tIByGITgoPIoI6Qh72E1bj-1pt84D6Ctp-e1mQ==
age: 48775
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/mp4/04.mp4
3.67.30.122206 Partial Content 1.7 MB URL GET HTTP/2 www.shagasenior.com/7715/media/mp4/04.mp4
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
Size 1.7 MB (1659946 bytes)
Hash e5f07c8096b2a5b3f89852201b3f0781
757f0cf67adcb1bc1fd2fecc24cc67968d660c85
b2d45685dea317ff0dc2adaed93700975a98cd6a1cf38cafd8f833f792f297b0
GET /7715/media/mp4/04.mp4 HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=32768-
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Fri, 10 May 2024 10:30:04 GMT
content-type: video/mp4
content-length: 3006252
server: Apache/2.4.38 (Debian)
last-modified: Wed, 20 Dec 2023 20:14:42 GMT
etag: "2e5f2c-60cf6a223b080"
accept-ranges: bytes
content-range: bytes 32768-3039019/3039020
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_07.jpg
54.230.241.196200 OK 33 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_07.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 500x500, components 3
Hash 5c592897b903da927954ae49274f25a5
1757f8a3e45369f37dacadd45e91c84ad473286a
ea6f008cc5b604947e69befb755e36a2ce071af1f7d3c403865b7dc72195b583
GET /media/7715/media/girl_07.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 33311
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:13 GMT
etag: "5c592897b903da927954ae49274f25a5"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ejDzcwxnZjzCUiq-pPq8mvi7Fow90-W_ch0MZWaZFZn7j1ev1i4JnQ==
age: 48775
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/svg/chatbubble-ellipses.svg
104.17.245.203200 OK 12 kB URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/svg/chatbubble-ellipses.svg
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type SVG Scalable Vector Graphics image
Hash bf17f300da9a4cca5f64ad8d2ebe762a
3a6f551494c66581d4f2b29bbf186a07fb82729b
9c911f83238f52c55292937bf0aec931bdea86469eaaa5f685920b1f638a449c
GET /ionicons@5.2.3/dist/ionicons/svg/chatbubble-ellipses.svg HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:05 GMT
content-type: image/svg+xml
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "32d-Om9VFJTGZYHU8rKbvxhqB/uCcps"
via: 1.1 fly.io
fly-request-id: 01HWT904R4JW89AW5C3DXJREGS-arn
cf-cache-status: HIT
age: 763197
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8819407bab23568d-OSL
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.24 2.1 kB IP 192.124.249.24:0
Hash 97ef9966dcdca89c0bc69745ae7adda1
b9665b57400098596570acf4c18dd49bc755dfdd
fd9cd407a8d041b4ed94e1edf2620ab51cbbe177c6b794d7a4960ff6d19a104b
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 74
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 10 May 2024 10:30:06 GMT
Content-Type: application/ocsp-response
Content-Length: 2147
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 10 May 2024 03:05:53 GMT
Expires: Sat, 11 May 2024 03:05:53 GMT
ETag: "b9665b57400098596570acf4c18dd49bc755dfdd"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
unpkg.com/ionicons@5.2.3/dist/ionicons/svg/checkmark-circle.svg
104.17.245.203200 OK 8.4 kB URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/svg/checkmark-circle.svg
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type SVG Scalable Vector Graphics image
Hash 1945dcef1d93f7587d04b78eb4bdc7fa
6d8f56e6ce8f1e5bf480451a53a382eca2a86f4f
e2421dc91e1ebe2caaddb0c80d746fc3bf534e55c0a311aaf45e901a249aa0a4
GET /ionicons@5.2.3/dist/ionicons/svg/checkmark-circle.svg HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:05 GMT
content-type: image/svg+xml
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "16b-bY9W5s6PHlv0gEUaU6OC7KKob08"
via: 1.1 fly.io
fly-request-id: 01HWR1NV5Y9X728E08HS0NFCBY-arn
cf-cache-status: HIT
age: 837983
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8819407bab1b568d-OSL
X-Firefox-Spdy: h2
www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
3.67.30.122200 OK 53 kB URL User Request GET HTTP/2 www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
IP 3.67.30.122:443
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3 HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:03 GMT
content-type: text/html; charset=UTF-8
content-length: 13580
server: Apache/2.4.38 (Debian)
x-powered-by: PHP/7.1.33
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/svg/people-outline.svg
104.17.245.203200 OK 969 B URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/svg/people-outline.svg
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type SVG Scalable Vector Graphics image
