Overview

URL https://goo.gl/a3JQU4
IP172.217.22.174
ASNAS15169 Google Inc.
Location United States
Report completed2017-10-13 02:42:15 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.217.22.174

Date UQ / IDS / BL URL IP
2017-12-16 15:03:46 +0100
0 - 0 - 0 https://www.youtube.com/yts/cssbin/player-vfl (...) 172.217.22.174
2017-12-14 12:43:08 +0100
0 - 0 - 0 https://www.youtube.com/edit?o=U&video_id=zQO (...) 172.217.22.174
2017-12-13 16:21:40 +0100
0 - 0 - 0 www.youtube.com/watch?v=iz3jbEvLZ2w 172.217.22.174
2017-12-13 14:25:46 +0100
0 - 0 - 0 www.youtube.com/watch?v=ez4CIeIlYQY 172.217.22.174
2017-12-12 22:17:55 +0100
0 - 0 - 0 www.youtube.com/embed/7LXbW9TwR7c?wmode=trans (...) 172.217.22.174
2017-12-12 22:14:25 +0100
0 - 0 - 0 www.youtube.com/embed/7LXbW9TwR7c?wmode=trans (...) 172.217.22.174
2017-12-08 08:38:31 +0100
0 - 0 - 0 www.youtube.com/watch?v=1oYmLjVrkCY 172.217.22.174
2017-12-06 20:37:55 +0100
0 - 0 - 0 https://www.youtube.com/yts/cssbin/www-pagefr (...) 172.217.22.174
2017-12-06 04:45:32 +0100
0 - 0 - 2 https://goo.gl/x48jQf 172.217.22.174
2017-12-05 21:48:21 +0100
0 - 0 - 0 https://goo.gl/k4qgbq 172.217.22.174

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2017-12-17 11:00:03 +0100
0 - 0 - 2 boy-creative.blogspot.com/p/sastra.htm 216.58.211.129
2017-12-17 10:56:14 +0100
0 - 0 - 2 boy-creative.blogspot.com/p/drama.htm 216.58.211.129
2017-12-17 10:50:41 +0100
0 - 1 - 0 www.tunjuklangit2u.com/p/kopi-tunjuk-langit-p (...) 216.239.32.21
2017-12-17 10:38:01 +0100
0 - 0 - 1 www.malaysiasensasi.net/2014/02/eksklusif-bek (...) 216.58.211.147
2017-12-17 10:21:03 +0100
0 - 0 - 3 ahosharing.blogspot.com/2015/05/cara-memperce (...) 216.58.211.129
2017-12-17 09:58:30 +0100
0 - 0 - 5 sharfiles.com/fetch/MS0yMDAwMC0xMzkwNjY1ODkwL (...) 146.148.34.125
2017-12-17 09:49:52 +0100
0 - 2 - 0 afacgr.com/ 23.236.62.147
2017-12-17 09:37:43 +0100
0 - 0 - 4 tribunadeitapetinga2.com.br/ 216.239.36.21
2017-12-17 09:36:33 +0100
0 - 0 - 4 community.idealwebtech.com/index.php?s=adf1aa (...) 146.148.45.143
2017-12-17 09:36:15 +0100
0 - 1 - 0 dtrung.ga/ 104.155.214.79

Last 10 reports on domain: goo.gl

Date UQ / IDS / BL URL IP
2017-12-17 07:56:39 +0100
0 - 0 - 1 https://goo.gl/bGi64x 216.58.211.142
2017-12-17 07:25:13 +0100
0 - 0 - 0 https://goo.gl/fmxuXF?KRHySA 216.58.211.142
2017-12-17 07:24:04 +0100
0 - 0 - 0 https://goo.gl/9m4imd 216.58.211.142
2017-12-17 06:30:56 +0100
0 - 0 - 0 https://goo.gl/qMTjYE 216.58.211.142
2017-12-16 20:40:08 +0100
0 - 0 - 0 https://goo.gl/eoM4Tm 216.58.211.142
2017-12-16 20:18:25 +0100
0 - 0 - 1 https://goo.gl/ffdwFE 216.58.211.142
2017-12-16 20:12:45 +0100
0 - 0 - 0 https://goo.gl/swGBpu 216.58.211.142
2017-12-16 18:29:02 +0100
0 - 0 - 0 https://goo.gl/npMvVi 216.58.211.142
2017-12-16 16:39:47 +0100
0 - 0 - 0 https://goo.gl/vzFEiS?E 216.58.211.142
2017-12-16 16:28:29 +0100
0 - 0 - 0 https://goo.gl/5Gf3DM 216.58.211.142


JavaScript

Executed Scripts (32)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (94)


Request Response
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 00:41:40 GMT
Expires: Tue, 17 Oct 2017 00:41:40 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    00c53ce7aff5a785b677068b7cc8a741
Sha1:   6f33c2f4dc6324126f89a279b631f4a38320cc67
Sha256: 5242b0843cb5b8705251e7af36ba30113032d64f774edbb396939f70bc05f314
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=345311, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Oct 2017 00:34:08 GMT
Expires: Tue, 17 Oct 2017 00:34:08 GMT
Date: Fri, 13 Oct 2017 00:41:40 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    fccd40351d25d6f5eecda73fdef9b3d8
Sha1:   0d2d2f37814bb53b7dca796acc9ee278ef6297ba
Sha256: 23e276d6aa20791de9110019cb7992bae490040d4cc3a06678449d1b3f2063e4
                                        
                                            GET /aff_c?offer_id=630&aff_id=1008&aff_sub=MartinMind HTTP/1.1 
Host: www.gofadeafish.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.208.119.205
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Cache-Control: no-cache, no-store, must-revalidate
Date: Fri, 13 Oct 2017 00:41:40 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: http://r.trackmethod.co/aff_c?offer_id=1140&aff_id=1432&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&entity=mediade2
P3P: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Server: nginx/1.11.8
Set-Cookie: enc_aff_session_630=ENC037da069b83e311d4d1df81f954a367ad6772b40a6285bdf6b9807afb56b306df968cd384129e4001c2d51edda4941e7024a1d2206ff09cd53e7fd515e161b6b1542037c12be86fa91a2a6809f00251e09935516b148769f8f7ac48fcb1b2895018155994819bb7f2f1d9a702c137b966ff138572e0919f0e326ac6fe9460348b209df9de1; expires=Mon, 13 Nov 2017 00:41:40 GMT; path=/; ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIzLjAiLCJtb2JpbGVfY2FycmllciI6Ij8iLCJ1c2VyX2FnZW50IjoiTW96aWxsYS81LjAgKFdpbmRvd3M7IFU7IFdpbmRvd3MgTlQgNi4xOyBFbi1VUzsgUnY6MS45LjIuMTMpIEdlY2tvLzIwMTAxMjAzIEZpcmVmb3gvMy42LjEzIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tdXMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoieGRzbCJ9; expires=Sun, 06 Sep 2020 11:21:40 GMT; path=/;
tracking_id: 1025d4fde0679e2531a8374fbecc50
X-Robots-Tag: noindex, nofollow
Content-Length: 324
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   324
Md5:    0d6a97935796566559bbe3953f685404
Sha1:   c3efa444c4b81ace2fa6d12e45c41377fd1c0a1f
Sha256: 2f60c4de28649b7c9e9b38ad7ef1a5cd18093ec26272cfa68a65b42082ca6238
                                        
                                            GET /aff_c?offer_id=1140&aff_id=1432&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&entity=mediade2 HTTP/1.1 
Host: r.trackmethod.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.48.172.184
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Cache-Control: no-cache, no-store, must-revalidate
Date: Fri, 13 Oct 2017 00:41:41 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: http://mediaroi.go2cloud.org/aff_r?offer_id=532&aff_id=1432&url=http%3A%2F%2Fnorwegianmethod.com%2Findex2.php%3Foffer_id%3D532%26aff_id%3D1432%26transaction_id%3D1023619a8986d000e5666e45bd759e%26country_code%3DNO%26aff_sub%3D1025d4fde0679e2531a8374fbecc50%26aff_sub2%3D1008%26aff_sub3%3D%26aff_sub4%3D%26goal_id%3D712%26xparam%3Dnorwegianmethod.com%26entity%3Dmediade2&urlauth=607519253580116787619769437506
P3P: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Server: nginx/1.11.8
Set-Cookie: enc_aff_session_532=ENC03d8401c38456f6339d4af9e3e1497a5e5ef617ea85f048a636b8c852e92757e9832928e0e1ea6eadb37026d3079127b1681ee455e9e03bb17669f8610d2eb7d76da651b34b05cdb68e372183aa2459de4ef562c2dd212413b1ba6f0371ce6e09ed65d33508279fd18d8de3895cf362617f87e2b8eda9c49250f851a934afb4539309b5f36828c1c154b7508ed3b0317b504fa6321; expires=Sat, 13 Oct 2018 00:41:41 GMT; path=/; ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIzLjAiLCJtb2JpbGVfY2FycmllciI6Ij8iLCJ1c2VyX2FnZW50IjoiTW96aWxsYS81LjAgKFdpbmRvd3M7IFU7IFdpbmRvd3MgTlQgNi4xOyBFbi1VUzsgUnY6MS45LjIuMTMpIEdlY2tvLzIwMTAxMjAzIEZpcmVmb3gvMy42LjEzIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tdXMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoieGRzbCJ9; expires=Sun, 06 Sep 2020 11:21:41 GMT; path=/;
tracking_id: 1023619a8986d000e5666e45bd759e
X-Robots-Tag: noindex, nofollow
Content-Length: 603
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   817
Md5:    8b78512d60367c72d886cc40e2f4d004
Sha1:   b0542248f66c27410e65e7f44f09018350e92dd7
Sha256: 7f906f2f28ec132260c5fcb0a95b8ea396cf3052ea83033968188ab64f879387
                                        
