r.brandreward.com/?key=967848ea91eb3962321f0f3cdaffdc88&url=https%3A%2F%2Ftheordinary.com%2F&id=w73gkot6o37nair03sd7bt2k
302 Found 0 B URL User Request GET HTTP/1.1 r.brandreward.com/?key=967848ea91eb3962321f0f3cdaffdc88&url=https%3A%2F%2Ftheordinary.com%2F&id=w73gkot6o37nair03sd7bt2k
IP
Certificate IssuerLet's Encrypt
Subjectr.brandreward.com
FingerprintBB:45:09:77:F2:41:69:62:DA:C8:CD:57:E7:01:FE:CC:EC:0C:3F:61
ValidityTue, 26 Mar 2024 00:59:53 GMT - Mon, 24 Jun 2024 00:59:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?key=967848ea91eb3962321f0f3cdaffdc88&url=https%3A%2F%2Ftheordinary.com%2F&id=w73gkot6o37nair03sd7bt2k HTTP/1.1
Host: r.brandreward.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 25 Apr 2024 18:07:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: _bd=46ebcc0b75bbcdeed6b8f60dc29f2e07
Referer: https://www.firstfashionstyle.com/
Location: https://theordinary.com/
302 Found 0 B URL User Request GET HTTP/2 IP
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 25 Apr 2024 18:07:15 GMT
content-type: text/html;charset=UTF-8
content-length: 0
accept-ranges: bytes
x-dwsid-samesite: None, None
set-cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; Path=/; Secure; SameSite=None
cqcid=acZFuvBZMta0DZ6Z71h161r95O; Path=/; Secure; SameSite=None
cquid=||; Path=/; Secure; SameSite=None
sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; Path=/; Secure; SameSite=None
consent=marketing; Domain=theordinary.com; Expires=Fri, 25 Apr 2025 18:07:15 GMT; Path=/; Secure; SameSite=None
dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; Version=1; Comment="Demandware anonymous cookie for site Sites-deciem-us-Site"; Max-Age=15552000; Expires=Tue, 22 Oct 2024 18:07:15 GMT; Path=/; Secure; SameSite=None
shippingCountry=NO; Domain=theordinary.com; Expires=Fri, 25 Apr 2025 18:07:15 GMT; Path=/; Secure; SameSite=None
dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; path=/; HttpOnly; Secure; SameSite=None
location: /en-no
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87a04589d907569c-OSL
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw57da9729/theordinary/homepage/slotFGH/2023-12-08-D30905-ORD-Web-HA2.0-WebSlot-H.jpg
200 OK 12 kB URL GET HTTP/2 theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw57da9729/theordinary/homepage/slotFGH/2023-12-08-D30905-ORD-Web-HA2.0-WebSlot-H.jpg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x521, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 6aaf23358315caf419d2cca69a2566ba
967543eb930df06ac1310ced02fcc1f528085749
bfa448a4f94bc7227492be9f9e3cba4bedaa16a5e72687c3da3410b6779d0037
GET /on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw57da9729/theordinary/homepage/slotFGH/2023-12-08-D30905-ORD-Web-HA2.0-WebSlot-H.jpg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/webp
content-length: 11932
cache-control: public, max-age=2591358
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=73276
content-disposition: inline; filename="2023-12-08-D30905-ORD-Web-HA2.webp"
cross-origin-resource-policy: cross-origin
expires: Fri, 17 May 2024 20:17:34 GMT
last-modified: Tue, 06 Feb 2024 15:27:41 GMT
vary: Accept
x-dw-request-base-id: xnbKV1aD1WUBAAB_
cf-cache-status: HIT
age: 382083
accept-ranges: bytes
server: cloudflare
cf-ray: 87a045948e07569c-OSL
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwb3a371b3/images/poster/slowvember-ord-teaser-poster.jpg
200 OK 2.2 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwb3a371b3/images/poster/slowvember-ord-teaser-poster.jpg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x500, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 13497024b8cf5ceae5bca55f9c89ada0
83a39973e5e6aaeb8dc83896bb3abdc3c5e810c0
33e4d53f0d4ee67a20f0038c9cfaba9b595ceec36b35096793c6d028965614ee
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dwb3a371b3/images/poster/slowvember-ord-teaser-poster.jpg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/webp
content-length: 2170
cache-control: public, max-age=2591817
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=3692
content-disposition: inline; filename="slowvember-ord-teaser-poster.webp"
cross-origin-resource-policy: cross-origin
expires: Fri, 24 May 2024 11:58:56 GMT
last-modified: Mon, 22 Apr 2024 14:38:17 GMT
vary: Accept
x-dw-request-base-id: rSRLrwD0KGYBAAB_
cf-cache-status: HIT
age: 108091
accept-ranges: bytes
server: cloudflare
cf-ray: 87a045948e08569c-OSL
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dweb0d1141/theordinary/homepage/slotFGH/2023-12-08-D30905-ORD-Web-HA2.0-WebSlot-F.jpg
200 OK 34 kB URL GET HTTP/2 theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dweb0d1141/theordinary/homepage/slotFGH/2023-12-08-D30905-ORD-Web-HA2.0-WebSlot-F.jpg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 380x521, components 3
Hash e9c71974da374867bfeb42e48c75d5f1
5a726ff8908ac39f02053d504479f4295a709009
e6f5d1f9fa748fa5d77444dfea79239025fd8c75bd83f6d09e51dbb9df43018a
GET /on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dweb0d1141/theordinary/homepage/slotFGH/2023-12-08-D30905-ORD-Web-HA2.0-WebSlot-F.jpg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/jpeg
content-length: 34255
cache-control: public, max-age=2591951
cf-bgj: imgq:85,h2pri
cf-polished: degrade=85, origSize=306535, status=webp_bigger
cross-origin-resource-policy: cross-origin
expires: Mon, 29 Apr 2024 23:41:03 GMT
last-modified: Tue, 06 Feb 2024 15:27:41 GMT
x-dw-request-base-id: xnaDm9Jg4WUBAAB_
cf-cache-status: HIT
age: 1281115
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045947dfd569c-OSL
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw509a54b2/theordinary/homepage/slotFGH/2023-12-08-D30905-ORD-Web-HA2.0-WebSlot-G.jpg
200 OK 19 kB URL GET HTTP/2 theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw509a54b2/theordinary/homepage/slotFGH/2023-12-08-D30905-ORD-Web-HA2.0-WebSlot-G.jpg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 548x549, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 5285a335a71311b20b033c3c9e292903
5cde5ffa2d8a9b26beb95ef090c97016de33eba8
35f2ffea196ab2730e2f99dc320024df5fe3a689a1525a309aa8650bada7d3bf
GET /on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw509a54b2/theordinary/homepage/slotFGH/2023-12-08-D30905-ORD-Web-HA2.0-WebSlot-G.jpg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/webp
content-length: 19162
cache-control: public, max-age=2591877
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=155603
content-disposition: inline; filename="2023-12-08-D30905-ORD-Web-HA2.webp"
cross-origin-resource-policy: cross-origin
expires: Mon, 13 May 2024 02:45:56 GMT
last-modified: Tue, 06 Feb 2024 15:27:41 GMT
vary: Accept
x-dw-request-base-id: QHR-jOJ1y2UBAAB_
cf-cache-status: HIT
age: 1048511
accept-ranges: bytes
server: cloudflare
cf-ray: 87a045947e01569c-OSL
X-Firefox-Spdy: h2
theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw1e13bb23/theordinary/homepage/slotA/ord-hair-scalp-h2-homepage-hero-slotA-desktop.jpg
200 OK 94 kB URL GET HTTP/2 theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw1e13bb23/theordinary/homepage/slotA/ord-hair-scalp-h2-homepage-hero-slotA-desktop.jpg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 3840x1878, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 58763063d84e2317e51557eee7adfc96
f097bc58626c09dc984fc26a21f9a2e5fa4d5159
7ca0d53242bd259da1b2d2d25bd2d257c2e641cdaec4a8fbf0171717f6ed0950
GET /dw/image/v2/BFKJ_PRD/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw1e13bb23/theordinary/homepage/slotA/ord-hair-scalp-h2-homepage-hero-slotA-desktop.jpg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/webp
content-length: 93948
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=211467
content-disposition: inline; filename="ord-hair-scalp-h2-homepage-hero-slotA-desktop.webp"
etag: "b18ae6435363429fe277901e5f8a1e5f"
last-modified: Wed, 17 Apr 2024 13:00:06 GMT
vary: Accept
via: 1.1 21258ec71c1aa4499bcd08c6ad0eba38.cloudfront.net (CloudFront)
x-amz-cf-id: W9SktB6CDlB6YdNmvw5IBhnia-TUgJZfYWjAIFx6pcjg6jAH2kBgvg==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Sun, 18 May 2025 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring:
x-amz-server-side-encryption: AES256
x-amz-storage-class: INTELLIGENT_TIERING
cf-cache-status: HIT
age: 690755
accept-ranges: bytes
server: cloudflare
cf-ray: 87a045947dec569c-OSL
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw88d2c2b6/theordinary/homepage/slotE/ord-HA-2pct-B5-Caitlin-M-Sustainability-homepage-slotE-desktop.jpg
200 OK 175 kB URL GET HTTP/2 theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw88d2c2b6/theordinary/homepage/slotE/ord-HA-2pct-B5-Caitlin-M-Sustainability-homepage-slotE-desktop.jpg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x818, Scaling: [none]x[none], YUV color, decoders should clamp
Size 175 kB (174904 bytes)
Hash 03bb535eee9ec539917571aa1bea46e2
25796d348a0548abc818295932416e9e62534092
e9ec1c5721f0735ec9c607f5685755e5612715dcfe79956785cf50d76f3e5804
GET /on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw88d2c2b6/theordinary/homepage/slotE/ord-HA-2pct-B5-Caitlin-M-Sustainability-homepage-slotE-desktop.jpg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/webp
content-length: 174904
cache-control: public, max-age=2591984
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=1128418
content-disposition: inline; filename="ord-HA-2pct-B5-Caitlin-M-Sustainability-homepage-slotE-desktop.webp"
cross-origin-resource-policy: cross-origin
expires: Wed, 01 May 2024 13:00:08 GMT
last-modified: Tue, 26 Mar 2024 14:25:24 GMT
vary: Accept
x-dw-request-base-id: cusI09ivCmYBAAB_
cf-cache-status: HIT
age: 2091874
accept-ranges: bytes
server: cloudflare
cf-ray: 87a045947dfa569c-OSL
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dwd4dfbb3f/theordinary/homepage/slotD/ord-future-set-promo-slotD.png
200 OK 1.5 MB URL GET HTTP/2 theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dwd4dfbb3f/theordinary/homepage/slotD/ord-future-set-promo-slotD.png
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Size 1.5 MB (1515886 bytes)
Hash e95b424f60fbfd3b13bd974d5baff3a7
e83fadb8c053e2c9f21c712ad72a9a8efaa2f049
f616f093c32bc5692b1ebd44a2ca0f310ee5fe710ff1d4e06c45bbfa40e9df3d
GET /on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dwd4dfbb3f/theordinary/homepage/slotD/ord-future-set-promo-slotD.png HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/webp
content-length: 1515886
cache-control: public, max-age=2559888
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2414310
content-disposition: inline; filename="ord-future-set-promo-slotD.webp"
cross-origin-resource-policy: cross-origin
expires: Wed, 01 May 2024 04:05:11 GMT
last-modified: Thu, 21 Mar 2024 17:04:06 GMT
vary: Accept
x-dw-request-base-id: rSSm4XcyCmYBAAB_
cf-cache-status: HIT
age: 2091874
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=Yb4kiUX9c__R0ySlAIto5i8X7bhGXeGo2vUC4nP8DgU-1714068437-1.0.1.1-S85WkbxxrqYb8KTIIqsxYrx1MSJxCmUTSiVjTvJ2ssyxeIRiuMQEzDbbeO_CIgQ9o9oyFbIqP8764yXiu_SqHOa0jEurP3jA9.wh5By9lhXztq2MF8puUAbskKJylyNY_Syxt.Zak9eKCCmijYr.lA"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Yb4kiUX9c__R0ySlAIto5i8X7bhGXeGo2vUC4nP8DgU-1714068437-1.0.1.1-S85WkbxxrqYb8KTIIqsxYrx1MSJxCmUTSiVjTvJ2ssyxeIRiuMQEzDbbeO_CIgQ9o9oyFbIqP8764yXiu_SqHOa0jEurP3jA9.wh5By9lhXztq2MF8puUAbskKJylyNY_Syxt.Zak9eKCCmijYr.lA; report-to cf-csp-endpoint
server: cloudflare
cf-ray: 87a045947df6569c-OSL
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw073fef6a/theordinary/homepage/slotC/ord-future-set-promo-slotC.png
200 OK 966 kB URL GET HTTP/2 theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw073fef6a/theordinary/homepage/slotC/ord-future-set-promo-slotC.png
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Size 966 kB (966510 bytes)
Hash 74a7955375a3e52a9a5fe23737f964f8
abb0d3f202e3c051de679ea40331384b323e17dd
8f7e895e0c7eb8ecc1977ef7990ec02b037bab698ac0f3571db1675c78b7911c
GET /on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw073fef6a/theordinary/homepage/slotC/ord-future-set-promo-slotC.png HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/webp
content-length: 966510
cache-control: public, max-age=2591987
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=1512469
content-disposition: inline; filename="ord-future-set-promo-slotC.webp"
cross-origin-resource-policy: cross-origin
expires: Wed, 01 May 2024 13:00:11 GMT
last-modified: Thu, 21 Mar 2024 16:59:11 GMT
vary: Accept
x-dw-request-base-id: rSQd-duvCmYBAAB_
cf-cache-status: HIT
age: 2091874
accept-ranges: bytes
server: cloudflare
cf-ray: 87a045947df3569c-OSL
X-Firefox-Spdy: h2
service.force.com/embeddedservice/5.0/esw.min.js
200 OK 8.5 kB URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/esw.min.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (754)
Hash e42df024fad660bbadf4d550bb33fe6d
0c73cf3e830f5ffed5c9d070a95d98883db23454
ef4dcc4dab4d780f44939c455d4720cab662b2f5fabc36ebc33a21f4cdbecd4e
GET /embeddedservice/5.0/esw.min.js HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 17:06:48 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9
Expires: Fri, 26 Apr 2024 17:06:48 GMT
Last-Modified: Tue, 04 Jul 2023 00:26:54 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 3629
Content-Length: 8455
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/internal/jscript/dwac-21.7.js
200 OK 124 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/internal/jscript/dwac-21.7.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (4990), with no line terminators
Size 124 kB (123681 bytes)
Hash 6e836a261e64aa5bb48cdc6c147cca20
a4eb89b250f6087f7e5d3d4419ab120c8e92d894
ab4c6c213dea5bbfb5d836bfa5e19fd035ca43c9f74550a91b35eaf07b330381
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/internal/jscript/dwac-21.7.js HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: text/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=5007
cross-origin-resource-policy: cross-origin
expires: Fri, 24 May 2024 23:16:07 GMT
last-modified: Wed, 24 Apr 2024 23:16:07 GMT
vary: accept-encoding
x-dw-request-base-id: cutGQLeSKWYBAAB_
cf-cache-status: HIT
age: 67869
server: cloudflare
cf-ray: 87a04594be61569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwd35d1c1b/images/brands-logo/deciem_black.svg
200 OK 13 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwd35d1c1b/images/brands-logo/deciem_black.svg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 9a0cb1504098454b622fdbd95eb80198
fa482a1d70c04e44c0a000b5d42273f1bdc1614d
5f8c5c4243962dba74d36be7825b6e50f7730829bfe1278c981aeb4aa68aef61
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dwd35d1c1b/images/brands-logo/deciem_black.svg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/svg+xml
x-dw-request-base-id: cuuXrsfzKGYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591978
expires: Fri, 24 May 2024 11:57:59 GMT
last-modified: Mon, 22 Apr 2024 14:38:15 GMT
cf-cache-status: HIT
age: 108092
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045946db7569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwde9a2d71/images/brands-logo/niod.svg
200 OK 19 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwde9a2d71/images/brands-logo/niod.svg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 353e6daf3c47b5389d83be14f9c9b378
446ec0921a6b4adb233e4ba9194dc5a5fd0420fa
05f0deddcdd56b05ca434e6ac2f8e602e4e62b161dc857075544e0876ad08d89
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dwde9a2d71/images/brands-logo/niod.svg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/svg+xml
x-dw-request-base-id: cus6rsPzKGYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591974
expires: Fri, 24 May 2024 11:57:55 GMT
last-modified: Mon, 22 Apr 2024 14:38:15 GMT
cf-cache-status: HIT
age: 108092
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045947dcd569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 17 kB URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
File type RIFF (little-endian) data, Web/P image
Hash 3e65ec5d6d3b4ab304b8ea62f8075465
a321e347c8b33f03ccf2aebae61f60b3d1918268
a8ff63118ef8113d4e65a0bafd5e86bfe425fbbbea1ae17be6d5f26649010be7
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 655
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
server: cloudflare
cf-ray: 87a04597aba756cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dw6d6c7e0d/images/brands-logo/deciem_full_black.svg
200 OK 377 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dw6d6c7e0d/images/brands-logo/deciem_full_black.svg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Size 377 kB (377302 bytes)
Hash b5d1f37bad4f2cb39585820d677db197
6e61a7be102b7b9958a7bb33087eefba229d3a67
24ec300ca34c4fa1aed08e5a1fe88c8532298135c361b00933ea640b2fc860e4
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dw6d6c7e0d/images/brands-logo/deciem_full_black.svg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/svg+xml
x-dw-request-base-id: rSRuqMPzKGYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591973
expires: Fri, 24 May 2024 11:57:55 GMT
last-modified: Mon, 22 Apr 2024 14:38:15 GMT
cf-cache-status: HIT
age: 108092
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045947de4569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 98 kB URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
Hash 947f668cdd96eec305b96034a865cb28
af3eef35b756defecc22c28c0db381f981455b00
ea34e92f7bc4df2fb4bb6d4ae05223a140a31076769f116ee3ebd6fe2c771a99
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 656
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:18 GMT
server: cloudflare
cf-ray: 87a0459b5f4556cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/destination?id=DC-11373437&l=dataLayer&cx=c
200 OK 73 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=DC-11373437&l=dataLayer&cx=c
IP
Requested by https://theordinary.com/en-no
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (1763)
Hash a631cc5875b431d77f2ae1e10a371739
dad6f3db5907a4a5b3bcd5367456d80c274faaee
7108931e8e516a951413bedfb2b74c0c742ab959a255f414ff289b16cf37d733
GET /gtag/destination?id=DC-11373437&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 18:07:18 GMT