Hash c6d8251338f1104bd515181fed6e3f11
06da02261152bdfc64ea238f674ccda9953e9811
e9b3d6d427143b5f7f5804e4cff6d2a5ffe8da495a766dccaa0f2d1ce7b5cc93
GET /ionicons@5.2.3/dist/ionicons/svg/people-outline.svg HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:05 GMT
content-type: image/svg+xml
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "3c9-3W/p/tQHJABF0/nvXgJ+D65lWYA"
via: 1.1 fly.io
fly-request-id: 01HWRABM2QDPEMAK2RZHZTGXGC-arn
cf-cache-status: HIT
age: 828881
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8819407bab12568d-OSL
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/svg/home-outline.svg
104.17.245.203200 OK 481 B URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/svg/home-outline.svg
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type SVG Scalable Vector Graphics image
Hash 26b1697aa741e229bea3222b4908aeb7
a7ae2a8516fa76080dec4b90d3cc30fd3097cc32
dbdda52496906d4d4cdeb319a5b51d494aff0810eed82ec23498fb30a88775ba
GET /ionicons@5.2.3/dist/ionicons/svg/home-outline.svg HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:05 GMT
content-type: image/svg+xml
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "1e1-z4GSgfbEjkgrUBvq8oXpOgirMUM"
via: 1.1 fly.io
fly-request-id: 01HXGFY1ZJFB40M8RGD2T1TVSR-arn
cf-cache-status: HIT
age: 17726
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8819407bab10568d-OSL
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_05.jpg
54.230.241.196200 OK 34 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_05.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 500x500, components 3
Hash e451bff405611068c4bfee0e1e4b1b7b
d59d0d3e0f180696ef535c7233073216b8d38aa5
6da30e9469befc67eb4a8c76bd308a425ed4ba045f38baf19f1b1ed56a09c29b
GET /media/7715/media/girl_05.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 33546
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:08 GMT
etag: "e451bff405611068c4bfee0e1e4b1b7b"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EUdwu5H83GsrzpaciNtgNnKq1O_-iQsmqQsrP9Mz2gA3R6chwREYjg==
age: 48775
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Nunito:wght@200;300;400;500;600;700;800;900&display=swap
142.250.74.74200 OK 14 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Nunito:wght@200;300;400;500;600;700;800;900&display=swap
IP 142.250.74.74:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash 73a2ab45be92e58b280c0b13b70c9ace
4a910cd9d00776ceade5af2752a0e9231a4b4886
0e6e52eef65e7977c536de972b81673091c2c431cdd6dd0479ae1e4b3fbb2e3d
GET /css2?family=Nunito:wght@200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 10:30:03 GMT
date: Fri, 10 May 2024 10:30:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/svg/chatbox-ellipses-outline.svg
104.17.245.203200 OK 450 B URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/svg/chatbox-ellipses-outline.svg
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type SVG Scalable Vector Graphics image
Hash 59991194ec6cf8f21cf09f65d393b093
de226302d8bcc915ced112a611c07917a658ef1c
e523826d49cd8eb3208d8474451f3f9f184c15e7172d362ffc6a9595b6ccd0cc
GET /ionicons@5.2.3/dist/ionicons/svg/chatbox-ellipses-outline.svg HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:05 GMT
content-type: image/svg+xml
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "1c2-Syqck05uAEmLZjgX6EYzw3XUVRg"
via: 1.1 fly.io
fly-request-id: 01HX7RVF5W290EDX57925XG007-arn
cf-cache-status: HIT
age: 310365
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8819407bab0d568d-OSL
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/model_01.jpg
54.230.241.196200 OK 31 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/model_01.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3
Hash 1d97bade8184950d4d6c45668d4870f0
b220c9d197661580103b79eb72e36517c51a260e
d491ffdb3fd60fff6423935a6ed72dba53a26c989d89a9d3675c07e401949bb2
GET /media/7715/media/model_01.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 30729
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:10 GMT
etag: "1d97bade8184950d4d6c45668d4870f0"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: A_Wu-T3QwSsX4utUXqfrPFBZ7_rZ_RCCpSHlTImhcdRYYbZuFaEAUg==
age: 48775
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/model_06.jpg
54.230.241.196200 OK 22 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/model_06.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3
Hash 912d0e258823ac83c7c9209ef6211d2f
7df152b2d70f2a8f1c75ae6b4cc3bdd47e93ec6d
8af2f333f45f375a9ed2ae9cf6d7d55b8ed5f627ffb9c4c1c5eeb0532d744230