                                            GET /aff_r?offer_id=532&aff_id=1432&url=http%3A%2F%2Fnorwegianmethod.com%2Findex2.php%3Foffer_id%3D532%26aff_id%3D1432%26transaction_id%3D1023619a8986d000e5666e45bd759e%26country_code%3DNO%26aff_sub%3D1025d4fde0679e2531a8374fbecc50%26aff_sub2%3D1008%26aff_sub3%3D%26aff_sub4%3D%26goal_id%3D712%26xparam%3Dnorwegianmethod.com%26entity%3Dmediade2&urlauth=607519253580116787619769437506 HTTP/1.1 
Host: mediaroi.go2cloud.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         34.253.150.26
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Cache-Control: no-cache, no-store, must-revalidate
Date: Fri, 13 Oct 2017 00:41:41 GMT
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Pragma: no-cache
Server: nginx/1.11.8
Content-Length: 476
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   476
Md5:    86a48da09b4b4c85ad8d069db7615877
Sha1:   0f6c20bf798fd71428b29bf937ae18c8d889d9c0
Sha256: ac621e04f8caa01cc715e7968241b59ce66af36441296acc5424da8e93cd917f
                                        
                                            GET /css/styles.css?v=2 HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 13 Oct 2017 00:41:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"1001d8-1711-5414c3c7258c0"
Last-Modified: Tue, 15 Nov 2016 00:42:51 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:41 GMT
Cache-Control: public, max-age=14400
Server: cloudflare-nginx
CF-RAY: 3ace4134d31d429d-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1685
Md5:    5741b9b52026689408e3c9591b2e637e
Sha1:   b4a7e1388d2563b63276ec50ec0dbbdb3dc06d4b
Sha256: ebdb58d7f88bf8640e1a8326f9f32546a2394af384809569fbdc5a7b9320ad27
                                        
                                            GET /css/bootstrap.min.css HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 13 Oct 2017 00:41:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"1001d9-2f48-53e96ce8e44c0"
Last-Modified: Tue, 11 Oct 2016 13:25:15 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:41 GMT
Cache-Control: public, max-age=14400
Server: cloudflare-nginx
CF-RAY: 3ace4134d1844291-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2802
Md5:    4486e7ddde4914cfd6871a70e055b6cc
Sha1:   89b6a1ff7728567d78ae90bce1dd396dd58b730f
Sha256: 542ac12efa09ea0628c409a4896f4c1a0de4dea06a54bffeb05948fa9e8ea050
                                        
                                            GET /css/loading-bar.css?v=3 HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 13 Oct 2017 00:41:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"100ff5-4d0a-54083588bbe80"
Last-Modified: Sat, 05 Nov 2016 01:02:34 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:41 GMT
Cache-Control: public, max-age=14400
Server: cloudflare-nginx
CF-RAY: 3ace4134d31e429d-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1993
Md5:    c954d3eecb36ee70b81bb9425dcb1f9d
Sha1:   e0196bd6a92533c624be645bddf1c3857fae6f7c
Sha256: 4632770e14a8e37e54df72ed246a23ac2b81baf93d2f684cbe81ccb418cb7487
                                        
                                            GET /images/no/logo_mobile.jpg?v=4 HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:41 GMT
Content-Length: 8361
Connection: keep-alive
Etag: "100ae8-20a9-53e96cf830500"
Last-Modified: Tue, 11 Oct 2016 13:25:31 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:41 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135272e4267-OSL


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   8361
Md5:    335c8181f0f7242f1dcd5b275a9d4277
Sha1:   9a620cfff1f717a6f0a74a072de782a0d1f9c304
Sha256: f472c27b1801fe0d3ed541d89f5ca09c1421a5cb306f62ab0268b17aba8abee3
                                        
                                            GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         172.217.22.170
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 29671
Date: Tue, 29 Aug 2017 09:16:25 GMT
Expires: Wed, 29 Aug 2018 09:16:25 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 3857116


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29671
Md5:    d925f4bdec27610355b02111fad2fdae
Sha1:   fe7b99d339d5f730c315a74c7b97f10cb20546dd
Sha256: 580cd63e934673fe91827c613189a04bc82d7e23f41e9c3277a578c3cd0c022c
                                        
                                            GET /images/no/author.jpg?v=4 HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:41 GMT
Content-Length: 23105
Connection: keep-alive
Etag: "100ae5-5a41-53e96cf75ce30"
Last-Modified: Tue, 11 Oct 2016 13:25:30 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:41 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135118c4291-OSL


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   23105
Md5:    1e26d0e953360241b44fe10247feb3aa
Sha1:   7d5b4ac92dbebf8d934d25e7ef29e6a08ae5b152
Sha256: 37f998fc46d0242c2ace192cfc034598a78f3637b85800cf0c7671dc8c1f3e83
                                        
                                            GET /images/no/hey.png HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 00:41:41 GMT
Content-Length: 79882
Connection: keep-alive
Etag: "100ae1-1380a-53e96cf699930"
Last-Modified: Tue, 11 Oct 2016 13:25:29 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:41 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace413537334267-OSL


--- Additional Info ---
Magic:  PNG image, 921 x 520, 8-bit colormap, non-interlaced
Size:   79882
Md5:    80dd290253fd15e9a35efb8ec2c4882e
Sha1:   5a4ddeab84b50d54ef72347dbc319aeaa2ea6fe1
Sha256: 6cf7f8a96376a71c314028bc843a39a3174d90f0da8de2401a39b4c14d78e019
                                        
                                            GET /images/no/iphone.png?ver=2 HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 00:41:41 GMT
Content-Length: 79649
Connection: keep-alive
Etag: "100ae2-13721-53e96cf8097e8"
Last-Modified: Tue, 11 Oct 2016 13:25:30 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:41 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace413551924291-OSL


--- Additional Info ---
Magic:  PNG image, 921 x 523, 8-bit colormap, non-interlaced
Size:   79649
Md5:    ccabd4b2e27abc5aa0066b1d42f26dc7
Sha1:   5842d4414a0f907fc9aad59238177db0f64d3be5
Sha256: 5b7b84c7bfe83910735d443b943e0570b623474987b5cfbe202964b3cefb41bf
                                        
                                            GET /images/user1.jpg HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 4021
Connection: keep-alive
Etag: "100abe-fb5-53e96ce2f9a60"
Last-Modified: Tue, 11 Oct 2016 13:25:08 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135919b4291-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4021
Md5:    5026f6b853bb91f90ad34b420aa44b00
Sha1:   6d09c2cd9f61b171df439997fdc670c24b0e9850
Sha256: 44644e2f682319207a39a929b14eca301a8bfc52b06d908ae1d6473618f9668c
                                        
                                            GET /images/fb.png HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 00:41:41 GMT
Content-Length: 18992
Connection: keep-alive
Etag: "100ab7-4a30-53e96ce018968"
Last-Modified: Tue, 11 Oct 2016 13:25:05 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:41 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135773b4267-OSL


--- Additional Info ---
Magic:  PNG image, 330 x 70, 8-bit/color RGBA, non-interlaced
Size:   18992
Md5:    37fcd9b728db92816f209b4e867f8c6f
Sha1:   094fba2ff684e2637ae4962a50762d5150a0cff7
Sha256: 58d925e9e9bf842594c4ebe8a1883eed48ecd5ec4ac6cf87171952972eaa9555
                                        
                                            GET /images/user2.jpg HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 3811
Connection: keep-alive
Etag: "100abf-ee3-53e96ce312cb8"
Last-Modified: Tue, 11 Oct 2016 13:25:08 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135919e4291-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3811
Md5:    f1a00d5f6bcf56b3e65eafd9f8a4e64c
Sha1:   d9257eba7bc4eca9225a721a4ed08a472dc0885e
Sha256: 3037dc7d74981bfc8abb042160e63d22b15c83588ae216c98a6f4e1e001cfac7
                                        
