firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 11 Sep 2022 19:07:48 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: blknEIoqiUBATA0x1DegLrUvav3leX3FeT7KwH7iG22ePMaUagWSgQ==
Age: 2238
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7351
Expires: Sun, 11 Sep 2022 21:47:38 GMT
Date: Sun, 11 Sep 2022 19:45:07 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 11 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Qt8nk-dRkCYhnym4I80fIAgGtjbEzMoTAyeSfC3h0dFfgDcPzAwcog==
age: 44875
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 19:45:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 11 Sep 2022 18:56:07 GMT
Cache-Control: max-age=3600
Expires: Sun, 11 Sep 2022 19:19:38 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sNQ05fuL7nJMS1MmCCK55TmoPOd_mfVTxW253FM07jdomSSdt7v8RA==
Age: 2940
ocsp.digicert.com/
200 OK 471 B IP
Hash 26e829ba5f754918e20cbd316dc4348e
ba198501da0812dd11ca3b38a51325b5de6cfa60
4352c25d4af7637a8435b0df6d042fc606d37a348e966b99fecce8a853b8ebc0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2513
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:07 GMT
Last-Modified: Sun, 11 Sep 2022 19:03:14 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
4.us.findthewind.xyz/feed/?link=true&tid=4&subid=4.us&ref=8.us.findthewnd.xyz&s1=631e3ab4755e4f49313de2aa
301 Moved Permanently 0 B URL HTTP/1.1 4.us.findthewind.xyz/feed/?link=true&tid=4&subid=4.us&ref=8.us.findthewnd.xyz&s1=631e3ab4755e4f49313de2aa
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /feed/?link=true&tid=4&subid=4.us&ref=8.us.findthewnd.xyz&s1=631e3ab4755e4f49313de2aa HTTP/1.1
Host: 4.us.findthewind.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache
Location: https://redir.findthewind.xyz/click/invalid/?tid=4&subid=4.us
Date: Sun, 11 Sep 2022 19:45:07 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5BP+8CInDUYErYippCMBdA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: O293Ts8kWxp7aZ07dLx3YoSC3co=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9febd6ff9d62595f323baabfa7837908
409eaad413dd9c624b2f419018cf61a4dd603aeb
0fe5b0ae24a6429a7d49d6f305504a66e92cda79b8005698f9ec763e92c7a886
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FE5B0AE24A6429A7D49D6F305504A66E92CDA79B8005698F9EC763E92C7A886"
Last-Modified: Fri, 09 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6803
Expires: Sun, 11 Sep 2022 21:38:31 GMT
Date: Sun, 11 Sep 2022 19:45:08 GMT
Connection: keep-alive
redir.findthewind.xyz/click/invalid/?tid=4&subid=4.us
302 Found 230 B URL HTTP/1.1 redir.findthewind.xyz/click/invalid/?tid=4&subid=4.us
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document, ASCII text, with no line terminators
Hash 7ef6d31c814979bd842f5e6f09cfb7bd
4f9fa32f92cbc28d74e40dad8f216379df418ce6
96c1f5b72cb60e7e91cd1d2d542c492e3148b180736ed3fcb36d45a84f454525
GET /click/invalid/?tid=4&subid=4.us HTTP/1.1
Host: redir.findthewind.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
X-Powered-By: Express
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
Location: https://leche.labtrffc.com/p.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240?s=nxs-4
Vary: Accept
Content-Type: text/html; charset=utf-8
Content-Length: 230
Date: Sun, 11 Sep 2022 19:45:08 GMT
Connection: keep-alive
Keep-Alive: timeout=5
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 11bde96d3eb0e478645213131ebf1c4b
4fef6bac12102d3f1b3506ca5d0c77d46d2f84c4
6692d39be2b93cb35a00a8cbb61d0ca257e7c4ea3eaf6e4f232a667b9d58b614
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6692D39BE2B93CB35A00A8CBB61D0CA257E7C4EA3EAF6E4F232A667B9D58B614"
Last-Modified: Sat, 10 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20444
Expires: Mon, 12 Sep 2022 01:25:52 GMT
Date: Sun, 11 Sep 2022 19:45:08 GMT
Connection: keep-alive
leche.labtrffc.com/p.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240?s=nxs-4
302 Found 0 B URL HTTP/1.1 leche.labtrffc.com/p.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240?s=nxs-4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240?s=nxs-4 HTTP/1.1
Host: leche.labtrffc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 11 Sep 2022 19:45:08 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Round:
Raund:
Location: https://miao.labtrffc.com/t.php?p=c:5mklge2tsmlw3a9gr&d=6319ad09b4089529c50c3b22&s=lt-fb
miao.labtrffc.com/t.php?p=c:5mklge2tsmlw3a9gr&d=6319ad09b4089529c50c3b22&s=lt-fb
302 Found 0 B URL HTTP/1.1 miao.labtrffc.com/t.php?p=c:5mklge2tsmlw3a9gr&d=6319ad09b4089529c50c3b22&s=lt-fb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t.php?p=c:5mklge2tsmlw3a9gr&d=6319ad09b4089529c50c3b22&s=lt-fb HTTP/1.1
Host: miao.labtrffc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 11 Sep 2022 19:45:08 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Round: 11hx4alk7e
Raund: 2h9
Location: https://miao.labtrffc.com/s.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int-lt-fb
miao.labtrffc.com/s.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int-lt-fb
200 OK 492 B URL HTTP/1.1 miao.labtrffc.com/s.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int-lt-fb
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (542)
Hash 6a3ee00e9119ccd861e06e455848488c
23303defd7925573433eeb9d203c50f14f6c66af
cf28df5dedb70c43ed23dd5a75551b16821024c2aa1bde0b8e5d36cf8447dd8f
GET /s.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int-lt-fb HTTP/1.1
Host: miao.labtrffc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:45:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: bt-603611c5b7eaf46891533240=631e3ac440fcd10b59774f87; expires=Wed, 14-Sep-2022 19:45:08 GMT; Max-Age=259200; path=/; domain=miao.labtrffc.com; HttpOnly
Content-Encoding: gzip
miao.labtrffc.com/s.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int-lt-fb&bv=1
302 Found 0 B URL HTTP/1.1 miao.labtrffc.com/s.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int-lt-fb&bv=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int-lt-fb&bv=1 HTTP/1.1
Host: miao.labtrffc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miao.labtrffc.com/s.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int-lt-fb
Cookie: bt-603611c5b7eaf46891533240=631e3ac440fcd10b59774f87
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 11 Sep 2022 19:45:08 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: bt-603611c5b7eaf46891533240=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=miao.labtrffc.com; HttpOnly
Round: 10voqfxttf
Raund: 2fx
Location: https://popcash.net/world/go/134600/426377
ocsp.digicert.com/
200 OK 279 B IP
Hash e607390d2f0fa3748189979b1b1c3bc1
b48fbe141958be2b9f7ee101dd50aa7dc45536c3
e9cdac96747bc6812dffe5e24300bdc24c2533c27cb573e5c62290cfd35c54d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5986
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:08 GMT
Last-Modified: Sun, 11 Sep 2022 18:05:22 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279
miao.labtrffc.com/favicon.ico
200 OK 20 B URL HTTP/1.1 miao.labtrffc.com/favicon.ico
IP
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /favicon.ico HTTP/1.1
Host: miao.labtrffc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://miao.labtrffc.com/s.php?p=c:9qopki6xwqp07eckv&d=603611c5b7eaf46891533240&s=int-lt-fb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:45:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8889
Expires: Sun, 11 Sep 2022 22:13:18 GMT
Date: Sun, 11 Sep 2022 19:45:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8889
Expires: Sun, 11 Sep 2022 22:13:18 GMT
Date: Sun, 11 Sep 2022 19:45:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8889
Expires: Sun, 11 Sep 2022 22:13:18 GMT
Date: Sun, 11 Sep 2022 19:45:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8889
Expires: Sun, 11 Sep 2022 22:13:18 GMT
Date: Sun, 11 Sep 2022 19:45:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79f019c6-c6f0-4468-b319-ffe5379d4a42.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79f019c6-c6f0-4468-b319-ffe5379d4a42.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b290c3f75a769f5cb0f36b5c84436c9b
22e386713ccb95ca1cf9aa367a5ad02bd1664954
e311757ae3bc5b821a9c1d4d654250b1ac936228eb4a600aa1e5b391d25adaaf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79f019c6-c6f0-4468-b319-ffe5379d4a42.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10611
x-amzn-requestid: 1492333f-e0ed-4061-8c16-a62e0687b95e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLgc-EBkIAMF27A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ae11f-555b67794d0bdfd3384ebde8;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 06:45:51 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: gz4lq1qR5Erx6Gfh8Qh4C2RGT4-GLRLZZcMZLAvVztYBgYenM9LIhA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 0800f067ff646622f3e8e507cb9b52e8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:40:18 GMT
etag: "22e386713ccb95ca1cf9aa367a5ad02bd1664954"
content-type: image/jpeg
age: 79491
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e407da4d97d497925b1ab523fd416787
166741631fb93d109b18dde6d316b3fa3276aa8f
707460c02438da6114e35e0b6569d42c0f3fb747f8cb51002f4d52bedbcffa61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8485
x-amzn-requestid: a56c9282-2786-4ae7-9fc2-0468bcc820a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ1k_FM1oAMFZ2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d02ec-753cc4f121c9b77d22bb82b5;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:34:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Mfmj40aUc8l5RPk56M-pbqTwhde_HzYcmN5MDrfv-WFPhbpoShWYNw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 22:14:30 GMT
age: 77439
etag: "166741631fb93d109b18dde6d316b3fa3276aa8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d72ce1b-951e-4f1f-97b1-db99c399d5f9.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d72ce1b-951e-4f1f-97b1-db99c399d5f9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eee5b4d617dab6f10d7053f5c4f4e98e
6c728c56797ba921e8001919df4d36e56dd37e54
76a53e2c81ec8da2bc469760b2c57098d587c6a36fa70e5b7c743a224a47d362
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d72ce1b-951e-4f1f-97b1-db99c399d5f9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8171
x-amzn-requestid: a3eb931f-cd71-4738-acb1-4398fc09f453
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YOa7QGqoIAMFwlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631c0b7b-2a6ed8ca00a0a0640110cf5d;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 03:58:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: QuUPVSWCQk9z9xI03trHifaWzOi5TqBZHLena93lrxhjlAG1PICKKA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 12:19:15 GMT
age: 26754
etag: "6c728c56797ba921e8001919df4d36e56dd37e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8092dc3d-1f2d-4e22-b40a-bf1c53ea42e6.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8092dc3d-1f2d-4e22-b40a-bf1c53ea42e6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 99bd16c51d8e4853d6ee542d2ec9fb22
a9f77626875d68e1aea2516f78d491eba9969e37
b360c3c9fa12dc4f57fdbfc88fe820ecee1c049f2d43f44cd38b740513d8e9f8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8092dc3d-1f2d-4e22-b40a-bf1c53ea42e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10298
