tds.findlocalgirls.online/f2d8e5e5-924a-4e21-a393-6ef691076b40?cmpid=8488F_T&sub_source={%25utm_term|url|%25}&adzone={%25cid%25}&cost=0.15
18.193.235.10 0 B URL tds.findlocalgirls.online/f2d8e5e5-924a-4e21-a393-6ef691076b40?cmpid=8488F_T&sub_source={%25utm_term|url|%25}&adzone={%25cid%25}&cost=0.15
IP 18.193.235.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /f2d8e5e5-924a-4e21-a393-6ef691076b40?cmpid=8488F_T&sub_source={%25utm_term|url|%25}&adzone={%25cid%25}&cost=0.15 HTTP/1.1
Host: tds.findlocalgirls.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 20 Nov 2023 15:30:45 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://clkemist.com/v1/redirect/9735?clickid=wf1du4agfu1bon5tirnactfa&utm_camp=8488F_T&utm_land=&utm_content=mb01
pragma: no-cache
set-cookie: f2d8e5e5-924a-4e21-a393-6ef691076b40-v4=5n27ihUQkgF77BwH6OvLAx74v0CSM9Z7NXjPb65YkqQ; Max-Age=86400; Expires=Tue, 21-Nov-2023 15:30:45 GMT; Domain=tds.findlocalgirls.online; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=Qp6GseEFeBddbMyH%2Be3FkXIuuBooMpd1JPpAimojBO2D3xo3mpx%2FlzXaLPWHPbe8vFITaLQbmUCWFbsZ8zgyw01NWtcX40CZjlysibBnSop9sN40wyyPmjhyOTIUn9DpLCjlbdk%2B23jhhroTsWaHXg%3D%3D; Max-Age=31536000; Expires=Tue, 19-Nov-2024 15:30:45 GMT; Domain=tds.findlocalgirls.online; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
s.optnx.com/click.php?d=H4sIAAAAAAAAA0VQy47bMAz8lVx8jCGK1OvYIthLUWz_IJBlyTG6sQNbyXYDfnxlb.KAAjzkcIakNTilnGWslXQEYDQZoRyfcr7MFf6o5Ft595zqe8w.Tf4c5zqM51LUojWkG7830OCeXCP3Pgrco3WGXHQePVT4Fvz50rcVHirzc8G.74ZjKZhDJfXNT09ugT7344ucx.sU4jc7T.F4Guc8lAUebDE_xH9lIJTsPg7x6bTgzSQUz216jt04fW1c_PP..5ta0Vpr_DDE6fjUvNKV9aUKpAQWnD7Gz63vmaxd2XePieNwi9NcjpqPefLhbz90pYVZMBghyJEkxemjn_JX2b87NeO0_F12UDtRk6xBEVsLWjslWIkiEFS.lpmAkUEVK8EMJfgzQXsl36UrNOOgcj8NPuTkWSokYq2UDdSmBp0y3jlSlnTAEBAAUgjFQvDc59iOZ98P6x6CLSLqMkcbIN696F2hdxffxR2vwiUQCCXJDREvl0rBD34JsyG76pgl6CWRrtxzM_z.iy20LsmoWoiIBp1tFPmkWgoJtfb6P36VN7u1AgAA
95.211.229.248 460 B URL s.optnx.com/click.php?d=H4sIAAAAAAAAA0VQy47bMAz8lVx8jCGK1OvYIthLUWz_IJBlyTG6sQNbyXYDfnxlb.KAAjzkcIakNTilnGWslXQEYDQZoRyfcr7MFf6o5Ft595zqe8w.Tf4c5zqM51LUojWkG7830OCeXCP3Pgrco3WGXHQePVT4Fvz50rcVHirzc8G.74ZjKZhDJfXNT09ugT7344ucx.sU4jc7T.F4Guc8lAUebDE_xH9lIJTsPg7x6bTgzSQUz216jt04fW1c_PP..5ta0Vpr_DDE6fjUvNKV9aUKpAQWnD7Gz63vmaxd2XePieNwi9NcjpqPefLhbz90pYVZMBghyJEkxemjn_JX2b87NeO0_F12UDtRk6xBEVsLWjslWIkiEFS.lpmAkUEVK8EMJfgzQXsl36UrNOOgcj8NPuTkWSokYq2UDdSmBp0y3jlSlnTAEBAAUgjFQvDc59iOZ98P6x6CLSLqMkcbIN696F2hdxffxR2vwiUQCCXJDREvl0rBD34JsyG76pgl6CWRrtxzM_z.iy20LsmoWoiIBp1tFPmkWgoJtfb6P36VN7u1AgAA
IP 95.211.229.248:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (514)
Hash ae337fb5e5e30e6351ae01d2b6d735fb
863d5bb735e68e880d6fcb35bb40cabe4fe3da6f
5186539db086b6af00d6b2bcaab47db937602b761daa68466a4e02fa56efeb0c
GET /click.php?d=H4sIAAAAAAAAA0VQy47bMAz8lVx8jCGK1OvYIthLUWz_IJBlyTG6sQNbyXYDfnxlb.KAAjzkcIakNTilnGWslXQEYDQZoRyfcr7MFf6o5Ft595zqe8w.Tf4c5zqM51LUojWkG7830OCeXCP3Pgrco3WGXHQePVT4Fvz50rcVHirzc8G.74ZjKZhDJfXNT09ugT7344ucx.sU4jc7T.F4Guc8lAUebDE_xH9lIJTsPg7x6bTgzSQUz216jt04fW1c_PP..5ta0Vpr_DDE6fjUvNKV9aUKpAQWnD7Gz63vmaxd2XePieNwi9NcjpqPefLhbz90pYVZMBghyJEkxemjn_JX2b87NeO0_F12UDtRk6xBEVsLWjslWIkiEFS.lpmAkUEVK8EMJfgzQXsl36UrNOOgcj8NPuTkWSokYq2UDdSmBp0y3jlSlnTAEBAAUgjFQvDc59iOZ98P6x6CLSLqMkcbIN696F2hdxffxR2vwiUQCCXJDREvl0rBD34JsyG76pgl6CWRrtxzM_z.iy20LsmoWoiIBp1tFPmkWgoJtfb6P36VN7u1AgAA HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Nov 2023 15:30:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
GET ztf.zetaframes.com/60d746ba-71b3-49b2-ae03-389749e9a3a1?campid=6195598&varid=88166950&source=flirtyneighbor.com&s1=ex03-1&zoneid=5094204&catid=508&ePOM={ePOM}&banner_id={banner_id}&a=14503&flow_id={flow_id}&tag=opddNHdLHTPHNVS4ASOqlupnlpdbbNXXdVK6aquyalzqpbXUzOodNU6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOTxNsenPng82gQVG7IDPU3Gbq6qrdaduNKLqrM7rqaraa9aNdaJppuNdXSuL2bfYP.fYI9Q_uc6eV0rpXSuldK6V0rpXTWSy03Uz01O42121234nr4snnt044pr1s0zpmptlzrlcH2A--