                                            GET /images/user4.jpg HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 4068
Connection: keep-alive
Etag: "100ac5-fe4-53e96ce4a65c0"
Last-Modified: Tue, 11 Oct 2016 13:25:10 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135a1a04291-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4068
Md5:    95e2a048942e756af443996d2f56a315
Sha1:   0197103c81dd90663498326f73f7048dd967efc1
Sha256: aabcdad6ad729b08dee17847c56e8e76f9c92c690f1e8cd15d87c597f8775a3a
                                        
                                            GET /images/user3.jpg HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 3901
Connection: keep-alive
Etag: "100ac0-f3d-53e96ce33bcf8"
Last-Modified: Tue, 11 Oct 2016 13:25:09 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135a7474267-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3901
Md5:    c91ac7f646f4a1bc4f1c539d756a4551
Sha1:   0e6228adf35d8514fa9d58ddb744e324ac9353e8
Sha256: 09935615109c34799e570ee6ffbcede2bc5d850d5b8c706f2e0d0696ad88350f
                                        
                                            GET /images/user5.jpg HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 3493
Connection: keep-alive
Etag: "100ac1-da5-53e96ce366c78"
Last-Modified: Tue, 11 Oct 2016 13:25:09 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135b74a4267-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3493
Md5:    84e56af6c35ae6f3c5f7918def1375c7
Sha1:   51e8671b21c7ee946206df2095e587840bd19aa6
Sha256: 0392d16ea79567bb35e26ef6fd60960117b4d1ae30b876800b5ed819c63b39a5
                                        
                                            GET /images/twt.png HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 4989
Connection: keep-alive
Etag: "100abd-137d-53e96ce2ab860"
Last-Modified: Tue, 11 Oct 2016 13:25:08 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135b1a34291-OSL


--- Additional Info ---
Magic:  PNG image, 330 x 70, 8-bit/color RGBA, non-interlaced
Size:   4989
Md5:    816dede85bbba941cd629065da2d8dbb
Sha1:   70ff24c5ff1fd5fc50963e5e96cf4d6a7e359e68
Sha256: f4d9cd1ac78130a7312611e0689f1c1dfd21b969b48f9d9d07e85437262ff6e6
                                        
                                            GET /images/user6.jpg HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 4571
Connection: keep-alive
Etag: "100ac4-11db-53e96ce4e1af8"
Last-Modified: Tue, 11 Oct 2016 13:25:10 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135b74d4267-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4571
Md5:    ce7633dc13e68acaeeb42fd545a10937
Sha1:   d65cf9da98a356704ebdd5e2300c1e51c36f4f3b
Sha256: b563001cd8da0c5fdfcd4d67fbc2da3e3443b3416715cb0d463afabb057f28cf
                                        
                                            GET /images/user7.jpg HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 2867
Connection: keep-alive
Etag: "100ac2-b33-53e96ce46fea8"
Last-Modified: Tue, 11 Oct 2016 13:25:10 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135c1a64291-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2867
Md5:    c631e738531c70c49e76bd610061f89e
Sha1:   babfd0bf4db7b47c587fa6c1c48808be7602cfa7
Sha256: 0138c4ac4de5ed65a58c396b8c54be684fd634541ce39423878fb348aa9684f4
                                        
                                            GET /images/user8.jpg HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 5023
Connection: keep-alive
Etag: "100ac3-139f-53e96ce488930"
Last-Modified: Tue, 11 Oct 2016 13:25:10 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135c7504267-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5023
Md5:    58953421567065ea326161b20e8d3eb1
Sha1:   65842f2a2a7d07336eef2c2184fdd07775094f71
Sha256: 6b5634ed399b8bfc812b1ec38fc534585ee198839a14937c0f3ccb801db0fb4e
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Expires: Tue, 17 Oct 2017 00:41:42 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    e7bac3d0e71b2c79e04d4385fae30af0
Sha1:   4cbd66ee4d86b33ac497bde7e7d1cda767db5dc2
Sha256: bdad376aa4ed42be546c318f8d650108339a350fa37454a4b06d0728baaec563
                                        
                                            GET /images/no/logo.jpg?v=4 HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:41 GMT
Content-Length: 22258
Connection: keep-alive
Etag: "100ae3-56f2-53e96cf6ad980"
Last-Modified: Tue, 11 Oct 2016 13:25:29 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:41 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace41351327429d-OSL


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   22258
Md5:    0e32b141f71c1c791cbeb661ecc3c7b7
Sha1:   b2d1e020e4831cfa2763d9bba4650fd64a7ad996
Sha256: 6398e6bbe2ea2c7f2147bbe4edb4657cc0a29ac85627202f1eff90ff3034fac7
                                        
                                            GET /css?family=Cabin:400,500,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         172.217.22.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 00:41:42 GMT
Date: Fri, 13 Oct 2017 00:41:42 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   287
Md5:    f0db38120b4a9a016d2bc858f85997c5
Sha1:   6a64a143cecd4dca9951f21404e777fc09d78ffe
Sha256: 24a18be6836c301f790b57e00452e6e5e58d8bff10dbfa4ae2480953966f327b
                                        
                                            GET /index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2 HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 00:41:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; expires=Sat, 13-Oct-18 00:41:41 GMT; path=/; domain=.norwegianmethod.com; HttpOnly X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4; path=/
X-Powered-By: PHP/5.6.31
Server: cloudflare-nginx
CF-RAY: 3ace413297614273-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12703
Md5:    012ca31fb322073c39daedd85b2346a0
Sha1:   b9e4dab1c5625e598f3a238ba5c3b4b6714d77be
Sha256: c5640466946eea000838fbdeb199b415e3ab9334a0a0b9e48fd36b13d122229e
                                        
                                            GET /images/certs.png HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 00:41:41 GMT
Content-Length: 6755
Connection: keep-alive
Etag: "100ab3-1a63-53e96cdf8fde8"
Last-Modified: Tue, 11 Oct 2016 13:25:05 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:41 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace41351328429d-OSL


--- Additional Info ---
Magic:  PNG image, 285 x 38, 8-bit/color RGBA, non-interlaced
Size:   6755
Md5:    0af372894605e3f1a3714c020bbfe853
Sha1:   e2d2f5fdbd922b8196da08cf9e55c405e2f6e5fe
Sha256: 20b9cde58877d43b5b517227cf4951345e2fca0f764febc972a6ca07571ee271
                                        
                                            GET /images/favicon.png?v=1 HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 4422
Connection: keep-alive
Etag: "1001a7-1146-5408348fd3340"
Last-Modified: Sat, 05 Nov 2016 00:58:13 GMT
CF-Cache-Status: EXPIRED
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4135177542a9-OSL


--- Additional Info ---
Magic:  PNG image, 48 x 48, 8-bit/color RGBA, non-interlaced
Size:   4422
Md5:    244d7947b2d4807376295d8d87887fec
Sha1:   14ce29c3f79e98bad1f035ba639aef1c26d32c46
Sha256: 87f7e19c01781bbce7aaf9ff549c104ea08c8bd5cc40f43769ffc01828a7c17f
                                        
                                            GET /images/no/header.jpg HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/css/styles.css?v=2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 33893
Connection: keep-alive
Etag: "100ae4-8465-53e96cf6b4ac8"
Last-Modified: Tue, 11 Oct 2016 13:25:29 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4136c1c84291-OSL


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   33893
Md5:    a39221966dde76adad23592c83b81abb
Sha1:   b8a1f02cc9ea3d9e906c517d91183119a8605448
Sha256: c5b71b6eed5749d90b8dbcf796e6274200f8f045f8f0667c4276f407218eddec
                                        
                                            GET /images/no/bg.jpg HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/css/styles.css?v=2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 43349
Connection: keep-alive
Etag: "100ae6-a955-53e96cf7fff90"
Last-Modified: Tue, 11 Oct 2016 13:25:30 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace4136e76c4267-OSL


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   43349
Md5:    e5fc9830702363fa5a59194d2842ddfc
Sha1:   759cadad87474f21fdcae1374b42aa76558d044b
Sha256: cadc9ddf9f18fdf48939f2e4c23099986f246301968d3d9ec42b07243e630f80
                                        
                                            GET /images/bluetick.png HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 3765
Connection: keep-alive
Etag: "100ab4-eb5-53e96cdf89858"
Last-Modified: Tue, 11 Oct 2016 13:25:05 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace41374362429d-OSL


--- Additional Info ---
Magic:  PNG image, 55 x 55, 8-bit/color RGBA, non-interlaced
Size:   3765
Md5:    64a5beb375783c8d0b364c0a397fb0f8
Sha1:   5e0b739c40096380079227caf82754d55a435865
Sha256: 14bea249981de9790c6bed855eba6692dc45edea81163d61fc11116e723cd980
                                        