x-amzn-requestid: f2e2d57b-1f6f-401a-bf0d-ca5c05dd5e59
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YE-nmHBKIAMFrZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63184496-52d1369463143fc94894e347;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:13:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: PRnDEhi5jnNROYiVXzfn4b_vf-OHnwO5RD38I1bLV8JEJb2gDYrqvg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:40:34 GMT
age: 79475
etag: "a9f77626875d68e1aea2516f78d491eba9969e37"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e7fcb-66df-4e59-8130-9579a79eca9c.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e7fcb-66df-4e59-8130-9579a79eca9c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4ec2646c56c4c522f0744768ad20342b
ad1d9eee90556a359547dc7cbb6758aee2c804cd
0bf9eaa4420bf6290535fd23895c6c723c7de6b849995ba83774532862cfe8b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e7fcb-66df-4e59-8130-9579a79eca9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7635
x-amzn-requestid: dbd07cc7-d0f6-4500-83c6-b19fa9fa2e3d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xt5xDEfUIAMFYXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630f09a0-3771b23118f3711e5caca699;Sampled=0
x-amzn-remapped-date: Wed, 31 Aug 2022 07:11:28 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ILut4hEDJbs6jNr3wpPST1HgAYMabIT7cdZebRFETn8lL_QfS92KBA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:40:34 GMT
age: 79475
etag: "ad1d9eee90556a359547dc7cbb6758aee2c804cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc91b46a1-040b-46aa-a7a1-af67f0058b83.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc91b46a1-040b-46aa-a7a1-af67f0058b83.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb1a86dcf94db0a29a6ebe21866766d4
b3491a6f12c97c8e1848a206a185fae29213c1e5
d05619e519fed6c0b6c0616cf540908006a68f127b25e38fb9d041dfe2546df4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc91b46a1-040b-46aa-a7a1-af67f0058b83.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7519
x-amzn-requestid: 8d8a8df6-abf5-45dd-8d78-de5ae715a9d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YE_UNEoWoAMFRLw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631845b4-0101ca7a09e432f305aa7066;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:18:12 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: Z0Z4IozbbythqWA7mNaqtO4NWbLi1zL2G6HmMGP0c9VqIzMugvVh_Q==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 00:00:49 GMT
age: 71060
etag: "b3491a6f12c97c8e1848a206a185fae29213c1e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
popcash.net/world/go/134600/426377
301 Moved Permanently 162 B URL HTTP/2 popcash.net/world/go/134600/426377
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /world/go/134600/426377 HTTP/1.1
Host: popcash.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://miao.labtrffc.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 11 Sep 2022 19:45:09 GMT
content-type: text/html
content-length: 162
location: http://ps.popcash.net/go/134600/426377
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=148pKxQeHX048gmRfWofG02BptKkQQhcuCkTEZ2q4nNpv20ttwG11FIyifQz4K33D0dLd2FwWGfw9FiqKq2vzzIm7jnj2ArNKhtNBtYqxVk5u93FAh2Nl%2BYEq8gq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7492e6ee8fcf0afe-OSL
X-Firefox-Spdy: h2
ps.popcash.net/go/134600/426377
200 OK 272 B URL HTTP/1.1 ps.popcash.net/go/134600/426377
IP
File type HTML document, ASCII text
Hash 6d51b67013275b402ce398cd8ab785f3
ad5af51ad1ebbf14c702b6e5367f2688143cc98e
8747444b6e5eee30921a3392ba5884350d6c1ea677be276f3899ccfabad0e445
Analyzer Verdict Alert fortinet Malware
GET /go/134600/426377 HTTP/1.1
Host: ps.popcash.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/html
Date: Sun, 11 Sep 2022 19:45:09 GMT
Server: nginx
Vary: Accept-Encoding
Content-Length: 272
Connection: keep-alive
ps.popcash.net/ad/ad?p=134600&w=426377&t=7ca85a910c6722db&r=&vw=1280&vh=0
303 See Other 0 B URL HTTP/1.1 ps.popcash.net/ad/ad?p=134600&w=426377&t=7ca85a910c6722db&r=&vw=1280&vh=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ad/ad?p=134600&w=426377&t=7ca85a910c6722db&r=&vw=1280&vh=0 HTTP/1.1
Host: ps.popcash.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ps.popcash.net/go/134600/426377
Upgrade-Insecure-Requests: 1
HTTP/1.1 303 See Other
Date: Sun, 11 Sep 2022 19:45:09 GMT
Location: https://adeumssp.com/smart?p=CsxnKsUCG9yw6Ygyhidzm6oiJ2jrV4PSrgPJitGQya&s=adeum.click
Server: nginx
Content-Length: 0
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash f92b0ab6e75b8ad64d12bb8cf734c2db
6d84dc59ff53cdc160d40d98afbd5ed77e02ed37
9c22437658f7813e6f36cca518384212f72f853311253e765d033c9ddf2481aa
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 19:45:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 02:30:52 GMT
Expires: Thu, 15 Sep 2022 02:30:51 GMT
Etag: "6d84dc59ff53cdc160d40d98afbd5ed77e02ed37"
Cache-Control: max-age=282940,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7492e6f4cca30b65-OSL
adeumssp.com/smart?p=CsxnKsUCG9yw6Ygyhidzm6oiJ2jrV4PSrgPJitGQya&s=adeum.click
302 Found 1.5 kB URL HTTP/2 adeumssp.com/smart?p=CsxnKsUCG9yw6Ygyhidzm6oiJ2jrV4PSrgPJitGQya&s=adeum.click
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text, with very long lines (1510)
Hash ad8dec082b8d9b84a57dcfaff7951e56
53daa461034523619a370375bea04fa6a2d995ba
706a3d0abfb9c1b4778ada78df6b5c2d97c48846a0c7a282f6a86a9662af2a53
GET /smart?p=CsxnKsUCG9yw6Ygyhidzm6oiJ2jrV4PSrgPJitGQya&s=adeum.click HTTP/1.1
Host: adeumssp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ps.popcash.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 11 Sep 2022 19:45:10 GMT
content-type: text/html; charset=utf-8
content-length: 1512
location: https://fancycrab.net/click?a=Csxn&e=gAAAAABjHjrG3KuFVk24uAmEYTRP3eBq5OJ3OB-H4axwgrsJTXss-XnjPdr1iVOLM-fYO0Hyv1YcGX9Lu1A9qFg5uYrhreG8aukpv8pPhmmEq8_H0LpKuSyayDufgaJv7_YIxXCo2SygkexkxE38_4lQnGlMZlAY-N4RrV5NkHz7uWEHljkr9okAySkZyTctH7MVYO1ZVo2HAn_PcZQHtnT0PrThk7wdqG4H66zdsmA3JewWdix4Su-qI6Nx6_VwKMPt_wO4nVUTiimtYQiLSnzSmxImAFZoaw9_oHxeHTLDnvD3fv6xT0IaHIQeBiQFuBmkUwJp8-T86n0ZLqycqWCZrbw9rgUm7I0dZFEsnjwwUAp0VNzTELx7Jd4FU9_OJA3eg_l7xb4brfsBMtgZUizYXZc738JpUGtyBIgS-X09CECkBXjTRQUoEGz4h0AfEqXOOor29cSNPDfOX2O-Zv-Y1q_mb0SlMuVk9dz1ffYPYZ_FwlqVZrbxnlETiqz_TMjqlQtKT-wZexSqfnCvxggil4i6kWxNwXE314gusVtQso82tBfzuK1Qf-ZbwSI8LPgv_-NcSSNRtHN5fCHh6V_X6pVXmtz0APPzAefe7bdPGCTRP_9g9wLmCQTV_LwPYbCOHF9da_LZLPA5KJikEj3Ce3nBHCihJPNU-AmmIyWMigcVvaURicwyWBcmzNUS8MbhtXDyWaxQJwuyBn6SilH81EVHdjsBBhMzLW1aITIdnVKeMEgUV3G4xf6RQVFk1sHPeCR2ddJUbHTCLMxCt16VLWB8XLDprqAyhfBUgj3PjCOQQWrk91D0Icyk1RbIyKyXIle2f17eirwgiWTJ9K_rBR00l9HCg9Cs2_1_YJdqTE9rbIKMkexb3RLT1AWGvQZRjk51bJ1ycmum3SVtFtdl-nidW2A-fJqwmvwtQ83gbOxoyxDNpZYrzrBx0we6WRgMddl3cLw1cee0Hg9FhmSTlgd2DbczyQwNrryCz3fpRGRY_jRdF2wy1N2TF2betgekYkzxDOqHHVmjujFxbzVHdj8NAVF-3u9MbFy-WnUW9uVCtUXOUeGyUfGtLwmPowEiAv2yxFcPwtKU6D8Yj-nJv3KnSHSTjUM4E3iYj6yO5uD-eXAFepgOAFRmQX4QN2libSTFdwcLysLqsG329Fpd0q5ilHpuaMD1UsNkls5oEU1O0SGfpab9g7V94wr_ocQqeDPo94seEye8QWaXWgcvjK0tb4nI70hA0KYk-AMhYtOkbfYrhID4KEhsilKqiDhIwJEcLqF1ODHNWAucL647L-D0c-RVMwV5OhAN-_9FPxvTq-B2qj-g_qOZhMdUY-OuXkk5p7OV7mtAoikhT7xqB2mo68BMkSr0Jb6Rdl3DNirD5y_MUY6M8m2A_6LLrEhmYswjBgrZAhFRmSPVwDgsjMKIumh2Bg%3D%3D
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 1edf6f4cbe3674ee62aea7d23ccfabc9
c92d580a8956a080328076dbc9c4b76c9321e0b8
b649e0f5020818c437bacdfcd5973fdb554f825fcac353cc82eab49021b4aaff
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 19:45:10 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 09 Sep 2022 05:21:53 GMT
Expires: Fri, 16 Sep 2022 05:21:52 GMT
Etag: "c92d580a8956a080328076dbc9c4b76c9321e0b8"
Cache-Control: max-age=379601,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7492e6f8590e0b65-OSL
fancycrab.net/sc?a=Csxn&c=DQkZMcdR3zcLMrpgyj4oNB&e=gAAAAABjHjrGmWrL43SQDSlAal0bfxc_hBwYtSdv374JgQfOHjDYDrtYvxaqJFHAoMGEgaV4sZeE83c4fCWMSDjFEq7Dvx97ftVHA4Kve5XFLnypNoe9rb5WEQP3eagp5M64YgkAu6XgVfyED4ZGRFTjSZdWORFoiUJnMw1QlGfiLUSP0emhuE2MTS5j2T0Lq3cYQC08AzgOCDtpiiJF3hLNm_DscJ1uuuxHNADWa4HcL8tFMVNQ2jqL9A8W26WVzNK05lSRR7tuVcUM0FyfTeQmLYf40Lmwahv_hrf-bEt3BlTXqyYb5VmxcsgRHeTQYoLyxmk9ac5YepvCjSK41PfYK_-r-E87dBzXk_jGrjNl-RA-0TijC_aUbbXG4CfhlERy2skoGKPh4_brIW14r4JO4BbUj6JIT7zyhv6ZMBQN4pmuHw-ZYPdlPnvO8eFaG09caPhJ51tD8YUEX-jOOQGihgxw6flSRQvfy2zA-UwUzgFaLd_r-HaIA8B5p1HE_Lwrwri-gLfMi2p6-VvTikXIcvQOiU9ftuG2NKQVCi2eTrkJjCz3-Rn-QhBwAHO03NO_kv3sh8EnAYyuNu-gZT34UP6VaUgdOQ99OhwcrfuIovIfJe9a_N2fieMALpMXCildxcSl1-YdNk5tMyghl5e_VXC20gFYNpHp9HTci08pGjhkmfGihyQwniSn9r_Rpd9mCywUNfHI-f-bh0RyevjtlMIVTPG95-dsjLdoqo8wQDbS6B2z_Cp6eu5PoXu9hau3GkLGthKYTP5XB8oo0B1hImGSs9BX3A-GtciZfRyjvnz_Qh_zAxEBQSjnNkIOpeHHBAQheUN3YW-CfDOtpu6tFG0wgOonEKzdoFsAE55DJ4xaaDmZUExsHJRNd1iuuUM2NNTSnRHSkY4IMff2v_cEEKmgVdWrAc2UFOaujyikhDjVAb9oMZGO1QVBjMLioLdItzpzeXjl22NFYvLQcN_IXSTs71v6FtR2B7YsJQlNCxUp05Wk-fJCdphL5lXRhn7NT-yXCqWU3vthMwSLWIwjwvWS6fvurpAzKjJ8B879MFLPAoPhbnvbJ8m-EFd9JrTtxRjVLvSI6z0mQC-2zOEmrN2cd3b2AZXew1ByHw3hk86mGAt6nMc0j3HiXxPHHZCsZHb0HsT6FiR-qzo27xoLAyvMwEzzr43XbMWXpqUK7ouGMCwnAtXtq8ksGiHhljFUg0JxjW2F8h5qIxjqJqJOY5mf2y5oATJsnRvCuurTwSg1OTllD8VF73sAzQk8c7QFm9lj47G3bLcRzzxmbrcwnAtfj7LeCtODCuJTlG5QBR1ijjai_efwTELjc11DT3eQC5b3uB_zpM6OXrrutCbX3Vo00ZWdTHLN6L-Qu3TQAKJOetrvjy5tgrYJagcxMCs83Y34RXrmFlax3ucmcI-2scaldNVtNQ==&f=0
302 Found 832 B URL HTTP/2 fancycrab.net/sc?a=Csxn&c=DQkZMcdR3zcLMrpgyj4oNB&e=gAAAAABjHjrGmWrL43SQDSlAal0bfxc_hBwYtSdv374JgQfOHjDYDrtYvxaqJFHAoMGEgaV4sZeE83c4fCWMSDjFEq7Dvx97ftVHA4Kve5XFLnypNoe9rb5WEQP3eagp5M64YgkAu6XgVfyED4ZGRFTjSZdWORFoiUJnMw1QlGfiLUSP0emhuE2MTS5j2T0Lq3cYQC08AzgOCDtpiiJF3hLNm_DscJ1uuuxHNADWa4HcL8tFMVNQ2jqL9A8W26WVzNK05lSRR7tuVcUM0FyfTeQmLYf40Lmwahv_hrf-bEt3BlTXqyYb5VmxcsgRHeTQYoLyxmk9ac5YepvCjSK41PfYK_-r-E87dBzXk_jGrjNl-RA-0TijC_aUbbXG4CfhlERy2skoGKPh4_brIW14r4JO4BbUj6JIT7zyhv6ZMBQN4pmuHw-ZYPdlPnvO8eFaG09caPhJ51tD8YUEX-jOOQGihgxw6flSRQvfy2zA-UwUzgFaLd_r-HaIA8B5p1HE_Lwrwri-gLfMi2p6-VvTikXIcvQOiU9ftuG2NKQVCi2eTrkJjCz3-Rn-QhBwAHO03NO_kv3sh8EnAYyuNu-gZT34UP6VaUgdOQ99OhwcrfuIovIfJe9a_N2fieMALpMXCildxcSl1-YdNk5tMyghl5e_VXC20gFYNpHp9HTci08pGjhkmfGihyQwniSn9r_Rpd9mCywUNfHI-f-bh0RyevjtlMIVTPG95-dsjLdoqo8wQDbS6B2z_Cp6eu5PoXu9hau3GkLGthKYTP5XB8oo0B1hImGSs9BX3A-GtciZfRyjvnz_Qh_zAxEBQSjnNkIOpeHHBAQheUN3YW-CfDOtpu6tFG0wgOonEKzdoFsAE55DJ4xaaDmZUExsHJRNd1iuuUM2NNTSnRHSkY4IMff2v_cEEKmgVdWrAc2UFOaujyikhDjVAb9oMZGO1QVBjMLioLdItzpzeXjl22NFYvLQcN_IXSTs71v6FtR2B7YsJQlNCxUp05Wk-fJCdphL5lXRhn7NT-yXCqWU3vthMwSLWIwjwvWS6fvurpAzKjJ8B879MFLPAoPhbnvbJ8m-EFd9JrTtxRjVLvSI6z0mQC-2zOEmrN2cd3b2AZXew1ByHw3hk86mGAt6nMc0j3HiXxPHHZCsZHb0HsT6FiR-qzo27xoLAyvMwEzzr43XbMWXpqUK7ouGMCwnAtXtq8ksGiHhljFUg0JxjW2F8h5qIxjqJqJOY5mf2y5oATJsnRvCuurTwSg1OTllD8VF73sAzQk8c7QFm9lj47G3bLcRzzxmbrcwnAtfj7LeCtODCuJTlG5QBR1ijjai_efwTELjc11DT3eQC5b3uB_zpM6OXrrutCbX3Vo00ZWdTHLN6L-Qu3TQAKJOetrvjy5tgrYJagcxMCs83Y34RXrmFlax3ucmcI-2scaldNVtNQ==&f=0
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text, with very long lines (830)
Hash 46c877f3d6dcd1f0ffccb2f49bc98219
db4875728e7513a4115a9b7aeda7073ead25a3ca
f2956dd4f4cc51dbbd03fda88705929ded8b542b31f598e4e01455eb9cb06ad9