18.156.93.177302 Found 0 B URL User Request GET HTTP/2 ztf.zetaframes.com/60d746ba-71b3-49b2-ae03-389749e9a3a1?campid=6195598&varid=88166950&source=flirtyneighbor.com&s1=ex03-1&zoneid=5094204&catid=508&ePOM={ePOM}&banner_id={banner_id}&a=14503&flow_id={flow_id}&tag=opddNHdLHTPHNVS4ASOqlupnlpdbbNXXdVK6aquyalzqpbXUzOodNU6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOTxNsenPng82gQVG7IDPU3Gbq6qrdaduNKLqrM7rqaraa9aNdaJppuNdXSuL2bfYP.fYI9Q_uc6eV0rpXSuldK6V0rpXTWSy03Uz01O42121234nr4snnt044pr1s0zpmptlzrlcH2A--
IP 18.156.93.177:443
Certificate IssuerLet's Encrypt
Subjectztf.zetaframes.com
Fingerprint0D:D5:F7:86:F2:D4:5A:A3:42:FE:35:1C:64:D8:5B:D4:4B:FB:07:77
ValidityFri, 10 Nov 2023 07:12:50 GMT - Thu, 08 Feb 2024 07:12:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /60d746ba-71b3-49b2-ae03-389749e9a3a1?campid=6195598&varid=88166950&source=flirtyneighbor.com&s1=ex03-1&zoneid=5094204&catid=508&ePOM={ePOM}&banner_id={banner_id}&a=14503&flow_id={flow_id}&tag=opddNHdLHTPHNVS4ASOqlupnlpdbbNXXdVK6aquyalzqpbXUzOodNU6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOTxNsenPng82gQVG7IDPU3Gbq6qrdaduNKLqrM7rqaraa9aNdaJppuNdXSuL2bfYP.fYI9Q_uc6eV0rpXSuldK6V0rpXTWSy03Uz01O42121234nr4snnt044pr1s0zpmptlzrlcH2A-- HTTP/1.1
Host: ztf.zetaframes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 20 Nov 2023 15:30:46 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://iwanttobealonenow.com/?a=14503&c=109363&s2=w49m9dfmo54a8n5tiv5budha&s3=ex03-1&s1=ex03-1&s4=VLS-w49m9dfmo54a8n5tiv5budha
pragma: no-cache
set-cookie: 60d746ba-71b3-49b2-ae03-389749e9a3a1-v4=hy1XH4aQs4cnEs_pKGSXDN4sAFgcjV0Ry01HVVPFoLU; Max-Age=86400; Expires=Tue, 21-Nov-2023 15:30:46 GMT; Domain=ztf.zetaframes.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=5urZLIaAM%2BkW3OenkQNqqyEjy7%2Bm30QfXPK99d8HGwHvb%2FTaOiJY%2B8i3Fu4d9itypkuZp2ilfXvpzQf7KMCqk9wiug%2FEFOnhOibJ8IjUQvzIN4f26BQW4vU7ELmIKfQ%2F3pRVGrkmn%2FzhpFpE5PDAuw%3D%3D; Max-Age=31536000; Expires=Tue, 19-Nov-2024 15:30:46 GMT; Domain=ztf.zetaframes.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
GET iwanttobealonenow.com/?a=14503&c=109363&s2=w49m9dfmo54a8n5tiv5budha&s3=ex03-1&s1=ex03-1&s4=VLS-w49m9dfmo54a8n5tiv5budha
3.33.186.253302 Found 0 B URL User Request GET HTTP/2 iwanttobealonenow.com/?a=14503&c=109363&s2=w49m9dfmo54a8n5tiv5budha&s3=ex03-1&s1=ex03-1&s4=VLS-w49m9dfmo54a8n5tiv5budha
IP 3.33.186.253:443
Certificate IssuerAmazon
Subjectiwanttobealonenow.com
Fingerprint29:86:9D:A6:99:19:BE:CD:1F:FE:92:BB:57:B6:96:03:4B:B0:F4:98
ValiditySun, 06 Aug 2023 00:00:00 GMT - Wed, 04 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?a=14503&c=109363&s2=w49m9dfmo54a8n5tiv5budha&s3=ex03-1&s1=ex03-1&s4=VLS-w49m9dfmo54a8n5tiv5budha HTTP/1.1
Host: iwanttobealonenow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 20 Nov 2023 15:30:46 GMT
content-length: 0
location: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
server: nginx/1.18.0
set-cookie: pt30=7da4d083028847db873b37a8aff44e19; Max-Age=2592000; Expires=Wed, 20-Dec-2023 15:30:46 GMT; Domain=iwanttobealonenow.com; Path=/; Secure; HttpOnly; SameSite=None
ptc=7da4d083028847db873b37a8aff44e19; Max-Age=157680000; Expires=Sat, 18-Nov-2028 15:30:46 GMT; Domain=iwanttobealonenow.com; Path=/; Secure; HttpOnly; SameSite=None
ptbs=7da4d083028847db873b37a8aff44e19; Domain=iwanttobealonenow.com; Path=/; Secure; HttpOnly; SameSite=None
ptr=pt4b62694b5d8d4353b7cc357af4e6138a; Max-Age=157680000; Expires=Sat, 18-Nov-2028 15:30:46 GMT; Domain=iwanttobealonenow.com; Path=/; Secure; HttpOnly; SameSite=None
X-Firefox-Spdy: h2
GET deiligenaboer.com/landers/js/ad-provider.js
34.117.126.88200 OK 512 B URL GET HTTP/3 deiligenaboer.com/landers/js/ad-provider.js
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
File type ASCII text, with very long lines (979)
Hash acd920e8f5657057e8003b79905c5266
cd96548060dbbc3f715cb81c3810d893eedec260
38b34bce7e5ad8268f51a16a6633c17923130b2fac9eeb6ceaca6beb50990681
GET /landers/js/ad-provider.js HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Nov 2023 14:52:47 GMT
server: nginx/1.14.2
content-type: application/javascript