                                            GET /images/plus-icon.png HTTP/1.1 
Host: norwegianmethod.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: __cfduid=d83f6343ed90cadd84c8011f849cec2101507855301; X-Mapping-fjhppofk=29A9C7F6DECA45E18B1F7E8AF4485BD4

                                         
                                         104.27.130.215
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Content-Length: 3021
Connection: keep-alive
Etag: "100aba-bcd-53e96ce0fe918"
Last-Modified: Tue, 11 Oct 2016 13:25:06 GMT
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Fri, 13 Oct 2017 04:41:42 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ace413747eb4273-OSL


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, interlaced
Size:   3021
Md5:    e8b549917558c82ebe4889f4c7f93f23
Sha1:   afbec271a24124c4fd7539cf3d9498b39676e1f1
Sha256: abc6ca0ec78907915229710456fdd88de112bda8f978b8f17ea2d5d0e4b635e2
                                        
                                            GET /embed/na-MRe1Ie7U?controls=0&autoplay=1&showinfo=0&modestbranding=1&rel=0&loop=0 HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         172.217.22.174
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Content-Length: 0
Cache-Control: no-cache
Location: https://www.youtube.com/embed/na-MRe1Ie7U?controls=0&autoplay=1&showinfo=0&modestbranding=1&rel=0&loop=0
Expires: Tue, 27 Apr 1971 19:44:06 EST
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube
Date: Fri, 13 Oct 2017 00:41:42 GMT
Server: YouTube Frontend Proxy
Set-Cookie: VISITOR_INFO1_LIVE=koBsDOekXRA; path=/; domain=.youtube.com; expires=Wed, 13-Jun-2018 12:34:42 GMT; httponly YSC=6NQLy1RbM1I; path=/; domain=.youtube.com; httponly VISITOR_INFO1_LIVE=koBsDOekXRA; path=/; domain=.youtube.com; expires=Wed, 13-Jun-2018 12:34:42 GMT; httponly


--- Additional Info ---
                                        
                                            GET /iap/33b928570125e321 HTTP/1.1 
Host: pixel.sitescout.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         66.155.71.189
HTTP/1.1 302 Found
                                        
Set-Cookie: cookietest3=123; Domain=.sitescout.com
Location: http://pixel.sitescout.com/iap/33b928570125e321?cookieQ=1
Content-Length: 0
Date: Fri, 13 Oct 2017 00:41:42 GMT
Server: AC1.1


--- Additional Info ---
                                        
                                            GET /serve/585454aaad19fd3914000083.js HTTP/1.1 
Host: tag.marinsm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         151.101.112.65
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Cowboy
Cache-Control: max-age=1800
X-Content-Type-Options: nosniff
Via: 1.1 vegur, 1.1 varnish
Content-Encoding: gzip
Content-Length: 2987
Accept-Ranges: bytes
Date: Fri, 13 Oct 2017 00:41:42 GMT
Age: 1006
Connection: keep-alive
X-Served-By: cache-hhn1540-HHN
X-Cache: HIT
X-Cache-Hits: 7
X-Timer: S1507855302.404227,VS0,VE0
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2987
Md5:    06a2d65b2a3f0a44a64dbf53c17d23af
Sha1:   be2276eea9434c4585413bf5bd8dcd20971e8dc4
Sha256: e35763aa7214c83a9ba55da9cbd9e14012ff182dbc96445983a02c19c59240ed
                                        
                                            GET /iap/33b928570125e321?cookieQ=1 HTTP/1.1 
Host: pixel.sitescout.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: cookietest3=123

                                         
                                         66.155.71.189
HTTP/1.1 204 No Content
                                        
Cache-Control: max-age=0,no-cache,no-store
Pragma: no-cache
Expires: Tue, 11 Oct 1977 12:34:56 GMT
P3P: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
Set-Cookie: ssi=f39fad9a-0465-4ab0-bf72-013f1c712c00; Domain=.sitescout.com; Expires=Sat, 13-Oct-2018 00:41:42 GMT; Path=/
Date: Fri, 13 Oct 2017 00:41:42 GMT
Server: AC1.1


--- Additional Info ---
                                        
                                            GET /tagjs?a_id=68440&source=js_tag HTTP/1.1 
Host: pixel-geo.prfct.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         34.249.185.151
HTTP/1.1 302 Found
                                        
Cache-Control: no-store, no-cache, private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://pixel-geo.prfct.co/tagjs?check_cookie=1&a_id=68440&source=js_tag
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Set-Cookie: pa_uid=pa_xccYat7Hap1mzRzUU;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:42 GMT
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 108
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 00:41:42 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=121461, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Oct 2017 00:12:36 GMT
Expires: Sat, 14 Oct 2017 12:12:36 GMT
Etag: "4fe5f92cc18ce8ac251d2b9a1fa10cf9cdfec93d"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    d1cad51bb7da87fa4db1f3f7a67f3e4a
Sha1:   4fe5f92cc18ce8ac251d2b9a1fa10cf9cdfec93d
Sha256: ec82b6b6596bbfe75457e85772d9bba8aaef5c09331b3cf25f085ba07caea339
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 00:41:43 GMT
Expires: Tue, 17 Oct 2017 00:41:43 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    d388459925b57cf219cc1507e602904c
Sha1:   a3706c5d6f064f50df791fdc3b7f52fa1ac8bd4e
Sha256: 475fd0c1cbe37f93931ebb32e4407b3866db62e8169b37e829d3276db0585571
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 00:41:43 GMT
Etag: "59dfd17b-1d7"
Expires: Sun, 15 Oct 2017 00:41:43 GMT
Last-Modified: Thu, 12 Oct 2017 20:32:59 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    a09bc138188d4fc74feac01e69eaa18f
Sha1:   f66fe6950c1bd16996e36d2a81774521acdd33c5
Sha256: d79a864241c40405a86979f9ac27ef3b6c97691a8a95944f6a1194806db19ec5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 00:41:43 GMT
Etag: "59dfb4ca-1d7"
Expires: Sun, 15 Oct 2017 00:41:43 GMT
Last-Modified: Thu, 12 Oct 2017 18:30:34 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    26777dedbd9a32bbf79a4503e22f42f2
Sha1:   862e70a5fade0f66b18010b89c4c62096f15fbd9
Sha256: da7c469f04559126d3b3a48778f85b33367c191d5af8deb09e8024a189d798fb
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 23:50:39 GMT
Expires: Fri, 13 Oct 2017 01:50:39 GMT
Last-Modified: Thu, 28 Sep 2017 22:31:34 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14089
Age: 3064
Cache-Control: public, max-age=7200
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14089
Md5:    7b1f226d2f5f01597e62889513d4bc8c
Sha1:   ff78ed289a65fa3c91b0ff470fb0c6536bcab745
Sha256: 80eeeea7639a7b6a6205b8862b9060a7c60da47855e8dd9c74e64b0a0fce8b9a
                                        
                                            GET /js/85376be3b9a75234e3cb0170008a4598.js HTTP/1.1 
Host: cdn.pushcrew.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         104.20.54.119
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 00:41:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d85cfffd8e834bc03165d3fa9c93e11a91507855303; expires=Sat, 13-Oct-18 00:41:43 GMT; path=/; domain=.pushcrew.com; HttpOnly
Last-Modified: Wed, 06 Sep 2017 12:50:10 GMT
Vary: Accept-Encoding
Etag: W/"59afef02-2a547"
Expires: Fri, 13 Oct 2017 12:41:43 GMT
Cache-Control: public, max-age=43200
Content-Encoding: gzip
CF-Cache-Status: REVALIDATED
Server: cloudflare-nginx
CF-RAY: 3ace413c0a9c42c1-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   49670
Md5:    15f74af4617d5e1d9cef926363a4c6cf
Sha1:   9e441c2aec8a129832368b061089902f7361423c
Sha256: 6a46eff700f19d2cba32c10900c7bac85960fb2e22b22a3615a4dab9a42a01bb
                                        
                                            GET /tagjs?check_cookie=1&a_id=68440&source=js_tag HTTP/1.1 
Host: pixel-geo.prfct.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: pa_uid=pa_xccYat7Hap1mzRzUU

                                         
                                         34.249.185.151
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Cache-Control: no-store, no-cache, private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Set-Cookie: pa_uid=pa_xccYat7Hap1mzRzUU;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:43 GMT
Content-Length: 102
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   102
Md5:    090c25a25d1381fefa56036f29b232d0
Sha1:   d78dff6cbe4d7644effcd3e5d93012d461696240
Sha256: c8f93fa879626d395d5cd1c74c79bdc91559817f97607b098df7dbf3d252bd0f
                                        