expires: Thu, 25 Apr 2024 18:07:18 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72868
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/destination?id=DC-13759042&l=dataLayer&cx=c
200 OK 73 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=DC-13759042&l=dataLayer&cx=c
IP
Requested by https://theordinary.com/en-no
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (1763)
Hash 47a23e48803ca328bc9cf78dbcae51ca
9af389705c3d0a380e10b29f1ebcd7436c153578
d4918dba04faacd2c73e5fda65b12748d29739d12023d441b58ab6f299182424
GET /gtag/destination?id=DC-13759042&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 18:07:18 GMT
expires: Thu, 25 Apr 2024 18:07:18 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72848
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
deciemchatbuild.secure.force.com/liveAgentSetupFlow
301 Moved Permanently 0 B URL GET HTTP/2 deciemchatbuild.secure.force.com/liveAgentSetupFlow
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.secure.force.com
Fingerprint8B:09:7D:39:0E:6D:C6:6D:A0:F3:B5:D0:A0:2B:DE:60:C8:02:C6:4D
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /liveAgentSetupFlow HTTP/1.1
Host: deciemchatbuild.secure.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 25 Apr 2024 18:07:18 GMT
set-cookie: CookieConsentPolicy=0:1; path=/; expires=Fri, 25-Apr-2025 18:07:18 GMT; Max-Age=31536000; secure; SameSite=None
LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Fri, 25-Apr-2025 18:07:18 GMT; Max-Age=31536000; secure; SameSite=None
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: upgrade-insecure-requests
referrer-policy: origin-when-cross-origin
cache-control: no-cache,must-revalidate,max-age=0,no-store,private
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
content-length: 0
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 19 kB URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
File type gzip compressed data, max compression, from Unix
Hash b9eb9c37874f04629623d0c3aa94d249
ca22e627fca2d901a644b1f94ef95c34f9eff822
c8baf1952a526a9f0a88140d2bf742f9c647d28a578fb45308411f909765057b
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 655
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
server: cloudflare
cf-ray: 87a04597aba056cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 11 kB URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
File type gzip compressed data, from Unix
Hash c4d61fbb6e730a840c7f140cbb9bcd06
e424f981eef8f250c3c7e0d4b60cf4e39424fc4a
37d6272ea625e9feaad12822ff9099767915bb0dbb4019700e8eabaa95617aff
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 612
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:18 GMT
server: cloudflare
cf-ray: 87a0459b5f4f56cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_53muszig_telemetry
200 OK 98 B URL GET HTTP/2 www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_53muszig_telemetry
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjectwww.redditstatic.com
Fingerprint2F:CB:EB:6E:79:ED:BE:34:24:FF:A9:C2:0C:D1:07:8D:56:7F:2F:16
ValidityMon, 08 Jan 2024 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
Hash 5143820daeb644938735d6b28c0059e7
22316bb57b4fa755662fd6f5fb7f749b21ac32a1
740bb313221bda5543b6fbe0bce3dd276cc70c4fd9aa0bae9d46b149406becf5
GET /ads/conversions-config/v1/pixel/config/t2_53muszig_telemetry HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=300
content-type: application/json
content-encoding: gzip
accept-ranges: bytes
date: Thu, 25 Apr 2024 18:07:19 GMT
via: 1.1 varnish
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 98
X-Firefox-Spdy: h2
s.pinimg.com/ct/core.js
200 OK 1.9 kB IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (4777), with no line terminators
Hash 157038e34123cc34939c37ef460356f4
bc65c9c0071a0d483a78ff7d5abe5f2500b265c1
62e7cb03e8f65ceb4f43a5a56a3b9c3950158fae3fea85699e3f4c68672f4c2f
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
etag: "2a48a6694c41c203319b5f6018c2bbbc"
x-amz-server-side-encryption: AES256
cache-control: max-age=7200
content-encoding: br
accept-ranges: bytes
content-type: application/javascript
content-length: 1899
alt-svc: h3=":443"; ma=600
vary: Accept-Encoding, Origin
akamai-x-true-ttl: 7200
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 14 kB URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
File type gzip compressed data, from Unix
Hash 4decd3c84382ecb47df62075a8de6021
83fedb7ed561c8defb9dac89300fcd2acdbea4c3
bb9631f5c576fff36ee8ac77a61e8967be74a63303d64641779c0a2027237a78
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 656
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:18 GMT
server: cloudflare
cf-ray: 87a0459b5f4356cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/brands/theordinary/global.css
200 OK 54 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/brands/theordinary/global.css
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (64186), with no line terminators
Hash 10995a92e7a7be4091e29463e903a694
570413bbd45ff96cb49177ba6670708d16be1bed
09d72735c16c1bf68243e5d89598a4ae601e7815ee8c6a642fc64e2fcd944e00
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/brands/theordinary/global.css HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: text/css
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=337898
cross-origin-resource-policy: cross-origin
expires: Fri, 24 May 2024 23:16:07 GMT
last-modified: Mon, 22 Apr 2024 14:38:16 GMT
vary: accept-encoding
x-dw-request-base-id: rSSHWbeSKWYBAAB_
cf-cache-status: HIT
age: 67869
server: cloudflare
cf-ray: 87a045946da9569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw51f90af8/Images/products/The%20Ordinary/rdn-natural-moisturizing-factors-ha-30ml.png?sw=90&sh=90&sm=fit
200 OK 3.2 kB URL GET HTTP/2 theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw51f90af8/Images/products/The%20Ordinary/rdn-natural-moisturizing-factors-ha-30ml.png?sw=90&sh=90&sm=fit
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash eb03021770f633b151e81f24afdd8b3c
2dae7be38afca1f2721ca573c208db64df65ce1a
6d66a0462824222aaa8713d18cb11f2d0c36cb0dfa5a4d59736708fcb82b6544
GET /dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw51f90af8/Images/products/The%20Ordinary/rdn-natural-moisturizing-factors-ha-30ml.png?sw=90&sh=90&sm=fit HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1; forterToken=c9bc252986b5430bbe69921525584984_1714068437503__UDF43_9ck_; _gcl_au=1.1.573230739.1714068438; ftr_ncd=6; _ga_K1WHNF7H93=GS1.1.1714068438.1.0.1714068438.60.0.0; _ga=GA1.1.1701865018.1714068439; _scid=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _scid_r=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _rdt_uuid=1714068439065.bf89f8aa-2653-4cf9-aea4-3ad282a22bae; cqcid=acpeWapZA4RclZxrdHPSaMZgkt; cquid=||; _sc_cspv=https%3A%2F%2Ftr.snapchat.com%2Fconfig%2Fcom%2Fcee3acf4-f810-4ae6-ae30-04952a3dd849.json%3Fv%3D3.16.0-2404242003; _uetsid=a81cd160032e11ef8a52c524e35c2388; _uetvid=a81d0540032e11efbd93a5900ef51d4e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
content-type: image/webp
content-length: 3186
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=5342
content-disposition: inline; filename="rdn-natural-moisturizing-factors-ha-30ml.webp"
etag: "a8547977fe98f8465271f0163da70102"
last-modified: Tue, 12 Mar 2024 12:51:20 GMT
vary: Accept
via: 1.1 b4b5a8fc69875a192be2508de7e5a5e8.cloudfront.net (CloudFront)
x-amz-cf-id: xfyqsxHhZEmfshz2Vg24wkuLCVmgF3QveRmeCHXZzsTicooByRtuNA==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Sat, 12 Apr 2025 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=90&sh=90&sm=fit
x-amz-server-side-encryption: AES256
x-amz-storage-class: INTELLIGENT_TIERING
cf-cache-status: HIT
age: 1226938
accept-ranges: bytes
server: cloudflare
cf-ray: 87a045a3fa6b569c-OSL
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dw29b69ea3/images/brands-logo/deciem_full_white.svg
200 OK 3.0 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dw29b69ea3/images/brands-logo/deciem_full_white.svg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash ab2c58b5c94998ff4e4ec26d93e26725
1fe4433771d1d9d371620246c93e7e14f24e053b
cecc2396c967d5b1267653339c86dbe9e9d851790c66a5a39d3b33ed6aa7bba8
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dw29b69ea3/images/brands-logo/deciem_full_white.svg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/svg+xml
x-dw-request-base-id: cus5rsPzKGYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591973
expires: Fri, 24 May 2024 11:57:55 GMT
last-modified: Mon, 22 Apr 2024 14:38:15 GMT
cf-cache-status: HIT
age: 108092
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045947de8569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 206 kB URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
File type gzip compressed data, max compression
Size 206 kB (205803 bytes)
Hash a484f2f3418f65b8214cbcd3e4a31057
5c002c51b67db40f88b6895a5d5caa67608a65ce
79cbe928773386d07f0127f256f383debed5ccea5ff230465bf46ec7c87319d6
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 862
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:18 GMT
server: cloudflare
cf-ray: 87a0459f7cc456cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw46744af7/Images/products/The%20Ordinary/rdn-squalane-cleanser-150ml.png?sw=90&sh=90&sm=fit
200 OK 3.6 kB URL GET HTTP/2 theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw46744af7/Images/products/The%20Ordinary/rdn-squalane-cleanser-150ml.png?sw=90&sh=90&sm=fit
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash c1dae344ec09e92c37b5abf5d9b492de
dcffc4cefa3f389a2dcb924abe8d9d2ff37324b3
4769196db2ab451d26dfb2e9770ecd228dba16686eba07e3cc615216644f21c7
GET /dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw46744af7/Images/products/The%20Ordinary/rdn-squalane-cleanser-150ml.png?sw=90&sh=90&sm=fit HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1; forterToken=c9bc252986b5430bbe69921525584984_1714068437503__UDF43_9ck_; _gcl_au=1.1.573230739.1714068438; ftr_ncd=6; _ga_K1WHNF7H93=GS1.1.1714068438.1.0.1714068438.60.0.0; _ga=GA1.1.1701865018.1714068439; _scid=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _scid_r=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _rdt_uuid=1714068439065.bf89f8aa-2653-4cf9-aea4-3ad282a22bae; cqcid=acpeWapZA4RclZxrdHPSaMZgkt; cquid=||; _sc_cspv=https%3A%2F%2Ftr.snapchat.com%2Fconfig%2Fcom%2Fcee3acf4-f810-4ae6-ae30-04952a3dd849.json%3Fv%3D3.16.0-2404242003; _uetsid=a81cd160032e11ef8a52c524e35c2388; _uetvid=a81d0540032e11efbd93a5900ef51d4e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
content-type: image/webp
content-length: 3556
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=5931
content-disposition: inline; filename="rdn-squalane-cleanser-150ml.webp"
etag: "1b17d049dabc8234b6be814a5c916cf2"
last-modified: Tue, 09 Apr 2024 22:39:46 GMT
vary: Accept
via: 1.1 efc12fd327e76ab48012cf50cecfdff8.cloudfront.net (CloudFront)
x-amz-cf-id: 00xH5DqTQN0UYV4GescqxG-tKz70mJss2Je2FI2A5SgWKYxqdW5hqg==
x-amz-cf-pop: ARN1-C1
x-cache: Miss from cloudfront
x-amz-expiration: expiry-date="Sat, 10 May 2025 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=90&sh=90&sm=fit
x-amz-server-side-encryption: AES256
x-amz-storage-class: INTELLIGENT_TIERING
cf-cache-status: HIT
age: 1348792
accept-ranges: bytes
server: cloudflare
cf-ray: 87a045a3fa6c569c-OSL
X-Firefox-Spdy: h2
theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw8d4bac7c/Images/products/The%20Ordinary/ord-retinal-02pct-emulsion-15ml.png?sw=90&sh=90&sm=fit
200 OK 2.0 kB URL GET HTTP/2 theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw8d4bac7c/Images/products/The%20Ordinary/ord-retinal-02pct-emulsion-15ml.png?sw=90&sh=90&sm=fit
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 4047055b9a917786682265f7d7ad1993
116af2e1c840734aa1fe457081ba3ac73aff874f
81cba09569fd83128dbae8630fdf2deb8ae4eb6f81cff3a80e747cfa5210e705
GET /dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw8d4bac7c/Images/products/The%20Ordinary/ord-retinal-02pct-emulsion-15ml.png?sw=90&sh=90&sm=fit HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1; forterToken=c9bc252986b5430bbe69921525584984_1714068437503__UDF43_9ck_; _gcl_au=1.1.573230739.1714068438; ftr_ncd=6; _ga_K1WHNF7H93=GS1.1.1714068438.1.0.1714068438.60.0.0; _ga=GA1.1.1701865018.1714068439; _scid=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _scid_r=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _rdt_uuid=1714068439065.bf89f8aa-2653-4cf9-aea4-3ad282a22bae; cqcid=acpeWapZA4RclZxrdHPSaMZgkt; cquid=||; _sc_cspv=https%3A%2F%2Ftr.snapchat.com%2Fconfig%2Fcom%2Fcee3acf4-f810-4ae6-ae30-04952a3dd849.json%3Fv%3D3.16.0-2404242003; _uetsid=a81cd160032e11ef8a52c524e35c2388; _uetvid=a81d0540032e11efbd93a5900ef51d4e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
content-type: image/webp
content-length: 2042
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3298
content-disposition: inline; filename="ord-retinal-02pct-emulsion-15ml.webp"
etag: "27029c2874acdd4b887cdad15d7c0000"
last-modified: Sat, 16 Mar 2024 07:54:34 GMT
vary: Accept
via: 1.1 b58b188f0b591d63a56e49672312d538.cloudfront.net (CloudFront)
x-amz-cf-id: O6a6p0rErnAOyIkb-ahwn1E7B1U7V4MiiIy9l7eDSsm-hHA3c5CGGA==
x-amz-cf-pop: ARN1-C1
x-cache: Miss from cloudfront
x-amz-expiration: expiry-date="Wed, 16 Apr 2025 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=90&sh=90&sm=fit
x-amz-server-side-encryption: AES256
x-amz-storage-class: INTELLIGENT_TIERING
cf-cache-status: HIT
age: 818130
accept-ranges: bytes
server: cloudflare
cf-ray: 87a045a3fa6f569c-OSL
X-Firefox-Spdy: h2
theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dwce8a7cdf/Images/products/The%20Ordinary/rdn-niacinamide-10pct-zinc-1pct-30ml.png?sw=90&sh=90&sm=fit
200 OK 2.6 kB URL GET HTTP/2 theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dwce8a7cdf/Images/products/The%20Ordinary/rdn-niacinamide-10pct-zinc-1pct-30ml.png?sw=90&sh=90&sm=fit
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash d400cfe41ffcd856eeba0d5404810fa5
aa945cb3011ee813a7455b61ebf47ffdd2dc3e19
00ad995b09469a157a6ddc7961080491d432c89a7a5f44c9c77f3870fe7f3bb6
GET /dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dwce8a7cdf/Images/products/The%20Ordinary/rdn-niacinamide-10pct-zinc-1pct-30ml.png?sw=90&sh=90&sm=fit HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1; forterToken=c9bc252986b5430bbe69921525584984_1714068437503__UDF43_9ck_; _gcl_au=1.1.573230739.1714068438; ftr_ncd=6; _ga_K1WHNF7H93=GS1.1.1714068438.1.0.1714068438.60.0.0; _ga=GA1.1.1701865018.1714068439; _scid=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _scid_r=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _rdt_uuid=1714068439065.bf89f8aa-2653-4cf9-aea4-3ad282a22bae; cqcid=acpeWapZA4RclZxrdHPSaMZgkt; cquid=||; _sc_cspv=https%3A%2F%2Ftr.snapchat.com%2Fconfig%2Fcom%2Fcee3acf4-f810-4ae6-ae30-04952a3dd849.json%3Fv%3D3.16.0-2404242003; _uetsid=a81cd160032e11ef8a52c524e35c2388; _uetvid=a81d0540032e11efbd93a5900ef51d4e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
content-type: image/webp
content-length: 2636
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=4331
content-disposition: inline; filename="rdn-niacinamide-10pct-zinc-1pct-30ml.webp"
etag: "80eb07892df613eaca308686fe755b3e"
last-modified: Tue, 12 Mar 2024 12:51:13 GMT
vary: Accept
via: 1.1 14b5d848e0a4cab1de054891ea1e787c.cloudfront.net (CloudFront)
x-amz-cf-id: joR9gHdEVw4-UaAf9iaMTNo1zKSP6h97F8ao81H_xW6Gqf1PGyz6Jw==
x-amz-cf-pop: HEL51-P1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Sat, 12 Apr 2025 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=90&sh=90&sm=fit
x-amz-server-side-encryption: AES256
x-amz-storage-class: INTELLIGENT_TIERING
cf-cache-status: HIT
age: 1226856
accept-ranges: bytes
server: cloudflare
cf-ray: 87a045a3fa71569c-OSL
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 0 B URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 714
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
server: cloudflare
cf-ray: 87a04597bbb156cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
service.force.com/embeddedservice/5.0/esw.min.js
200 OK 8.5 kB URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/esw.min.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (754)
Hash e42df024fad660bbadf4d550bb33fe6d
0c73cf3e830f5ffed5c9d070a95d98883db23454
ef4dcc4dab4d780f44939c455d4720cab662b2f5fabc36ebc33a21f4cdbecd4e
GET /embeddedservice/5.0/esw.min.js HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deciem.my.salesforce-sites.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 17:06:48 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9
Expires: Fri, 26 Apr 2024 17:06:48 GMT
Last-Modified: Tue, 04 Jul 2023 00:26:54 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 3631
Content-Length: 8455
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 35 B URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
File type GIF image data, version 89a, 1 x 1
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 721
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:18 GMT
server: cloudflare
cf-ray: 87a0459dea9956cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 471 B URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
Hash bc43f7d8588cb0093321be4a04a3037a
9930e37d4c58310ea562a9403ee858c84ac870c5
3359165a3908d8576f6132b3e8b70dc0d08c6d4b3a6e4217c0adeb05dd1c4a7c
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 657
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
server: cloudflare
cf-ray: 87a045a41a1356cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 20 kB URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
Hash 0c0f2aed16e51276069e2c6e45c878c1
96edcbcead6f31df9ba0376b8a35bd501f2d7174
de108f83218208c9adc75ec7106237506dd993f0a2e372c984df7ab4ef52d534
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 657
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
server: cloudflare
cf-ray: 87a045a409f356cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=25065556&tm=gtm002&Ver=2&mid=97b75b61-435f-4d25-b158-4224c72f81d9&sid=a81cd160032e11ef8a52c524e35c2388&vid=a81d0540032e11efbd93a5900ef51d4e&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Welcome%20to%20The%20Ordinary%3A%20Effective%20Clinical%20Skincare&kw=DECIEM&p=https%3A%2F%2Ftheordinary.com%2Fen-no&r=<=3101&evt=pageLoad&sv=1&rn=373921