last-modified: Mon, 20 Nov 2023 09:33:54 GMT
etag: "655b2802-3fb-gzip"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 52778740 53062506
age: 0
x-cache: HIT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
vary: Accept-Encoding
content-encoding: gzip
content-length: 512
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
GET deiligenaboer.com/landers/css/fontawesome-all.min.css
34.117.126.88200 OK 11 kB URL GET HTTP/3 deiligenaboer.com/landers/css/fontawesome-all.min.css
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
File type gzip compressed data, from Unix\012- data
Hash f6249a3d6c0f8b27bcbd929c936b0cb1
0859324096b6609bb044812d82219123ead4e4aa
239bd16992a40a2160783b69579b0d582139c02c0e1255aa9be9da2eefe6b67f
GET /landers/css/fontawesome-all.min.css HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Nov 2023 14:02:45 GMT
server: nginx/1.14.2
content-type: text/css
last-modified: Mon, 20 Nov 2023 09:33:41 GMT
etag: W/"655b27f5-c970"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 52996813 51311123
age: 0
x-cache: HIT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
GET www.deiligenaboer.com/favicon/apple-touch-icon-180x180.png
34.117.126.88404 Not Found 283 B URL GET HTTP/3 www.deiligenaboer.com/favicon/apple-touch-icon-180x180.png
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a222628f142aeaa70d6a339582d38957
3151490bf730c9e6d70d7e3c6f5bf69286807663
b4a0675f8ac567199071b8542ca380799f0fe5dacd7f22fdbdcc4a29d2e39aaa
GET /favicon/apple-touch-icon-180x180.png HTTP/1.1
Host: www.deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Mon, 20 Nov 2023 15:30:47 GMT
server: Apache/2.4.57 (Ubuntu)
content-length: 283
content-type: text/html; charset=iso-8859-1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET deiligenaboer.com/landers/css/landingp004.css
34.117.126.88200 OK 18 kB URL GET HTTP/3 deiligenaboer.com/landers/css/landingp004.css
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
File type gzip compressed data, from Unix\012- data
Hash e8674fd6be513b5222fe8b17b40c909f
cd262487ae07b466f520e5b657510103168ea175
648fd6079b6c4816a9a50bc56a779ad9b3ef2265fb0e1f22dbeab6fd82c043b8
GET /landers/css/landingp004.css HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Nov 2023 15:22:02 GMT
server: nginx/1.14.2
content-type: text/css;charset=UTF-8
x-powered-by: PHP/7.2.34
x-host: deiligenaboer.com
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 52759503 52221767
age: 0
x-cache: HIT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
GET www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
142.250.74.131200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://deiligenaboer.com
DNT: 1
Connection: keep-alive
Referer: https://deiligenaboer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Nov 2023 06:38:47 GMT
expires: Tue, 19 Nov 2024 06:38:47 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 31920
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.google.com/recaptcha/enterprise.js
142.250.74.164200 OK 191 kB URL GET HTTP/2 www.google.com/recaptcha/enterprise.js
IP 142.250.74.164:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type ASCII text, with very long lines (954)
Size 191 kB (191268 bytes)
Hash a2f2c9c0fa1d507a8987a96acd382651
d0595c15e6edc2eb0cf9fc00cb95cd482d1b8aca
1ccee212299f239f70d0523494d727445dc68da3b952c8cb245689a7e9f7c733
GET /recaptcha/enterprise.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deiligenaboer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Mon, 20 Nov 2023 15:30:46 GMT
date: Mon, 20 Nov 2023 15:30:46 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET samlesamtykke.com/cc.js?wId=1ZsmPYCLtU0ecstdnabWhm&domain=deiligenaboer.com&languageCode=nb&languageTerritory=NO&sessionId=9cfaae81fcf14c91985c8bf0f0a3d94c
35.195.163.35200 OK 14 kB URL GET HTTP/2 samlesamtykke.com/cc.js?wId=1ZsmPYCLtU0ecstdnabWhm&domain=deiligenaboer.com&languageCode=nb&languageTerritory=NO&sessionId=9cfaae81fcf14c91985c8bf0f0a3d94c
IP 35.195.163.35:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerLet's Encrypt