                                            GET /r/collect?v=1&_v=j64&a=786814709&t=pageview&_s=1&dl=http%3A%2F%2Fnorwegianmethod.com%2Findex2.php%3Foffer_id%3D532%26aff_id%3D1432%26transaction_id%3D1023619a8986d000e5666e45bd759e%26country_code%3DNO%26aff_sub%3D1025d4fde0679e2531a8374fbecc50%26aff_sub2%3D1008%26aff_sub3%3D%26aff_sub4%3D%26goal_id%3D712%26xparam%3Dnorwegianmethod.com%26entity%3Dmediade2&ul=en-us&de=UTF-8&dt=Den%20Norske%20Metoden&sd=24-bit&sr=1176x885&vp=1159x775&je=1&fl=10.0%20r45&_u=IEBAAMQAI~&jid=1246449195&gjid=604220175&cid=1480788047.1507855304&tid=UA-89577854-1&_gid=673114254.1507855304&_r=1&z=9154254 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 00:41:43 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /cs/?partnerId=mrin HTTP/1.1 
Host: pixel-geo.prfct.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: pa_uid=pa_xccYat7Hap1mzRzUU

                                         
                                         34.249.185.151
HTTP/1.1 302 Found
                                        
Cache-Control: no-store, no-cache, private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://cs.marinsm.com/mrin
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Set-Cookie: pa_uid=pa_xccYat7Hap1mzRzUU;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:43 GMT pa_mrin_ts=1507855303961;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:43 GMT
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /s/cabin/v12/haOjnueK8Or1ztuuRtr8dvesZW2xOQ-xsNqO47m55DA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Cabin:400,500,700
Origin: http://norwegianmethod.com

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 22684
Date: Wed, 11 Oct 2017 08:07:00 GMT
Expires: Thu, 11 Oct 2018 08:07:00 GMT
Last-Modified: Tue, 10 Oct 2017 23:16:44 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 146083
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   22684
Md5:    457135582a0e54749ccf901eb13c40ac
Sha1:   81a639e94055f5262ca854ba8c1f817a3654bc37
Sha256: cbe8022689eebecd6e9ae4c57f5bb2106da610689aa07315166e8f904fa58cbc
                                        
                                            GET /s/cabin/v12/JEgmtEDzc-IH8jBshQXrYA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Cabin:400,500,700
Origin: http://norwegianmethod.com

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 23224
Date: Wed, 11 Oct 2017 08:06:44 GMT
Expires: Thu, 11 Oct 2018 08:06:44 GMT
Last-Modified: Tue, 10 Oct 2017 23:17:30 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 146099
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   23224
Md5:    0f3d0cbdd61106c0323169b1541b24f5
Sha1:   2ab89a1c8032fe20de49cee6885d032912c2ff24
Sha256: 45bdfffbad9ed3b41cecf23b657c4b24f6b45d5c36805629e061f6c17adae593
                                        
                                            GET /seg?t=2&add=7380481 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         185.33.223.197
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Fri, 13 Oct 2017 00:41:46 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: http://ib.adnxs.com/bounce?%2Fseg%3Ft%3D2%26add%3D7380481
AN-X-Request-Uuid: 26e41339-2507-48d9-a052-910c005f9430
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Sat, 14-Oct-2017 00:41:46 GMT; Domain=.adnxs.com; HttpOnly uuid2=5369706182092451892; Path=/; Max-Age=7776000; Expires=Thu, 11-Jan-2018 00:41:46 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 302.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.218:80


--- Additional Info ---
                                        
                                            GET /cs/?partnerId=rbcn HTTP/1.1 
Host: pixel-geo.prfct.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: pa_uid=pa_xccYat7Hap1mzRzUU

                                         
                                         34.249.185.151
HTTP/1.1 302 Found
                                        
Cache-Control: no-store, no-cache, private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://pixel.rubiconproject.com/tap.php?v=189868&nid=4106&expires=30&put=pa_xccYat7Hap1mzRzUU
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Set-Cookie: pa_uid=pa_xccYat7Hap1mzRzUU;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT pa_rubicon_ts=1507855304010;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /cs/?partnerId=opx HTTP/1.1 
Host: pixel-geo.prfct.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: pa_uid=pa_xccYat7Hap1mzRzUU

                                         
                                         34.249.185.151
HTTP/1.1 302 Found
                                        
Cache-Control: no-store, no-cache, private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://us-u.openx.net/w/1.0/sd?id=537114372&val=pa_xccYat7Hap1mzRzUU
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Set-Cookie: pa_uid=pa_xccYat7Hap1mzRzUU;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT pa_openx_ts=1507855304013;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /cs/?partnerId=twtr HTTP/1.1 
Host: pixel-geo.prfct.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: pa_uid=pa_xccYat7Hap1mzRzUU

                                         
                                         34.249.185.151
HTTP/1.1 302 Found
                                        
Cache-Control: no-store, no-cache, private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://analytics.twitter.com/i/adsct?p_id=48571&p_user_id=pa_xccYat7Hap1mzRzUU
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Set-Cookie: pa_uid=pa_xccYat7Hap1mzRzUU;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT pa_twitter_ts=1507855304018;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /cs/?partnerId=pub HTTP/1.1 
Host: pixel-geo.prfct.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: pa_uid=pa_xccYat7Hap1mzRzUU

                                         
                                         34.249.185.151
HTTP/1.1 302 Found
                                        
Cache-Control: no-store, no-cache, private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyNDMmdGw9MTI5NjAw&piggybackCookie=uid:pa_xccYat7Hap1mzRzUU
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Set-Cookie: pa_uid=pa_xccYat7Hap1mzRzUU;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT pa_pubmatic_ts=1507855304016;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /cs/?partnerId=yah HTTP/1.1 
Host: pixel-geo.prfct.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: pa_uid=pa_xccYat7Hap1mzRzUU

                                         
                                         34.249.185.151
HTTP/1.1 302 Found
                                        
Cache-Control: no-store, no-cache, private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://ads.yahoo.com/pixel?id=2539961&t=2&piggyback=https%3A%2F%2Fads.yahoo.com%2Fcms%2Fv1%3Fnwid%3D10001073209%26eid%3Dpa_xccYat7Hap1mzRzUU%26sigv%3D1%26esig%3D2%7Ed535c3c6f874bfb8879b7ca8c2ddad67fc71404d
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Set-Cookie: pa_uid=pa_xccYat7Hap1mzRzUU;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT pa_yahoo_ts=1507855304012;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /cs/?partnerId=goo HTTP/1.1 
Host: pixel-geo.prfct.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: pa_uid=pa_xccYat7Hap1mzRzUU

                                         
                                         34.249.185.151
HTTP/1.1 302 Found
                                        
Cache-Control: no-store, no-cache, private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://cm.g.doubleclick.net/pixel?google_nid=nowspots_bidder&google_hm=cGFfeGNjWWF0N0hhcDFtelJ6VVU
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Set-Cookie: pa_uid=pa_xccYat7Hap1mzRzUU;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT pa_google_ts=1507855304014;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /bounce?%2Fseg%3Ft%3D2%26add%3D7380481 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: sess=1; uuid2=5369706182092451892

                                         
                                         185.33.223.197
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.11.5
Date: Fri, 13 Oct 2017 00:41:46 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: http://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_sc&uid=5369706182092451892
AN-X-Request-Uuid: fd0736c6-5a4a-41ad-8302-5735dcbfef56
Set-Cookie: anj=dTM7k!M4.oE:2jUF']wIg2C$KMHa3g!@wnf]maBegEnH>QCB<KG6riG@`W]r#u)K^#tt6O%PVqt; Path=/; Max-Age=7776000; Expires=Thu, 11-Jan-2018 00:41:46 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Sat, 14-Oct-2017 00:41:46 GMT; Domain=.adnxs.com; HttpOnly uuid2=5369706182092451892; Path=/; Max-Age=7776000; Expires=Thu, 11-Jan-2018 00:41:46 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 302.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.220.207:80


--- Additional Info ---
                                        
                                            GET /seg/?add=7380481&source=js_tag&a_id=68440 HTTP/1.1 
Host: pixel-geo.prfct.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: pa_uid=pa_xccYat7Hap1mzRzUU

                                         
                                         34.249.185.151
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-store, no-cache, private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Set-Cookie: pa_uid=pa_xccYat7Hap1mzRzUU;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:44 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /embed/na-MRe1Ie7U?controls=0&autoplay=1&showinfo=0&modestbranding=1&rel=0&loop=0 HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: VISITOR_INFO1_LIVE=koBsDOekXRA; YSC=6NQLy1RbM1I

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
Cache-Control: no-cache
Expires: Tue, 27 Apr 1971 19:44:06 EST
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000
Date: Fri, 13 Oct 2017 00:41:44 GMT
Server: YouTube Frontend Proxy
Set-Cookie: PREF=f1=50000000; path=/; domain=.youtube.com; expires=Wed, 13-Jun-2018 12:34:44 GMT
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14375
Md5:    6407a98f55b572cac3209dee3eec40a6
Sha1:   0205bfff4bb46bdeb4d1738658bb63825e2da5bf
Sha256: 501d0acd51b905e8dfa760b71d1157c2fce75a1d61fa8f54697138c5cb04a765
                                        