GET /sc?a=Csxn&c=DQkZMcdR3zcLMrpgyj4oNB&e=gAAAAABjHjrGmWrL43SQDSlAal0bfxc_hBwYtSdv374JgQfOHjDYDrtYvxaqJFHAoMGEgaV4sZeE83c4fCWMSDjFEq7Dvx97ftVHA4Kve5XFLnypNoe9rb5WEQP3eagp5M64YgkAu6XgVfyED4ZGRFTjSZdWORFoiUJnMw1QlGfiLUSP0emhuE2MTS5j2T0Lq3cYQC08AzgOCDtpiiJF3hLNm_DscJ1uuuxHNADWa4HcL8tFMVNQ2jqL9A8W26WVzNK05lSRR7tuVcUM0FyfTeQmLYf40Lmwahv_hrf-bEt3BlTXqyYb5VmxcsgRHeTQYoLyxmk9ac5YepvCjSK41PfYK_-r-E87dBzXk_jGrjNl-RA-0TijC_aUbbXG4CfhlERy2skoGKPh4_brIW14r4JO4BbUj6JIT7zyhv6ZMBQN4pmuHw-ZYPdlPnvO8eFaG09caPhJ51tD8YUEX-jOOQGihgxw6flSRQvfy2zA-UwUzgFaLd_r-HaIA8B5p1HE_Lwrwri-gLfMi2p6-VvTikXIcvQOiU9ftuG2NKQVCi2eTrkJjCz3-Rn-QhBwAHO03NO_kv3sh8EnAYyuNu-gZT34UP6VaUgdOQ99OhwcrfuIovIfJe9a_N2fieMALpMXCildxcSl1-YdNk5tMyghl5e_VXC20gFYNpHp9HTci08pGjhkmfGihyQwniSn9r_Rpd9mCywUNfHI-f-bh0RyevjtlMIVTPG95-dsjLdoqo8wQDbS6B2z_Cp6eu5PoXu9hau3GkLGthKYTP5XB8oo0B1hImGSs9BX3A-GtciZfRyjvnz_Qh_zAxEBQSjnNkIOpeHHBAQheUN3YW-CfDOtpu6tFG0wgOonEKzdoFsAE55DJ4xaaDmZUExsHJRNd1iuuUM2NNTSnRHSkY4IMff2v_cEEKmgVdWrAc2UFOaujyikhDjVAb9oMZGO1QVBjMLioLdItzpzeXjl22NFYvLQcN_IXSTs71v6FtR2B7YsJQlNCxUp05Wk-fJCdphL5lXRhn7NT-yXCqWU3vthMwSLWIwjwvWS6fvurpAzKjJ8B879MFLPAoPhbnvbJ8m-EFd9JrTtxRjVLvSI6z0mQC-2zOEmrN2cd3b2AZXew1ByHw3hk86mGAt6nMc0j3HiXxPHHZCsZHb0HsT6FiR-qzo27xoLAyvMwEzzr43XbMWXpqUK7ouGMCwnAtXtq8ksGiHhljFUg0JxjW2F8h5qIxjqJqJOY5mf2y5oATJsnRvCuurTwSg1OTllD8VF73sAzQk8c7QFm9lj47G3bLcRzzxmbrcwnAtfj7LeCtODCuJTlG5QBR1ijjai_efwTELjc11DT3eQC5b3uB_zpM6OXrrutCbX3Vo00ZWdTHLN6L-Qu3TQAKJOetrvjy5tgrYJagcxMCs83Y34RXrmFlax3ucmcI-2scaldNVtNQ==&f=0 HTTP/1.1
Host: fancycrab.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fancycrab.net/click?a=Csxn&e=gAAAAABjHjrG3KuFVk24uAmEYTRP3eBq5OJ3OB-H4axwgrsJTXss-XnjPdr1iVOLM-fYO0Hyv1YcGX9Lu1A9qFg5uYrhreG8aukpv8pPhmmEq8_H0LpKuSyayDufgaJv7_YIxXCo2SygkexkxE38_4lQnGlMZlAY-N4RrV5NkHz7uWEHljkr9okAySkZyTctH7MVYO1ZVo2HAn_PcZQHtnT0PrThk7wdqG4H66zdsmA3JewWdix4Su-qI6Nx6_VwKMPt_wO4nVUTiimtYQiLSnzSmxImAFZoaw9_oHxeHTLDnvD3fv6xT0IaHIQeBiQFuBmkUwJp8-T86n0ZLqycqWCZrbw9rgUm7I0dZFEsnjwwUAp0VNzTELx7Jd4FU9_OJA3eg_l7xb4brfsBMtgZUizYXZc738JpUGtyBIgS-X09CECkBXjTRQUoEGz4h0AfEqXOOor29cSNPDfOX2O-Zv-Y1q_mb0SlMuVk9dz1ffYPYZ_FwlqVZrbxnlETiqz_TMjqlQtKT-wZexSqfnCvxggil4i6kWxNwXE314gusVtQso82tBfzuK1Qf-ZbwSI8LPgv_-NcSSNRtHN5fCHh6V_X6pVXmtz0APPzAefe7bdPGCTRP_9g9wLmCQTV_LwPYbCOHF9da_LZLPA5KJikEj3Ce3nBHCihJPNU-AmmIyWMigcVvaURicwyWBcmzNUS8MbhtXDyWaxQJwuyBn6SilH81EVHdjsBBhMzLW1aITIdnVKeMEgUV3G4xf6RQVFk1sHPeCR2ddJUbHTCLMxCt16VLWB8XLDprqAyhfBUgj3PjCOQQWrk91D0Icyk1RbIyKyXIle2f17eirwgiWTJ9K_rBR00l9HCg9Cs2_1_YJdqTE9rbIKMkexb3RLT1AWGvQZRjk51bJ1ycmum3SVtFtdl-nidW2A-fJqwmvwtQ83gbOxoyxDNpZYrzrBx0we6WRgMddl3cLw1cee0Hg9FhmSTlgd2DbczyQwNrryCz3fpRGRY_jRdF2wy1N2TF2betgekYkzxDOqHHVmjujFxbzVHdj8NAVF-3u9MbFy-WnUW9uVCtUXOUeGyUfGtLwmPowEiAv2yxFcPwtKU6D8Yj-nJv3KnSHSTjUM4E3iYj6yO5uD-eXAFepgOAFRmQX4QN2libSTFdwcLysLqsG329Fpd0q5ilHpuaMD1UsNkls5oEU1O0SGfpab9g7V94wr_ocQqeDPo94seEye8QWaXWgcvjK0tb4nI70hA0KYk-AMhYtOkbfYrhID4KEhsilKqiDhIwJEcLqF1ODHNWAucL647L-D0c-RVMwV5OhAN-_9FPxvTq-B2qj-g_qOZhMdUY-OuXkk5p7OV7mtAoikhT7xqB2mo68BMkSr0Jb6Rdl3DNirD5y_MUY6M8m2A_6LLrEhmYswjBgrZAhFRmSPVwDgsjMKIumh2Bg%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx/1.19.1
date: Sun, 11 Sep 2022 19:45:10 GMT
content-type: text/html; charset=utf-8
content-length: 832
location: http://s.optnx.com/cimp.php?data=TVRZMk1qa3lOVFV4TUh3NE1ERmtObVZtT1dFeU1qVTVNalV5TURVeU0ySmpNVFE0TnpjeE56QTFZZy0tfGh0dHA6Ly9ldS5kc3BzdXBlci5jb20vYXBpL3N1Ym1pdF9mb3JtX3JlcXVlc3Q_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--
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
s.optnx.com/cimp.php?data=TVRZMk1qa3lOVFV4TUh3NE1ERmtObVZtT1dFeU1qVTVNalV5TURVeU0ySmpNVFE0TnpjeE56QTFZZy0tfGh0dHA6Ly9ldS5kc3BzdXBlci5jb20vYXBpL3N1Ym1pdF9mb3JtX3JlcXVlc3Q_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--
200 OK 1.1 kB URL HTTP/1.1 s.optnx.com/cimp.php?data=TVRZMk1qa3lOVFV4TUh3NE1ERmtObVZtT1dFeU1qVTVNalV5TURVeU0ySmpNVFE0TnpjeE56QTFZZy0tfGh0dHA6Ly9ldS5kc3BzdXBlci5jb20vYXBpL3N1Ym1pdF9mb3JtX3JlcXVlc3Q_cD1lOTViZWZjMi1lMjNhLTQ5ZmYtODFlOC0wYTAwZDNkOTViZTMmdHM9MTY2MjkyNTUxMCZ6PTQ4MDc1MTcmZXhvX2NpZD0zNDA5NjI3fGh0dHB8OTEuOTAuNDIuMTU0fE5PUnw0MXxhZGV1bS5jb218NDk0MjI0fDcxMjE5Mnw5NDQ0Njh8NDU1Nzg2Mnw1MTF8MzQwOTYyN3wzNTE0ODEzNXwxNXwzfDB8MHwyNTM0NHwwfDMuOTR8NzB8VVNEfFVTRHwxfDF8MjJ8fDF8Tk9SfHw4NHwyfDB8fDE2NDkwNTg2NDF8MTllMGEzZDNlOTU0Zjg5MTBkZGQ3ZDIwYjExYzk1ZWV8MXwwfHBzLnBvcGNhc2gubmV0fDB8MHwwfDAuMDJ8MXwwfGV4Y2hhbmdlX2xpbmt8MHwwfDMxNDMyNDJ8LTF8MnwzMTQzMjQ0fHx8MnwxNDQwfHwwfDB8MHwwfDB8MHwxfDB8fDh8MXxNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2Ojk2LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvOTYuMHxPS3xlNGQ0Y2ZmMTQ0MmNmNmRmODlmYTY5OGFjNjNiNTYwMw--
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1457)
Hash f7ffd53ab0d7b0273719d250b67fbe0c
2747f0e663764e7fed622d9aabf3ce87d5a28d67
b45e8ae35dc0578bc6b146f82fd5cfdac3f0254c7edd98681695c61f595bd31c
GET /cimp.php?data=TVRZMk1qa3lOVFV4TUh3NE1ERmtObVZtT1dFeU1qVTVNalV5TURVeU0ySmpNVFE0TnpjeE56QTFZZy0tfGh0dHA6Ly9ldS5kc3BzdXBlci5jb20vYXBpL3N1Ym1pdF9mb3JtX3JlcXVlc3Q_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-- HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:45:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22631e3ac6d1c313.908423942207484420%22%3B%7D; expires=Tue, 10 Sep 2024 19:45:10 GMT; path=; domain=.optnx.com;
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.optnx.com/cimp.php?data=TVRZMk1qa3lOVFV4TUh3NE1ERmtObVZtT1dFeU1qVTVNalV5TURVeU0ySmpNVFE0TnpjeE56QTFZZy0tfGh0dHA6Ly9ldS5kc3BzdXBlci5jb20vYXBpL3N1Ym1pdF9mb3JtX3JlcXVlc3Q_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--&p=http%3A%2F%2Fadeum.com&tested=1&check=4982d74cc5945eb5f443cbeab8c29c8c&screen_resolution=1280x1024&container_resolution=1280x939&iframe=0
302 Found 0 B URL HTTP/1.1 s.optnx.com/cimp.php?data=TVRZMk1qa3lOVFV4TUh3NE1ERmtObVZtT1dFeU1qVTVNalV5TURVeU0ySmpNVFE0TnpjeE56QTFZZy0tfGh0dHA6Ly9ldS5kc3BzdXBlci5jb20vYXBpL3N1Ym1pdF9mb3JtX3JlcXVlc3Q_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--&p=http%3A%2F%2Fadeum.com&tested=1&check=4982d74cc5945eb5f443cbeab8c29c8c&screen_resolution=1280x1024&container_resolution=1280x939&iframe=0
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=TVRZMk1qa3lOVFV4TUh3NE1ERmtObVZtT1dFeU1qVTVNalV5TURVeU0ySmpNVFE0TnpjeE56QTFZZy0tfGh0dHA6Ly9ldS5kc3BzdXBlci5jb20vYXBpL3N1Ym1pdF9mb3JtX3JlcXVlc3Q_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--&p=http%3A%2F%2Fadeum.com&tested=1&check=4982d74cc5945eb5f443cbeab8c29c8c&screen_resolution=1280x1024&container_resolution=1280x939&iframe=0 HTTP/1.1
Host: s.optnx.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://s.optnx.com/cimp.php?data=TVRZMk1qa3lOVFV4TUh3NE1ERmtObVZtT1dFeU1qVTVNalV5TURVeU0ySmpNVFE0TnpjeE56QTFZZy0tfGh0dHA6Ly9ldS5kc3BzdXBlci5jb20vYXBpL3N1Ym1pdF9mb3JtX3JlcXVlc3Q_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--
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22631e3ac6d1c313.908423942207484420%22%3B%7D
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 11 Sep 2022 19:45:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22631e3ac6d1c313.908423942207484420%22%3B%7D; expires=Tue, 10 Sep 2024 19:45:10 GMT; path=; domain=.optnx.com;
Location: http://eu.dspsuper.com/api/submit_form_request?p=e95befc2-e23a-49ff-81e8-0a00d3d95be3&ts=1662925510&z=4807517&exo_cid=3409627&exffir=eyJjIjoiNDk4MmQ3NGNjNTk0NWViNWY0NDNjYmVhYjhjMjljOGMiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
X-Robots-Tag: noindex, follow
eu.dspsuper.com/api/submit_form_request?p=e95befc2-e23a-49ff-81e8-0a00d3d95be3&ts=1662925510&z=4807517&exo_cid=3409627&exffir=eyJjIjoiNDk4MmQ3NGNjNTk0NWViNWY0NDNjYmVhYjhjMjljOGMiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
200 OK 5.6 kB URL HTTP/1.1 eu.dspsuper.com/api/submit_form_request?p=e95befc2-e23a-49ff-81e8-0a00d3d95be3&ts=1662925510&z=4807517&exo_cid=3409627&exffir=eyJjIjoiNDk4MmQ3NGNjNTk0NWViNWY0NDNjYmVhYjhjMjljOGMiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4632)
Hash ff00a3b9f8b459c56b307ced97f10958
4f316922653760d1e590a9ee6356dd991c3d01ea
4b04d5b090c77349d6573dc0a5e04050fcff88e377431362bd64b3a9d90bbbb5
Analyzer Verdict Alert quad9 Sinkholed
GET /api/submit_form_request?p=e95befc2-e23a-49ff-81e8-0a00d3d95be3&ts=1662925510&z=4807517&exo_cid=3409627&exffir=eyJjIjoiNDk4MmQ3NGNjNTk0NWViNWY0NDNjYmVhYjhjMjljOGMiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0- HTTP/1.1
Host: eu.dspsuper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://s.optnx.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:45:10 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *
eu.dspsuper.com/api/win_request?ad_scheme=1&p=e95befc2-e23a-49ff-81e8-0a00d3d95be3&hil=1&ng=1&ix=0&pt=0&np=0&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Feu.dspsuper.com%2Fapi%2Fsubmit_form_request%3Fp%3De95befc2-e23a-49ff-81e8-0a00d3d95be3%26ts%3D1662925510%26z%3D4807517%26exo_cid%3D3409627%26exffir%3DeyJjIjoiNDk4MmQ3NGNjNTk0NWViNWY0NDNjYmVhYjhjMjljOGMiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-&wy=-1&wx=-1&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=0&sah=1002&navlng=en-US&rf=http%3A%2F%2Fs.optnx.com%2F&wgl=&as=100
301 Moved Permanently 234 B URL HTTP/1.1 eu.dspsuper.com/api/win_request?ad_scheme=1&p=e95befc2-e23a-49ff-81e8-0a00d3d95be3&hil=1&ng=1&ix=0&pt=0&np=0&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Feu.dspsuper.com%2Fapi%2Fsubmit_form_request%3Fp%3De95befc2-e23a-49ff-81e8-0a00d3d95be3%26ts%3D1662925510%26z%3D4807517%26exo_cid%3D3409627%26exffir%3DeyJjIjoiNDk4MmQ3NGNjNTk0NWViNWY0NDNjYmVhYjhjMjljOGMiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-&wy=-1&wx=-1&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=0&sah=1002&navlng=en-US&rf=http%3A%2F%2Fs.optnx.com%2F&wgl=&as=100
IP
File type HTML document, ASCII text
Hash 489b94cddc30470e58eaaf0e44435843
90134f85263e00b73cd653183051b25b5d7ad8d7
f92b294143142db88502b39d695c3ded6cf9530e69c8d39a4c06161fa0229e71
Analyzer Verdict Alert quad9 Sinkholed
GET /api/win_request?ad_scheme=1&p=e95befc2-e23a-49ff-81e8-0a00d3d95be3&hil=1&ng=1&ix=0&pt=0&np=0&nw=1&nb=1&sw=1280&sh=1024&pl=http%3A%2F%2Feu.dspsuper.com%2Fapi%2Fsubmit_form_request%3Fp%3De95befc2-e23a-49ff-81e8-0a00d3d95be3%26ts%3D1662925510%26z%3D4807517%26exo_cid%3D3409627%26exffir%3DeyJjIjoiNDk4MmQ3NGNjNTk0NWViNWY0NDNjYmVhYjhjMjljOGMiLCJ0IjoiMSIsInNyIjoiMTI4MHgxMDI0IiwiY3IiOiIxMjgweDkzOSIsImkiOiIwIn0-&wy=-1&wx=-1&ww=1280&wh=1024&cw=1280&wiw=1280&wih=939&wfc=0&sah=1002&navlng=en-US&rf=http%3A%2F%2Fs.optnx.com%2F&wgl=&as=100 HTTP/1.1
Host: eu.dspsuper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://eu.dspsuper.com/api/reverse?var=4807517&feedId=747
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 11 Sep 2022 19:45:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 234
Connection: keep-alive
Location: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *
ocsp.netsolssl.com/
200 OK 472 B IP
Hash c5bfe5042c477cca2d762732b84e6c5f
a5f764370b355aa8ddbd172e59de29f80e0d1524
3acfdd125577776f3ab65a72c3d74800c3a66f190a5a6f7a736dd34c322e21e0
POST / HTTP/1.1
Host: ocsp.netsolssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 19:45:11 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 13:06:08 GMT
Expires: Thu, 15 Sep 2022 13:06:07 GMT
Etag: "a5f764370b355aa8ddbd172e59de29f80e0d1524"
Cache-Control: max-age=321055,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7492e6fd0c6cfab4-OSL
eu.dspsuper.com/favicon.ico