Subjectsamlesamtykke.com
FingerprintBA:50:17:9D:33:F1:6B:84:D1:8D:2B:E5:3E:FA:2E:85:0A:8D:EC:40
ValidityMon, 30 Oct 2023 19:14:51 GMT - Sun, 28 Jan 2024 19:14:50 GMT
Hash 98d9c50d32e5e244972877be25a0b100
eb13a5cff619d7bccb14d270f38e031eed2297a3
690fd13f7d58a96c3e163cd196f08927c6c72f8162ade4b46f0a69ff3e5e9fbb
GET /cc.js?wId=1ZsmPYCLtU0ecstdnabWhm&domain=deiligenaboer.com&languageCode=nb&languageTerritory=NO&sessionId=9cfaae81fcf14c91985c8bf0f0a3d94c HTTP/1.1
Host: samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deiligenaboer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Mon, 20 Nov 2023 15:30:47 GMT
content-type: application/javascript
content-length: 14203
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
GET deiligenaboer.com/landers/translations/nb-no2.json
34.117.126.88200 OK 218 kB URL GET HTTP/3 deiligenaboer.com/landers/translations/nb-no2.json
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (613)
Size 218 kB (217565 bytes)
Hash 6505c5b276168b445590c610362a03e5
16e7f1d164cbca5deb42f45147c46489a3106e69
cd7c5d4abe72ba25bdd975bba97fa428a1d56f3b49df4fd5b7e8b32bfffe084b
GET /landers/translations/nb-no2.json HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Nov 2023 14:59:40 GMT
server: UploadServer
x-guploader-uploadid: ABPtcPovKysXTJnvfJJhYFGCtbHr5cYlXfGcknYg1btHD1pvDqBggfm1YZ9jxkNeI0LAq22WTbyQirW085N1tFFfZw0gI2mnZ0FR
x-goog-generation: 1692107122792132
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 217565
x-goog-hash: crc32c=ySx7vw==, md5=ZQXFsnYWi0RVkMYQNioD5Q==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 217565
access-control-allow-origin: *
expires: Mon, 20 Nov 2023 15:59:40 GMT
cache-control: public, max-age=3600
age: 1867
last-modified: Tue, 15 Aug 2023 13:45:22 GMT
etag: "6505c5b276168b445590c610362a03e5"
content-type: application/json
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 google
GET deiligenaboer.com/landers/js/landingp004.js
34.117.126.88200 OK 140 kB URL GET HTTP/3 deiligenaboer.com/landers/js/landingp004.js
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
File type gzip compressed data, from Unix\012- data
Size 140 kB (139990 bytes)
Hash 560d3d56966a6180630a1099278aef00
d6353caf73c149dac75b93bcdfea14ddc8e6ebba
04ecd7e8c25d294dd89005745eda34a7458864e8413bfe4eff1a89396f5c5e28
GET /landers/js/landingp004.js HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Nov 2023 14:58:54 GMT
server: nginx/1.14.2
content-type: application/javascript
last-modified: Mon, 20 Nov 2023 09:33:54 GMT
etag: W/"655b2802-f0be"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 52415749 51478070
age: 0
x-cache: HIT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
GET www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
142.250.74.131200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly9kZWlsaWdlbmFib2VyLmNvbTo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=hrtrf8tdktym
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Nov 2023 06:38:47 GMT
expires: Tue, 19 Nov 2024 06:38:47 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/css
vary: Accept-Encoding
age: 31920
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET deiligenaboer.com/landers/images/prelanders/landingp004/default/default/slide04.jpg?geo=no
34.117.126.88200 OK 98 kB URL GET HTTP/3 deiligenaboer.com/landers/images/prelanders/landingp004/default/default/slide04.jpg?geo=no
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2004x1000, components 3\012- data
Hash 7e17427b95d9c8af56d2b8f43e6a6108
db73071e5c7000b873b2cf13d7b5e112c6765a07
6477548b85b85c155e6ffd048e06d88e9d4596d9e9ad491ff19471a2dc53ba8e
GET /landers/images/prelanders/landingp004/default/default/slide04.jpg?geo=no HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Nov 2023 15:30:47 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 97892
last-modified: Mon, 20 Nov 2023 09:33:42 GMT
etag: "655b27f6-17e64"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 52033183
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