                                            GET /s/cabin/v12/km2iCywk7CnC11BE8pBNVPesZW2xOQ-xsNqO47m55DA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Cabin:400,500,700
Origin: http://norwegianmethod.com

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 23588
Date: Wed, 11 Oct 2017 08:13:30 GMT
Expires: Thu, 11 Oct 2018 08:13:30 GMT
Last-Modified: Tue, 10 Oct 2017 23:18:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 145694
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   23588
Md5:    c73a0df9e5eda34d83d3d7582be213b3
Sha1:   f0faf9ac901236298693654101a66216837314c6
Sha256: 39bb73bf5343020f8105897bc9caf91af37ff842040269f5d27735448631094b
                                        
                                            GET /pixel?google_nid=appnexus&google_cm&google_sc&uid=5369706182092451892 HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm=&google_sc=&uid=5369706182092451892&google_tc=
Date: Fri, 13 Oct 2017 00:41:44 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 323
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 13-Oct-2017 00:56:44 GMT; path=/; domain=.doubleclick.net


--- Additional Info ---
Magic:  HTML document text
Size:   323
Md5:    f352134e6d221a1f789ea0fba103db00
Sha1:   94795bef41938a02a6c8845136521303cbfb2e73
Sha256: 1f14716325944d2db4d38f045327ea82fa8e4c4a85b15c0cd45f6234a66a3b0a
                                        
                                            GET /pixel?google_nid=appnexus&google_cm=&google_sc=&uid=5369706182092451892&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://ib.adnxs.com/setuid?entity=101&uid=5369706182092451892&code=CAESEAczDRW5XfCse2D8Rn2VfZE&google_cver=1
Date: Fri, 13 Oct 2017 00:41:44 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 317
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUl6gGHYWOAHYIF45-fP9OTRPsRviHzttKTZ6cGg8W2iyM3tjUl_rw; expires=Sun, 13-Oct-2019 00:41:44 GMT; path=/; domain=.doubleclick.net; HttpOnly


--- Additional Info ---
Magic:  HTML document text
Size:   317
Md5:    6dd9e3de0941acd9d3d2e0b3d6594876
Sha1:   6b0f0295c1f802278a3cf28edac2d999278e27c6
Sha256: da7e3f6a14ed7fc0a24875cd842f2830fb7b259672d486f53c5ec3f57531c80f
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 00:41:44 GMT
Expires: Tue, 17 Oct 2017 00:41:44 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    3d8a495b74c7e4f064054e25fa981bbb
Sha1:   967568074161c120ae20fce669433f561c4360b5
Sha256: 3bb1a9acb7ad7cb6fbf7e13e4673125c602994c91ae6c7dfb3a0fcf302266daa
                                        
                                            GET /setuid?entity=101&uid=5369706182092451892&code=CAESEAczDRW5XfCse2D8Rn2VfZE&google_cver=1 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: sess=1; uuid2=5369706182092451892; anj=dTM7k!M4.oE:2jUF']wIg2C$KMHa3g!@wnf]maBegEnH>QCB<KG6riG@`W]r#u)K^#tt6O%PVqt

                                         
                                         185.33.223.197
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.11.5
Date: Fri, 13 Oct 2017 00:41:46 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
AN-X-Request-Uuid: 4362a998-c0da-470a-9efc-3d09497d185c
Set-Cookie: anj=dTM7k!M4.FDYRWSF']wIg2C$KMHa3g!@wnf]maBDf+Uz9<x?u'l!Qa3jQ7Z[/v1T-/3i^]jbBbV1-o>r2bv+SjJaPj]>jumQ4uVNN3FJH!0')=XI#wq; Path=/; Max-Age=7776000; Expires=Thu, 11-Jan-2018 00:41:46 GMT; Domain=.adnxs.com; HttpOnly sess=1; Path=/; Max-Age=86400; Expires=Sat, 14-Oct-2017 00:41:46 GMT; Domain=.adnxs.com; HttpOnly uuid2=5369706182092451892; Path=/; Max-Age=7776000; Expires=Thu, 11-Jan-2018 00:41:46 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 302.bm-nginx-loadbalancer.mgmt.ams1; *.adnxs.com; 185.33.222.38:80


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /yts/cssbin/www-player-vflITOHz1.css HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.youtube.com/embed/na-MRe1Ie7U?controls=0&autoplay=1&showinfo=0&modestbranding=1&rel=0&loop=0
Cookie: VISITOR_INFO1_LIVE=koBsDOekXRA; YSC=6NQLy1RbM1I; PREF=f1=50000000

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Timing-Allow-Origin: https://www.youtube.com
Content-Length: 45058
Date: Tue, 10 Oct 2017 01:17:25 GMT
Expires: Wed, 10 Oct 2018 01:17:25 GMT
Last-Modified: Mon, 09 Oct 2017 23:44:45 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 257059
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   45058
Md5:    8eb5b34ffe71b36386a23250a8b38ce5
Sha1:   874284afa9735f95aa5bcf0b41c1bbf81883ee85
Sha256: 0aa932821f3f2d2f8bdb52d98b924eec3923aeda4ea735d59b56bdb06fcc0395
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=602524, public, no-transform, must-revalidate
Last-Modified: Thu, 12 Oct 2017 23:59:41 GMT
Expires: Thu, 19 Oct 2017 23:59:41 GMT
Date: Fri, 13 Oct 2017 00:41:44 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    40746bb78677e97c08e1307655aec6ee
Sha1:   ebfafbd04f2cd63c777280061d577b5020b3fc04
Sha256: 9b2b5f9b71f2143a967f7f615258853b6f7fd9575bb0766bc121c784937f6bf2
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 00:41:44 GMT
Server: Apache
Last-Modified: Tue, 10 Oct 2017 21:25:37 GMT
Expires: Tue, 17 Oct 2017 21:25:37 GMT
Etag: 057A00947E3AF85EFCE47F144F8EA1B66D06FEF0
Cache-Control: max-age=419632,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp30
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    0b8cb73cbc2bb9b49af612c6fef0c96d
Sha1:   057a00947e3af85efce47f144f8ea1b66d06fef0
Sha256: 4d06e2ad6129068920297be6c72e361d1a70c96235322eccd4f43b414ede33eb
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 00:41:44 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: 8CCEBCB49A70E1697830B895E614F6A7713F7EB9
Cache-Control: max-age=463864,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp30
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    5540ffa92b3950b3e7feb8e46cd784cb
Sha1:   8ccebcb49a70e1697830b895e614f6a7713f7eb9
Sha256: 47f64b66f3d3984246e2b6a5a70af2d4a4a3e28f0362aefad7fe51bc0f53e1f9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 00:41:44 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: 8A7BC9885D9FFAFD7270D5324F22275F2B2C0D13
Cache-Control: max-age=463864,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp30
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d7daaf5088b1b8633e7e0d6600507656
Sha1:   8a7bc9885d9ffafd7270d5324f22275f2b2c0d13
Sha256: 9ea32e88334ce42853f79b00abaff0d4ee00214175cd3e1d189a0aa1b4a4ceba
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 00:41:44 GMT
Etag: "59dfc2bf-1d7"
Expires: Sun, 15 Oct 2017 00:41:44 GMT
Last-Modified: Thu, 12 Oct 2017 19:30:07 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    4af8f3f26a37700e9e360986f686de37
Sha1:   770dd8f88469bbed0717e46cde7ac1f11bdb8d45
Sha256: d98aba0219e7e95655efcf754000c72fb049c79e0eda182c440b143cf9f4bead
                                        
                                            GET /pixel?google_nid=nowspots_bidder&google_hm=cGFfeGNjWWF0N0hhcDFtelJ6VVU HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://cm.g.doubleclick.net/pixel?google_nid=nowspots_bidder&google_hm=cGFfeGNjWWF0N0hhcDFtelJ6VVU&google_tc=
Date: Fri, 13 Oct 2017 00:41:44 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 315
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 13-Oct-2017 00:56:44 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   315
Md5:    d9a97522ee8ef345fb1351f1cc7ffe90
Sha1:   62ca2131fbe17b5505f77eae16a1635b198d2b05
Sha256: d1031f2d812835e646411ee7c97fa2303ba34c10210c1890cbc75350a7f39b5f
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=604136, public, no-transform, must-revalidate
Last-Modified: Fri, 13 Oct 2017 00:29:42 GMT
Expires: Fri, 20 Oct 2017 00:29:42 GMT
Date: Fri, 13 Oct 2017 00:41:44 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1419
Md5:    d88c6028434ba5f347a5685a10dd3db1
Sha1:   c275a9aa3c2c3052186c8a807bee6bfe84836609
Sha256: dd29c78acd3ab96ff91c92e94d21a4a54ea389620344f92698fd96abfc025e83
                                        