404 Not Found 19 B URL HTTP/1.1 eu.dspsuper.com/favicon.ico
IP
Hash 595e88012a6521aae3e12cbebe76eb9e
da3968197e7bf67aa45a77515b52ba2710c5fc34
b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: eu.dspsuper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://eu.dspsuper.com/api/reverse?var=4807517&feedId=747
HTTP/1.1 404 Not Found
Server: nginx
Date: Sun, 11 Sep 2022 19:45:11 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 19
Connection: keep-alive
X-Content-Type-Options: nosniff
www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
200 OK 32 kB URL HTTP/1.1 www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1696), with CRLF, LF line terminators
Hash 5a33845cfb450fb4f582d20a239ff38e
e6d789b0059db2689ebb8798a8c5e6924685a4eb
3c5248c90ced7b3faced59e900853109e2f03c716dab098decfa52efe9fee041
GET /nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid} HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://eu.dspsuper.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Sun, 11 Sep 2022 19:45:11 GMT
Link: <https://www.lyca-mobile.no/nb/?p=170723>; rel=shortlink
Server: Apache
Set-Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; path=/; domain=.lyca-mobile.no; secure; HttpOnly;HttpOnly; Secure; SameSite=None;HttpOnly; Secure; SameSite=None;SameSite=None;Secure
newsim_tab=0; expires=Sun, 11-Sep-2022 19:55:11 GMT; Max-Age=600; path=/;HttpOnly; Secure; SameSite=None;HttpOnly; Secure; SameSite=None;SameSite=None;Secure
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 32048
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/simple-sitemap/lib/assets/css/simple-sitemap.css
200 OK 1.8 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/simple-sitemap/lib/assets/css/simple-sitemap.css
IP
Hash 999af40135d16a152caaee08d90f72d8
7462b3f3d77148eb3601c302b182ba74265def75
a67e5b0779241cd4c4d99b2b47e4ead0f0ce2cb2ab2a1fb5464d62f5a543dd3f
GET /wp-content/plugins/simple-sitemap/lib/assets/css/simple-sitemap.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1763
Connection: keep-alive
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/flat-icon/flaticon.css
200 OK 417 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/flat-icon/flaticon.css
IP
File type ASCII text, with very long lines (1000), with no line terminators
Hash 5e5c8838d3f45e076213445010a63eb8
6aedac1cb54fd087ea16c8bae11c0687bef29ce8
653364905a7234231046bf7134bfb1d2f8f957e10463e74d636e4465bf1b8139
GET /wp-content/themes/Divi-child/vendor/flat-icon/flaticon.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 07:14:45 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:43 GMT
ETag: W/"944296da525e8552632efd1dc0fd0480"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3taNW85KAlAGKOn77LRzXrQH6QT3IPa8XS94bpvnjGo-yPkLUEqyGg==
Age: 45028
www.lyca-mobile.no/wp-content/plugins/custom-search-plugin/css/style.css
200 OK 251 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/custom-search-plugin/css/style.css
IP
Hash 90fe42aaed8e5c04b824b1ca3cf3ea34
737cfe50f07686fb94ca84b3e836ac7d85d425d9
2a50c1b8ad7b97eea3b52d13f8623eeffe389262e3eccfb676eaacd15619345b
GET /wp-content/plugins/custom-search-plugin/css/style.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 251
Connection: keep-alive
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/linear-icons/style.css
200 OK 1.6 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/linear-icons/style.css
IP
File type ASCII text, with very long lines (7000), with no line terminators
Hash e77b4c5adc36759a673b6b76cbf6a196
d311136f4aea1048b139fa65ee46e4c14db9e72e
d773b8cc485d6b33e888f1e52ae212f8489899e922ef3757d8c293ec46976a76
GET /wp-content/themes/Divi-child/vendor/linear-icons/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 07:40:58 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:44 GMT
ETag: W/"e93b8e4cf5dc750d2d02a5b9d19f9706"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7faSc2r2Jd0_EMyZRsZ40RzNx35-BggWZ4JHCPSK1CMG_vkAEH8IoA==
Age: 43455
d3uayxmzbnco7f.cloudfront.net/wp-includes/css/dist/block-library/style.css
200 OK 9.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/css/dist/block-library/style.css
IP
Hash ca01fc1aa60c2eb82fef673ef0c2d5a4
06b9f80e3768b1ee9704cd1e1b75f4b21da79ecc
c969eab199aaaf80951e57611462cd20ec11b8ea82f70f49acb3d35eeb44a46c
GET /wp-includes/css/dist/block-library/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 08:17:40 GMT
Last-Modified: Thu, 06 Aug 2020 03:32:13 GMT
ETag: W/"ff1e4526d778743bf4370b47ff17e7c7"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KotlfsiKxXssCRXLV3PnayltlJxSKGV2dsz0Viyglsn6KIo93uIiGg==
Age: 41253
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/css/student-style.css
200 OK 966 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/css/student-style.css
IP
File type ASCII text, with CR line terminators
Hash 64eaec02b035ad1628a7890becee905c
d9a7cd1dd7d3400c09e341e4bba580b80b0a41d9
370ce3c5280f78beb793f8773f3f74b225a2e54f35449df02aa8e181a4842255
GET /wp-content/themes/Divi-child/css/student-style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 966
Connection: keep-alive
Last-Modified: Thu, 18 Nov 2021 11:11:57 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Sep 2022 08:25:51 GMT
ETag: "64eaec02b035ad1628a7890becee905c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mWPP-X4bteIapglRIgh1rlufEVRqbHWzrWyQTeJpni5D6c7r6tVAbA==
Age: 40762
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/bootstrap/css/bootstrap.min.css
200 OK 20 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/bootstrap/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Hash 075824a0c036c236c5e8492f08e512a1
f7436fe37e2c4d5040e9860ec5f9f587a15e4ff5
9c087e856d65a1a69fec4e0832e24786645e3a0336a86af27e819b5fff26ef73
GET /wp-content/themes/Divi-child/vendor/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 02:34:02 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:42 GMT
ETag: W/"ac9de5b47373547a27390517f13fe21a"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: v26yEWkrywySHKkrXRc1ixicVqz2c13qCr7kJfWndbU_LvS1-AJ_1Q==
Age: 61871
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/font-awesome/css/font-awesome.min.css
200 OK 6.6 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/font-awesome/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (28877), with no line terminators
Hash 6ef23f392085e4f41b2a48a849285db4
fa10fd75932da2a4cd4cfb715b92d0a593f938c8
2f503ae5184f8be0174319c9fca2ced870abedaca4d075a9669b63522714a01c
GET /wp-content/themes/Divi-child/vendor/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 12:23:42 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:43 GMT
ETag: W/"4f0c935c3631f777ea790a05a44c1744"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: A3wCwFvQsMcpwxOH_gbQZfclU_ac-mbjTFKqTgR4ACQCBC08HrQRUA==
Age: 26491
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/css/countries.css
200 OK 1.6 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/css/countries.css
IP
File type ASCII text, with very long lines (15687), with no line terminators
Hash db2e0b2f0f8abd8de0ea50b3f1845b17
bc8ddfe06db11ad3acf8108730658cfdbb241617
733a3f392e76eb0751922823da5daa60f9259f832f8d7364a5ec6d666da91b91
GET /wp-content/themes/Divi-child/css/countries.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 08:17:40 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:32 GMT
ETag: W/"31ec7a36deac6eda43f22dd60a421a40"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: oTwDb2cvABLlMFOZjxkprXgnTQsQMLFf7epoOAb-HYOrLxZbpezCfw==
Age: 41253
www.lyca-mobile.no/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css
200 OK 645 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css
IP
Hash c98f02f1afd562a7288aa2dc828e6186
d0f42b73794b0d3ffb9e3eb2d79218d14c40dc88
9fb5a2a2bea5341dd17ec72403d66f0903278030092ae829fe6bb4e23e6af725
GET /wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 645
Connection: keep-alive
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/my-account.css
200 OK 2.7 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/my-account.css
IP
File type ASCII text, with very long lines (12687)
Hash edaef7b1579fa6b17bc49b100a520d53
d3de40dee60300755798e57f58196ab9817feb0a
8fda9db90799c72fc0f7ede446d691091a9af13dff76563e8d69e4ae62ffbda3
GET /wp-content/themes/Divi-child/my-account.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 07:37:25 GMT
Last-Modified: Thu, 18 Nov 2021 11:11:57 GMT
ETag: W/"5e2d79452ec87ed86924ea2519c341ef"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lg5BvWe_uR0XhMZrUq1nHvnyB3SJtlAMddqksSWEWFLI-aRpfZhKCg==
Age: 43668
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/line-awesome/css/line-awesome.min.css
200 OK 6.1 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/line-awesome/css/line-awesome.min.css
IP
File type ASCII text, with very long lines (27557)
Hash f5395ab0991a9d1f7f70a7fa2b809459
6561a78c405f657cc4627b8d985836441a08a526
955a11a60852c3d3f358513b5f416c0d1c46c0348b04ba141e0290fcbb0296ad
GET /wp-content/themes/Divi-child/vendor/line-awesome/css/line-awesome.min.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 06:22:16 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:44 GMT
ETag: W/"4334c8c70998d81bde3e6765828811a6"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cACNyVGDd-MpVoAIE1zQxAIDezGFq0XMLgH6TFRw3iCq0ldjwmF8TQ==
Age: 48177
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes.css
200 OK 5.8 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes.css
IP
File type ASCII text, with very long lines (859)
Hash f2ade5833349a05ae5c1891ff6f9f10d
8bbbc77688d1fa458c2e617587b5146726c233fe
87fda12448ee92b2d7bae614e307e3855472430a2dced2ae0163d58475f37862
GET /wp-content/themes/Divi/epanel/shortcodes/css/shortcodes.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 12:36:47 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:49 GMT
ETag: W/"ea1a16f72cd2c8d66fdf5e8924f78eee"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LPqQyHvGUXhUBPJA5avhqMcXsghrWRc-S35DHVTslRx2mygULdbWWQ==
Age: 25706
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes_responsive.css
200 OK 821 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes_responsive.css
IP
Hash 39586c05ed4972bad19bfa5961faa77a
492df4e0c5eba2050c7a2b1d1d95f713540ec22e
dbceeae75dc6e2b92d179b238ef4ffbc2286bd84ea0309d6abd3f087309015aa
GET /wp-content/themes/Divi/epanel/shortcodes/css/shortcodes_responsive.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:49 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 12:56:57 GMT
Cache-Control: 2592000
ETag: W/"58f7be607923d9296d5628a2d7469422"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: W6eZ2IrPQV34lPFpzj92iJYx-hxQqfvfJkcSrXjloQHqz0-m7-U5oA==
Age: 24496
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/style.css
200 OK 44 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/style.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5f08e1a4ffec29b5daa0b3e0534dc593
c2d77652e83d51990fd14944dfaed8490d1a417c
7dfc43ffcc3d328ffb76a74878dc4deaecd115e074208ede4eb8a6f0128681b4
GET /wp-content/themes/Divi/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 06:01:08 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:55 GMT