GET www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
142.250.74.131200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Nov 2023 06:38:47 GMT
expires: Tue, 19 Nov 2024 06:38:47 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 31920
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.googletagmanager.com/gtm.js?id=GTM-KBRH6NB
142.250.74.168200 OK 66 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KBRH6NB
IP 142.250.74.168:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3026)
Hash 692e2a8683021f7e798b596633a797ff
16b00f1f987339ccfe5af51951ed8548e637f523
68b6a297be899d4901932a7dab542b7ac6888bc043b6f069ccc90acbf3256900
GET /gtm.js?id=GTM-KBRH6NB HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deiligenaboer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 20 Nov 2023 15:30:47 GMT
expires: Mon, 20 Nov 2023 15:30:47 GMT
cache-control: private, max-age=900
last-modified: Mon, 20 Nov 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 65751
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-QXFHHE16V3&l=dataLayer&cx=c
142.250.74.168200 OK 86 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-QXFHHE16V3&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash 9bc4e757ef4bcab1ce0d8484e18f26f5
6aa88cb5bbb7350a4214d64791fe094236aa3edf
8efd5fc743041b083bf2012fc842741ddddc38a4c214b68b35c2fecfddd420b4
GET /gtag/js?id=G-QXFHHE16V3&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deiligenaboer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 20 Nov 2023 15:30:48 GMT
expires: Mon, 20 Nov 2023 15:30:48 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85932
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly9kZWlsaWdlbmFib2VyLmNvbTo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=hrtrf8tdktym
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 23:23:18 GMT
expires: Fri, 15 Nov 2024 23:23:18 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 317250
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly9kZWlsaWdlbmFib2VyLmNvbTo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=hrtrf8tdktym
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 23:26:09 GMT
expires: Fri, 15 Nov 2024 23:26:09 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 317079
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
142.250.74.131200 OK 191 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (563)
Size 191 kB (190682 bytes)
Hash 23b9dd721490a4062ba8d01454ef6ba9
efdbb7331585411f7d397dacbf51fd3e95f3031d
4970c7161d03503a3eb5ec49e4190a03445c50cd5a9081714bd13183d2d948a7
GET /recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 190682
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Nov 2023 06:38:47 GMT
expires: Tue, 19 Nov 2024 06:38:47 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Nov 2023 05:42:11 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 31921
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.gstatic.com/recaptcha/api2/logo_48.png
142.250.74.131200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly9kZWlsaWdlbmFib2VyLmNvbTo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=hrtrf8tdktym
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Nov 2023 23:42:11 GMT
expires: Mon, 20 Nov 2023 23:42:11 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 575317
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET samlesamtykke.com/cc.css
35.195.163.35200 OK 3.9 kB IP 35.195.163.35:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerLet's Encrypt
Subjectsamlesamtykke.com
FingerprintBA:50:17:9D:33:F1:6B:84:D1:8D:2B:E5:3E:FA:2E:85:0A:8D:EC:40
ValidityMon, 30 Oct 2023 19:14:51 GMT - Sun, 28 Jan 2024 19:14:50 GMT
File type assembler source, ASCII text
Hash ddb6776d9e0b9844c9f57355d7492805
da918eb4fefa9d625e5858496c2c4a20ad893619
9ec88cf72960048a40791a943e5dee85f910c00e9a3732339888b075de11bc34
GET /cc.css HTTP/1.1
Host: samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deiligenaboer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Mon, 20 Nov 2023 15:30:48 GMT