                                            GET /pixel?id=2539961&t=2&piggyback=https%3A%2F%2Fads.yahoo.com%2Fcms%2Fv1%3Fnwid%3D10001073209%26eid%3Dpa_xccYat7Hap1mzRzUU%26sigv%3D1%26esig%3D2%7Ed535c3c6f874bfb8879b7ca8c2ddad67fc71404d HTTP/1.1 
Host: ads.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         217.12.15.54
HTTP/1.1 200 OK
                                        
Date: Fri, 13 Oct 2017 00:41:44 GMT
Content-Length: 0
Server: ATS
Age: 0
Connection: keep-alive
Strict-Transport-Security: max-age=0


--- Additional Info ---
                                        
                                            GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyNDMmdGw9MTI5NjAw&piggybackCookie=uid:pa_xccYat7Hap1mzRzUU HTTP/1.1 
Host: image2.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         185.64.189.236
HTTP/1.1 200 OK
Content-Type: image/gif; charset=utf-8
                                        
Content-Length: 42
Connection: keep-alive
Date: Fri, 13 Oct 2017 00:41:45 GMT
Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/1.0.1e-fips mod_fastcgi/2.4.6
Set-Cookie: KRTBCOOKIE_931=18118-uid:pa_xccYat7Hap1mzRzUU; domain=pubmatic.com; expires=Thu, 11-Jan-2018 00:41:45 GMT; path=/ PugT=1507855305; domain=pubmatic.com; expires=Sun, 12-Nov-2017 00:41:45 GMT; path=/ PUBRETARGET=dummy; domain=pubmatic.com; expires=Fri, 13-Oct-2017 00:41:45 GMT; path=/ PUBMDCID=3; domain=pubmatic.com; expires=Thu, 11-Jan-2018 00:41:45 GMT; path=/
X-lat: Pug22025:0:292
P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
Cache-Control: no-store, no-cache, private
Pragma: no-cache


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 00:41:45 GMT
Etag: "59dfecfa-1d7"
Expires: Sun, 15 Oct 2017 00:41:45 GMT
Last-Modified: Thu, 12 Oct 2017 22:30:18 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    231b121ee35d083a2357fdd74461cab5
Sha1:   e98cb6145e21df9f594b5838e48ce9249464d9de
Sha256: 0cf5c63bbdf7155d88035ca32795fb6c32ee486ea5267797e7d46714a26ff778
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 00:41:45 GMT
Etag: "59dfed3a-1d7"
Expires: Sun, 15 Oct 2017 00:41:45 GMT
Last-Modified: Thu, 12 Oct 2017 22:31:22 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    29ef5d677c9b24fe8eae906b64fad76c
Sha1:   e26122babeb34b327b84a8317373f8dcc8dadb77
Sha256: d1eaeeb0f9fc081433b479f960b74861b0a8079b8bd3f3b4af1b9cac99ef6ed0
                                        
                                            GET /pixel?google_nid=nowspots_bidder&google_hm=cGFfeGNjWWF0N0hhcDFtelJ6VVU&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: IDE=AHWqTUl6gGHYWOAHYIF45-fP9OTRPsRviHzttKTZ6cGg8W2iyM3tjUl_rw; test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://pixel-geo.prfct.co/cb?partnerId=goo
Date: Fri, 13 Oct 2017 00:41:45 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 240
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   240
Md5:    5e71fb3057b96ec7e24357331fef630b
Sha1:   d557f1d71c17c143b6022d5df9594b0505e298b2
Sha256: 46b5afb2f83f337c61447a47df5bf10023e1fab10167f0019b613239bf90d3c5
                                        
                                            GET /s/roboto/v16/2UX7WLTfW3W8TclTUvlFyQ.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.youtube.com/embed/na-MRe1Ie7U?controls=0&autoplay=1&showinfo=0&modestbranding=1&rel=0&loop=0
Origin: https://www.youtube.com

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18904
Date: Thu, 12 Oct 2017 18:15:34 GMT
Expires: Fri, 12 Oct 2018 18:15:34 GMT
Last-Modified: Mon, 17 Apr 2017 21:22:19 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 23171
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  data
Size:   18904
Md5:    a9fc51fd0214c75ee5953dda0f2a06a6
Sha1:   7a4ddb6733c33dfe9ec94c82a5e7f5da885f5182
Sha256: 8740f04a97202a2483d54a5781598c30cceac029a1522b6c5dd270250b9d1a17
                                        
                                            GET /yts/jsbin/www-embed-player-vflWYCwde/www-embed-player.js HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.youtube.com/embed/na-MRe1Ie7U?controls=0&autoplay=1&showinfo=0&modestbranding=1&rel=0&loop=0
Cookie: VISITOR_INFO1_LIVE=koBsDOekXRA; YSC=6NQLy1RbM1I; PREF=f1=50000000

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Timing-Allow-Origin: https://www.youtube.com
Content-Length: 31835
Date: Thu, 12 Oct 2017 18:15:26 GMT
Expires: Fri, 20 Oct 2017 18:15:26 GMT
Last-Modified: Thu, 12 Oct 2017 10:55:44 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=691200
Age: 23179
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   31835
Md5:    804bd76b540bd6eac8cea253e363a286
Sha1:   fbb2fdd65ea698d8b0eb94d8af5cc25e11e56010
Sha256: 4d97e45b6696a722a63f435ea9354b67907a9e2df40b140ed9103f38c69d7426
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 00:41:45 GMT
Etag: "59dfda3c-1d7"
Expires: Sun, 15 Oct 2017 00:41:45 GMT
Last-Modified: Thu, 12 Oct 2017 21:10:20 GMT
Server: ECS (ams/49A4)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    2f59b190713e78addfe0eab55d642a88
Sha1:   90eab8882e6b2fffb0380a956b0932f18653c142
Sha256: d743630852938530a6036f5259fee5a7c6bde8069b3e6a6beb5c2e6a3d339b2d
                                        
                                            GET /cb?partnerId=goo HTTP/1.1 
Host: pixel-geo.prfct.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: pa_uid=pa_xccYat7Hap1mzRzUU; pa_mrin_ts=1507855303961; pa_rubicon_ts=1507855304010; pa_openx_ts=1507855304013; pa_twitter_ts=1507855304018; pa_pubmatic_ts=1507855304016; pa_yahoo_ts=1507855304012; pa_google_ts=1507855304014

                                         
                                         34.249.185.151
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-store, no-cache, private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Set-Cookie: pa_uid=pa_xccYat7Hap1mzRzUU;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:45 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /yts/jsbin/player-vflwcUIMe/en_US/base.js HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.youtube.com/embed/na-MRe1Ie7U?controls=0&autoplay=1&showinfo=0&modestbranding=1&rel=0&loop=0
Cookie: VISITOR_INFO1_LIVE=koBsDOekXRA; YSC=6NQLy1RbM1I; PREF=f1=50000000

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Timing-Allow-Origin: https://www.youtube.com
Content-Length: 429306
Date: Wed, 11 Oct 2017 23:03:18 GMT
Expires: Thu, 19 Oct 2017 23:03:18 GMT
Last-Modified: Wed, 11 Oct 2017 08:17:20 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=691200
Age: 92307
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   429306
Md5:    3471ec883431a5620ea506a6c07eea92
Sha1:   4729f83fbea27c289bd43043fe053ba7a59d2974
Sha256: 0e3fe033611a5cc3c947b76fa9d58da773df13a10f2e35f1aaa014abd6b669eb
                                        
                                            GET /i/adsct?p_id=48571&p_user_id=pa_xccYat7Hap1mzRzUU HTTP/1.1 
Host: analytics.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         199.16.156.73
HTTP/1.1 200 OK
Content-Type: image/gif;charset=utf-8
                                        
Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
Content-Encoding: gzip
Content-Length: 65
Date: Fri, 13 Oct 2017 00:41:45 GMT
Expires: Tue, 31 Mar 1981 05:00:00 GMT
Last-Modified: Fri, 13 Oct 2017 00:41:45 GMT
Pragma: no-cache
Server: tsa_b
Set-Cookie: personalization_id="v1_lBiBrY49JsJz8snO9lzHqg=="; Expires=Sun, 13 Oct 2019 00:41:45 UTC; Path=/; Domain=.twitter.com guest_id=v1%3A150785530530495296; Expires=Sun, 13 Oct 2019 00:41:45 UTC; Path=/; Domain=.twitter.com
status: 200 OK
Strict-Transport-Security: max-age=631138519
x-connection-hash: 7fe0e09a62eebfff6597316d5ba6fe49
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
x-response-time: 6
x-transaction: 00510c7f00521009
x-twitter-response-tags: BouncerCompliant
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   65
Md5:    2627dd381327831be501962f01cb45a3
Sha1:   91ada0ee3df9d93cfdd195477d1ed3f86a798997
Sha256: bb5a836235f4765af8072f2021f06871fc1926ef66eb9a5e7dbe124eca13fef8
                                        