GET /media/7715/media/model_06.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 22434
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:09 GMT
etag: "912d0e258823ac83c7c9209ef6211d2f"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tBAbxUtzUNVCFjwuxRQpDH6DxYOVJRtcctQmvXwr6Lfp81du1lLD0A==
age: 48775
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/p-6f4eae92.js
104.17.245.203200 OK 8.1 kB URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/p-6f4eae92.js
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type JavaScript source, ASCII text, with very long lines (8175), with no line terminators
Hash 8e8d19bfb24862e3ea34dfc291d71c9b
13e347f822b09e32dc0e6b1a5214a9570fefb262
5e71545f6000a9726a8b7441788e567b00f78e53e148e5eadbbd4a546d77939f
GET /ionicons@5.2.3/dist/ionicons/p-6f4eae92.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Referer: https://unpkg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:03 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "1f7c-gfDDha4bujGL8M3AApXNE3RBbwQ"
via: 1.1 fly.io
fly-request-id: 01HWR4TM42NN2JS4RPJEPZGGMJ-arn
cf-cache-status: HIT
age: 834679
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 88194071ec50568d-OSL
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/svg/return-up-forward.svg
104.17.245.203200 OK 390 B URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/svg/return-up-forward.svg
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type SVG Scalable Vector Graphics image
Hash 735716dcb13091be63f7f5e9b5a8f3f4
b3223bf3b0ec57278579e509491716cb95f311ff
528dbde75ba239dfd398be46f92898df989b8d85d67be9aadcc8f96c101fa37f
GET /ionicons@5.2.3/dist/ionicons/svg/return-up-forward.svg HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:05 GMT
content-type: image/svg+xml
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "186-U4DKZV/vmyNbVEtM/fn8/VvhrQ8"
via: 1.1 fly.io
fly-request-id: 01HWR1NV5XMZQCCRDMM2QRH408-arn
cf-cache-status: HIT
age: 837983
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8819407bab25568d-OSL
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/svg/heart.svg
104.17.245.203200 OK 447 B URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/svg/heart.svg
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type SVG Scalable Vector Graphics image
Hash f246c45b030784ed7d7c8a2d7d938e8d
cf587d6f331d7c32b2ebbbe4517f185662180e58
d772ddc5659e3d2aa71db79ef1d9fe19185ff0685de9021f1f4ac546766c032c
GET /ionicons@5.2.3/dist/ionicons/svg/heart.svg HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:05 GMT
content-type: image/svg+xml
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "1bf-qXBQOoEmy2Lea3ObkBj9uZ/Tn04"
via: 1.1 fly.io
fly-request-id: 01HWQXQF87FRZBHHH2RAWDWWTZ-arn
cf-cache-status: HIT
age: 842124
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8819407bab1e568d-OSL
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/p-27972752.js
104.17.245.203200 OK 807 B URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/p-27972752.js
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type JavaScript source, ASCII text, with very long lines (832), with no line terminators
Hash d0c8ec4f36a4311bfeb6106c2882697e
f91f23d5c731e9ea8a4fe380df5e15bc3e098b47
d7223524a0ba5ceca62d58323807c4068defc690f48c0bd3d77f561f3a55b084
GET /ionicons@5.2.3/dist/ionicons/p-27972752.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Referer: https://unpkg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:04 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "327-iDnGRj+fHRf0JjqFvGGPeB+3JIg"
via: 1.1 fly.io
fly-request-id: 01HWQX6HG1RW0EKEBC82N9PTZV-arn
cf-cache-status: HIT
age: 842678
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881940774c83568d-OSL
X-Firefox-Spdy: h2
www.shagasenior.com/7715/media/mp4/01.mp4
3.67.30.122206 Partial Content 331 kB URL GET HTTP/2 www.shagasenior.com/7715/media/mp4/01.mp4
IP 3.67.30.122:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subjectwww.fuckalocal.com
FingerprintFB:DC:8C:22:21:2E:B0:DC:03:57:D3:BC:6F:AE:7F:DF:3A:E0:C8:7E
ValidityWed, 10 Jan 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Size 331 kB (330554 bytes)
Hash 183ac8192081f28831da1a5e50125b8a
a9071d52a026c29a772b16d36a4c3cefba31a6d1
a417e9fbecee262b6958432c8fd51280f418c533c83ae15c55875851681b7815
GET /7715/media/mp4/01.mp4 HTTP/1.1
Host: www.shagasenior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Fri, 10 May 2024 10:30:03 GMT
content-type: video/mp4
content-length: 1609890
server: Apache/2.4.38 (Debian)