ETag: W/"817303872fd1f4d16b34fcd79ab7d2d3"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YjH9Fsjkh2__5n7v-IeoSzu-kcZIMNYg9nH6L7c_6z882cdR6VEQhQ==
Age: 49445
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
200 OK 118 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
IP
File type ASCII text, with very long lines (505)
Size 118 kB (117732 bytes)
Hash 02d68124d6dc58a784bb76e3b773ae3b
63db842e332931270e4753074b1c0ef4fa490ef7
23109d8a1733a8b337a9e6f405160bd421ebeef62765ac2688ba367ea9da1212
GET /wp-content/themes/Divi-child/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 07:14:45 GMT
Last-Modified: Fri, 15 Jul 2022 07:16:49 GMT
ETag: W/"07571e83ac07033388dffa6b348bc459"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zZQxiORaN6AG3l7pMcuW7H9_M8TNCplVNhpc_3SaHO1X-7NUxYB5Yw==
Age: 45028
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/styles/magnific_popup.css
200 OK 2.0 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/styles/magnific_popup.css
IP
File type ASCII text, with very long lines (311)
Hash 22fdf819d26d31cfbfec1d7cff7371bf
50741511e1cd53b0ba2abe08b8da08e22bf24b66
1bee554f87601922cd1d398cfaa6467560409a03f916bd7cf98c2e9791d8a21f
GET /wp-content/themes/Divi/includes/builder/styles/magnific_popup.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:54 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 13:42:54 GMT
Cache-Control: 2592000
ETag: W/"6e30bbc36a055e4e39e3b1fe966ba0b2"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1vnO84vglmDhy5Lr-lNZgMO9QpBlPCeUzLd9UKQgWWEIfCffp79FCA==
Age: 21739
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/jquery.js
200 OK 34 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/jquery.js
IP
File type ASCII text, with very long lines (31997)
Hash 4d7d1bfbeb102e4253eccee86bc6379a
9629fb8ac414676db360bf21403e47d8ab325479
c908e04362a54e76b10de18f67b4add608a38da3ba9c096df0ab33e2c76e3a75
GET /wp-includes/js/jquery/jquery.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:44 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 13:22:55 GMT
ETag: W/"49edccea2e7ba985cadc9ba0531cbed1"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Hbr3J5Rbu73TLu1YuvKAKoTuY2DiM3GzxVtgW4ydXxE4cFQ7eeC7Tw==
Age: 22938
www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.css
200 OK 8.4 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.css
IP
File type ASCII text, with very long lines (2363)
Hash 211e9acb7b08468bf462f3cc35d58dba
30b16e5f18fb53e5536e1dff154a4288dea94c41
a31c685f9330266e5b4a2fb4c7c6439f0550fefcdadebd2548f746387820359c
GET /wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 8384
Connection: keep-alive
fancycrab.net/click?a=Csxn&e=gAAAAABjHjrG3KuFVk24uAmEYTRP3eBq5OJ3OB-H4axwgrsJTXss-XnjPdr1iVOLM-fYO0Hyv1YcGX9Lu1A9qFg5uYrhreG8aukpv8pPhmmEq8_H0LpKuSyayDufgaJv7_YIxXCo2SygkexkxE38_4lQnGlMZlAY-N4RrV5NkHz7uWEHljkr9okAySkZyTctH7MVYO1ZVo2HAn_PcZQHtnT0PrThk7wdqG4H66zdsmA3JewWdix4Su-qI6Nx6_VwKMPt_wO4nVUTiimtYQiLSnzSmxImAFZoaw9_oHxeHTLDnvD3fv6xT0IaHIQeBiQFuBmkUwJp8-T86n0ZLqycqWCZrbw9rgUm7I0dZFEsnjwwUAp0VNzTELx7Jd4FU9_OJA3eg_l7xb4brfsBMtgZUizYXZc738JpUGtyBIgS-X09CECkBXjTRQUoEGz4h0AfEqXOOor29cSNPDfOX2O-Zv-Y1q_mb0SlMuVk9dz1ffYPYZ_FwlqVZrbxnlETiqz_TMjqlQtKT-wZexSqfnCvxggil4i6kWxNwXE314gusVtQso82tBfzuK1Qf-ZbwSI8LPgv_-NcSSNRtHN5fCHh6V_X6pVXmtz0APPzAefe7bdPGCTRP_9g9wLmCQTV_LwPYbCOHF9da_LZLPA5KJikEj3Ce3nBHCihJPNU-AmmIyWMigcVvaURicwyWBcmzNUS8MbhtXDyWaxQJwuyBn6SilH81EVHdjsBBhMzLW1aITIdnVKeMEgUV3G4xf6RQVFk1sHPeCR2ddJUbHTCLMxCt16VLWB8XLDprqAyhfBUgj3PjCOQQWrk91D0Icyk1RbIyKyXIle2f17eirwgiWTJ9K_rBR00l9HCg9Cs2_1_YJdqTE9rbIKMkexb3RLT1AWGvQZRjk51bJ1ycmum3SVtFtdl-nidW2A-fJqwmvwtQ83gbOxoyxDNpZYrzrBx0we6WRgMddl3cLw1cee0Hg9FhmSTlgd2DbczyQwNrryCz3fpRGRY_jRdF2wy1N2TF2betgekYkzxDOqHHVmjujFxbzVHdj8NAVF-3u9MbFy-WnUW9uVCtUXOUeGyUfGtLwmPowEiAv2yxFcPwtKU6D8Yj-nJv3KnSHSTjUM4E3iYj6yO5uD-eXAFepgOAFRmQX4QN2libSTFdwcLysLqsG329Fpd0q5ilHpuaMD1UsNkls5oEU1O0SGfpab9g7V94wr_ocQqeDPo94seEye8QWaXWgcvjK0tb4nI70hA0KYk-AMhYtOkbfYrhID4KEhsilKqiDhIwJEcLqF1ODHNWAucL647L-D0c-RVMwV5OhAN-_9FPxvTq-B2qj-g_qOZhMdUY-OuXkk5p7OV7mtAoikhT7xqB2mo68BMkSr0Jb6Rdl3DNirD5y_MUY6M8m2A_6LLrEhmYswjBgrZAhFRmSPVwDgsjMKIumh2Bg%3D%3D
200 OK 1.7 kB URL HTTP/2 fancycrab.net/click?a=Csxn&e=gAAAAABjHjrG3KuFVk24uAmEYTRP3eBq5OJ3OB-H4axwgrsJTXss-XnjPdr1iVOLM-fYO0Hyv1YcGX9Lu1A9qFg5uYrhreG8aukpv8pPhmmEq8_H0LpKuSyayDufgaJv7_YIxXCo2SygkexkxE38_4lQnGlMZlAY-N4RrV5NkHz7uWEHljkr9okAySkZyTctH7MVYO1ZVo2HAn_PcZQHtnT0PrThk7wdqG4H66zdsmA3JewWdix4Su-qI6Nx6_VwKMPt_wO4nVUTiimtYQiLSnzSmxImAFZoaw9_oHxeHTLDnvD3fv6xT0IaHIQeBiQFuBmkUwJp8-T86n0ZLqycqWCZrbw9rgUm7I0dZFEsnjwwUAp0VNzTELx7Jd4FU9_OJA3eg_l7xb4brfsBMtgZUizYXZc738JpUGtyBIgS-X09CECkBXjTRQUoEGz4h0AfEqXOOor29cSNPDfOX2O-Zv-Y1q_mb0SlMuVk9dz1ffYPYZ_FwlqVZrbxnlETiqz_TMjqlQtKT-wZexSqfnCvxggil4i6kWxNwXE314gusVtQso82tBfzuK1Qf-ZbwSI8LPgv_-NcSSNRtHN5fCHh6V_X6pVXmtz0APPzAefe7bdPGCTRP_9g9wLmCQTV_LwPYbCOHF9da_LZLPA5KJikEj3Ce3nBHCihJPNU-AmmIyWMigcVvaURicwyWBcmzNUS8MbhtXDyWaxQJwuyBn6SilH81EVHdjsBBhMzLW1aITIdnVKeMEgUV3G4xf6RQVFk1sHPeCR2ddJUbHTCLMxCt16VLWB8XLDprqAyhfBUgj3PjCOQQWrk91D0Icyk1RbIyKyXIle2f17eirwgiWTJ9K_rBR00l9HCg9Cs2_1_YJdqTE9rbIKMkexb3RLT1AWGvQZRjk51bJ1ycmum3SVtFtdl-nidW2A-fJqwmvwtQ83gbOxoyxDNpZYrzrBx0we6WRgMddl3cLw1cee0Hg9FhmSTlgd2DbczyQwNrryCz3fpRGRY_jRdF2wy1N2TF2betgekYkzxDOqHHVmjujFxbzVHdj8NAVF-3u9MbFy-WnUW9uVCtUXOUeGyUfGtLwmPowEiAv2yxFcPwtKU6D8Yj-nJv3KnSHSTjUM4E3iYj6yO5uD-eXAFepgOAFRmQX4QN2libSTFdwcLysLqsG329Fpd0q5ilHpuaMD1UsNkls5oEU1O0SGfpab9g7V94wr_ocQqeDPo94seEye8QWaXWgcvjK0tb4nI70hA0KYk-AMhYtOkbfYrhID4KEhsilKqiDhIwJEcLqF1ODHNWAucL647L-D0c-RVMwV5OhAN-_9FPxvTq-B2qj-g_qOZhMdUY-OuXkk5p7OV7mtAoikhT7xqB2mo68BMkSr0Jb6Rdl3DNirD5y_MUY6M8m2A_6LLrEhmYswjBgrZAhFRmSPVwDgsjMKIumh2Bg%3D%3D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1535)
Hash e84ccd5a9a9f6302873c1f6bf3a7c671
4cb5fcf8acce592982ec8327483314e950118665
6d5733b47a7c38ed33abe8549371a5b2e30cce15259e1755c8cdfbb8e878f629
GET /click?a=Csxn&e=gAAAAABjHjrG3KuFVk24uAmEYTRP3eBq5OJ3OB-H4axwgrsJTXss-XnjPdr1iVOLM-fYO0Hyv1YcGX9Lu1A9qFg5uYrhreG8aukpv8pPhmmEq8_H0LpKuSyayDufgaJv7_YIxXCo2SygkexkxE38_4lQnGlMZlAY-N4RrV5NkHz7uWEHljkr9okAySkZyTctH7MVYO1ZVo2HAn_PcZQHtnT0PrThk7wdqG4H66zdsmA3JewWdix4Su-qI6Nx6_VwKMPt_wO4nVUTiimtYQiLSnzSmxImAFZoaw9_oHxeHTLDnvD3fv6xT0IaHIQeBiQFuBmkUwJp8-T86n0ZLqycqWCZrbw9rgUm7I0dZFEsnjwwUAp0VNzTELx7Jd4FU9_OJA3eg_l7xb4brfsBMtgZUizYXZc738JpUGtyBIgS-X09CECkBXjTRQUoEGz4h0AfEqXOOor29cSNPDfOX2O-Zv-Y1q_mb0SlMuVk9dz1ffYPYZ_FwlqVZrbxnlETiqz_TMjqlQtKT-wZexSqfnCvxggil4i6kWxNwXE314gusVtQso82tBfzuK1Qf-ZbwSI8LPgv_-NcSSNRtHN5fCHh6V_X6pVXmtz0APPzAefe7bdPGCTRP_9g9wLmCQTV_LwPYbCOHF9da_LZLPA5KJikEj3Ce3nBHCihJPNU-AmmIyWMigcVvaURicwyWBcmzNUS8MbhtXDyWaxQJwuyBn6SilH81EVHdjsBBhMzLW1aITIdnVKeMEgUV3G4xf6RQVFk1sHPeCR2ddJUbHTCLMxCt16VLWB8XLDprqAyhfBUgj3PjCOQQWrk91D0Icyk1RbIyKyXIle2f17eirwgiWTJ9K_rBR00l9HCg9Cs2_1_YJdqTE9rbIKMkexb3RLT1AWGvQZRjk51bJ1ycmum3SVtFtdl-nidW2A-fJqwmvwtQ83gbOxoyxDNpZYrzrBx0we6WRgMddl3cLw1cee0Hg9FhmSTlgd2DbczyQwNrryCz3fpRGRY_jRdF2wy1N2TF2betgekYkzxDOqHHVmjujFxbzVHdj8NAVF-3u9MbFy-WnUW9uVCtUXOUeGyUfGtLwmPowEiAv2yxFcPwtKU6D8Yj-nJv3KnSHSTjUM4E3iYj6yO5uD-eXAFepgOAFRmQX4QN2libSTFdwcLysLqsG329Fpd0q5ilHpuaMD1UsNkls5oEU1O0SGfpab9g7V94wr_ocQqeDPo94seEye8QWaXWgcvjK0tb4nI70hA0KYk-AMhYtOkbfYrhID4KEhsilKqiDhIwJEcLqF1ODHNWAucL647L-D0c-RVMwV5OhAN-_9FPxvTq-B2qj-g_qOZhMdUY-OuXkk5p7OV7mtAoikhT7xqB2mo68BMkSr0Jb6Rdl3DNirD5y_MUY6M8m2A_6LLrEhmYswjBgrZAhFRmSPVwDgsjMKIumh2Bg%3D%3D HTTP/1.1
Host: fancycrab.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ps.popcash.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.19.1
date: Sun, 11 Sep 2022 19:45:10 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
www.lyca-mobile.no/wp-content/plugins/wp-store-locator/css/styles.css
200 OK 4.4 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/wp-store-locator/css/styles.css
IP
Hash 29d83f16ddcd51bb2d8e29cfa6f0d970
d8aa3982c0c288b37f78f81c34eabfd24bd6bf84
5d585c7bba79f48f5ceaca987c6b08fde3da899d8512e1bf13f81a747d8db56d
GET /wp-content/plugins/wp-store-locator/css/styles.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:57 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 4432
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.css
200 OK 552 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.css
IP
File type ASCII text, with very long lines (1756)
Hash cf85cdcf046f700267df1aaf104a2b39
852c3e9da0e745e68109819957b9ca45f4e55886
6f64c08cd674c507292ff081be79f54bb5bde34b90a25e2a619f4c7c0e1c421c
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 552
Connection: keep-alive
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/jquery-migrate.js
200 OK 7.8 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/jquery-migrate.js
IP
Hash 8e6c904896f4b1783d89ac830e6cac32
bea4148b8d80f2367c4f625b6039204a34e61488
18a493e61e237e23387e0dd45c92ef135d5dc76be8ef18be9a935cee4ebaa19e
GET /wp-includes/js/jquery/jquery-migrate.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:44 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 11:27:15 GMT
ETag: W/"6c57b762589f13ea5b3579ca5e6c369b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yd6X5bK7hUlQJQS-lIYBT3Ww7WlYz1n_e9sb3IpTtKoepeBcrfHHYQ==
Age: 29878
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/core.min.js
200 OK 1.8 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/core.min.js
IP
File type ASCII text, with very long lines (3706)
Hash 360f83f41a873a2dfbe30e18758f71ad
e5c97528baae82331cb1f8ae5d411d141b449653
e27860304066212046617274f5a0529684c77f9edbd0653030cac26150fe3b96
GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 02:34:03 GMT
Last-Modified: Thu, 06 Aug 2020 03:32:47 GMT
ETag: W/"96ff65c925bbaf3e4e7891a7ca1f2b1f"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Rh8k0XwEHoZ6I29O9b4puv2T7n7oy-iQEzspfQ-TaTZjq6XDOXiwfg==
Age: 61870
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/widget.min.js
200 OK 2.6 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/widget.min.js
IP
File type ASCII text, with very long lines (6614)
Hash 5037f1411a7f3ad64087e583c6a16f75
9a912c67adf0275f11fce68fab075b2f9bbcb6d0
535696b88e931f34bcd3b8c13845888d13ec0a164fd15732160130d11697dd78
GET /wp-includes/js/jquery/ui/widget.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 07:18:42 GMT
Last-Modified: Thu, 06 Aug 2020 03:32:47 GMT
ETag: W/"00dedd56324da186973a3b2cc5e8023c"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SyHKiKj30ZK8wjlgX48sX5AsL3djKUyeo9d6xQ9SdzXKursPzCmrLg==
Age: 44791
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/sortable.min.js
200 OK 6.5 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/sortable.min.js
IP
File type HTML document, ASCII text, with very long lines (24670)
Hash e0cc86d58dadacd2ca4aaf476d7befc3
14c6d65c7ba86263166ba30fcbda27c3424418b9
0511f494f058e1643ac4d210218b7749670f2bd6fca61ad4e582e2c7599b9c80
GET /wp-includes/js/jquery/ui/sortable.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:47 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 11:52:15 GMT
ETag: W/"efa8171f2226a422003417095d8549dd"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NmtFta8-5rje_1gg4FD4B1659vGua5c6CecXdGSV_eZ4jy-al-_O8w==
Age: 28378
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/theme.js
200 OK 12 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/theme.js