204 No Content 0 B URL GET HTTP/2 bat.bing.com/action/0?ti=25065556&tm=gtm002&Ver=2&mid=97b75b61-435f-4d25-b158-4224c72f81d9&sid=a81cd160032e11ef8a52c524e35c2388&vid=a81d0540032e11efbd93a5900ef51d4e&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Welcome%20to%20The%20Ordinary%3A%20Effective%20Clinical%20Skincare&kw=DECIEM&p=https%3A%2F%2Ftheordinary.com%2Fen-no&r=<=3101&evt=pageLoad&sv=1&rn=373921
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://theordinary.com/en-no
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
Fingerprint2B:CE:FC:A9:73:41:A3:66:C2:43:6D:7A:76:00:0C:F2:74:08:13:99
ValidityThu, 25 Apr 2024 02:03:31 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=25065556&tm=gtm002&Ver=2&mid=97b75b61-435f-4d25-b158-4224c72f81d9&sid=a81cd160032e11ef8a52c524e35c2388&vid=a81d0540032e11efbd93a5900ef51d4e&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Welcome%20to%20The%20Ordinary%3A%20Effective%20Clinical%20Skincare&kw=DECIEM&p=https%3A%2F%2Ftheordinary.com%2Fen-no&r=<=3101&evt=pageLoad&sv=1&rn=373921 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=165BE687FAF066642D55F2EBFB056736; domain=.bing.com; expires=Tue, 20-May-2025 18:07:19 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 21DF9543C14C4940A2D4B9DA4F7A762B Ref B: OSL30EDGE0213 Ref C: 2024-04-25T18:07:19Z
date: Thu, 25 Apr 2024 18:07:19 GMT
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 0 B URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 657
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
server: cloudflare
cf-ray: 87a045a41a1156cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 2 B URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 750
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:18 GMT
server: cloudflare
cf-ray: 87a0459dfaaf56cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 20 B URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
Hash 5820854f62a6eb3d38ba7ba0d1b3ea75
639df0b84fe699b4a290a713fd6b9a94bd4deb95
912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 726
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:18 GMT
server: cloudflare
cf-ray: 87a0459dfaab56cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ct.pinterest.com/user/?tid=2613778178781&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1714068439942&dep=2%2CPAGE_LOAD
200 OK 186 B URL GET HTTP/3 ct.pinterest.com/user/?tid=2613778178781&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1714068439942&dep=2%2CPAGE_LOAD
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
Hash 40260988c119615b76adfab7646eb184
1efb15b006b070653cdecfd57d00f67c5b890188
e8e9572f007fadd6e99822807a113a4917836c22152b04c4f515eb1c98d06084
GET /user/?tid=2613778178781&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1714068439942&dep=2%2CPAGE_LOAD HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU56RXdZVGcyTW1JdE5UazRaUzAwT1dSakxXSmpZall0TWpoa05qZGpabVE1WWprNQ
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://theordinary.com
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 186
x-envoy-upstream-service-time: 1
pinterest-version: 219d758fc6c272afdb21541dfea642f69cb734f9
referrer-policy: origin
x-pinterest-rid: 6104548202954198
date: Thu, 25 Apr 2024 18:07:20 GMT
alt-svc: h3=":443"; ma=600
vary: Accept-Encoding
quic-version: 0x00000001
akamai-grn: 0.164f2417.1714068440.48e537b
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 186 B URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Hash 2e79844b85feceb2bfb180d91a3c73f0
823c148c8ea313b59d16df2af994250b5b5549d5
6b854867bd76cdfeb566b323076015fc9b3bc5e96d4902ff7bb31e9f44786a79
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 690
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
server: cloudflare
cf-ray: 87a045a42a2a56cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ct.pinterest.com/user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613778178781&cb=1714068439944&dep=5%2CEVENT_TAGS_ABSENT
200 OK 186 B URL GET HTTP/3 ct.pinterest.com/user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613778178781&cb=1714068439944&dep=5%2CEVENT_TAGS_ABSENT
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
Hash 40260988c119615b76adfab7646eb184
1efb15b006b070653cdecfd57d00f67c5b890188
e8e9572f007fadd6e99822807a113a4917836c22152b04c4f515eb1c98d06084
GET /user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613778178781&cb=1714068439944&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU16a3hOVFUyWlRZdFl6aGtZUzAwTXpsakxUZzJNMkV0T0dVMFpEbGpZV1JrTUdFNA
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://theordinary.com
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 186
x-envoy-upstream-service-time: 0
pinterest-version: 219d758fc6c272afdb21541dfea642f69cb734f9
referrer-policy: origin
x-pinterest-rid: 6896411763866033
date: Thu, 25 Apr 2024 18:07:20 GMT
alt-svc: h3=":443"; ma=600
vary: Accept-Encoding
quic-version: 0x00000001
akamai-grn: 0.164f2417.1714068440.48e53a7
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 35 B URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
File type GIF image data, version 89a, 1 x 1
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 657
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
server: cloudflare
cf-ray: 87a045a41a0a56cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 872 B URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Hash ccac2775d026bb87ed91b2fe08e6c83c
64a7807b43666cc3c43fb77a7039002876000deb
05c3ca5656fab0a6578fdc0a1948129900c6548528b40a4938961d5bd3ac9099
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 657
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
server: cloudflare
cf-ray: 87a045a409f256cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
deciem.my.salesforce-sites.com/liveAgentSetupFlow/lightning/lightning.out.delegate.js?v=1714068439879
200 OK 3.6 kB URL GET HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/lightning/lightning.out.delegate.js?v=1714068439879
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Hash 961892a43893b7cecbfde286df3ba0ee
2b9e153c13424bb55f470222dd72b5a075f93fcf
3f51588e8a11eacb8fc99f2bdb00de23fe0abe3c43f101a600002da96aa0a0de
GET /liveAgentSetupFlow/lightning/lightning.out.delegate.js?v=1714068439879 HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: public,max-age=10368000
expires: Fri, 23 Aug 2024 18:07:19 GMT
last-modified: Wed, 31 May 2023 13:43:37 GMT
content-type: application/x-javascript
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 233 kB URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size 233 kB (233405 bytes)
Hash cc510d7d9c8127a5080adb4f8db72238
0815606f6ccea8e6e46fde7f6e75ed0f2ee0c2bb
8ec55f1dff83c1cc61d03cdb4e6ca1494b43da5c68bba1d5bc9e7cc694698a73
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 657
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
server: cloudflare
cf-ray: 87a045a409f456cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
service.force.com/embeddedservice/5.0/utils/common.js
200 OK 5.7 kB URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/utils/common.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text
Hash c377334be9bfa7c2822188be9e7850e9
5e316d25b9d1b0a82270776c61b0339020eef260
8d290d6ab1f11071876d2313114be38025b648b6dd0540855254481cd8c969fe
GET /embeddedservice/5.0/utils/common.js HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deciem.my.salesforce-sites.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:19:41 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Expires: Thu, 25 Apr 2024 21:19:41 GMT
Last-Modified: Thu, 17 Feb 2022 23:56:58 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 74859
Content-Length: 5742
service.force.com/embeddedservice/5.0/esw.css
200 OK 4.4 kB URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/esw.css
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (4590)
Hash 0262301dda2ee12674526885f04af683
b68c5426792f3380131bef1405937f050e0f6f47
490d6b7bfd6aee946e047d10e1ab8d97c004399c496625076ed016111328f1f9
GET /embeddedservice/5.0/esw.css HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deciem.my.salesforce-sites.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:19:07 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Expires: Thu, 25 Apr 2024 21:19:07 GMT
Last-Modified: Fri, 27 Aug 2021 14:09:42 GMT
Content-Type: text/css
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 74893
Content-Length: 4356
service.force.com/embeddedservice/5.0/client/liveagent.esw.js
200 OK 14 kB URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/client/liveagent.esw.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text
Hash abd1dac251bf30da79e91d8dded949eb
374354f7f13af0431f674c5cf68d6a162c47af1c
5e9871bb0784f760f1b43a303555e93356fe5ef935904b7e272e3e7746ccac7b
GET /embeddedservice/5.0/client/liveagent.esw.js HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deciem.my.salesforce-sites.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:38:24 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Expires: Thu, 25 Apr 2024 21:38:24 GMT
Last-Modified: Wed, 17 Aug 2022 20:09:20 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 73736
Content-Length: 13497
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 20 B URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
Hash 5820854f62a6eb3d38ba7ba0d1b3ea75
639df0b84fe699b4a290a713fd6b9a94bd4deb95
912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 746
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:20 GMT
server: cloudflare
cf-ray: 87a045a6fcdb56cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
service.force.com/embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
200 OK 271 B URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type HTML document, ASCII text
Hash 83d1b4c57df69bc402d482d1f2dc6f6b
80f70ed5faab0a457e6a3a410b5e732bc0561703
0788c2f27d3c80a9e4cb799e5cafe979c382cc7683bc06422703406a90a781f6
GET /embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deciem.my.salesforce-sites.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 18:07:20 GMT
Set-Cookie: CookieConsentPolicy=0:0; path=/; expires=Fri, 25-Apr-2025 18:07:20 GMT; Max-Age=31536000; secure; SameSite=None
LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Fri, 25-Apr-2025 18:07:20 GMT; Max-Age=31536000; secure; SameSite=None
BrowserId=qLegbwMuEe-DVMFBueeGxA; domain=.force.com; path=/; expires=Fri, 25-Apr-2025 18:07:20 GMT; Max-Age=31536000
BrowserId_sec=qLegbwMuEe-DVMFBueeGxA; domain=.force.com; path=/; expires=Fri, 25-Apr-2025 18:07:20 GMT; Max-Age=31536000; secure; SameSite=None
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
Content-Security-Policy: upgrade-insecure-requests
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Expires: Fri, 26 Apr 2024 18:07:20 GMT
Last-Modified: Thu, 14 Sep 2023 00:07:48 GMT
Content-Type: text/html;charset=UTF-8
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 0 B URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 657
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
server: cloudflare
cf-ray: 87a045a409f856cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
service.force.com/embeddedservice/5.0/eswFrame.js
200 OK 5.3 kB URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/eswFrame.js
IP
Requested by https://service.force.com/embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text
Hash e8946910aae412c90b4a0646a676125a
e0fdfa3b5b6f4f8c268da77aaafcab4781ba8256
35a3077584fae7249cd4c52c61b6382cfa06243a9ef0a6ff1c46559c62f1006a
GET /embeddedservice/5.0/eswFrame.js HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://service.force.com/embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=qLegbwMuEe-DVMFBueeGxA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:35:53 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Expires: Thu, 25 Apr 2024 21:35:53 GMT
Last-Modified: Thu, 06 Oct 2022 23:37:30 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 73887
Content-Length: 5294
service.force.com/embeddedservice/5.0/frame/session.esw.js
200 OK 2.0 kB URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/frame/session.esw.js
IP
Requested by https://service.force.com/embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text
Hash df8c228881313510701cda069c793f9f
1391cde06ab031fcfeddc7f3f0ea632e4b06acc0
f9d79aa4bfccd16aa5198acf3dfce0ad7243f87249c0d0607828c87fd91aa18a
GET /embeddedservice/5.0/frame/session.esw.js HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://service.force.com/embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=qLegbwMuEe-DVMFBueeGxA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:20:46 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Expires: Thu, 25 Apr 2024 21:20:46 GMT
Last-Modified: Fri, 20 Oct 2023 23:23:50 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 74794
Content-Length: 1993
service.force.com/embeddedservice/5.0/frame/broadcast.esw.js
200 OK 2.4 kB URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/frame/broadcast.esw.js
IP
Requested by https://service.force.com/embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 346fbad512ecc45a182df3cfb651a9c5
d3a054fb8428f542ba4a426551749fa644eaa561
eabed4f1131111fd10b5bc90848516989ffdb8d47eb657774e89861d80171098
GET /embeddedservice/5.0/frame/broadcast.esw.js HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://service.force.com/embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=qLegbwMuEe-DVMFBueeGxA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:36:33 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Expires: Thu, 25 Apr 2024 21:36:33 GMT
Last-Modified: Thu, 18 Feb 2021 00:07:24 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 73847
Content-Length: 2380
cdn0.forter.com/aa873949f74d/c9bc252986b5430bbe69921525584984/wpt.json
204 No Content 20 B URL OPTIONS HTTP/1.1 cdn0.forter.com/aa873949f74d/c9bc252986b5430bbe69921525584984/wpt.json
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjectcdn0.forter.com
Fingerprint0C:A7:98:CC:FB:DC:C4:B2:07:E5:25:14:71:5D:ED:C8:D8:92:C6:8B
ValidityThu, 22 Jun 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
Hash 5820854f62a6eb3d38ba7ba0d1b3ea75
639df0b84fe699b4a290a713fd6b9a94bd4deb95
912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d
POST /aa873949f74d/c9bc252986b5430bbe69921525584984/wpt.json HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
Content-Length: 26
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://theordinary.com
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
Expires: -1
Pragma: no-cache
Content-Type: application/json; charset=utf-8
Content-Length: 20
ETag: W/"14-Y53wuE/mmbSikKcT/WualL1N65U"
Date: Thu, 25 Apr 2024 18:07:20 GMT
Connection: keep-alive
Keep-Alive: timeout=10
service.force.com/embeddedservice/5.0/frame/chasitor.esw.js
200 OK 12 kB URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/frame/chasitor.esw.js
IP
Requested by https://service.force.com/embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (815)
Hash b69cc6b82d5c199deaea94288880e2b5
760e7ae327c928c07336fbf906ea8a5d71bf3537
885f972fa2faa83576a3e916f95360001ea45c3cd7bbe1f704fd3d3949e6cf04
GET /embeddedservice/5.0/frame/chasitor.esw.js HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://service.force.com/embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=qLegbwMuEe-DVMFBueeGxA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:36:29 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Expires: Thu, 25 Apr 2024 21:36:29 GMT
Last-Modified: Fri, 20 Oct 2023 23:23:50 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 73851
Content-Length: 12285
service.force.com/embeddedservice/5.0/client/invite.esw.js
200 OK 8.2 kB URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/client/invite.esw.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 4aa5e7456547fdff789a2b7818373aaf
4c1c9767537f3a45d9d5a4c9c786951cfe4a7e04
ca9b22e66dd9f20df63ac75760956430a1661ffc0619b0060ebb0ef412488621
GET /embeddedservice/5.0/client/invite.esw.js HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deciem.my.salesforce-sites.com/
Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=qLegbwMuEe-DVMFBueeGxA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:18:31 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9
Expires: Thu, 25 Apr 2024 21:18:31 GMT
Last-Modified: Fri, 20 Oct 2023 23:23:50 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 74929
Content-Length: 8233
service.force.com/embeddedservice/5.0/frame/filetransfer.esw.js
200 OK 740 B URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/frame/filetransfer.esw.js
IP
Requested by https://service.force.com/embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash c0bbfcdf520e16d1b2aff3cf782cd6fc
598d651e900d07a941c959fa4eea8cd36b664aa6
0b59b257ee4b7a8039b5df53f4e222051d0c3357bde8f48f021b255faab1d79c
GET /embeddedservice/5.0/frame/filetransfer.esw.js HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://service.force.com/embeddedservice/5.0/eswDev.html?parent=https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=qLegbwMuEe-DVMFBueeGxA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:35:53 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9
Expires: Thu, 25 Apr 2024 21:35:53 GMT
Last-Modified: Fri, 20 Oct 2023 23:23:50 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 73887
Content-Length: 740
ct.pinterest.com/ct.html
200 OK 323 B IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (565), with no line terminators
Hash 433cbac690542626f503b4269a8da12a
3e810bc4abaccf42ac5e4b0b939d63c03711bbd9
f83b1a3ea61ad62e47fad82de5495a2547e2f12e591ad8108050538c566ae1e3
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
content-length: 323
x-envoy-upstream-service-time: 0
pinterest-version: 219d758fc6c272afdb21541dfea642f69cb734f9
referrer-policy: origin
x-pinterest-rid: 1457660993696109
date: Thu, 25 Apr 2024 18:07:20 GMT
alt-svc: h3=":443"; ma=600
vary: Accept-Encoding
quic-version: 0x00000001
akamai-grn: 0.164f2417.1714068440.48e5df0
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