content-type: text/css
content-length: 3892
last-modified: Thu, 15 Oct 2020 08:07:25 GMT
etag: "6073-5b1b123761e40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
POST api.samlesamtykke.com/consent/collector
35.195.163.35200 OK 0 B URL POST HTTP/2 api.samlesamtykke.com/consent/collector
IP 35.195.163.35:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerLet's Encrypt
Subjectsamlesamtykke.com
FingerprintBA:50:17:9D:33:F1:6B:84:D1:8D:2B:E5:3E:FA:2E:85:0A:8D:EC:40
ValidityMon, 30 Oct 2023 19:14:51 GMT - Sun, 28 Jan 2024 19:14:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /consent/collector HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://deiligenaboer.com/
Origin: https://deiligenaboer.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Mon, 20 Nov 2023 15:30:48 GMT
content-type: application/vnd.api+json
content-length: 0
access-control-allow-origin: https://deiligenaboer.com
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-allow-headers: content-type
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
POST api.samlesamtykke.com/consent/collector
35.195.163.35200 OK 4.6 kB URL POST HTTP/2 api.samlesamtykke.com/consent/collector
IP 35.195.163.35:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerLet's Encrypt
Subjectsamlesamtykke.com
FingerprintBA:50:17:9D:33:F1:6B:84:D1:8D:2B:E5:3E:FA:2E:85:0A:8D:EC:40
ValidityMon, 30 Oct 2023 19:14:51 GMT - Sun, 28 Jan 2024 19:14:50 GMT
File type JSON data\012- , ASCII text, with very long lines (4641), with no line terminators
Hash 2341a4a7565efc7753db429b843d78e6
d00081c54e501024e722503f7bf203fcccc00830
14bdc58e9bc802159e8acff442f74b72fdcd6434c532768a733942292aaaf5c7
POST /consent/collector HTTP/1.1
Host: api.samlesamtykke.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 169
Origin: https://deiligenaboer.com
DNT: 1
Connection: keep-alive
Referer: https://deiligenaboer.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.10.3 (Ubuntu)
date: Mon, 20 Nov 2023 15:30:48 GMT
content-type: application/vnd.api+json
content-length: 4641
access-control-allow-origin: https://deiligenaboer.com
access-control-allow-credentials: true
strict-transport-security: max-age=63072000;
x-content-type-options: nosniff
X-Firefox-Spdy: h2
GET deiligenaboer.com/landers/images/prelanders/landingp004/default/default/slide05.jpg?geo=no
34.117.126.88200 OK 83 kB URL GET HTTP/3 deiligenaboer.com/landers/images/prelanders/landingp004/default/default/slide05.jpg?geo=no
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2004x1252, components 3\012- data
Hash a03da38f72078cba872bdcd2ff26d472
9d3229bf85acb3f55fb08a3f9eae5443ee8a131e
58e81dabdb6580eb989a433f2c64ef6600cace66fefb68b054be5eff737b9986
GET /landers/images/prelanders/landingp004/default/default/slide05.jpg?geo=no HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
DNT: 1
Connection: keep-alive
Cookie: _ga_QXFHHE16V3=GS1.1.1700494249.1.0.1700494249.0.0.0; _ga=GA1.1.1323538175.1700494250
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 20 Nov 2023 15:30:52 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 83091
last-modified: Mon, 20 Nov 2023 09:33:42 GMT
etag: "655b27f6-14493"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 52060546
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
GET deiligenaboer.com/landers/media-registry.js
34.117.126.88200 OK 120 kB URL GET HTTP/3 deiligenaboer.com/landers/media-registry.js
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 120 kB (120229 bytes)
Hash 1cd0e45319b1d3acb027d9cde7d0096e
e9fd954b965c307cba1f8710dd8173f001dff217
788ef58600848adefc2ab25f9349dc6fdfac5d5d086ad3d5f6cac675533bacce
GET /landers/media-registry.js HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Nov 2023 14:58:56 GMT
server: UploadServer
x-guploader-uploadid: ABPtcPqQf6Sd1DvYGH5o020fKd5GykQ-4bDc9Bsa8znwo9NHaBfWSaaTR-aCapsyC0KqZLnvofvcgbSc61IdxfJQu7pVuhOMDvKy
x-goog-generation: 1700214909523888
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 120229