IP
File type ASCII text, with very long lines (348)
Hash eb773e1a37260886aa29e1b8e3255610
4141ca2e2be1797fb3ff71ddece41e1478ec1441
981e679557a595f6b1a1261a070f59b8d731dc0fdeff44c212744db1336497f4
GET /wp-content/themes/Divi-child/js/theme.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 07:05:55 GMT
Last-Modified: Tue, 15 Feb 2022 04:49:45 GMT
ETag: W/"d056838fef7522c86d80206e3384d0d3"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZDwHmQD-NJY_WRAlOQZyCeOe2NUr8aLCPU_AvVyqm9ugu6beY72w_Q==
Age: 45558
www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/public/css/registration_portin_facility-public.css
200 OK 5.3 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/public/css/registration_portin_facility-public.css
IP
File type ASCII text, with very long lines (1963)
Hash 724d0ef3e346ba677dd5987ce62cb5dc
e73088909d38fc9a932e679f3a4545297899f26e
0021049ab8e09b826fbef1cc74d8ce9794a2a9baa88a793e0773ac3e67f43073
GET /wp-content/plugins/registration-portin-facility/public/css/registration_portin_facility-public.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Mon, 18 Oct 2021 05:15:42 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 5306
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/testimonialslider/css/jquery.bxslider.css
200 OK 885 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/testimonialslider/css/jquery.bxslider.css
IP
File type Unicode text, UTF-8 text, with very long lines (3002), with no line terminators
Hash 3a8400b070b74650e9c7927466b226cf
7669a8def8bca883fbbceed367b8037f35fd1968
0d23aabe78d874edcef092bcc9611dd3c3e8656a03c58ad6e01d6d98ad9165ed
GET /wp-content/plugins/testimonialslider/css/jquery.bxslider.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 885
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/res/js/jquery.cookie.js
200 OK 1.1 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/res/js/jquery.cookie.js
IP
Hash d2c9e62ba741c5dc1cd388f4cb4322c1
57ad65e2ffdb51d2751763b8bee9ad67f372e2a7
0ad3c73c3eaf52b9deb1941a12db921002dbfb2326ca007c6838d9a936a31b02
GET /wp-content/plugins/sitepress-multilingual-cms/res/js/jquery.cookie.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1109
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js
200 OK 155 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js
IP
Hash d3453f9d25d07fae0b6919f644988971
dba21fa483385a873ca38d99bf2433b77dd17fb0
f0fa5140f70a19702bdf6bbf7d495857cadc158e12975983212a36068cab241d
GET /wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 155
Connection: keep-alive
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/countries.js
200 OK 3.4 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/countries.js
IP
File type ASCII text, with very long lines (7323), with no line terminators
Hash 491d3e77e07d9019a0c88383c0def37c
c2045104226430ed0dc0175015c7de44cbf99b14
6d96a380bc00eb62b68eb56e0b66f260430f3aeb682416c1e2e1b48e06a47924
GET /wp-content/themes/Divi-child/js/countries.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 16:23:15 GMT
Cache-Control: 2592000
ETag: W/"41a7f1d63de5dc564de5d2e96ba33db8"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: l-Kn1PfCEKrQw1G9yVl796m3-vqbLI44K-GEqXbII8k1hbq-8vgHBQ==
Age: 12118
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/jquery.validate.js
200 OK 7.4 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/jquery.validate.js
IP
File type Unicode text, UTF-8 text, with very long lines (22821)
Hash a4a22e4c3ba654aa6c518f478cc0c826
c910662f8899cc1b16f512c8f3ae791ac0b15757
6529410fb4503465cd8e49e3d0a35f5e3c65c74389469a6e8edb436924b13c93
GET /wp-content/themes/Divi-child/js/jquery.validate.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 09:02:28 GMT
Cache-Control: 2592000
ETag: W/"50d37feba6afb8e8ee322a7b7871550e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: aYOQdjUHLvDOyYzQas5fgjjsBil6q-v762YtPk-8xo4npLv85UQ8Xg==
Age: 38565
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/jquery.marquee.js
200 OK 2.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/jquery.marquee.js
IP
File type ASCII text, with very long lines (1219)
Hash 951037766e2281b8091afae4d43094dc
71d0680da431135f4b61f7e4ce6600480b632fba
0be16d4ec106cf60c6e5dad835eaf4e94b8467916f132f57c6d9014ce5f32d40
GET /wp-content/themes/Divi-child/js/jquery.marquee.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 12:39:26 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
ETag: W/"a2ac3fef53d651ac8562f1412b28b359"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: K7FnVwPJHFNIUrBMYJTEd6jArrYIBu0ogoeJuZYHT9JJK4Gr50s6VQ==
Age: 25547
cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.37/js/bootstrap-datetimepicker.min.js
200 OK 8.3 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.37/js/bootstrap-datetimepicker.min.js
IP
File type HTML document, ASCII text, with very long lines (32010)
Hash 52b30dc893d14995df58d34ecc5a9f7f
e360fd76bd734011484ed559fd1780e31949353f
eab9dfacfbbb59d341c72a7fe6dd9c12ea4e87f20ccf78bf13bd98ffeab243d4
GET /ajax/libs/bootstrap-datetimepicker/4.17.37/js/bootstrap-datetimepicker.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 19:45:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 8256
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d8e-9443"
last-modified: Mon, 04 May 2020 16:06:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 267014
expires: Fri, 01 Sep 2023 19:45:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RbBDEtW0WLxyf0Ui5HV2te%2FzwufK18BF9BRFx9pK5c44YRfeN9M5bQRyWq6YG9ommDGPj6EpPmpj4DElskmeoMV5GZbEaXoetYDUHIZXhZU%2BM5%2FoyIJEDJgQwFohtKFyXLceAy6f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7492e704ad60b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/additional-methods.js
200 OK 5.9 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/additional-methods.js
IP
File type Non-ISO extended-ASCII text, with very long lines (2940)
Hash 996a483570660889c8401e1b9c497945
9bcdffae3dae74a26abab80dfab1398a9bf0fb88
b26e173d6f901154cb05a047997e57757e2a1fe2c1d9b7353ed3b1b0ce290bf3
GET /wp-content/themes/Divi-child/js/additional-methods.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:40 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 06:04:58 GMT
Cache-Control: 2592000
ETag: W/"074966e2db7e1caa07fd7d0bac25e844"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: y_r6xpaaKkYxJLU1A5y8T6ykvVdgsCl5QSVV5H_nX3Uw-lbkLpWQjQ==
Age: 49215
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/selectize.js
200 OK 18 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/selectize.js
IP
File type Unicode text, UTF-8 text, with very long lines (3172)
Hash 806184b6b95cef101bc3b40d318c7437
7c00f8c82b2688d11a02a914738b43a726a8fccf
b876932e0a0b18fad4742de05351851cda6e7296f7eea981ca6f32ff66f008ea
GET /wp-content/themes/Divi-child/js/selectize.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 07:03:07 GMT
Cache-Control: 2592000
ETag: W/"0941c2f6d545a74b27f2ccdbe7bdc931"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wZGj-izgozDk4plvIa1xcg0cMTEiM8URDv54FoDN5z88TgFJCEnNKw==
Age: 45726
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/roaming_rates.js
200 OK 8.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/roaming_rates.js
IP
Hash d10dc051a63af6e6d3f5ccd564a88ccd
a659af1feca5c605c0493b63fdb8fbe2ac893235
a9d0d16b0e960c32c9f56f18e49c7ee2158b8e30e8c6aeb00239bc7cca7e53e2
GET /wp-content/themes/Divi-child/js/roaming_rates.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 13:56:41 GMT
Last-Modified: Tue, 15 Feb 2022 04:49:50 GMT
ETag: W/"456f0e734f90e7e3ccc2835bf708306d"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: O18l1rywCJ9p9NvkpdG_lQO4VtapyWoUWtDxwscBXIXZlle7tZs1MA==
Age: 20912
www.lyca-mobile.no/wp-content/plugins/custom-search-plugin/js/script.js
200 OK 506 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/custom-search-plugin/js/script.js
IP
Hash 99ad164c48c30d4ea72bdb15d6efe582
f5186aa17398f4034199e9f58308fcf753dfe467
9fb201a9702f44e2d06fd910dc024bb0707badce77b09613754e3ff07038cee1
GET /wp-content/plugins/custom-search-plugin/js/script.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 506
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/vendor/moment.min.js
200 OK 17 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/vendor/moment.min.js
IP
File type ASCII text, with very long lines (51679), with no line terminators
Hash 174f71b5e532bbee86b7e51ed2d11a82
abbec602df1ebf647b88d18cbd1dd162d7f1f6ad
34084291d4c3f11af71b71f00c969a81380daa917e3e90ad1a08e836ced4e5f9
GET /wp-content/plugins/registration-portin-facility/vendor/moment.min.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 16804
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/public/js/registration_portin_facility-public.js
200 OK 3.8 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/public/js/registration_portin_facility-public.js
IP
Hash 01179df43b1213ab1106977745e9b906
9e3ea134dd317bc273af92dc88c44d52a3e73e64
1afad8260106e543ae55da914750a910dcf8bcf16327589f1d9d9ef21713ef2d
GET /wp-content/plugins/registration-portin-facility/public/js/registration_portin_facility-public.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 3837
Connection: keep-alive
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/bootstrap-datepicker.js
200 OK 8.0 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/bootstrap-datepicker.js
IP
File type ASCII text, with very long lines (1634)
Hash 0efd4a2c0ba39477a4a1dec0a32324e1
8fd6895ddfb48542ce37288686811039229fdfdc
1f5098ca76f7dd6c73e4747a5dc74aaf8ae58a19c4d416e3259c7009735e1d48
GET /wp-content/themes/Divi-child/js/bootstrap-datepicker.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:40 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 18:46:06 GMT
Cache-Control: 2592000
ETag: W/"8260533cc46428d9b49e3f137ef2efe7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: OU_YrBhm2b-Oh64320zizjRGpfN0MMEHNNYGqHAGXs3V3OQVAYFVtw==
Age: 3546
www.lyca-mobile.no/wp-content/plugins/wpml-translation-management/res/css/admin-bar-style.css
200 OK 113 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/wpml-translation-management/res/css/admin-bar-style.css
IP
Hash 8bd858d224c135ea74666d7f05df248e
5ef009ed8087ce73a4912d9749d7f041bc16961b
77e5f04f2f5d3a83c50b55652151182633e799d0daf2280c85e4650a0b06d8ab
GET /wp-content/plugins/wpml-translation-management/res/css/admin-bar-style.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:57 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 113
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css
200 OK 933 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css
IP
Hash cb13db3c09d0076dc19a1dbf520c7827
c01159a4163902f3dc824ffade25949d3a9a4097
039804219c46536ac7cdc83d30e672a0467df803c5348a5733e18a687dc828b1
GET /wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 933
Connection: keep-alive
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/bootstrap.min.js
200 OK 9.8 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32033)
Hash efa2267a066a9bd8703418877889be01
efef329805925500d02f190427838e95cea16a0c
c4741718594a775f20c0bf4829dbd28ff4dfdf9b8416a06341590d0f866e8c2a