service.force.com/embeddedservice/5.0/utils/inert.js
200 OK 6.9 kB URL GET HTTP/1.1 service.force.com/embeddedservice/5.0/utils/inert.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subject*.eu17.force.com
Fingerprint89:C8:97:EB:AB:62:A1:7C:9C:D0:CB:AD:A7:56:2F:0C:4C:30:BE:FF
ValidityWed, 03 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 2a07c7c3a8a395a18758f8656630588f
37a9c32355cad47ae732f0e1f2f18061aa162c64
b1312c9c8c324e53193dff61a0c784da7048655a2b43f5cfdaca886ed3ce85c6
GET /embeddedservice/5.0/utils/inert.js HTTP/1.1
Host: service.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deciem.my.salesforce-sites.com/
Cookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId_sec=qLegbwMuEe-DVMFBueeGxA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:18:40 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Expires: Thu, 25 Apr 2024 21:18:40 GMT
Last-Modified: Thu, 16 Jul 2020 18:56:26 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 74920
Content-Length: 6943
static.lightning.force.com/can56.sfdc-58ktaz/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js
200 OK 270 kB URL GET HTTP/2 static.lightning.force.com/can56.sfdc-58ktaz/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectstatic.lightning.salesforce.com
FingerprintBA:DD:8A:FC:05:E9:09:5C:66:7F:EE:BA:21:FE:D8:C0:C6:D6:9B:88
ValidityWed, 10 Apr 2024 00:00:00 GMT - Wed, 09 Apr 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (25715)
Size 270 kB (269596 bytes)
Hash 21bbc2b00e86be5510f0e9dd9a710160
20217c7bf3b82c2ccf60dcc21314c4d4d5c69626
ee6084b045c4cf3136af565c81c51c15173e6c1c65274e5129c1c47142cc6b45
GET /can56.sfdc-58ktaz/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js HTTP/1.1
Host: static.lightning.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deciem.my.salesforce-sites.com/
Cookie: BrowserId_sec=qLegbwMuEe-DVMFBueeGxA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
referrer-policy: origin-when-cross-origin
origin-trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
last-modified: Wed, 03 Apr 2024 11:13:00 GMT
server-timing: Total;dur=43
access-control-expose-headers: Server-Timing
content-encoding: gzip
content-length: 269596
cache-control: public, max-age=29696701, immutable
expires: Fri, 04 Apr 2025 11:12:22 GMT
date: Thu, 25 Apr 2024 18:07:21 GMT
set-cookie: Geo=Continent: EU Country: NO State: City: OSLO
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS,HEAD
access-control-allow-origin: *
timing-allow-origin: *
akamai-grn: 0.dc4d2417.1714068441.3c9247c
X-Firefox-Spdy: h2
static.lightning.force.com/can56.sfdc-58ktaz/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/appcore.js?2=
200 OK 110 kB URL GET HTTP/2 static.lightning.force.com/can56.sfdc-58ktaz/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/appcore.js?2=
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectstatic.lightning.salesforce.com
FingerprintBA:DD:8A:FC:05:E9:09:5C:66:7F:EE:BA:21:FE:D8:C0:C6:D6:9B:88
ValidityWed, 10 Apr 2024 00:00:00 GMT - Wed, 09 Apr 2025 23:59:59 GMT
File type ASCII text, with very long lines (6277)
Size 110 kB (109769 bytes)
Hash 8dc95a7b2dd7c21e0170c00c85e9b5db
4bfc72dd18384d4ae4574d6b28f084c749e5c69c
5c5276b7a97e7bba6f685cad12c09ae9b46f48341d31c35a2300389bcb839264
GET /can56.sfdc-58ktaz/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/appcore.js?2= HTTP/1.1
Host: static.lightning.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deciem.my.salesforce-sites.com/
Cookie: BrowserId_sec=qLegbwMuEe-DVMFBueeGxA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: CookieConsentPolicy=0:0; path=/; expires=Fri, 18-Apr-2025 10:55:08 GMT; Max-Age=31536000; secure
LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Fri, 18-Apr-2025 10:55:08 GMT; Max-Age=31536000; secure
BrowserId=Hyv-a_1yEe6Md5O6cz-vvw; domain=.force.com; path=/; expires=Fri, 18-Apr-2025 10:55:08 GMT; Max-Age=31536000
Geo=Continent: EU Country: NO State: City: OSLO
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
referrer-policy: origin-when-cross-origin
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
last-modified: Wed, 17 Apr 2024 10:55:08 GMT
content-encoding: gzip
content-length: 109769
cache-control: public, max-age=30905231, immutable
expires: Fri, 18 Apr 2025 10:54:32 GMT
date: Thu, 25 Apr 2024 18:07:21 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS,HEAD
access-control-allow-origin: *
timing-allow-origin: *
akamai-grn: 0.dc4d2417.1714068441.3c92480
X-Firefox-Spdy: h2
static.lightning.force.com/can56.sfdc-58ktaz/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2=
200 OK 1.1 MB URL GET HTTP/2 static.lightning.force.com/can56.sfdc-58ktaz/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2=
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectstatic.lightning.salesforce.com
FingerprintBA:DD:8A:FC:05:E9:09:5C:66:7F:EE:BA:21:FE:D8:C0:C6:D6:9B:88
ValidityWed, 10 Apr 2024 00:00:00 GMT - Wed, 09 Apr 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (733)
Size 1.1 MB (1097619 bytes)
Hash 668713b64c94c1d3d5159dcd1275b43b
33f99810dcfaa5928770625897db2199bac9856b
57930768fd87f8ba5d06764f01011ca41948d0ddf9dde00b420f20d9d8a0da99
GET /can56.sfdc-58ktaz/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2= HTTP/1.1
Host: static.lightning.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deciem.my.salesforce-sites.com/
Cookie: BrowserId_sec=qLegbwMuEe-DVMFBueeGxA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: CookieConsentPolicy=0:0; path=/; expires=Fri, 18-Apr-2025 10:55:12 GMT; Max-Age=31536000; secure
LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Fri, 18-Apr-2025 10:55:12 GMT; Max-Age=31536000; secure
BrowserId=IcNLtv1yEe69GaNYGy_biQ; domain=.force.com; path=/; expires=Fri, 18-Apr-2025 10:55:12 GMT; Max-Age=31536000
Geo=Continent: EU Country: NO State: City: OSLO
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
referrer-policy: origin-when-cross-origin
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
last-modified: Wed, 17 Apr 2024 10:55:12 GMT
content-encoding: gzip
content-length: 1097619
cache-control: public, max-age=30905285, immutable
expires: Fri, 18 Apr 2025 10:55:26 GMT
date: Thu, 25 Apr 2024 18:07:21 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST,OPTIONS,HEAD
access-control-allow-origin: *
timing-allow-origin: *
akamai-grn: 0.dc4d2417.1714068441.3c92490
X-Firefox-Spdy: h2
deciem.my.salesforce-sites.com/liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDA3NThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pv=1713516094000-1212909925&rv=1701889968000
200 OK 1.7 kB URL GET HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDA3NThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pv=1713516094000-1212909925&rv=1701889968000
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Hash dece2776c9bceab72d16c10f2580dc92
778f2365fb174d5f6742b306fece753cdcad9f79
e40c0ea179752bacd8af9545863844df80668f19d7bdcff3d5182337399c7817
GET /liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDA3NThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pv=1713516094000-1212909925&rv=1701889968000 HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:21 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: private,max-age=31536000,immutable
expires: Fri, 23 Aug 2024 18:07:21 GMT
content-type: text/javascript;charset=UTF-8
vary: Origin, Accept-Encoding
last-modified: Wed, 24 Apr 2024 18:07:21 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
d3nocrch4qti4v.cloudfront.net/logo_medium.gif?check=1714068441780&refererPageDetail=
200 OK 48 B URL GET HTTP/2 d3nocrch4qti4v.cloudfront.net/logo_medium.gif?check=1714068441780&refererPageDetail=
IP
Requested by https://theordinary.com/en-no
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash 8b89db09d04e1e3d38d53ce13dddf6fc
7ba12f044ae6d28865aa09f0f5804ca33434af15
0a66aa00275ce9c21012bcc686cc4016ed3f0ef6addb4b0d18dfb3489d7632b5
GET /logo_medium.gif?check=1714068441780&refererPageDetail= HTTP/1.1
Host: d3nocrch4qti4v.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: CloudFront
date: Thu, 25 Apr 2024 18:07:21 GMT
content-type: image/gif
content-length: 48
x-cache: FunctionGeneratedResponse from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8ikXy1Zl2okuC6aZzgza5T4wXUUWaxOmfPbpFZ0TbOV4CwTD-Emcfg==
X-Firefox-Spdy: h2
d3nocrch4qti4v.cloudfront.net/logo_large.gif?1714068441780&-linkd-32.
200 OK 48 B URL GET HTTP/2 d3nocrch4qti4v.cloudfront.net/logo_large.gif?1714068441780&-linkd-32.
IP
Requested by https://theordinary.com/en-no
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash 8b89db09d04e1e3d38d53ce13dddf6fc
7ba12f044ae6d28865aa09f0f5804ca33434af15
0a66aa00275ce9c21012bcc686cc4016ed3f0ef6addb4b0d18dfb3489d7632b5
GET /logo_large.gif?1714068441780&-linkd-32. HTTP/1.1
Host: d3nocrch4qti4v.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: CloudFront
date: Thu, 25 Apr 2024 18:07:22 GMT
content-type: image/gif
content-length: 48
x-cache: FunctionGeneratedResponse from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: II1SBcE98Aqra933pkBTLX8JykNkgfE8GRcqjDPeu1erTjFEoolv_Q==
X-Firefox-Spdy: h2
deciem.my.salesforce-sites.com/liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22firefox%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fforce%3AiconPaths%22%2C%22markup%3A%2F%2FembeddedService%3AsnapInsBrandingTokens%22%2C%22markup%3A%2F%2FembeddedService%3AsnapInsCommunityBrandingTokens%22%2C%22markup%3A%2F%2Fui%3Atokens%22%5D%2C%22tuid%22%3A%22vizrHFyEU6x06S1ZCM7XCg%22%2C%22cuid%22%3A-693883737%7D%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%7D/app.css?2=
200 OK 26 kB URL GET HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22firefox%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fforce%3AiconPaths%22%2C%22markup%3A%2F%2FembeddedService%3AsnapInsBrandingTokens%22%2C%22markup%3A%2F%2FembeddedService%3AsnapInsCommunityBrandingTokens%22%2C%22markup%3A%2F%2Fui%3Atokens%22%5D%2C%22tuid%22%3A%22vizrHFyEU6x06S1ZCM7XCg%22%2C%22cuid%22%3A-693883737%7D%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%7D/app.css?2=
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Hash 3a7a91f70fb337dec193ec79c0d6c286
461eaa68f80196058b8e0d351ac78a29e821f87a
b26ac8441846578f9069fe24267f0054a60d8c916572880ab4e75672d41ee798
GET /liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22firefox%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fforce%3AiconPaths%22%2C%22markup%3A%2F%2FembeddedService%3AsnapInsBrandingTokens%22%2C%22markup%3A%2F%2FembeddedService%3AsnapInsCommunityBrandingTokens%22%2C%22markup%3A%2F%2Fui%3Atokens%22%5D%2C%22tuid%22%3A%22vizrHFyEU6x06S1ZCM7XCg%22%2C%22cuid%22%3A-693883737%7D%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%7D/app.css?2= HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:21 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: public,max-age=31536000,immutable
expires: Fri, 23 Aug 2024 18:07:21 GMT
content-type: text/css;charset=UTF-8
access-control-allow-origin: *
vary: Accept-Encoding
last-modified: Wed, 24 Apr 2024 18:07:21 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
deciem.my.salesforce-sites.com/liveAgentSetupFlow/aura?r=1&aura.ApexAction.execute=1
200 OK 14 kB URL POST HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/aura?r=1&aura.ApexAction.execute=1
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Hash 8b510568079440613641bf95854d5a4b
9ea98e5e0991e2098ac654b5c2ef2e90210880d5
65cb669f3145103be67b5867d8791a46510434420cc4b98ef70839b542e3ec9f
POST /liveAgentSetupFlow/aura?r=1&aura.ApexAction.execute=1 HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
X-SFDC-LDS-Endpoints: ApexActionController.execute:PullAgentAvail.PullAgentAvailInRegion
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Content-Length: 963
Origin: https://deciem.my.salesforce-sites.com
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:23 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: no-cache,must-revalidate,max-age=0,no-store,private
content-type: application/json;charset=UTF-8
vary: Origin, Accept-Encoding
expires: Wed, 26 Apr 2023 18:07:23 GMT
last-modified: Wed, 26 Apr 2023 18:07:23 GMT
server-timing: Total;dur=58
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
200 OK 0 B URL POST HTTP/2 csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ
IP
Requested by https://theordinary.com/en-no
Certificate IssuerLet's Encrypt
Subjectcsp-reporting.cloudflare.com
Fingerprint86:50:A1:92:A9:A6:41:C5:E7:B9:35:6C:AD:CF:6B:DD:E5:D4:DF:6B
ValidityThu, 07 Mar 2024 06:50:29 GMT - Wed, 05 Jun 2024 06:50:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 706
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:31 GMT
server: cloudflare
cf-ray: 87a045eeea8956cc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 46 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://theordinary.com/en-no
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
Fingerprint2B:CE:FC:A9:73:41:A3:66:C2:43:6D:7A:76:00:0C:F2:74:08:13:99
ValidityThu, 25 Apr 2024 02:03:31 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13261
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 29 Feb 2024 19:58:06 GMT
accept-ranges: bytes
etag: "01b4e9c496bda1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9B4A34C8B243471EA775ACA57FD2292B Ref B: OSL30EDGE0213 Ref C: 2024-04-25T18:07:19Z
date: Thu, 25 Apr 2024 18:07:18 GMT
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwa886ee50/images/brands-logo/niod_white.svg
200 OK 564 B URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwa886ee50/images/brands-logo/niod_white.svg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 07725d004c4d855c40e67f090945e7aa
91b863cc2b541d97b1cb7c4cfec7a50bf94b37c2
7f47dc813834e7edc76ee12078ea61a595090554dc2df7291bfcd2b08063acdd
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dwa886ee50/images/brands-logo/niod_white.svg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/svg+xml
x-dw-request-base-id: rST8qMjzKGYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591978
expires: Fri, 24 May 2024 11:58:00 GMT
last-modified: Mon, 22 Apr 2024 14:38:15 GMT
cf-cache-status: HIT
age: 108092
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045947dd6569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
deciem.my.salesforce-sites.com/liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDA3NThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js
200 OK 42 kB URL GET HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDA3NThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDA3NThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:21 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: no-cache,must-revalidate,max-age=0,no-store,private
expires: Wed, 26 Apr 2023 18:07:21 GMT
content-type: text/javascript;charset=UTF-8
vary: Origin, Accept-Encoding
last-modified: Wed, 26 Apr 2023 18:07:21 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
bat.bing.com/p/action/25065556.js
204 No Content 0 B URL GET HTTP/2 bat.bing.com/p/action/25065556.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://theordinary.com/en-no
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
Fingerprint2B:CE:FC:A9:73:41:A3:66:C2:43:6D:7A:76:00:0C:F2:74:08:13:99
ValidityThu, 25 Apr 2024 02:03:31 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/25065556.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 394F4A3313FD420181FD61BC1B9F99C0 Ref B: OSL30EDGE0213 Ref C: 2024-04-25T18:07:19Z
date: Thu, 25 Apr 2024 18:07:19 GMT
X-Firefox-Spdy: h2
publicfiles10em.blob.core.windows.net/cdn/Videos/DeciemCorp/slowvember-ord-teaser.mp4
200 OK 377 kB URL GET HTTP/1.1 publicfiles10em.blob.core.windows.net/cdn/Videos/DeciemCorp/slowvember-ord-teaser.mp4
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://theordinary.com/en-no
Certificate IssuerMicrosoft Corporation
Subject*.blob.core.windows.net
Fingerprint63:D0:8A:81:8A:22:E1:4B:5E:7C:4E:83:D0:BD:B4:DA:64:82:73:F0
ValidityWed, 27 Sep 2023 16:40:26 GMT - Fri, 27 Sep 2024 16:40:26 GMT
File type ISO Media, MP4 v2 [ISO 14496-14]
Size 377 kB (376624 bytes)
Hash f4e4b13cc4a9cc98bca5f260018a1780
2443d87b8b628bdfcdd617816908ddbd649b574d
6dc0c894d32caefabb595efb5ddc0c91bef062a271667b056be21f1f5113f8f8
GET /cdn/Videos/DeciemCorp/slowvember-ord-teaser.mp4 HTTP/1.1
Host: publicfiles10em.blob.core.windows.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 376624
Content-Type: video/mp4
Content-MD5: 9OSxPMSpzJi8pfJgAYoXgA==
Last-Modified: Mon, 16 Oct 2023 19:04:32 GMT
ETag: 0x8DBCE7ABB63B88F
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 222f44be-501e-0057-293b-97b085000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Date: Thu, 25 Apr 2024 18:07:17 GMT
challenges.forter.com/patChallenge/v1/aa873949f74d/c9bc252986b5430bbe69921525584984/IfthIVwQaitez3eNdO4JikXCiD59AiYg
401 Unauthorized 0 B URL GET HTTP/2 challenges.forter.com/patChallenge/v1/aa873949f74d/c9bc252986b5430bbe69921525584984/IfthIVwQaitez3eNdO4JikXCiD59AiYg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerAmazon
Subjectchallenges.forter.com
Fingerprint3A:39:2F:6B:A0:DB:62:FE:1B:9A:34:2E:95:FA:72:D7:67:54:67:7D
ValidityWed, 24 Jan 2024 00:00:00 GMT - Fri, 21 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /patChallenge/v1/aa873949f74d/c9bc252986b5430bbe69921525584984/IfthIVwQaitez3eNdO4JikXCiD59AiYg HTTP/1.1
Host: challenges.forter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theordinary.com/
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 401 Unauthorized
content-type: text/plain; charset=UTF-8
strict-transport-security: max-age=86400; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: false
www-authenticate: PrivateToken challenge=AAIAEGNkbjE0LmZvcnRlci5jb20gZWJhOTg0ZDY1NjMwNThhM2JkZWRjZmJjMjViMGIyZDkAAA==, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAtwHWLY7ry7VPVlMIWxMqlFShllUM_KzSaNt4iwDUeI1aaK3eYmsESsCbuHmIHb1I7oBEK7vRNrQFOqxf6jp6u6T12O7ecH0uMKTbW-HQPg4LdFbzAFvitHr0in2lo5gteu1a_MlVmDIVcWuoKtMZ-rZkPx1MFRORZ4WT3sUCZHt_8dk8lR76OIfIHQHyX0qTqDRoeRakPD14sWnUQUSOBO_tonSSHFUpWN9qOJatZtA_UP0mgia3FZRl_6KBnhucp_mbiuYMkG0aivcEn3QdWDQhP7c5O026eBQPGGxQ8bacfvU5OCru-0QXeVIGGpTNQUZk4WrEC3rq47nmrP7YvwIDAQAB
date: Thu, 25 Apr 2024 18:07:19 GMT