x-goog-hash: crc32c=OkdWKw==, md5=HNDkUxmx06ywJ9nN59AJbg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
access-control-allow-origin: *
expires: Mon, 20 Nov 2023 15:58:56 GMT
cache-control: public, max-age=3600
age: 1911
last-modified: Mon, 20 Nov 2023 09:36:15 GMT
etag: "1cd0e45319b1d3acb027d9cde7d0096e-gzip"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
vary: Accept-Encoding
content-encoding: gzip
via: 1.1 google
GET www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly9kZWlsaWdlbmFib2VyLmNvbTo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=hrtrf8tdktym
142.250.74.164200 OK 61 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly9kZWlsaWdlbmFib2VyLmNvbTo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=hrtrf8tdktym
IP 142.250.74.164:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (52177)
Hash 3db2f1e2d78d31102946d6ec2092304d
18fbde582878c7effe6ef9bd2204ff0bf10d036a
f6b8f40fd2777c4a91aea60566d0286b3659aefa5bb16882010c8d5c6fa758b1
GET /recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly9kZWlsaWdlbmFib2VyLmNvbTo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=hrtrf8tdktym HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deiligenaboer.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 20 Nov 2023 15:30:47 GMT
content-security-policy: script-src 'nonce-aOz3ecUkYeKwfEKqPxpP3Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET deiligenaboer.com/landers/images/prelanders/landingp004/default/default/slide06.jpg?geo=no
34.117.126.88200 OK 123 kB URL GET HTTP/3 deiligenaboer.com/landers/images/prelanders/landingp004/default/default/slide06.jpg?geo=no
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2004x1252, components 3\012- data
Size 123 kB (122688 bytes)
Hash 6c14bd2627b18c52370ca1d1f25e394b
ed0dd124cbbfa1910c63cbf5e879d8cc62ed9955
3ef80b4201c22da3181814858bd10676404f61173d20717b42f9faccc9a1a236
GET /landers/images/prelanders/landingp004/default/default/slide06.jpg?geo=no HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Nov 2023 15:29:45 GMT
server: nginx/1.14.2
content-type: image/jpeg
content-length: 122688
last-modified: Mon, 20 Nov 2023 09:33:42 GMT
etag: "655b27f6-1df40"
x-cacheable: YES
cache-control: max-age=300
xkey: lander
x-varnish: 52341074 52212492
age: 0
x-cache: HIT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
GET www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
142.250.74.164200 OK 102 B URL GET HTTP/3 www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed
IP 142.250.74.164:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly9kZWlsaWdlbmFib2VyLmNvbTo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=hrtrf8tdktym
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with no line terminators
Hash b581f6e6ac7eb4d572233bdd384918f8
12a90cd14cfea2286982801538560f638670eaff
b62f36160407c81030404ab242125afd42fa0da6626ef11e5f406dda12acf144
GET /recaptcha/enterprise/webworker.js?hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s&co=aHR0cHM6Ly9kZWlsaWdlbmFib2VyLmNvbTo0NDM.&hl=en&v=-QbJqHfGOUB8nuVRLvzFLVed&size=invisible&cb=hrtrf8tdktym
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Mon, 20 Nov 2023 15:30:48 GMT
date: Mon, 20 Nov 2023 15:30:48 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET deiligenaboer.com/landers/css/vegas.min.css
34.117.126.88200 OK 12 kB URL GET HTTP/3 deiligenaboer.com/landers/css/vegas.min.css
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
Hash b8abc72c16479198c206a456a02f1dca
d704f7acb4b8daf00787d4ba4f6e33b26be2a28c
a8d530eff57d706b6469ac6bdc3ce13cbfaecc832792ad7a102b19e156632fe1
GET /landers/css/vegas.min.css HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Nov 2023 14:16:04 GMT
server: nginx/1.14.2
content-type: text/css
last-modified: Mon, 20 Nov 2023 09:33:41 GMT
etag: W/"655b27f5-2e20"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 51733055 51247573
age: 0
x-cache: HIT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
GET www.google.com/recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s