GET /wp-content/themes/Divi-child/js/bootstrap.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:40 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 19:41:16 GMT
Cache-Control: 2592000
ETag: W/"5869c96cc8f19086aee625d670d741f9"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EWCrDqft9lW9oI2q6HBuXWWYzxzBLB-ZwP3TagK6eIsXaQJZiTwZKQ==
Age: 237
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/custom_validate.js
200 OK 391 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/custom_validate.js
IP
File type ASCII text, with very long lines (391), with no line terminators
Hash 9f4e4bb98cbc4c5fe6ddfc05c7c48095
e87b52374a265e471462e297fad51a39763f2d3b
d48f2166d51e343d4d91b80bf04c970d3d10603d8a6fc5060a53b73c2a8b70cf
GET /wp-content/themes/Divi-child/js/custom_validate.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 391
Connection: keep-alive
Date: Sun, 11 Sep 2022 10:55:58 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
ETag: "9f4e4bb98cbc4c5fe6ddfc05c7c48095"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xSQAN6EV1slyiBGzXy2YUDSGG-ZBLAw6dOhHVBV8g50v2YGk3kAa5w==
Age: 31755
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/tab_custome_function.js
200 OK 502 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/tab_custome_function.js
IP
File type ASCII text, with very long lines (1045)
Hash 5f2c69b95f37474e1e00ef239b56f608
1d08c42fd91c99a3467bc5882d06ef3bf3744ae9
9e2a4081496e36efcc87fbf9ad9215426ad50720e400f721f07aa75b32541403
GET /wp-content/themes/Divi-child/js/tab_custome_function.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 06:29:31 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
ETag: W/"5ad0eb623e462948f1ac5a7f6174f22a"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: viN6slUG08qxagkZ_jTWjPc_jR4Wcm2sCJibvxgd2lprHzAEWtDeTw==
Age: 47742
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/custom-ajax-script.js
200 OK 6.4 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/custom-ajax-script.js
IP
File type ASCII text, with very long lines (507)
Hash 13fcb68e84617a5edd37ec6673ebac4d
a3d0a0ac125a73e6f44038f35cb0dd5eeee9a254
ef560cf4b87ab9a88000d95c37f9c1145dec875c0757dbf6d8913426a10526cb
GET /wp-content/themes/Divi-child/js/custom-ajax-script.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 07:45:53 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 07:05:04 GMT
ETag: W/"2348f035e1ba7ad6b8df58dbbbd5818e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VE-T_4yMiKPM4EAOcTmdLBrPTUIwT1eAxmqGWnNmYFel-c-1V9me6Q==
Age: 45609
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/nc_ajax_script.js
200 OK 7.1 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/nc_ajax_script.js
IP
Hash 0400b5d173fa3c9748f1b534e5d78bc7
4cb670bfc53babeeb67a4d81c7f2680f90fba878
2fc6da70ea36bd19c831537572a9d68b85d683fd6ce29f77862bd3f7b5610652
GET /wp-content/themes/Divi-child/js/nc_ajax_script.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 05 May 2022 06:47:46 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 13:10:56 GMT
ETag: W/"9353377fb1b76e466a7ac26634defc75"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5dxKOWLAaDmzTRob7P3Sr36TB5Flxo7fenHuntAp-5FR8rQGtAgRbg==
Age: 23657
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/wp-embed.js
200 OK 1.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/wp-embed.js
IP
Hash 7fc5bf0112bde5eac0e2eeafc2c5b1a7
2a0538d1d0bb6c43642c52a898bed14f2b2a3d74
ae63195754a94b2bdc375e45892facd347e5a3d4ca59cd35f851754b5c98a99b
GET /wp-includes/js/wp-embed.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 07:30:32 GMT
Last-Modified: Thu, 06 Aug 2020 03:32:49 GMT
ETag: W/"23e24e824f384c5eb11e73576b4ac93c"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3bDFOMYV2eS-PKXlwbi8OZTWucLOcRSbvs-LjD6vqg9idcyWfXaprQ==
Age: 44081
www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.js
200 OK 383 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.js
IP
Hash 6c0ff919dd37f978ea0c1511f47c132c
86c6f73c7f81b5121d666d6968d7debd26c7ab17
790c5d96a9a9be889b5b7113a7b22868d8803355f7e215f8c7481945850b6de5
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 383
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi-child/js/lyca_login.js
200 OK 2.9 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi-child/js/lyca_login.js
IP
Hash 139463c6855f901b3896c4958ef4392c
b0fb2a97f006267aae2924021731fe5527d8e2c7
2801af8987984312d4009ff3f665af9da6ad50faa59367fd9cb0405a03ab9fae
GET /wp-content/themes/Divi-child/js/lyca_login.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:57 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2926
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/testimonialslider/js/jquery.bxslider.min.js
200 OK 5.0 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/testimonialslider/js/jquery.bxslider.min.js
IP
File type ASCII text, with very long lines (19040), with no line terminators
Hash e85a20dd54c74b8868f84e0a6bba50ea
bada9d0db6d46c9ec2d9b8c62fbcab76abe79aa8
127606d08299d86a42cff2be53731e7f2b437d64331bb2ed94b974bafac0fab0
GET /wp-content/plugins/testimonialslider/js/jquery.bxslider.min.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 4966
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi-child/js/personal-details.js
200 OK 1.1 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi-child/js/personal-details.js
IP
Hash 1be41f82152e3a9f3dfb3765d314e9a1
50f7c3ad307d0cedf238b0e373116943dd0e0d30
8c4b153673568490f76767839493b7011d1fc1befc88025df6c1a9f6b58dc747
GET /wp-content/themes/Divi-child/js/personal-details.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:57 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1052
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi-child/css/datepicker.min.css
200 OK 1.9 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi-child/css/datepicker.min.css
IP
File type ASCII text, with very long lines (15319), with no line terminators
Hash 0cd6045269849e0f5ef595828d512ae4
35fa424ca6bfb09fa6b66d99edc3a22a7bda8f05
5b007aa8be84adf6a8a09166efcb085efdf4e252a834b13908a0d58708fa290b
GET /wp-content/themes/Divi-child/css/datepicker.min.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1895
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/frontend-builder-global-functions.js
200 OK 2.5 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/frontend-builder-global-functions.js
IP
Hash 9d72b69bced27d34ea9ed566ecd17462
3649a5d95346ab4c1a5d5da15ecf8e05ab8ba9ed
4ac3bc0988ec7ebf426c9e152daf84e76eea339bc79a92981695bdaca5ed809e
GET /wp-content/themes/Divi/includes/builder/scripts/frontend-builder-global-functions.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2477
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget.js
200 OK 1.2 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (1311)
Hash 59066978220b7f1b7b925b47ff5e46ab
bab1c3c14f4b9649864cb46c1c96250ccdc95024
5fcbd0de5e51104006331763dcf23084505ea9d876e0904815e603e5e0230e90
GET /wp-content/plugins/email-subscribers/widget/es-widget.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:16 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1182
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget-page.js
200 OK 1.2 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget-page.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (1362)
Hash 6bccf039385dadace241e9d47cdc2a0b
5cd85d67c6422cedfb4f5ac10df547928d37f7fb
c27abc361c9a25a87199ebfd36119491c278a33c46bbf06aff3c15d2a9560e0e
GET /wp-content/plugins/email-subscribers/widget/es-widget-page.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:16 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1229
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/lyca-marketing/assets/js/marketing-script.js
200 OK 893 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/lyca-marketing/assets/js/marketing-script.js
IP
File type ASCII text, with CRLF line terminators
Hash 81ac1712537559cdec808b954a7490d8
33f1f5ea6a334887020b71577c72953afda05148
30aabbaab74bd6f87cefb998ef1d09a36cb7f36d5c7ddd4bf519ba1059494e8f
GET /wp-content/plugins/lyca-marketing/assets/js/marketing-script.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Wed, 05 Jan 2022 02:41:28 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 893
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/lyca-marketing/assets/js/jquery.lazy.min.js
200 OK 2.3 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/lyca-marketing/assets/js/jquery.lazy.min.js
IP
File type ASCII text, with very long lines (4890)
Hash a6cc20d3609181f768dc325025b32715
3911e55e11ce33370a2ec382aafb2447cdffc740
c676fc1d198ec9437a42cbfa639bf2bb95cd4502e49e897c922855e4d3d29bd4
GET /wp-content/plugins/lyca-marketing/assets/js/jquery.lazy.min.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2331
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/public/js/messages_nb.js
200 OK 362 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/public/js/messages_nb.js
IP
File type CSV text\012- , ASCII text
Hash a3f9d76a09b85913450b9ad5df628548
3f68b62b063a8b102beeafd5fe478843dcdff423
3c64bb2a6ed3fcdc22fec1c1840b6327cdf9f7cc92a53ef302bca6166c61bdc2
GET /wp-content/plugins/registration-portin-facility/public/js/messages_nb.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 362
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/jquery.mobile.custom.min.js
200 OK 2.9 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/jquery.mobile.custom.min.js
IP
File type ASCII text, with very long lines (7687)
Hash a7bc9bd6d7a143a13d7072ee406c8692
42a46eca1ae6c1b50602917cc52b4b61e13f24f7
63b52e7a859b8943c2d1255b30e1d3b8fa262285797a69098def3967d112ad5b
GET /wp-content/themes/Divi/includes/builder/scripts/jquery.mobile.custom.min.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2872
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/js/custom.js
200 OK 12 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/js/custom.js
IP
File type ASCII text, with very long lines (372)
Hash fc1ad29248d5c0b974cca2d3687eadd1
854c8b173575abe5b2da21b079276788c31149ae
cef043ceda82b48795b26c0873caaeebbc5bbe7c3aa3d1bfd9339dd7010a208f
GET /wp-content/themes/Divi/js/custom.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 11702
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/jquery.fitvids.js
200 OK 1.3 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/jquery.fitvids.js
IP
File type HTML document, ASCII text
Hash 31bd6f103266422712d7f21fd221259c
478fe2a563f8edd20468c878ad0c8dabcc506159
4f7cd006453252967505df8f72f72333de4ba5b2734773aaeca3f250fcf0b5e1
GET /wp-content/themes/Divi/includes/builder/scripts/jquery.fitvids.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1298
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/waypoints.min.js
200 OK 2.7 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/waypoints.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (8668)
Hash f7d4b6ef09365ba331dda4e3648c05fc
f852f915b87c84eb1c3590829e8d9f5c97fbe620
61e3dba589d367496e409a346677b89db66ee134e7370f06a8629ce0492eb6c6
GET /wp-content/themes/Divi/includes/builder/scripts/waypoints.min.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2698
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/jquery.magnific-popup.js