x-cache: Error from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: izupLMWV1pYUK0w9VbMK2kQiVg1OoOqIKjqRT_fsHi6yPd5okVCZow==
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=explicit&onload=onRecaptchaLoad
200 OK 910 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=explicit&onload=onRecaptchaLoad
IP
Requested by https://theordinary.com/en-no
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73
ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
File type JavaScript source, ASCII text, with very long lines (910), with no line terminators
Hash b322e4d15fc3500d3a660bac221788b9
7c5e9a5a11c463a5d1c58cce0d3e4f159ca533db
955b6a0cff6254c4b42c1da5c828269486ddc41fef2e192ad8f76d0bf076eeea
GET /recaptcha/api.js?render=explicit&onload=onRecaptchaLoad HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Thu, 25 Apr 2024 18:07:17 GMT
date: Thu, 25 Apr 2024 18:07:17 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
deciem.my.salesforce-sites.com/liveAgentSetupFlow/jslibrary/1699262264248/sfdc/main.js
200 OK 879 kB URL GET HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/jslibrary/1699262264248/sfdc/main.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File type ASCII text, with very long lines (21627)
Size 879 kB (879027 bytes)
Hash 5d2b721bce29cd59b081f69aece62527
f609400e6120ec73e854f18961cd4ab052589a7f
83b8a261d09270141632cf77fbcc2b777f78a60bca1ea7b0cbf5f76e43bd7971
GET /liveAgentSetupFlow/jslibrary/1699262264248/sfdc/main.js HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: public,max-age=10368000
expires: Fri, 23 Aug 2024 18:07:19 GMT
last-modified: Wed, 10 Apr 2024 05:45:28 GMT
content-type: application/x-javascript
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
deciem.my.salesforce-sites.com/liveAgentSetupFlow/jslibrary/jslabels/1713841118000/en_US.js
200 OK 230 kB URL GET HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/jslibrary/jslabels/1713841118000/en_US.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
Size 230 kB (230216 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /liveAgentSetupFlow/jslibrary/jslabels/1713841118000/en_US.js HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: public,max-age=3888000
content-type: text/javascript;charset=UTF-8
p3p: CP="CUR OTR STA"
expires: Sun, 09 Jun 2024 18:07:19 GMT
last-modified: Tue, 23 Apr 2024 02:58:38 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
cdn3.forter.com/events
200 OK 0 B IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjectcdn3.forter.com
FingerprintD9:AA:A7:B8:53:7C:90:47:40:68:32:3F:3A:78:1C:3B:C7:2C:AF:8B
ValidityThu, 22 Jun 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events HTTP/1.1
Host: cdn3.forter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=lz
Content-Length: 5030
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/3 200 OK
alt-svc: h3=":443"; ma=86400
x-amz-cf-pop: OSL50-P1
date: Thu, 25 Apr 2024 18:07:31 GMT
access-control-allow-origin: https://theordinary.com
vary: Origin
access-control-allow-credentials: true
timing-allow-origin: *
cache-control: private, no-cache, no-store
expires: -1
pragma: no-cache
strict-transport-security: max-age=86400; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-id: KzLo3joaNiA9FBF32xADYjBigE11bsFwS4GWuXKagccxlZSDYmj4BA==
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/icons-font.css
200 OK 21 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/icons-font.css
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type ASCII text, with very long lines (21037), with no line terminators
Hash a0e3fa9738c8d8865be2ea450b677634
ac0cdeb562e9633e567ac479ce692c1c3ba2ca70
c1e020b423fc1e32c482f7f0bd5921f0ba0ce4aef5d0c26d0f4a33218524c68b
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/icons-font.css HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: text/css
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=23029
cross-origin-resource-policy: cross-origin
expires: Fri, 24 May 2024 23:16:07 GMT
last-modified: Mon, 22 Apr 2024 14:38:16 GMT
vary: accept-encoding
x-dw-request-base-id: rSSGWbeSKWYBAAB_
cf-cache-status: HIT
age: 67869
server: cloudflare
cf-ray: 87a045946da8569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dwa8c028f4/Images/products/The%20Ordinary/rdn-retinol-1pct-in-squalane-30ml.png?sw=320&sh=320&sm=fit
200 OK 18 kB URL GET HTTP/2 theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dwa8c028f4/Images/products/The%20Ordinary/rdn-retinol-1pct-in-squalane-30ml.png?sw=320&sh=320&sm=fit
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 0ba9006f5fba29f44ff4ee582f3331be
d548d92dd8aa57e7741e3a1fa8ab6cdd6fdf35d6
f779bd22bc097c41ff654c3b252516a076155f483bb34c5eed838a7187f2ba97
GET /dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dwa8c028f4/Images/products/The%20Ordinary/rdn-retinol-1pct-in-squalane-30ml.png?sw=320&sh=320&sm=fit HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1; forterToken=c9bc252986b5430bbe69921525584984_1714068437503__UDF4_9ck
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:18 GMT
content-type: image/webp
content-length: 18228
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=31244
content-disposition: inline; filename="rdn-retinol-1pct-in-squalane-30ml.webp"
etag: "e18ba6771bd8c546995c2e98271faa81"
last-modified: Tue, 12 Mar 2024 12:50:50 GMT
vary: Accept
via: 1.1 3529bf84e9522012233c3dd2a59fdfe8.cloudfront.net (CloudFront)
x-amz-cf-id: HL-5u40WnodIyBWqUme1LOrsS4lCMY_0NWfzDAiR5wOTl0E6ynLdyw==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Sat, 12 Apr 2025 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=320&sh=320&sm=fit
x-amz-server-side-encryption: AES256
x-amz-storage-class: INTELLIGENT_TIERING
cf-cache-status: HIT
age: 36396
accept-ranges: bytes
server: cloudflare
cf-ray: 87a0459b6920569c-OSL
X-Firefox-Spdy: h2
cdn3.forter.com/events
200 OK 0 B IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjectcdn3.forter.com
FingerprintD9:AA:A7:B8:53:7C:90:47:40:68:32:3F:3A:78:1C:3B:C7:2C:AF:8B
ValidityThu, 22 Jun 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events HTTP/1.1
Host: cdn3.forter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=lz
Content-Length: 6597
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:20 GMT
access-control-allow-origin: https://theordinary.com
vary: Origin
access-control-allow-credentials: true
timing-allow-origin: *
cache-control: private, no-cache, no-store
expires: -1
pragma: no-cache
strict-transport-security: max-age=86400; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4bxLSoiRHISLfxorCPSLYiX9tS4Sbtw_A_xt4-_FU0mr53tLnkn_xQ==
X-Firefox-Spdy: h2
110006539.collect.igodigital.com/collect.js
200 OK 8.4 kB URL GET HTTP/2 110006539.collect.igodigital.com/collect.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerAmazon
Subject*.collect.igodigital.com
FingerprintFE:27:09:76:A5:DE:B6:A9:C6:B9:F3:1C:31:90:0E:4B:A5:34:CB:CC
ValidityWed, 15 Nov 2023 00:00:00 GMT - Sat, 14 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (8845), with no line terminators
Hash 7255660969e971a191f9dad4d5af6ba8
4c6634b4f1be880df0f269ef666fb4581e1b17ad
f894dac6d9563c6d2e999e5c64357d7632f290e86419f22ce3cd197e6372d168
GET /collect.js HTTP/1.1
Host: 110006539.collect.igodigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:18 GMT
content-type: application/javascript
last-modified: Tue, 23 Apr 2024 15:39:19 GMT
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/campaignBanner.js
200 OK 1.3 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/campaignBanner.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1385), with no line terminators
Hash 104a61e4446335b54e1fefb23ebd986e
2cc0b9583323afdfe9ec5ed2e9d87ce980aa48ef
87c5b8e70d20c736e99b57c392b6a9d96e67e08ebd15fcd30865ea0804f219cf
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/campaignBanner.js HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: text/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cross-origin-resource-policy: cross-origin
expires: Sat, 25 May 2024 06:04:26 GMT
last-modified: Mon, 22 Apr 2024 14:39:14 GMT
vary: accept-encoding
x-dw-request-base-id: cuuXnGryKWYBAAB_
cf-cache-status: HIT
age: 43371
server: cloudflare
cf-ray: 87a045945d99569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/brands/theordinary/homePage_exp.css
200 OK 16 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/brands/theordinary/homePage_exp.css
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type ASCII text, with very long lines (15920), with no line terminators
Hash 5103f5d37820a24ce3915a3f4754060c
0d41db4fdb5bd221ad43f38b253420b55903cd54
8840219a50fb8cede51a7bc090d528f130dbd7e5761a62b7a189563b25a7deb5
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/brands/theordinary/homePage_exp.css HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: text/css
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=15989
cross-origin-resource-policy: cross-origin
expires: Sat, 25 May 2024 06:04:26 GMT
last-modified: Mon, 22 Apr 2024 14:38:16 GMT
vary: accept-encoding
x-dw-request-base-id: cuuZnGryKWYBAAB_
cf-cache-status: HIT
age: 43371
server: cloudflare
cf-ray: 87a045946dad569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/fonts/Raleway-Variable.ttf
200 OK 263 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/fonts/Raleway-Variable.ttf
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type TrueType Font data, 22 tables, 1st "GDEF", 29 names, Microsoft, language 0x409, Copyright 2010 The Raleway Project Authors (impallari@gmail.com), with Reserved Font Name "Ralew
Size 263 kB (263104 bytes)
Hash 1a87d8c4ed4414547f32db415af5a2b0
ce8bed4528f58aed0daf448f56ec6c0df25cda4c
3548e08b4ab3c9c1f4c896ae70f5707486deb31f9b6f9cc5cf6fd5d8dccb8676
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/fonts/Raleway-Variable.ttf HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/brands/theordinary/global.css
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: font/ttf
x-dw-request-base-id: rSSiWbiSKWYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 23:16:08 GMT
last-modified: Mon, 22 Apr 2024 14:38:16 GMT
cf-cache-status: HIT
age: 67868
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045970bc2569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn0.forter.com/aa873949f74d/c9bc252986b5430bbe69921525584984/prop.json?_=1714068440111
200 OK 20 B URL GET HTTP/1.1 cdn0.forter.com/aa873949f74d/c9bc252986b5430bbe69921525584984/prop.json?_=1714068440111
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjectcdn0.forter.com
Fingerprint0C:A7:98:CC:FB:DC:C4:B2:07:E5:25:14:71:5D:ED:C8:D8:92:C6:8B
ValidityThu, 22 Jun 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 0b35866f4a3aa4d34ce5dda2d14c2cd8
d2b80911f09c3106fdf0df9920f983945d644083
493851374626d927bfe1c7d084fa977a0e636c03f163fda258ab6b638edc2f0d
GET /aa873949f74d/c9bc252986b5430bbe69921525584984/prop.json?_=1714068440111 HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://theordinary.com
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
Content-Type: application/json
Connection: keep-alive
Date: Thu, 25 Apr 2024 18:07:20 GMT
Transfer-Encoding: chunked
d3nocrch4qti4v.cloudfront.net/logo_small.gif?dfpadname=&check=1714068441780
200 OK 48 B URL GET HTTP/2 d3nocrch4qti4v.cloudfront.net/logo_small.gif?dfpadname=&check=1714068441780
IP
Requested by https://theordinary.com/en-no
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /logo_small.gif?dfpadname=&check=1714068441780 HTTP/1.1
Host: d3nocrch4qti4v.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: CloudFront
date: Thu, 25 Apr 2024 18:07:22 GMT
content-type: image/gif
content-length: 48
x-cache: FunctionGeneratedResponse from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7za9_Im-PsBBxsXaC4Gm1WsBGMsdNXy_cbY8d36TuGBwm-QQKaX0Bg==
X-Firefox-Spdy: h2
cdn0.forter.com/aa873949f74d/c9bc252986b5430bbe69921525584984/prop.json?_=1714068439456
200 OK 20 B URL GET HTTP/1.1 cdn0.forter.com/aa873949f74d/c9bc252986b5430bbe69921525584984/prop.json?_=1714068439456
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjectcdn0.forter.com
Fingerprint0C:A7:98:CC:FB:DC:C4:B2:07:E5:25:14:71:5D:ED:C8:D8:92:C6:8B
ValidityThu, 22 Jun 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 0b35866f4a3aa4d34ce5dda2d14c2cd8
d2b80911f09c3106fdf0df9920f983945d644083
493851374626d927bfe1c7d084fa977a0e636c03f163fda258ab6b638edc2f0d
GET /aa873949f74d/c9bc252986b5430bbe69921525584984/prop.json?_=1714068439456 HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://theordinary.com
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
Content-Type: application/json
Connection: keep-alive
Date: Thu, 25 Apr 2024 18:07:19 GMT
Transfer-Encoding: chunked
www.googletagmanager.com/gtag/js?id=G-K1WHNF7H93&l=dataLayer&cx=c
200 OK 290 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-K1WHNF7H93&l=dataLayer&cx=c
IP
Requested by https://theordinary.com/en-no
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (7711)
Size 290 kB (289849 bytes)
Hash 431c825ed0084644df0b9d8e508c46a4
6102b1d9b94795a24f64e3cf618085454353dc37
c05759aefeeeacb86077d12a37a613259e2cb34b253cc105d7686a5acb20e00a
GET /gtag/js?id=G-K1WHNF7H93&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 25 Apr 2024 18:07:18 GMT
expires: Thu, 25 Apr 2024 18:07:18 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 98241
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
deciem.my.salesforce-sites.com/liveAgentSetupFlow/embeddedService/sidebarApp.app?aura.format=JSON&aura.formatAdapter=LIGHTNING_OUT
200 OK 87 kB URL GET HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/embeddedService/sidebarApp.app?aura.format=JSON&aura.formatAdapter=LIGHTNING_OUT
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /liveAgentSetupFlow/embeddedService/sidebarApp.app?aura.format=JSON&aura.formatAdapter=LIGHTNING_OUT HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:20 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: no-cache,must-revalidate,max-age=0,no-store,private
content-type: application/json;charset=UTF-8
vary: Origin, Accept-Encoding
expires: Wed, 26 Apr 2023 18:07:21 GMT
last-modified: Wed, 26 Apr 2023 18:07:21 GMT
link: </liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22firefox%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fforce%3AiconPaths%22%2C%22markup%3A%2F%2FembeddedService%3AsnapInsBrandingTokens%22%2C%22markup%3A%2F%2FembeddedService%3AsnapInsCommunityBrandingTokens%22%2C%22markup%3A%2F%2Fui%3Atokens%22%5D%2C%22tuid%22%3A%22vizrHFyEU6x06S1ZCM7XCg%22%2C%22cuid%22%3A-693883737%7D%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%7D/app.css?2=>;rel=preload;as=style;nopush,<https://static.lightning.force.com/can56.sfdc-58ktaz/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js>;rel=preload;as=script,<https://static.lightning.force.com/can56.sfdc-58ktaz/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/appcore.js?2=>;rel=preload;as=script,<https://static.lightning.force.com/can56.sfdc-58ktaz/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22t%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2=>;rel=preload;as=script
content-security-policy: frame-ancestors 'self'; base-uri 'self'
x-frame-options: SAMEORIGIN
server-timing: Total;dur=65
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/exp_components-theordinary.js
200 OK 10 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/exp_components-theordinary.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (10110), with no line terminators
Hash dfb898d9c93d55e4e5eec3cb5d86ca44
2d51c00f0bd1e0e0bfd07fd77a66bdcbfb00a0bf
9ec0990e946becbbf6ce6d109e55a6c15db7b6f8e17f8e4a0c030ef40bb5481e
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/exp_components-theordinary.js HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: text/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cross-origin-resource-policy: cross-origin
expires: Sat, 25 May 2024 06:04:26 GMT
last-modified: Mon, 22 Apr 2024 14:38:16 GMT
vary: accept-encoding
x-dw-request-base-id: cuuWnGryKWYBAAB_
cf-cache-status: HIT
age: 43371
server: cloudflare
cf-ray: 87a045945d93569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn0.forter.com/aa873949f74d/c9bc252986b5430bbe69921525584984/prop.json?_=1714068440313
200 OK 20 B URL GET HTTP/1.1 cdn0.forter.com/aa873949f74d/c9bc252986b5430bbe69921525584984/prop.json?_=1714068440313
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjectcdn0.forter.com
Fingerprint0C:A7:98:CC:FB:DC:C4:B2:07:E5:25:14:71:5D:ED:C8:D8:92:C6:8B
ValidityThu, 22 Jun 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 0b35866f4a3aa4d34ce5dda2d14c2cd8
d2b80911f09c3106fdf0df9920f983945d644083
493851374626d927bfe1c7d084fa977a0e636c03f163fda258ab6b638edc2f0d
GET /aa873949f74d/c9bc252986b5430bbe69921525584984/prop.json?_=1714068440313 HTTP/1.1
Host: cdn0.forter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://theordinary.com
Vary: Origin
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
Content-Type: application/json
Connection: keep-alive
Date: Thu, 25 Apr 2024 18:07:20 GMT
Transfer-Encoding: chunked
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwf4070939/images/favicons/favicon-theordinary.ico
200 OK 32 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwf4070939/images/favicons/favicon-theordinary.ico
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash 692a375d16ee05290b0ab4c50b50a7f8
a85252b11b7104c243d8ae64f1480f04154062e0
8b946669488e66655f477a9daa9af9b0be3549837290a4f8baca3c4156e9797e
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dwf4070939/images/favicons/favicon-theordinary.ico HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1; forterToken=c9bc252986b5430bbe69921525584984_1714068437503__UDF43_9ck_; _gcl_au=1.1.573230739.1714068438; ftr_ncd=6; _ga_K1WHNF7H93=GS1.1.1714068438.1.0.1714068438.60.0.0; _ga=GA1.1.1701865018.1714068439; _scid=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _scid_r=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _rdt_uuid=1714068439065.bf89f8aa-2653-4cf9-aea4-3ad282a22bae; cqcid=acpeWapZA4RclZxrdHPSaMZgkt; cquid=||
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
content-type: image/x-icon