142.250.74.164200 OK 974 B URL GET HTTP/2 www.google.com/recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s
IP 142.250.74.164:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type ASCII text, with very long lines (974), with no line terminators
Hash f660a3882e94be80bb88bd6526c059ea
cf11f180df5543ad0ccdada23c1b2993a2465e3c
8addeff1b3d7be7aaa8ee5f3e5f41609cd7493ac9dfc8fcfb15a4b92d98975b5
GET /recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deiligenaboer.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Mon, 20 Nov 2023 15:30:46 GMT
date: Mon, 20 Nov 2023 15:30:46 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET deiligenaboer.com/landers/js/vendor.js
34.117.126.88200 OK 124 kB URL GET HTTP/3 deiligenaboer.com/landers/js/vendor.js
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
Size 124 kB (123566 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /landers/js/vendor.js HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Nov 2023 14:54:05 GMT
server: nginx/1.14.2
content-type: application/javascript
last-modified: Mon, 20 Nov 2023 09:33:54 GMT
etag: W/"655b2802-1e2ae"
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 52996815 52649909
age: 0
x-cache: HIT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
GET deiligenaboer.com/landers/css/theme/pornhub.css
34.117.126.88200 OK 15 kB URL GET HTTP/3 deiligenaboer.com/landers/css/theme/pornhub.css
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
Hash 5cc040aacb13e38492b7e20f49ad4a36
3afdef08502ab8adef4972ba67dd49980a6c9ad5
a94fd985952baae36ceca33c8b67e739f7355cf4688a4adfe31e0be31963ef74
GET /landers/css/theme/pornhub.css HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Nov 2023 14:17:50 GMT
server: nginx/1.14.2
content-type: text/css;charset=UTF-8
x-powered-by: PHP/7.2.34
x-host: deiligenaboer.com
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 52756123 53150655
age: 0
x-cache: HIT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
GET deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
34.117.126.88200 OK 18 kB URL User Request GET HTTP/2 deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
IP 34.117.126.88:443
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2091)
Hash fadae4f5e202b775e190d9432017137b
2ee19c968e06b198e621020d9a9418243aa40b3a
6aefa95ec9db46d24ffb58ee4906b66ebf94318a4617d9746a2dff3e814825d6
GET /landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1 HTTP/1.1
Host: deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 20 Nov 2023 15:30:46 GMT
server: nginx/1.14.2
content-type: text/html;charset=UTF-8
x-powered-by: PHP/7.2.34
x-host: deiligenaboer.com
content-encoding: gzip
x-cacheable: YES
cache-control: max-age=300
xkey: lander
vary: Accept-Encoding
x-varnish: 52856830
age: 0
x-cache: MISS
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google
X-Firefox-Spdy: h2
GET www.deiligenaboer.com/favicon/favicon.ico
34.117.126.88200 OK 15 kB URL GET HTTP/3 www.deiligenaboer.com/favicon/favicon.ico
IP 34.117.126.88:443
Requested by https://deiligenaboer.com/landing4pre?gtl=60&pi=14503&pt1=pt4b62694b5d8d4353b7cc357af4e6138a&pe=ex03-1
Certificate IssuerGoogle Trust Services LLC
Subjectapi.deiligenaboer.com
Fingerprint82:18:D7:2E:56:07:8E:89:99:3D:A9:39:51:B7:28:3F:0A:2B:A8:4C
ValidityFri, 20 Oct 2023 21:58:15 GMT - Thu, 18 Jan 2024 22:51:28 GMT
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 4dd420146b8d36b5c4c55127619abab3
46afa76598f3d0642177e0479bf87b4423aa1a8c
f0f8afcc4674feea15d5539af6d7f5a7cdcbf03daf1470102edc08c471b3235f
GET /favicon/favicon.ico HTTP/1.1
Host: www.deiligenaboer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://deiligenaboer.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 20 Nov 2023 15:30:47 GMT
server: Apache/2.4.57 (Ubuntu)
vary: X-Forwarded-Proto
last-modified: Thu, 16 Nov 2023 12:30:37 GMT
etag: "3aee-60a442fddb4ad"
accept-ranges: bytes
content-length: 15086
x-ua-compatible: IE=edge,chrome=1
content-type: image/vnd.microsoft.icon
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000