                                            GET /tap.php?v=189868&nid=4106&expires=30&put=pa_xccYat7Hap1mzRzUU HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         213.19.162.80
HTTP/1.1 307 Temporary Redirect
                                        
Set-Cookie: c=1; Path=/
Location: /tap.php?cookie_redirect=1&v=189868&nid=4106&expires=30&put=pa_xccYat7Hap1mzRzUU
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Fri, 13 Oct 2017 00:41:45 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /w/1.0/sd?id=537114372&val=pa_xccYat7Hap1mzRzUU HTTP/1.1 
Host: us-u.openx.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         173.241.240.143
HTTP/1.1 302 Moved Temporarily
                                        
Set-Cookie: i=7a74cd9f-b4a0-46ef-a35f-2ac54866e85b|1507855305; Version=1; Expires=Sat, 13-Oct-2018 00:41:45 GMT; Max-Age=31536000; Domain=.openx.net; Path=/
Server: OXGW/11.136.0
P3P: CP="CUR ADM OUR NOR STA NID"
Location: https://us-u.openx.net/w/1.0/sd?cc=1&id=537114372&val=pa_xccYat7Hap1mzRzUU
Date: Fri, 13 Oct 2017 00:41:45 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /mrin HTTP/1.1 
Host: cs.marinsm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         52.30.157.16
HTTP/1.1 302 Found
                                        
Cache-Control: no-store, no-cache, private
Location: https://pixel.prfct.co/cb?partnerId=mrin
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /w/1.0/sd?cc=1&id=537114372&val=pa_xccYat7Hap1mzRzUU HTTP/1.1 
Host: us-u.openx.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: i=7a74cd9f-b4a0-46ef-a35f-2ac54866e85b|1507855305

                                         
                                         173.241.240.143
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Vary: Accept
Server: OXGW/11.136.0
Pragma: no-cache
P3P: CP="CUR ADM OUR NOR STA NID"
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Date: Fri, 13 Oct 2017 00:41:47 GMT
Cache-Control: private, max-age=0, no-cache
Transfer-Encoding: chunked
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max speed
Size:   436
Md5:    65be61ce6344a14d90c11ab940124534
Sha1:   cd15de518b5bc900a03563676e87ed7141355b89
Sha256: b3c93669fefea6f3b6a353b83286df0ab0db7bbbcda1fe214e34a1fc0e3726c4
                                        
                                            GET /tap.php?cookie_redirect=1&v=189868&nid=4106&expires=30&put=pa_xccYat7Hap1mzRzUU HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: c=1

                                         
                                         213.19.162.80
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
X-RPHost: aaps-ge8qIJJLGA9zEpARQ
Set-Cookie: rpb=189868%3D1; Domain=.rubiconproject.com; Expires=Sun, 12-Nov-2017 00:41:47 GMT; Path=/ rpx=189868%3D68200%2C0%2C1%2C%2C; Domain=.pixel.rubiconproject.com; Expires=Sun, 12-Nov-2017 00:41:47 GMT; Path=/ put_4106=pa_xccYat7Hap1mzRzUU; Domain=.rubiconproject.com; Expires=Sun, 12-Nov-2017 00:59:59 GMT; Path=/ khaos=J8P649N4-K-KRB4; Domain=.rubiconproject.com; Expires=Fri, 13-Apr-2018 12:41:47 GMT; Path=/
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Connection: keep-alive
Content-Length: 42
Date: Fri, 13 Oct 2017 00:41:47 GMT
Server: Rubicon Project


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /cb?partnerId=mrin HTTP/1.1 
Host: pixel.prfct.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2
Cookie: pa_uid=pa_xccYat7Hap1mzRzUU; pa_mrin_ts=1507855303961; pa_rubicon_ts=1507855304010; pa_openx_ts=1507855304013; pa_twitter_ts=1507855304018; pa_pubmatic_ts=1507855304016; pa_yahoo_ts=1507855304012; pa_google_ts=1507855304014

                                         
                                         52.5.205.141
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: no-store, no-cache, private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
Set-Cookie: pa_uid=pa_xccYat7Hap1mzRzUU;Path=/;Domain=.prfct.co;Expires=Sun, 13-Oct-2019 00:41:48 GMT
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            POST /cloudsslsha2g3 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.31.74.124
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 00:41:48 GMT
Content-Length: 1539
Connection: keep-alive
Set-Cookie: __cfduid=dc4622137ec993e723bcd8367675486fe1507855308; expires=Sat, 13-Oct-18 00:41:48 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Thu, 12 Oct 2017 23:53:33 GMT
Expires: Mon, 16 Oct 2017 23:53:33 GMT
Etag: "735d66f9fbe98e7f0190852417f8932bf3bc59fd"
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3ace415cf7e6429d-OSL


--- Additional Info ---
Magic:  data
Size:   1539
Md5:    9f8b7c90e65d50a3ed086e3be4949168
Sha1:   735d66f9fbe98e7f0190852417f8932bf3bc59fd
Sha256: d4ec9e82f404a3de6ed9fd7284227efdba4a26d1c547d2e954c433efe7b4cd51
                                        
                                            GET /j/roundtrip.js HTTP/1.1 
Host: a.adroll.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         91.135.34.114
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: zKfMVrRy0jWt0B9Xy4cDOyp8rhEsYVTPI4MKNpPsmcMWqJ+Kfw2DW2/vmxCkRbJC/JFfTQhsKLc=
x-amz-request-id: B105EB60403A633E
Last-Modified: Thu, 12 Oct 2017 22:23:12 GMT
Etag: "8175dd78fc145b7d1ecf50ffcd1fe6fd"
Cache-Control: max-age=300, must-revalidate
x-amz-version-id: 8yFv9xgSzAi31ncUZOrpLpuzR1kmF6KS
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 00:41:48 GMT
Content-Length: 8975
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   8975
Md5:    26d525cf699fa1a8d8a2b9a63a4500c5
Sha1:   a378bbe90c6589608066f77f10f839fb0a860b6a
Sha256: b2edae5b35716a522ea6f9e5c441a575f68a1979ad48d53ebc2cb1b0fc589c14
                                        
                                            GET /nr-1059.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         151.101.114.110
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
x-amz-id-2: eBSKU/Shcmy6MDWkAiMpFWKBbR+XOuZbPKiwLvTIMOkefXu2cv9ggPdTZkwG4GfWr/ilfgttRP4=
x-amz-request-id: 0585C7FE34848049
Last-Modified: Thu, 28 Sep 2017 22:50:21 GMT
Etag: "3e7b56d238fad5862cc11b6cee850e8a"
Server: AmazonS3
Cache-Control: public, max-age=7200, stale-if-error=604800
Content-Encoding: gzip
Content-Length: 8860
Accept-Ranges: bytes
Date: Fri, 13 Oct 2017 00:41:48 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-hhn1527-HHN
X-Cache: HIT
X-Cache-Hits: 25611
X-Timer: S1507855308.377503,VS0,VE0
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8860
Md5:    ae1ee528fa7cd97699507c57c5cc78a6
Sha1:   262af303d46f4501b7a94ae1a5bc096101b9dbe8
Sha256: 222c287004a2a825855838d8bb90b7bb3752a7daed0c3e1a5477a205e619bc17
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=411784, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Oct 2017 19:00:12 GMT
Expires: Tue, 17 Oct 2017 19:00:12 GMT
Date: Fri, 13 Oct 2017 00:41:48 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1419
Md5:    be509e25ce51da987563b84171cb9549
Sha1:   386f5b586d520b06306b93d5c9e5b2b4c13ae6ff
Sha256: 591086ce663da9cc12b8ed6f8d349299258cb9cfb38547371f023f3422dbfad7
                                        
                                            GET /1/1637fd9867?a=55459366&v=1059.aa50f63&to=M1dQZRBSChBVU0BcWwodZ0MLHA0NUFVMBxoUWkI%3D&rst=6524&ref=http://norwegianmethod.com/index2.php&ap=15&fe=6340&dc=858&at=HxBTE1hIGR4%3D&jsonp=NREUM.setToken HTTP/1.1 
Host: bam.nr-data.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://norwegianmethod.com/index2.php?offer_id=532&aff_id=1432&transaction_id=1023619a8986d000e5666e45bd759e&country_code=NO&aff_sub=1025d4fde0679e2531a8374fbecc50&aff_sub2=1008&aff_sub3=&aff_sub4=&goal_id=712&xparam=norwegianmethod.com&entity=mediade2

                                         
                                         162.247.242.18
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=ISO-8859-1
                                        
Set-Cookie: JSESSIONID=4ca8c19e9d108d8c;Path=/;Domain=.nr-data.net;Secure
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 57


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   57
Md5:    5c9da71976fb9d00f82e61c7e496ba06
Sha1:   58884fb0e24a399213205ad35db27e6011bd149c
Sha256: f69a13217482dc43f25e74cfcb9391d0f06d22501f10f5cb5e413d2d98a5cd23