x-dw-request-base-id: rSS7qMbzKGYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591997
expires: Fri, 24 May 2024 11:57:58 GMT
last-modified: Mon, 22 Apr 2024 14:38:16 GMT
vary: accept-encoding
cf-cache-status: HIT
age: 108092
server: cloudflare
cf-ray: 87a045a1881b569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
s.pinimg.com/ct/lib/main.6192ffb7.js
200 OK 70 kB URL GET HTTP/3 s.pinimg.com/ct/lib/main.6192ffb7.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 48bfea2777d079c1aabec184c1b54b34
2fb78ec90eacc0159becd954b8613edf1fcd6e66
6982e83b9ea7682534a77808bc53b3e516bc5d26dc406de1a2ea81c2fdf63a33
GET /ct/lib/main.6192ffb7.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
etag: "0c0f2aed16e51276069e2c6e45c878c1"
x-amz-server-side-encryption: AES256
cache-control: max-age=1209600
content-encoding: br
accept-ranges: bytes
content-type: application/javascript
content-length: 19940
alt-svc: h3=":443"; ma=600
quic-version: 0x00000001
vary: Accept-Encoding, Origin
akamai-x-true-ttl: 1209600
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
deciem.my.salesforce-sites.com/liveAgentSetupFlow/jslibrary/1698336665248/sfdc/NetworkTracking.js
200 OK 3.1 kB URL GET HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/jslibrary/1698336665248/sfdc/NetworkTracking.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3231), with no line terminators
Hash 9eb21321c79c1cf7fc63631bed85896b
3998db3e472d6368d1fecf9bfb8fafe5f7eed625
1f922eba718d4a2d9dd290f631dd652e5a0e33afaa3c084cf03374738f978ee3
GET /liveAgentSetupFlow/jslibrary/1698336665248/sfdc/NetworkTracking.js HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: public,max-age=10368000
expires: Fri, 23 Aug 2024 18:07:19 GMT
last-modified: Tue, 15 Aug 2023 06:08:05 GMT
content-type: application/x-javascript
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/jquery.min.js
200 OK 90 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/jquery.min.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/jquery.min.js HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: text/javascript
x-dw-request-base-id: rSSBWbeSKWYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 23:16:07 GMT
last-modified: Mon, 22 Apr 2024 14:38:28 GMT
vary: accept-encoding
cf-cache-status: HIT
age: 67869
server: cloudflare
cf-ray: 87a045945d7c569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/experience/components/commerceAssets/campaignBanner.css
200 OK 952 B URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/experience/components/commerceAssets/campaignBanner.css
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type ASCII text, with very long lines (952), with no line terminators
Hash b8907ea3e0c6ee3ec037450c5ba4bfb8
7b8a17a61134fbbc207427080dcfc8b72f69794e
8abea80ff465a0f952c82a3d4b82027045a1a34c95b78227536275e194c4b4ad
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/experience/components/commerceAssets/campaignBanner.css HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: text/css
cache-control: public, max-age=2592000
cf-bgj: minify
cross-origin-resource-policy: cross-origin
expires: Sat, 25 May 2024 06:04:26 GMT
last-modified: Mon, 22 Apr 2024 14:39:14 GMT
x-dw-request-base-id: cuuanGryKWYBAAB_
cf-cache-status: HIT
age: 43371
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045946dae569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
c9bc252986b5430bbe69921525584984-aa873949f74d.cdn.forter.com/prop.json
200 OK 0 B URL POST HTTP/1.1 c9bc252986b5430bbe69921525584984-aa873949f74d.cdn.forter.com/prop.json
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subject*.cdn.forter.com
Fingerprint1B:B9:A7:87:C9:C9:36:C9:CA:17:C5:AE:47:10:BC:98:08:C6:4D:67
ValidityThu, 23 Nov 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /prop.json HTTP/1.1
Host: c9bc252986b5430bbe69921525584984-aa873949f74d.cdn.forter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 18:07:19 GMT
Server: Apache
Last-Modified: Wed, 24 Apr 2024 11:07:10 GMT
ETag: "2-616d5ac0bec65"
Accept-Ranges: bytes
Content-Length: 2
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Access-Control-Allow-Origin: https://theordinary.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Access-Control-Allow-Headers: origin, x-requested-with, content-type, x-csrf-token
Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS
Connection: close
Content-Type: application/json
www.googletagmanager.com/gtm.js?id=GTM-PSNCTZT>m_auth=at3rkKALywQckzT0tnSSvQ>m_preview=env-1>m_cookies_win=x
200 OK 411 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PSNCTZT>m_auth=at3rkKALywQckzT0tnSSvQ>m_preview=env-1>m_cookies_win=x
IP
Requested by https://theordinary.com/en-no
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File type JavaScript source, ASCII text, with very long lines (54478)
Size 411 kB (411171 bytes)
Hash 5e06a5cec51e2d4fbaf3878db63f921f
7d6545b5aa260df285b7d9956601f706fda49f8b
cbaf9e9636582c88827eb16698b2c6401ed1a425bf82a834117b8c166c30d53a
GET /gtm.js?id=GTM-PSNCTZT>m_auth=at3rkKALywQckzT0tnSSvQ>m_preview=env-1>m_cookies_win=x HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: *
date: Thu, 25 Apr 2024 18:07:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 121827
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613778178781&cb=1714068440156&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU56RXdZVGcyTW1JdE5UazRaUzAwT1dSakxXSmpZall0TWpoa05qZGpabVE1WWprNQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftheordinary.com%2Fen-no%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
200 OK 35 B URL GET HTTP/3 ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613778178781&cb=1714068440156&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU56RXdZVGcyTW1JdE5UazRaUzAwT1dSakxXSmpZall0TWpoa05qZGpabVE1WWprNQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftheordinary.com%2Fen-no%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613778178781&cb=1714068440156&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU56RXdZVGcyTW1JdE5UazRaUzAwT1dSakxXSmpZall0TWpoa05qZGpabVE1WWprNQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftheordinary.com%2Fen-no%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theordinary.com/
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: https://theordinary.com
access-control-allow-credentials: true
x-envoy-upstream-service-time: 3
pinterest-version: 219d758fc6c272afdb21541dfea642f69cb734f9
referrer-policy: origin
x-pinterest-rid: 1142391218562161
date: Thu, 25 Apr 2024 18:07:20 GMT
alt-svc: h3=":443"; ma=600
set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 18:07:20 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None
_pinterest_ct_ua="TWc9PSZHNys1VFQ5bEwwYkNqUzdBVU9LcElCQXAyc2FudVI1TkZFOHlhMGJDdXA2TUtnWElVTTVhNzlkUmNTSjR0a005Z1JrbUFxVFk0WHFYbTdjRlhFajRySTdBR0l6S3EzVzdGa0FLc0wvaElqYz0mRVNQak5mU1RFZmR1cjV3aXVGcXc2UVduK0hvPQ=="; Expires=Fri, 25 Apr 2025 18:07:20 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None
quic-version: 0x00000001
akamai-grn: 0.164f2417.1714068440.48e56fd
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
aa873949f74d.cdn4.forter.com/sn/aa873949f74d/script.js
200 OK 395 kB URL GET HTTP/2 aa873949f74d.cdn4.forter.com/sn/aa873949f74d/script.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subject*.cdn4.forter.com
FingerprintD9:BC:24:87:B9:60:2A:EE:1D:94:FC:D6:BD:85:B0:7E:C4:8E:A6:82
ValidityThu, 28 Dec 2023 00:00:00 GMT - Sun, 15 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 395 kB (394995 bytes)
Hash 61a534d1a3b941ecc44b2b9ba8cbb7a8
1a8f4d85afd75a9c271eed3b845e59a4ad4f08d5
fe4c5f8cc5f9b421835ecd24733fd9aac6f05a84016c4378b63983603b3ffd9e
GET /sn/aa873949f74d/script.js HTTP/1.1
Host: aa873949f74d.cdn4.forter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: application/javascript; charset=utf-8
strict-transport-security: max-age=86400; includeSubDomains
access-control-allow-origin: *
timing-allow-origin: *
x-sourcemap: https://cdn4.forter.com/map/suid/aa873949f74d/93085042124
etag: W/"61a534d1a3b941ecc44b2b9ba8cbb7a8"
last-modified: Thu, 25 Apr 2024 15:31:58 GMT
cache-control: private, immutable, max-age=600
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: pzpxAqXDnlrtPsygqImIWoUXRyy5EZL4QgmoPMu8luYZeoe13lB0tQ==
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/main.js
200 OK 113 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/main.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 113 kB (113000 bytes)
Hash e6ebfd7ef89c38270e53e85e42e1f0a0
b73ea3918e82eb0de31b1887e1d1873a48a65927
8e4bd730b576643523398b7cbad6e287767df0407f4133d15b25749aacce4fb3
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/main.js HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: text/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cross-origin-resource-policy: cross-origin
expires: Fri, 24 May 2024 23:16:07 GMT
last-modified: Mon, 22 Apr 2024 14:38:16 GMT
vary: accept-encoding
x-dw-request-base-id: rSSDWbeSKWYBAAB_
cf-cache-status: HIT
age: 67869
server: cloudflare
cf-ray: 87a045945d88569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
firstfashionstyle.com/lifestyle/?fashion=https://r.brandreward.com/?key=967848ea91eb3962321f0f3cdaffdc88&url=https://theordinary.com/&id=w73gkot6o37nair03sd7bt2k&tg_rid=na&tg_s=mr1
302 Found 293 kB URL User Request GET HTTP/2 firstfashionstyle.com/lifestyle/?fashion=https://r.brandreward.com/?key=967848ea91eb3962321f0f3cdaffdc88&url=https://theordinary.com/&id=w73gkot6o37nair03sd7bt2k&tg_rid=na&tg_s=mr1
IP
Certificate IssuerGoogle Trust Services LLC
Subjectfirstfashionstyle.com
Fingerprint64:15:13:1E:52:25:2A:FF:3D:0D:06:06:D4:62:09:58:E8:F9:2B:7C
ValidityMon, 22 Apr 2024 07:22:24 GMT - Sun, 21 Jul 2024 07:22:23 GMT
Size 293 kB (292928 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lifestyle/?fashion=https://r.brandreward.com/?key=967848ea91eb3962321f0f3cdaffdc88&url=https://theordinary.com/&id=w73gkot6o37nair03sd7bt2k&tg_rid=na&tg_s=mr1 HTTP/1.1
Host: firstfashionstyle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 25 Apr 2024 18:07:14 GMT
content-type: text/html; charset=UTF-8
location: https://r.brandreward.com/?key=967848ea91eb3962321f0f3cdaffdc88&url=https%3A%2F%2Ftheordinary.com%2F&id=w73gkot6o37nair03sd7bt2k
referrer-policy: no-referrer
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lw6PlaGbbX90klhiBatftAgqbappZHBhRchFFqKIEnXtsNDfplgGDJ%2BQKx9PpGypfk%2FDAVStZiF%2B6iUIwRySwE%2FmmcrMFj2PlfMJH95UUUw7Q%2BkL69N5No%2FyProCO9fA30y%2BsurMf34%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a045856e741c0e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dw07aee56c/images/brands-logo/theordinary.svg
200 OK 1.7 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dw07aee56c/images/brands-logo/theordinary.svg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash df65046214a035c95e119a773e0eb2dd
39b95d3c78e2628b3d5aef5badaeb68382b96a05
67e405e21e657986e53e68fae11575401d492d5338bfe6db5ba691903d0be32c
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dw07aee56c/images/brands-logo/theordinary.svg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/svg+xml
x-dw-request-base-id: cus2rsPzKGYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591973
expires: Fri, 24 May 2024 11:57:55 GMT
last-modified: Mon, 22 Apr 2024 14:38:15 GMT
cf-cache-status: HIT
age: 108092
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045946dbd569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
theordinary.com/on/demandware.store/Sites-deciem-global-Site/en_NO/__Analytics-Start?url=https%3A%2F%2Ftheordinary.com%2Fen-no&res=1280x1024&cookie=1&ref=&title=Welcome%20to%20The%20Ordinary%3A%20Effective%20Clinical%20Skincare&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.241933468196742&cmpn=&tz=Canada/Eastern&pcc=USD&pct=&pcat=&pid-0=100637&pev-0=event3&evr4-0=Yes&pid-1=100435&pev-1=event3&evr4-1=Yes&pid-2=100446&pev-2=event3&evr4-2=Yes&pid-3=100646&pev-3=event3&evr4-3=Yes&pid-4=100436&pev-4=event3&evr4-4=Yes&dw_dnt=1
200 OK 35 B URL GET HTTP/2 theordinary.com/on/demandware.store/Sites-deciem-global-Site/en_NO/__Analytics-Start?url=https%3A%2F%2Ftheordinary.com%2Fen-no&res=1280x1024&cookie=1&ref=&title=Welcome%20to%20The%20Ordinary%3A%20Effective%20Clinical%20Skincare&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.241933468196742&cmpn=&tz=Canada/Eastern&pcc=USD&pct=&pcat=&pid-0=100637&pev-0=event3&evr4-0=Yes&pid-1=100435&pev-1=event3&evr4-1=Yes&pid-2=100446&pev-2=event3&evr4-2=Yes&pid-3=100646&pev-3=event3&evr4-3=Yes&pid-4=100436&pev-4=event3&evr4-4=Yes&dw_dnt=1
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /on/demandware.store/Sites-deciem-global-Site/en_NO/__Analytics-Start?url=https%3A%2F%2Ftheordinary.com%2Fen-no&res=1280x1024&cookie=1&ref=&title=Welcome%20to%20The%20Ordinary%3A%20Effective%20Clinical%20Skincare&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.241933468196742&cmpn=&tz=Canada/Eastern&pcc=USD&pct=&pcat=&pid-0=100637&pev-0=event3&evr4-0=Yes&pid-1=100435&pev-1=event3&evr4-1=Yes&pid-2=100446&pev-2=event3&evr4-2=Yes&pid-3=100646&pev-3=event3&evr4-3=Yes&pid-4=100436&pev-4=event3&evr4-4=Yes&dw_dnt=1 HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1; forterToken=c9bc252986b5430bbe69921525584984_1714068437503__UDF43-m4_9ck_; _gcl_au=1.1.573230739.1714068438; ftr_ncd=6; _ga_K1WHNF7H93=GS1.1.1714068438.1.0.1714068438.60.0.0; _ga=GA1.1.1701865018.1714068439; _scid=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _scid_r=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _rdt_uuid=1714068439065.bf89f8aa-2653-4cf9-aea4-3ad282a22bae; _sc_cspv=https%3A%2F%2Ftr.snapchat.com%2Fconfig%2Fcom%2Fcee3acf4-f810-4ae6-ae30-04952a3dd849.json%3Fv%3D3.16.0-2404242003; _uetsid=a81cd160032e11ef8a52c524e35c2388; _uetvid=a81d0540032e11efbd93a5900ef51d4e; _pin_unauth=dWlkPU56RXdZVGcyTW1JdE5UazRaUzAwT1dSakxXSmpZall0TWpoa05qZGpabVE1WWprNQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:21 GMT
content-type: image/gif
content-length: 35
accept-ranges: bytes
x-dw-request-base-id: rSSIlNmbKmYBAAB_
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87a045af7ed8569c-OSL
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/fonts/Geologica-Variable.ttf
200 OK 343 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/fonts/Geologica-Variable.ttf
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type TrueType Font data, 20 tables, 1st "GDEF", 43 names, Microsoft, language 0x409
Size 343 kB (343100 bytes)
Hash b36a5ef1f10d3f394d273eb4520b55f5
df8594eeaf3e54021379a962cc9c5fff9b66b879
39fa8d9c58db985ce8f03707c67970ca171321b7b112764057569c9aacde625b
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/fonts/Geologica-Variable.ttf HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/brands/theordinary/global.css
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: font/ttf
x-dw-request-base-id: rSShWbiSKWYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Fri, 24 May 2024 23:16:08 GMT
last-modified: Mon, 22 Apr 2024 14:38:15 GMT
cf-cache-status: HIT
age: 67868
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045971bc4569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
200 OK 293 kB URL User Request GET HTTP/2 IP
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
Size 293 kB (292928 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en-no HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; cqcid=acZFuvBZMta0DZ6Z71h161r95O; cquid=||; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:16 GMT
content-type: text/html;charset=UTF-8
set-cookie: dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; Path=/; Secure; SameSite=None
cqcid=acpeWapZA4RclZxrdHPSaMZgkt; Path=/; Secure; SameSite=None
dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; Version=1; Comment="Demandware anonymous cookie for site Sites-deciem-global-Site"; Max-Age=15552000; Expires=Tue, 22 Oct 2024 18:07:15 GMT; Path=/; Secure; SameSite=None
__cq_dnt=0; Path=/; Secure; SameSite=None
dw_dnt=0; Path=/; Secure; SameSite=None
cqcid=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=None
cquid=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=None
__cq_dnt=1; Path=/; Secure; SameSite=None
dw_dnt=1; Path=/; Secure; SameSite=None
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'
x-dw-request-base-id: cusC3sa3KWYBAAB_
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
vary: accept-encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ijsfC7sbg.9MOV31hX.rDhZIZbCwwNmdpW.iJSaVYBQ-1714068436-1.0.1.1-tUbcyUVye_sG04L171H3oGjGDjc49YVVHWaMRKXvkMRQvARfRCUZWP.v.VnEtuKASH.d0KRTd2Bn.PO9QV6qt6fQsXIXa4t_V4diWpylHzlWOR8I1JHoxhMfs.rJplYFAjvWIMOzopywAh0AlunSSQ; report-to cf-csp-endpoint
server: cloudflare
cf-ray: 87a0458cec24569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwc76b0665/images/brands-logo/niod_grey.svg
200 OK 572 B URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwc76b0665/images/brands-logo/niod_grey.svg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash e39ff889297d151f2bd5236d6d081f7e
ea367aca12e778d59f64319e88008d7d762b5aba
c1b4257f2f533fccf5c909db3c68d10da640e02f21ecd64fbf912ec86b65a4c9
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dwc76b0665/images/brands-logo/niod_grey.svg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/svg+xml
x-dw-request-base-id: rSRqqMPzKGYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591974
expires: Fri, 24 May 2024 11:57:55 GMT
last-modified: Mon, 22 Apr 2024 14:38:15 GMT
cf-cache-status: HIT
age: 108092
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045946db3569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 46 kB URL GET HTTP/2 sc-static.net/scevent.min.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerAmazon
Subjectsc-static.net
FingerprintE4:8A:DF:2D:95:33:E5:93:D4:43:8A:14:06:EA:EA:E8:AD:29:20:0F
ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (28360)
Hash b63285518f1bc28f01cfe8bfb4e6ca47
850cf5957261d3d7bc5484797f5ea6f32630f52f
dac99c71e943d58b4fac29e7bed45da2fc55ceec4d6627ecce863dec95a520aa
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 19396
server: CloudFront
date: Thu, 25 Apr 2024 18:07:18 GMT
access-control-allow-headers: Content-Type
access-control-allow-origin: *
content-encoding: gzip