last-modified: Wed, 20 Dec 2023 20:14:42 GMT
etag: "1890a2-60cf6a223b080"
accept-ranges: bytes
content-range: bytes 0-1609889/1609890
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_10.jpg
54.230.241.196200 OK 28 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_10.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 500x500, components 3
Hash 81ea60e9d3d5ff5dddb6e57f7e9d1b5b
c56d63940c42335dcfcced7850ca34ba595ebd38
077772741ac7e4f5747d8be9f77d69de09f0c9dd59e61b6b1ef4db25826750b6
GET /media/7715/media/girl_10.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 27619
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:10 GMT
etag: "81ea60e9d3d5ff5dddb6e57f7e9d1b5b"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6Sk8TaTtpFmFoP8_0U-HOk-t95D4gNZBASDfp6Fy859XDuu9hvOqcA==
age: 48775
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/svg/paper-plane-outline.svg
104.17.245.203200 OK 369 B URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/svg/paper-plane-outline.svg
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type SVG Scalable Vector Graphics image
Hash bf69c46c3cc4c9a0aca3e6ffcbec5d40
453af3d1f161510bb8d86c6262fa77af30b9d2fb
1760d0ced114ab02565577f6868137d9ad7337ad44a55f5c2174e0233e61410f
GET /ionicons@5.2.3/dist/ionicons/svg/paper-plane-outline.svg HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:05 GMT
content-type: image/svg+xml
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "171-iUiKrnhRTGRfmGl8NDHJDucddNQ"
via: 1.1 fly.io
fly-request-id: 01HX7T2NRKJ2RXPJS63EQQQ0B9-arn
cf-cache-status: HIT
age: 309081
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8819407b9b03568d-OSL
X-Firefox-Spdy: h2
d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_01.jpg
54.230.241.196200 OK 57 kB URL GET HTTP/2 d1zp0skjzco26d.cloudfront.net/media/7715/media/girl_01.jpg
IP 54.230.241.196:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 500x500, components 3
Hash 419a5daed0da6e4e454182ade489ceba
96ce68ec8fad9966996a13f95a61489793fe4522
923949603653f10678f8d05910912fcf9ee43abb13e0b10b4a383bc4a18f4868
GET /media/7715/media/girl_01.jpg HTTP/1.1
Host: d1zp0skjzco26d.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 57313
date: Thu, 09 May 2024 20:57:10 GMT
last-modified: Tue, 20 Dec 2022 09:47:38 GMT
etag: "419a5daed0da6e4e454182ade489ceba"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Zk4FZ2eDM1Xc-_MSRgeohZunyO5HUdfUrsnZETI_55ehMMEkWPiSuQ==
age: 48775
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/svg/videocam-outline.svg
104.17.245.203200 OK 549 B URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/svg/videocam-outline.svg
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type SVG Scalable Vector Graphics image
Hash a3bb043a05ca2fae4e36f1f7813b9e95
9138d0381e236dc7a597d79f44db913aeb6e71ca
5b8835121afe0c779bd78a48ecbfd0ec8719063560870d02a6da49bc2a63fff3
GET /ionicons@5.2.3/dist/ionicons/svg/videocam-outline.svg HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:05 GMT
content-type: image/svg+xml
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "225-ha7hYaAiOFIXCJFbIZ0dB3ht8Nc"
via: 1.1 fly.io
fly-request-id: 01HWQXHD71ZM2CAAXWR4ZA81SE-arn
cf-cache-status: HIT
age: 842320
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8819407bab14568d-OSL
X-Firefox-Spdy: h2
unpkg.com/ionicons@5.2.3/dist/ionicons/svg/cloud-download-outline.svg
104.17.245.203200 OK 412 B URL GET HTTP/2 unpkg.com/ionicons@5.2.3/dist/ionicons/svg/cloud-download-outline.svg
IP 104.17.245.203:443
Requested by https://www.shagasenior.com/7715/?country=NO®ion=Oslo+County&city=Oslo&brands=shagasenior.com&clickid=b41481a515b8471780dc54f2f855fe67&pi=56&campaignId=1355&var1=198_134504_2005070&var2=&var3=663df72972a37a000143ca4b&dob=3
Certificate IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT
File type SVG Scalable Vector Graphics image
Hash 92970a1c75e57903191ed54765401165
2a3b6b8df5d4589196b1958811967e3dad944a0d
141bb1846dfb4176f8c9ded203d32cc1aa4ec3f47c534b7dfe581d37fcba5c74
GET /ionicons@5.2.3/dist/ionicons/svg/cloud-download-outline.svg HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.shagasenior.com/
Origin: https://www.shagasenior.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 10:30:05 GMT
content-type: image/svg+xml
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "19c-s5LI/Vao/L51LAWwHuEcz2kOz04"
via: 1.1 fly.io
fly-request-id: 01HWXDGR6GVX0NJBJ08E2W2H24-arn
cf-cache-status: HIT
age: 657795
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8819407b8af6568d-OSL
X-Firefox-Spdy: h2