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=24b5be485c2747719f2dadcc8288a94b;max-age=86400;expires=Fri, 26 Apr 2024 18:07:18 GMT;Path=/scevent.min.js;Secure;SameSite=None
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CScsCjhU3ieG6HHG4WVL66vO56_UjxKc_0bCTXjns_aSRUlzChXR6A==
X-Firefox-Spdy: h2
deciem.my.salesforce-sites.com/liveAgentSetupFlow/lightning/lightning.out.js?v=2
200 OK 2.3 kB URL GET HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/lightning/lightning.out.js?v=2
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (2652), with no line terminators
Hash ccda124af673f6c28d31762561665c42
1abcaa3bbacfe9cc893d4ac950778c6452741d58
38ee6c27eedb4ad93def76fa0a8bb7da0d230858948c5a779fab7a140a63beaa
GET /liveAgentSetupFlow/lightning/lightning.out.js?v=2 HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: public,max-age=10368000
expires: Fri, 23 Aug 2024 18:07:19 GMT
last-modified: Mon, 25 Jul 2016 17:58:09 GMT
content-type: application/x-javascript
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw4ee7d800/theordinary/logo.svg
200 OK 36 kB URL GET HTTP/2 theordinary.com/on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw4ee7d800/theordinary/logo.svg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 6941c95cf51ccb4ee0db6c8ad30c0be3
0ea0bbf6ef9ba73d94898c0a974440c2863f6574
5005a57736600dff609a04ba89a80eb076722e1f8a23d8b2ad5cfcb1231ae30e
GET /on/demandware.static/-/Library-Sites-DeciemSharedLibrary/default/dw4ee7d800/theordinary/logo.svg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/svg+xml
x-dw-request-base-id: qGXSwZRhUWUBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2568300
expires: Fri, 26 Apr 2024 00:39:19 GMT
last-modified: Fri, 26 Feb 2021 23:02:36 GMT
cf-cache-status: HIT
age: 501903
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045946dc3569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-K1WHNF7H93>m=45je44o0v880502387z8833212135za200&_p=1714068437361&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1701865018.1714068439&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714068438&sct=1&seg=0&dl=https%3A%2F%2Ftheordinary.com%2Fen-no&dt=Welcome%20to%20The%20Ordinary%3A%20Effective%20Clinical%20Skincare&en=page_view&_fv=1&_nsi=1&_ss=1&ep.site_region=en-no&ep.gtm_container_version=GTM-PSNCTZT%3A88&tfd=3954
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-K1WHNF7H93>m=45je44o0v880502387z8833212135za200&_p=1714068437361&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1701865018.1714068439&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714068438&sct=1&seg=0&dl=https%3A%2F%2Ftheordinary.com%2Fen-no&dt=Welcome%20to%20The%20Ordinary%3A%20Effective%20Clinical%20Skincare&en=page_view&_fv=1&_nsi=1&_ss=1&ep.site_region=en-no&ep.gtm_container_version=GTM-PSNCTZT%3A88&tfd=3954
IP
Requested by https://theordinary.com/en-no
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB
ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K1WHNF7H93>m=45je44o0v880502387z8833212135za200&_p=1714068437361&_gaz=1&gcd=13l3lPl2l1&npa=1&dma_cps=sypham&dma=1&cid=1701865018.1714068439&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714068438&sct=1&seg=0&dl=https%3A%2F%2Ftheordinary.com%2Fen-no&dt=Welcome%20to%20The%20Ordinary%3A%20Effective%20Clinical%20Skincare&en=page_view&_fv=1&_nsi=1&_ss=1&ep.site_region=en-no&ep.gtm_container_version=GTM-PSNCTZT%3A88&tfd=3954 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://theordinary.com
date: Thu, 25 Apr 2024 18:07:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
deciem.my.salesforce-sites.com/liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDA3NThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/inline.js
200 OK 122 kB URL GET HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDA3NThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/inline.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
Size 122 kB (122066 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /liveAgentSetupFlow/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22embeddedService%3AsidebarApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2FembeddedService%3AsidebarApp%22%3A%22QQwMtsclzwNniSOmz-8msw%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDA3NThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%2FliveAgentSetupFlow%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/inline.js HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:21 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: no-cache,must-revalidate,max-age=0,no-store,private
expires: Wed, 26 Apr 2023 18:07:21 GMT
content-type: text/javascript;charset=UTF-8
vary: Origin, Accept-Encoding
last-modified: Wed, 26 Apr 2023 18:07:21 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
static.myshlf.us/Affiliates/sms_aff_clicktrack-deciem.js
200 OK 1.6 kB URL GET HTTP/2 static.myshlf.us/Affiliates/sms_aff_clicktrack-deciem.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerAmazon
Subjectstatic.myshlf.us
Fingerprint2D:20:99:39:D4:33:BA:91:4A:0D:B7:37:11:BE:22:51:F2:4D:74:0D
ValidityFri, 11 Aug 2023 00:00:00 GMT - Sun, 08 Sep 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1678), with no line terminators
Hash 6873223d76cd322f8614db8869c6d172
773a524e62ccd223e9f2c85810612d0559af8911
e705ae26f47dec74a631380f0bd2ea06e6a1391817c86d322407ff7689529dda
GET /Affiliates/sms_aff_clicktrack-deciem.js HTTP/1.1
Host: static.myshlf.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 13 Dec 2022 13:22:16 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
content-encoding: gzip
date: Wed, 24 Apr 2024 20:10:43 GMT
etag: W/"d989db17a826565d651b1ae968c945ff"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LdrVQH0TV0BuWRjyc8aoN-BpIzDIjj29_QVFc6duL6kOwP5LC9FIoA==
age: 85545
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dw6a6ecb1c/images/brands-logo/niod_black.svg
200 OK 568 B URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dw6a6ecb1c/images/brands-logo/niod_black.svg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash d455d964d239cfc42759521087035612
c33bc1a5d0e9eebcbabf048c40959073e1440daf
bdeaff570df5851064e0f355c45e235ff12e0d75811a8fccba039fa7c233b270
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dw6a6ecb1c/images/brands-logo/niod_black.svg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/svg+xml
x-dw-request-base-id: cuuArsXzKGYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591976
expires: Fri, 24 May 2024 11:57:57 GMT
last-modified: Mon, 22 Apr 2024 14:38:15 GMT
cf-cache-status: HIT
age: 108092
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045947dd3569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw66368c91/Images/products/The%20Ordinary/rdn-granactive-retinoid-2pct-emulsion-30ml.png?sw=320&sh=320&sm=fit
200 OK 17 kB URL GET HTTP/2 theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw66368c91/Images/products/The%20Ordinary/rdn-granactive-retinoid-2pct-emulsion-30ml.png?sw=320&sh=320&sm=fit
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 3e65ec5d6d3b4ab304b8ea62f8075465
a321e347c8b33f03ccf2aebae61f60b3d1918268
a8ff63118ef8113d4e65a0bafd5e86bfe425fbbbea1ae17be6d5f26649010be7
GET /dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw66368c91/Images/products/The%20Ordinary/rdn-granactive-retinoid-2pct-emulsion-30ml.png?sw=320&sh=320&sm=fit HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1; forterToken=c9bc252986b5430bbe69921525584984_1714068437503__UDF4_9ck
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:18 GMT
content-type: image/webp
content-length: 16650
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=29023
content-disposition: inline; filename="rdn-granactive-retinoid-2pct-emulsion-30ml.webp"
etag: "5952ea9ff8c9f1282276d42eccf91575"
last-modified: Tue, 12 Mar 2024 12:50:50 GMT
vary: Accept
via: 1.1 210fa10efb175d891774d170436663b0.cloudfront.net (CloudFront)
x-amz-cf-id: jVupBNjYxtubRqnEDT5NqfMITFKAp4HqyIKfAeY7KCkjTfF7XY-cGQ==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Sat, 12 Apr 2025 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=320&sh=320&sm=fit
x-amz-server-side-encryption: AES256
x-amz-storage-class: INTELLIGENT_TIERING
cf-cache-status: HIT
age: 1153441
accept-ranges: bytes
server: cloudflare
cf-ray: 87a0459b6922569c-OSL
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
200 OK 518 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File type JavaScript source, ASCII text, with very long lines (631)
Size 518 kB (517649 bytes)
Hash e2e79d6b927169d9e0e57e3baecc0993
1299473950b2999ba0b7f39bd5e4a60eafd1819d
231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 20:51:00 GMT
expires: Thu, 24 Apr 2025 20:51:00 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 76579
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
deciem.my.salesforce-sites.com/liveAgentSetupFlow/aura?r=0&aura.Component.getComponent=2
200 OK 85 kB URL POST HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/aura?r=0&aura.Component.getComponent=2
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
Hash e94350e5058c21fc89d066c8ebecc580
54282e3f9800c7a82d6eca29c726961e5197280f
0d2b65b2a08fa3fed83dcd60f8c5e5ef030eb1d4838c5d31d56298ca27626314
POST /liveAgentSetupFlow/aura?r=0&aura.Component.getComponent=2 HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
Content-Length: 1108
Origin: https://deciem.my.salesforce-sites.com
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:23 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: no-cache,must-revalidate,max-age=0,no-store,private
content-type: application/json;charset=UTF-8
vary: Origin, Accept-Encoding
expires: Wed, 26 Apr 2023 18:07:23 GMT
last-modified: Wed, 26 Apr 2023 18:07:23 GMT
server-timing: Total;dur=30
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwfc580a27/images/icons/svg/short-arrow-rounded.svg
200 OK 525 B URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dwfc580a27/images/icons/svg/short-arrow-rounded.svg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 36054ada0210aed205c8913f92104c05
94ea71c9e9269c409b2bca9a963f9c62fdb01661
0b7f7d6f675aa9840688e094be66142577dd239f56fb83e873ff16c8e0f230dc
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dwfc580a27/images/icons/svg/short-arrow-rounded.svg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/svg+xml
x-dw-request-base-id: rSRrqcrzKGYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591763
expires: Fri, 24 May 2024 11:58:02 GMT
last-modified: Mon, 22 Apr 2024 14:38:16 GMT
cf-cache-status: HIT
age: 108091
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045970bbf569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn2.gbqofs.com/deciem/p/detector-dom.min.js
403 Forbidden 0 B URL GET HTTP/2 cdn2.gbqofs.com/deciem/p/detector-dom.min.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerCloudflare, Inc.
Subjectgbqofs.com
Fingerprint82:79:73:12:C8:CD:34:87:06:D8:A1:B9:5B:99:10:0C:AB:74:52:11
ValidityThu, 12 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /deciem/p/detector-dom.min.js HTTP/1.1
Host: cdn2.gbqofs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Thu, 25 Apr 2024 18:07:18 GMT
content-type: application/xml
x-cache: Error from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9uUeGCECZoSV0sAsGgPWJKVhV77afKhb2Z4YszXe2HPWshltoHFd-w==
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a0459bfd8e5690-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
deciem.my.salesforce-sites.com/liveAgentSetupFlow
200 OK 28 kB URL GET HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (749), with CRLF, LF line terminators
Hash 27c263cb448faa8f7923e621b51f7529
011f5e7ce72edc1a47f4c75b4742b4601f9adcc1
797bc95f93c36b2aa2efafcc6e768ccd2efbf0df172c67f435243f98fbe48c3e
GET /liveAgentSetupFlow HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
set-cookie: CookieConsentPolicy=0:1; path=/; expires=Fri, 25-Apr-2025 18:07:19 GMT; Max-Age=31536000; secure; SameSite=None
LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Fri, 25-Apr-2025 18:07:19 GMT; Max-Age=31536000; secure; SameSite=None
BrowserId=p-nv8QMuEe-qI69TiV1_fQ; path=/; expires=Fri, 25-Apr-2025 18:07:19 GMT; Max-Age=31536000
BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ; path=/; expires=Fri, 25-Apr-2025 18:07:19 GMT; Max-Age=31536000; secure; SameSite=None
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: upgrade-insecure-requests
referrer-policy: origin-when-cross-origin
cache-control: public,max-age=600
p3p: CP="CUR OTR STA"
expires: Thu, 25 Apr 2024 18:17:19 GMT
last-modified: Thu, 25 Apr 2024 18:07:19 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dwb0662734/Images/products/The%20Ordinary/2024-02-14-HA+B5-Packshot_30mL.png?sw=90&sh=90&sm=fit
200 OK 2.3 kB URL GET HTTP/2 theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dwb0662734/Images/products/The%20Ordinary/2024-02-14-HA+B5-Packshot_30mL.png?sw=90&sh=90&sm=fit
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash fdad3411b6c5f3aec0e03bcb4f0cd5c3
cfe346e7855ccb990a0062dcd7097f70827576f4
b7ff5951a39043696ae89305b292157b75de65f1918ee9dac624cd59878731f5
GET /dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dwb0662734/Images/products/The%20Ordinary/2024-02-14-HA+B5-Packshot_30mL.png?sw=90&sh=90&sm=fit HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1; forterToken=c9bc252986b5430bbe69921525584984_1714068437503__UDF43_9ck_; _gcl_au=1.1.573230739.1714068438; ftr_ncd=6; _ga_K1WHNF7H93=GS1.1.1714068438.1.0.1714068438.60.0.0; _ga=GA1.1.1701865018.1714068439; _scid=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _scid_r=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _rdt_uuid=1714068439065.bf89f8aa-2653-4cf9-aea4-3ad282a22bae; cqcid=acpeWapZA4RclZxrdHPSaMZgkt; cquid=||; _sc_cspv=https%3A%2F%2Ftr.snapchat.com%2Fconfig%2Fcom%2Fcee3acf4-f810-4ae6-ae30-04952a3dd849.json%3Fv%3D3.16.0-2404242003; _uetsid=a81cd160032e11ef8a52c524e35c2388; _uetvid=a81d0540032e11efbd93a5900ef51d4e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
content-type: image/webp
content-length: 2284
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=4405
content-disposition: inline; filename="2024-02-14-HA+B5-Packshot_30mL.webp"
vary: Accept
via: 1.1 732d3ca1627bbec3dcfe750ff23e18bc.cloudfront.net (CloudFront)
x-amz-cf-id: r3QZTPROvh0o888VToT7_pTEA-AFe8nXIqqS4vtuv-JXdueGA9cP6w==
x-amz-cf-pop: HEL51-P1
x-amzn-trace-id: Root=1-65f04fb6-39f1039e2bffea5d57f8f7ca;Parent=14bb4078a0c262fc;Sampled=0;lineage=36621fcf:0
x-cache: Hit from cloudfront
x-amz-apigw-id: UhFkoGS4oAMEr4w=
x-amzn-requestid: 63024f36-cdeb-44e8-9b4c-ec73df94056e
last-modified: Tue, 12 Mar 2024 12:54:27 GMT
cf-cache-status: HIT
age: 1227773
accept-ranges: bytes
server: cloudflare
cf-ray: 87a045a3fa6a569c-OSL
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2613778178781&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftheordinary.com%2Fen-no%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1714068439945
200 OK 35 B URL GET HTTP/3 ct.pinterest.com/v3/?tid=2613778178781&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftheordinary.com%2Fen-no%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1714068439945
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2613778178781&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftheordinary.com%2Fen-no%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1714068439945 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theordinary.com/
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: https://theordinary.com
access-control-allow-credentials: true
x-envoy-upstream-service-time: 0
pinterest-version: 219d758fc6c272afdb21541dfea642f69cb734f9
referrer-policy: origin
x-pinterest-rid: 1497650253262652
date: Thu, 25 Apr 2024 18:07:20 GMT
alt-svc: h3=":443"; ma=600
set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 18:07:20 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None
quic-version: 0x00000001
akamai-grn: 0.164f2417.1714068440.48e53a8
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dw1d13ac5c/images/brands-logo/theordinary_white.svg
200 OK 1.7 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dw1d13ac5c/images/brands-logo/theordinary_white.svg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 96f881eb93e0c8ee3ea6b6650992faeb
298f705cd67eeb8a40012b763960c9b05477f71c
0881c32a8cb3bcd57401e349a7d0c4f7aa2aa12190934e76d1dd414a062ab4dd
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dw1d13ac5c/images/brands-logo/theordinary_white.svg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/svg+xml
x-dw-request-base-id: rSRsqMPzKGYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591974
expires: Fri, 24 May 2024 11:57:55 GMT
last-modified: Mon, 22 Apr 2024 14:38:15 GMT
cf-cache-status: HIT
age: 108092
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045946dc7569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.cquotient.com/js/v2/gretel.min.js
200 OK 67 kB URL GET HTTP/2 cdn.cquotient.com/js/v2/gretel.min.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerAmazon
Subject*.cquotient.com
Fingerprint1D:5F:ED:5E:67:90:A4:E5:91:39:6C:E8:BC:88:C4:94:6B:D6:01:A1
ValidityTue, 05 Mar 2024 00:00:00 GMT - Wed, 02 Apr 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/v2/gretel.min.js HTTP/1.1
Host: cdn.cquotient.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 05 Mar 2024 18:43:25 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 25 Apr 2024 18:04:07 GMT
cache-control: max-age=3600
etag: W/"5a46adde69ff5afdefaed355873317e1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: c4EhJjGZHqV5K97xXlfjTWVU5WlP4nYJWH-TLSNuCoSPJAfI9V-5gA==
age: 191
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/home/bootstrap.css
200 OK 190 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/home/bootstrap.css
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 190 kB (189501 bytes)
Hash f19cf8e4d88ae7b188c341b7a993df97
ff21ded9e30877ee6681c48d5d9b76652b3e1d62
27cf680ace881bcdbca064ab11ad951b69922451b4efd5a2168be5ae3298a87e
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/css/home/bootstrap.css HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: text/css
cache-control: public, max-age=2592000
cf-bgj: minify
cross-origin-resource-policy: cross-origin
expires: Sat, 25 May 2024 06:04:26 GMT
last-modified: Mon, 22 Apr 2024 14:38:16 GMT
vary: accept-encoding
x-dw-request-base-id: cuubnGryKWYBAAB_
cf-cache-status: HIT
age: 43371
server: cloudflare
cf-ray: 87a045946da5569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
deciem.my.salesforce-sites.com/liveAgentSetupFlow/static/111213/js/perf/stub.js
200 OK 1.4 kB URL GET HTTP/2 deciem.my.salesforce-sites.com/liveAgentSetupFlow/static/111213/js/perf/stub.js
IP
Requested by https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
Certificate IssuerDigiCert Inc
Subjectsfdc-58ktaz.my.salesforce-sites.com
FingerprintC7:31:73:14:7C:3E:48:24:B0:3A:4B:65:20:B4:21:90:1E:9C:E5:A9
ValidityFri, 02 Feb 2024 00:00:00 GMT - Sun, 02 Feb 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1436), with no line terminators
Hash dbc173f2ac034811791abc7b0bdade10
5ca61720d91cf7630af47f39e686dfa0241d8954
c89a5553870a99b8b6743fe2c9870c346d00fa46df841cecbcee6a3344bdebe0
GET /liveAgentSetupFlow/static/111213/js/perf/stub.js HTTP/1.1
Host: deciem.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deciem.my.salesforce-sites.com/liveAgentSetupFlow
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=p-nv8QMuEe-qI69TiV1_fQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
strict-transport-security: max-age=63072000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: origin-when-cross-origin
cache-control: public,max-age=10368000
expires: Fri, 23 Aug 2024 18:07:19 GMT
last-modified: Thu, 18 Dec 2014 19:28:43 GMT
content-type: application/x-javascript
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dw03c8df49/images/brands-logo/theordinary_black.svg
200 OK 1.7 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/default/dw03c8df49/images/brands-logo/theordinary_black.svg
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash a239bd3b287dc86a4bc16736468aa516
7acb88a874528542e0a64599bb2e1895b697671c
6f1c3fc2ba44de85444f6f7b1d6334921e3484a929133fabc5f8dd1c4255635a
GET /on/demandware.static/Sites-deciem-global-Site/-/default/dw03c8df49/images/brands-logo/theordinary_black.svg HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: image/svg+xml
x-dw-request-base-id: cus1rsPzKGYBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591974
expires: Fri, 24 May 2024 11:57:55 GMT
last-modified: Mon, 22 Apr 2024 14:38:15 GMT
cf-cache-status: HIT
age: 108093
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a045946daf569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
theordinary.com/on/demandware.store/Sites-deciem-global-Site/en_NO/CQRecomm-Start
200 OK 12 kB URL POST HTTP/2 theordinary.com/on/demandware.store/Sites-deciem-global-Site/en_NO/CQRecomm-Start
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 2493a01582667e97738764dff78ed3dd
b0eb280e925fdeef6f0cd1991b5755b2c45aef92
d2283ca6c9b05600081081f0f93240062b5957d10ed486da8c8566c51bde0720
POST /on/demandware.store/Sites-deciem-global-Site/en_NO/CQRecomm-Start HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 677
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1; forterToken=c9bc252986b5430bbe69921525584984_1714068437503__UDF43_9ck_; _gcl_au=1.1.573230739.1714068438; ftr_ncd=6; _ga_K1WHNF7H93=GS1.1.1714068438.1.0.1714068438.60.0.0; _ga=GA1.1.1701865018.1714068439
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
content-type: text/html;charset=UTF-8
set-cookie: cqcid=acpeWapZA4RclZxrdHPSaMZgkt; Path=/; Secure; SameSite=None
cquid=||; Path=/; Secure; SameSite=None
dwac_aa97ccc54bc3ccdfc4920b1f68=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=None
dwpersonalization_c89ed50662a479b16c167dc68820dc6c=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=None
__cq_dnt=1; Path=/; Secure; SameSite=None
dw_dnt=1; Path=/; Secure; SameSite=None
x-dw-request-base-id: rSRJlNabKmYBAAB_
dnt: 1
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
vary: accept-encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87a0459f7e02569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613778178781&cb=1714068440170&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU56RXdZVGcyTW1JdE5UazRaUzAwT1dSakxXSmpZall0TWpoa05qZGpabVE1WWprNQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftheordinary.com%2Fen-no%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
200 OK 35 B URL GET HTTP/3 ct.pinterest.com/v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613778178781&cb=1714068440170&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU56RXdZVGcyTW1JdE5UazRaUzAwT1dSakxXSmpZall0TWpoa05qZGpabVE1WWprNQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftheordinary.com%2Fen-no%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%7D&tid=2613778178781&cb=1714068440170&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPU56RXdZVGcyTW1JdE5UazRaUzAwT1dSakxXSmpZall0TWpoa05qZGpabVE1WWprNQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftheordinary.com%2Fen-no%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theordinary.com/
Origin: https://theordinary.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
content-length: 35
access-control-allow-origin: https://theordinary.com
access-control-allow-credentials: true
x-envoy-upstream-service-time: 2
pinterest-version: 219d758fc6c272afdb21541dfea642f69cb734f9
referrer-policy: origin
x-pinterest-rid: 3076176153922772
date: Thu, 25 Apr 2024 18:07:20 GMT
alt-svc: h3=":443"; ma=600
set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 18:07:20 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None
_pinterest_ct_ua="TWc9PSZXQnhwcm1tSC8vSXI3d1ZCMXpmenp6Y0VVL1FnTm13UlhCallNMElxd3dqTzg0Rm96WnA3dWY0eUt5ZSt2N1AxOHpoc0t2MGpUTktXZjRvcXpReXN1MVh2MG1IODN1K0NVdEIxcnlwTFozOD0mbXFDMnJjZklDalR2aDFRUGdwd01pb0l0Z2JRPQ=="; Expires=Fri, 25 Apr 2025 18:07:20 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None
quic-version: 0x00000001
akamai-grn: 0.164f2417.1714068440.48e5708
x-cdn: akamai
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
e.cquotient.com/recs/bfkj-deciem-global/products-in-all-categories?callback=CQuotient._callback0&_=1714068437822&_device=other&userId=&cookieId=&emailId=&anchors=id%3A%3A%7C%7Csku%3A%3A%7C%7Ctype%3A%3A%7C%7Calt_id%3A%3A&slotId=search-drawer-recommendations&slotConfigId=New%20Slot%20Configuration%20-%202023-01-04%2015%3A43%3A23&slotConfigTemplate=slots%2Frecommendation%2FsearchDrawerRecommendations.isml&ccver=1.03&realm=BFKJ&siteId=deciem-global&instanceType=prd&v=v3.1.2&json=%7B%22userId%22%3A%22%22%2C%22cookieId%22%3A%22%22%2C%22emailId%22%3A%22%22%2C%22anchors%22%3A%5B%7B%22id%22%3A%22%22%2C%22sku%22%3A%22%22%2C%22type%22%3A%22%22%2C%22alt_id%22%3A%22%22%7D%5D%2C%22slotId%22%3A%22search-drawer-recommendations%22%2C%22slotConfigId%22%3A%22New%20Slot%20Configuration%20-%202023-01-04%2015%3A43%3A23%22%2C%22slotConfigTemplate%22%3A%22slots%2Frecommendation%2FsearchDrawerRecommendations.isml%22%2C%22ccver%22%3A%221.03%22%2C%22realm%22%3A%22BFKJ%22%2C%22siteId%22%3A%22deciem-global%22%2C%22instanceType%22%3A%22prd%22%2C%22v%22%3A%22v3.1.2%22%7D
200 OK 18 kB URL GET HTTP/2 e.cquotient.com/recs/bfkj-deciem-global/products-in-all-categories?callback=CQuotient._callback0&_=1714068437822&_device=other&userId=&cookieId=&emailId=&anchors=id%3A%3A%7C%7Csku%3A%3A%7C%7Ctype%3A%3A%7C%7Calt_id%3A%3A&slotId=search-drawer-recommendations&slotConfigId=New%20Slot%20Configuration%20-%202023-01-04%2015%3A43%3A23&slotConfigTemplate=slots%2Frecommendation%2FsearchDrawerRecommendations.isml&ccver=1.03&realm=BFKJ&siteId=deciem-global&instanceType=prd&v=v3.1.2&json=%7B%22userId%22%3A%22%22%2C%22cookieId%22%3A%22%22%2C%22emailId%22%3A%22%22%2C%22anchors%22%3A%5B%7B%22id%22%3A%22%22%2C%22sku%22%3A%22%22%2C%22type%22%3A%22%22%2C%22alt_id%22%3A%22%22%7D%5D%2C%22slotId%22%3A%22search-drawer-recommendations%22%2C%22slotConfigId%22%3A%22New%20Slot%20Configuration%20-%202023-01-04%2015%3A43%3A23%22%2C%22slotConfigTemplate%22%3A%22slots%2Frecommendation%2FsearchDrawerRecommendations.isml%22%2C%22ccver%22%3A%221.03%22%2C%22realm%22%3A%22BFKJ%22%2C%22siteId%22%3A%22deciem-global%22%2C%22instanceType%22%3A%22prd%22%2C%22v%22%3A%22v3.1.2%22%7D
IP
Requested by https://theordinary.com/en-no
Certificate IssuerAmazon
Subject*.cquotient.com
Fingerprint28:54:4F:BF:5E:90:A5:85:A8:36:18:C0:EB:FA:68:08:97:C7:7F:EC
ValidityTue, 05 Mar 2024 00:00:00 GMT - Thu, 03 Apr 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /recs/bfkj-deciem-global/products-in-all-categories?callback=CQuotient._callback0&_=1714068437822&_device=other&userId=&cookieId=&emailId=&anchors=id%3A%3A%7C%7Csku%3A%3A%7C%7Ctype%3A%3A%7C%7Calt_id%3A%3A&slotId=search-drawer-recommendations&slotConfigId=New%20Slot%20Configuration%20-%202023-01-04%2015%3A43%3A23&slotConfigTemplate=slots%2Frecommendation%2FsearchDrawerRecommendations.isml&ccver=1.03&realm=BFKJ&siteId=deciem-global&instanceType=prd&v=v3.1.2&json=%7B%22userId%22%3A%22%22%2C%22cookieId%22%3A%22%22%2C%22emailId%22%3A%22%22%2C%22anchors%22%3A%5B%7B%22id%22%3A%22%22%2C%22sku%22%3A%22%22%2C%22type%22%3A%22%22%2C%22alt_id%22%3A%22%22%7D%5D%2C%22slotId%22%3A%22search-drawer-recommendations%22%2C%22slotConfigId%22%3A%22New%20Slot%20Configuration%20-%202023-01-04%2015%3A43%3A23%22%2C%22slotConfigTemplate%22%3A%22slots%2Frecommendation%2FsearchDrawerRecommendations.isml%22%2C%22ccver%22%3A%221.03%22%2C%22realm%22%3A%22BFKJ%22%2C%22siteId%22%3A%22deciem-global%22%2C%22instanceType%22%3A%22prd%22%2C%22v%22%3A%22v3.1.2%22%7D HTTP/1.1
Host: e.cquotient.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:18 GMT
content-type: text/javascript; charset=utf-8
strict-transport-security: max-age=15552000; includeSubdomains
cache-control: no-store
x-content-type-options: nosniff
etag: W/"4874-mtHG+Wec4Bh8SOKmtqQNIB9SXTk"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 26
server: envoy
X-Firefox-Spdy: h2
theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw8d4bac7c/Images/products/The%20Ordinary/ord-retinal-02pct-emulsion-15ml.png?sw=320&sh=320&sm=fit
200 OK 12 kB URL GET HTTP/2 theordinary.com/dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw8d4bac7c/Images/products/The%20Ordinary/ord-retinal-02pct-emulsion-15ml.png?sw=320&sh=320&sm=fit
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash abf148cdf3e5f8260ca3d080c6193cbe
2c6df80074afe2884b1e0de6e4e3f7c803469c1b
aa797f6e57bf3c07557a9e4ff7a5dbbd371accab97a71aacca9a64c2b21f8cc5
GET /dw/image/v2/BFKJ_PRD/on/demandware.static/-/Sites-deciem-master/default/dw8d4bac7c/Images/products/The%20Ordinary/ord-retinal-02pct-emulsion-15ml.png?sw=320&sh=320&sm=fit HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1; forterToken=c9bc252986b5430bbe69921525584984_1714068437503__UDF4_9ck
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:18 GMT
content-type: image/webp
content-length: 12380
cache-control: public, max-age=2592000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=18961
content-disposition: inline; filename="ord-retinal-02pct-emulsion-15ml.webp"
etag: "9bad07ba8c363a69ab53aa84ccac57b9"
last-modified: Tue, 12 Mar 2024 12:49:59 GMT
vary: Accept
via: 1.1 b58b188f0b591d63a56e49672312d538.cloudfront.net (CloudFront)
x-amz-cf-id: W1w1zH9MCKEsFxKNDgMrGzHJFzIGAdmp8Kl-_GCI2XfC25anjukeyQ==
x-amz-cf-pop: ARN1-C1
x-cache: Hit from cloudfront
x-amz-expiration: expiry-date="Sat, 12 Apr 2025 00:00:00 GMT", rule-id="transform_cache_ttl"
x-amz-meta-cleanquerystring: sw=320&sh=320&sm=fit
x-amz-server-side-encryption: AES256
x-amz-storage-class: INTELLIGENT_TIERING
cf-cache-status: HIT
age: 1153441
accept-ranges: bytes
server: cloudflare
cf-ray: 87a0459b691d569c-OSL
X-Firefox-Spdy: h2
www.redditstatic.com/ads/pixel.js
200 OK 39 kB URL GET HTTP/2 www.redditstatic.com/ads/pixel.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjectwww.redditstatic.com
Fingerprint2F:CB:EB:6E:79:ED:BE:34:24:FF:A9:C2:0C:D1:07:8D:56:7F:2F:16
ValidityMon, 08 Jan 2024 00:00:00 GMT - Sat, 06 Jul 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (39242)
Hash b1de5a83f25d164f24b470c022d2a356
56b8a2b55612b3b4b8dbb4b550f1cd4e72d930dd
57bd3463acfad02c222f7beac208f69df5507f7de42fa38b18a1e1e48df2a44a
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2024 17:35:49 GMT
etag: "c4d61fbb6e730a840c7f140cbb9bcd06"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 25 Apr 2024 18:07:18 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 11214
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/internal/jscript/dwanalytics-22.2.js
200 OK 6.6 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/internal/jscript/dwanalytics-22.2.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (6837), with no line terminators
Hash 4a42334db801296430f0264c9136cbfe
8c671f99d13609abe725938624c3810239f4b3bf
b5a39e159d4bbd70dfa89d5fe8a68e845619d6d0d73d081f721af63df2541a70
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/internal/jscript/dwanalytics-22.2.js HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: text/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=6582
cross-origin-resource-policy: cross-origin
expires: Fri, 24 May 2024 23:16:07 GMT
last-modified: Wed, 24 Apr 2024 23:16:07 GMT
vary: accept-encoding
x-dw-request-base-id: rSSMWbeSKWYBAAB_
cf-cache-status: HIT
age: 67869
server: cloudflare
cf-ray: 87a04594ae49569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K1WHNF7H93&cid=1701865018.1714068439>m=45je44o0v880502387z8833212135za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=1071116753
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K1WHNF7H93&cid=1701865018.1714068439>m=45je44o0v880502387z8833212135za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=1071116753
IP
Requested by https://theordinary.com/en-no
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint4E:BD:F9:72:97:67:A2:4B:EE:E4:B0:03:CD:C8:F3:30:53:27:53:1D
ValidityMon, 18 Mar 2024 20:50:06 GMT - Mon, 10 Jun 2024 20:50:05 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-K1WHNF7H93&cid=1701865018.1714068439>m=45je44o0v880502387z8833212135za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3lPl2l1&npa=1&z=1071116753 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 25 Apr 2024 18:07:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/vendors.js
200 OK 522 kB URL GET HTTP/2 theordinary.com/on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/vendors.js
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
Size 522 kB (522166 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /on/demandware.static/Sites-deciem-global-Site/-/en_NO/v1713999618376/js/vendors.js HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwac_aa97ccc54bc3ccdfc4920b1f68=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||EUR|false|Canada%2FEastern|true; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:17 GMT
content-type: text/javascript
cache-control: public, max-age=2592000
cf-bgj: minify
cf-polished: origSize=522501
cross-origin-resource-policy: cross-origin
expires: Fri, 24 May 2024 23:16:07 GMT
last-modified: Mon, 22 Apr 2024 14:38:16 GMT
vary: accept-encoding
x-dw-request-base-id: rSSKWbeSKWYBAAB_
cf-cache-status: HIT
age: 67869
server: cloudflare
cf-ray: 87a045945d80569c-OSL
content-encoding: br
X-Firefox-Spdy: h2
theordinary.com/on/demandware.store/Sites-deciem-global-Site/en_NO/__Analytics-Start?url=https%3A%2F%2Ftheordinary.com%2Fen-no&res=1280x1024&cookie=1&ref=&title=Welcome%20to%20The%20Ordinary%3A%20Effective%20Clinical%20Skincare&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.8401183533270311&cmpn=&tz=Canada/Eastern&pcc=USD&pct=&pcat=&dw_dnt=1
200 OK 35 B URL GET HTTP/2 theordinary.com/on/demandware.store/Sites-deciem-global-Site/en_NO/__Analytics-Start?url=https%3A%2F%2Ftheordinary.com%2Fen-no&res=1280x1024&cookie=1&ref=&title=Welcome%20to%20The%20Ordinary%3A%20Effective%20Clinical%20Skincare&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.8401183533270311&cmpn=&tz=Canada/Eastern&pcc=USD&pct=&pcat=&dw_dnt=1
IP
Requested by https://theordinary.com/en-no
Certificate IssuerDigiCert Inc
Subjecttheordinary.com
Fingerprint53:CD:C9:D5:0C:1D:04:A1:E4:27:EF:3F:CA:60:90:47:85:F3:C4:8F
ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /on/demandware.store/Sites-deciem-global-Site/en_NO/__Analytics-Start?url=https%3A%2F%2Ftheordinary.com%2Fen-no&res=1280x1024&cookie=1&ref=&title=Welcome%20to%20The%20Ordinary%3A%20Effective%20Clinical%20Skincare&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.8401183533270311&cmpn=&tz=Canada/Eastern&pcc=USD&pct=&pcat=&dw_dnt=1 HTTP/1.1
Host: theordinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theordinary.com/en-no
Cookie: dwac_293b1c68ed64803efcdd8a9cb2=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0%3D|dw-only|||USD|false|Canada%2FEastern|true; sid=cs5Q91JCp4MmY8s2U_CmoJHLVSMaV1fxTc0; consent=marketing; dwanonymous_e6127764d033023f3e29a8ce18b4fbbb=acZFuvBZMta0DZ6Z71h161r95O; shippingCountry=NO; dwsid=YWCnl-_VhjyZ0GIA00RuFYJlokOnwHZO8n46zb2V40LJ99VYghBLI2CmSPqoRKrZXRUV8SnGrNuiulwP5E85kA==; dwanonymous_c89ed50662a479b16c167dc68820dc6c=acpeWapZA4RclZxrdHPSaMZgkt; __cq_dnt=1; dw_dnt=1; forterToken=c9bc252986b5430bbe69921525584984_1714068437503__UDF43_9ck_; _gcl_au=1.1.573230739.1714068438; ftr_ncd=6; _ga_K1WHNF7H93=GS1.1.1714068438.1.0.1714068438.60.0.0; _ga=GA1.1.1701865018.1714068439; _scid=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _scid_r=cd78852a-0d3a-4bfe-8560-e918d2eb7125; _rdt_uuid=1714068439065.bf89f8aa-2653-4cf9-aea4-3ad282a22bae; cqcid=acpeWapZA4RclZxrdHPSaMZgkt; cquid=||; _sc_cspv=https%3A%2F%2Ftr.snapchat.com%2Fconfig%2Fcom%2Fcee3acf4-f810-4ae6-ae30-04952a3dd849.json%3Fv%3D3.16.0-2404242003; _uetsid=a81cd160032e11ef8a52c524e35c2388; _uetvid=a81d0540032e11efbd93a5900ef51d4e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 18:07:19 GMT
content-type: image/gif
content-length: 35
accept-ranges: bytes
set-cookie: cqcid=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=None
cquid=""; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; SameSite=None
x-dw-request-base-id: rSRZlNebKmYBAAB_
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87a045a3ca20569c-OSL
X-Firefox-Spdy: h2
172.67.193.195
3.96.182.255
104.19.146.121
23.38.200.197
85.222.153.15
54.74.149.197
0.0.0.0