200 OK 8.4 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/jquery.magnific-popup.js
IP
File type ASCII text, with very long lines (21123)
Hash dc28e6a88fd9930fed07d0de45b3a0ea
6181203be9d6e425d138533edaf3121c1a1968b1
497c6f92880fe8e1e12aff1c833910958d7b46379980da1ded707c39a2ca33ee
GET /wp-content/themes/Divi/includes/builder/scripts/jquery.magnific-popup.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 8382
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 57b75ea93de540716c45f1397781431a
431cc2c684385c4e46facd7210b5ac49b9dd09cc
4581d7dd422dc110fa7cfe667297cdb75d92a02ce7226db6db89448befa5b780
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.lyca-mobile.no/wp-content/themes/Divi-child/js/forget-password.js
200 OK 1.3 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi-child/js/forget-password.js
IP
File type ASCII text, with very long lines (359)
Hash d9496518c9ca0e9e5de95991baffb89f
175543365d682ab41f7ec04640a5bd7a49312998
d224f7efdd43321dbd29ab5d128a5ab30e8eaca50879978ddbdb68a85647dafa
GET /wp-content/themes/Divi-child/js/forget-password.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 05 May 2022 06:42:29 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1287
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/rocket-lazy-load/assets/js/12.0/lazyload.js
200 OK 3.6 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/rocket-lazy-load/assets/js/12.0/lazyload.js
IP
File type ASCII text, with very long lines (351)
Hash b53e31a064849939c6a41bb35108dbbe
6153863799c6e67ee3b6340ffca9574ebd995b31
790d3da167b670f0ba09a9f30368be07cdaeffc32f9cd79648be9c892c78fcd8
GET /wp-content/plugins/rocket-lazy-load/assets/js/12.0/lazyload.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 3633
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/frontend-builder-scripts.js
200 OK 31 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/frontend-builder-scripts.js
IP
Hash faf26a56e651031ab3c631961808985a
d6c1f352c66f23c36af8c32ffe09c8bda908285b
7cccf0da734eccae2b86e7638e6c6ca280bed97e23741dcdc3db06ca2b6cc707
GET /wp-content/themes/Divi/includes/builder/scripts/frontend-builder-scripts.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 31305
Connection: keep-alive
www.googletagmanager.com/gtm.js?id=GTM-PNQZL82
200 OK 87 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PNQZL82
IP
File type Unicode text, UTF-8 text, with very long lines (39318)
Hash ada98d145933b04c35901380bf2f2f4d
643ff69e79d8b6e248ffa3a814eab83af41be7c9
451df86427f00071c4e4e149b1d29d48ef6c88778ebfad142c59bf4b93eef202
GET /gtm.js?id=GTM-PNQZL82 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 11 Sep 2022 19:45:12 GMT
expires: Sun, 11 Sep 2022 19:45:12 GMT
cache-control: private, max-age=900
last-modified: Sun, 11 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 87090
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 57b75ea93de540716c45f1397781431a
431cc2c684385c4e46facd7210b5ac49b9dd09cc
4581d7dd422dc110fa7cfe667297cdb75d92a02ce7226db6db89448befa5b780
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5ebcd74196f63d0ad35f2211a9e63c1b
ecaded11f33e9e367bac7a8453551eeaced67242
bc4e4768b724c8037d2e6a82a5aa850bf07a59394bb277aa278b5b5cdf33ccf1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Sun, 11 Sep 2022 18:16:57 GMT
Server: ECS (nyb/1D0B)
X-Cache: Miss from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QvO4KtUaW_BJsPI4FJkVEUWFnaaJhO4TIH4LcA9JDnFzrwEPT9jo_Q==
Age: 5295
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05101008/logo-new-br.svg
200 OK 3.9 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05101008/logo-new-br.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3871), with no line terminators
Hash 600e6fd78377375dfc3cc9b9dadbfdfa
e3bb1098f191d2f9bc63a6402f5ae40d80edcd2c
b5260409c7187bbfd8d84eccf7bf1ccf96644798946c228af252775f7cb0cc13
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05101008/logo-new-br.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: LdDzlXxr9Kt/arwq3LHre6kpiaoIgUoCR0HZe7UryFiEa2d6lSpJHXTNG/Jt7e9pCy6d88BAlco=
x-amz-request-id: GR6CVFFZE9VZJEDK
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Thu, 06 Jan 2022 06:57:00 GMT
ETag: "600e6fd78377375dfc3cc9b9dadbfdfa"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 3871
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/fonts/RobotoCondensed-Bold.ttf
200 OK 170 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/fonts/RobotoCondensed-Bold.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.Roboto CondensedBoldRoboto Condensed BoldVersion \012- data
Size 170 kB (169800 bytes)
Hash 36b5da0333389306669655a13f2209ad
8354979a1c3d7911df925e3b57d8c99398d54020
03b4e8042b9af4bf3349428fa734ed583f2d5d83287e1f42cf4d514c909146ef
GET /wp-content/themes/Divi-child/fonts/RobotoCondensed-Bold.ttf HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.ms-opentype
Content-Length: 169800
Connection: keep-alive
Date: Sat, 10 Sep 2022 22:35:08 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:32 GMT
ETag: "36b5da0333389306669655a13f2209ad"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
Vary: Origin
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1Ok2Y-1ruoXrqxtQxe8gKTe-VooH9Fsh7MjxClT96qjj2FFBjCvQlA==
Age: 76206
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/linear-icons/Linearicons-Free.woff2?w118d
200 OK 22 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/linear-icons/Linearicons-Free.woff2?w118d
IP
File type Web Open Font Format (Version 2), TrueType, length 21780, version 1.0\012- data
Hash 03e91f122aa5fd425abbe23c85546eb0
c87a3db06c5db4e75e639382f174eafa439aeb27
296945e5922e764eef17b1b4a3ee3e60dc202b3c7f074150b62158915bf74e33
GET /wp-content/themes/Divi-child/vendor/linear-icons/Linearicons-Free.woff2?w118d HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 21780
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:44 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Sep 2022 17:52:15 GMT
Cache-Control: 2592000
ETag: "03e91f122aa5fd425abbe23c85546eb0"
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: miDp4-dZPkSPbYL3lK3kKMocVOcewGxpc142U4bhcH5XhG2TZAEj2A==
Age: 6779
s3-eu-central-1.amazonaws.com/lycamobilespain-website/lycamobile-es-cms/wp-content/uploads/2018/06/25105546/activate-your-sim.svg
200 OK 1.9 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobilespain-website/lycamobile-es-cms/wp-content/uploads/2018/06/25105546/activate-your-sim.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1914), with no line terminators
Hash f6081e075c11d4ee9be3b614cdcab433
5b46fc85e5698f59567f0446251f52e1207e8d72
6369d8666187a0119acd2ad3f3bff8472f2cc720649cfa8966fc23719078dd39
GET /lycamobilespain-website/lycamobile-es-cms/wp-content/uploads/2018/06/25105546/activate-your-sim.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: +ZxaTAwU7uCtJxHNEu7wW3/GhA8pAuPzY+pSccQyaKaWvURZcTal3cDz2dw26GFq5WThaiHT+fo=
x-amz-request-id: GR638NHWJCAKFWDR
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 16 Jul 2018 16:00:42 GMT
ETag: "f6081e075c11d4ee9be3b614cdcab433"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 1914
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/fonts/RobotoCondensed-Regular.ttf
200 OK 170 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/fonts/RobotoCondensed-Regular.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.Roboto CondensedRegularVersion 2.137; 2017RobotoC\012- data
Size 170 kB (170284 bytes)
Hash a5a6b71255dc832da585d5c94fa1a115
6a632e0244ae68e70aeb8c8a5d3b360e1648712b
6a2cfb7e61dd09d77526fd314b256894094f96e3a6f3149d9f8000c1132ef4b8
GET /wp-content/themes/Divi-child/fonts/RobotoCondensed-Regular.ttf HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.ms-opentype
Content-Length: 170284
Connection: keep-alive
Date: Sun, 11 Sep 2022 06:37:51 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:32 GMT
ETag: "a5a6b71255dc832da585d5c94fa1a115"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
Vary: Origin
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: i36XRCj8ioa2MbK7nh63oh8UKkt73NE5qS-yEeH5lGEc-ZP2jkZPvQ==
Age: 47243
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/core/admin/fonts/modules.ttf
200 OK 83 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/core/admin/fonts/modules.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, modules \012- data
Hash 87a9fcfa516cd7576d52480b0bb21dae
7b2b31c6f1e91d53b76daad7fedea802592e4da4
c683211e591f2048ec4a840586e4f849894c8a57c147f23d7b5652d61c1260e2
GET /wp-content/themes/Divi/core/admin/fonts/modules.ttf HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.ms-opentype
Content-Length: 82920
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Sep 2022 05:40:14 GMT
Cache-Control: 2592000
ETag: "87a9fcfa516cd7576d52480b0bb21dae"
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Cl_wuWgddXzn2VAin6mMlz38-CMKzFEeW3bUOEmqJTajpJVLvyrsRA==
Age: 50700
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3
200 OK 72 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3
IP
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
GET /wp-content/themes/Divi-child/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 71896
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:43 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Sep 2022 15:19:09 GMT
Cache-Control: 2592000
ETag: "e6cf7c6ec7c2d6f670ae9d762604cb0b"
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cxhsCfzWAZhq77S4XVVSEOJo_5y7b4urOT9Mp1UluHDXuXLWZI-Q_A==
Age: 15965
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/08/30120503/germ-one.svg
200 OK 2.0 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/08/30120503/germ-one.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 27398d9974a03682bca55a5d1c83cfc0
011509bac7ec598f0ba6ff215d92487fc8965bac
28a2f89175ec3599ef375767ea6996f5bb73d38e5a54025deb7f0370505c382f
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/08/30120503/germ-one.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: +rJQ+f1jqctrEmRBllbhaVfvYdTphbFPabUgQ8O/faeha2MKIGxM0qcwBn5bNTEpLQge/9S7/P4=
x-amz-request-id: GR6804M1GZDW8CFW
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Thu, 30 Aug 2018 12:03:58 GMT
ETag: "27398d9974a03682bca55a5d1c83cfc0"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Fri, 30 Aug 2019 12:05:03 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 2016
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/06075441/thumbnail_livechat-home-new.png
200 OK 4.6 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/06075441/thumbnail_livechat-home-new.png
IP
File type PNG image data, 169 x 101, 8-bit/color RGBA, non-interlaced\012- data
Hash 997934aedeaea00686b8b3ddae955e3f
6f1ab00c2308c25108bd68368cbacfc6410bdc43
d9d42de448b8e9c5ba116ccd270456367179a295167174953421fafafb5a932b
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/06075441/thumbnail_livechat-home-new.png HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: Ot//VSdzwI3dIY4UPoFI/Lb4prfCebcZOqn5qqAMXz5w48Dk/QwN32QKo9LSeMkS1BOkucRym3Q=
x-amz-request-id: GR69D48EA5ZXRN0Z
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Wed, 06 Oct 2021 07:51:37 GMT
ETag: "997934aedeaea00686b8b3ddae955e3f"
Cache-Control: max-age=31536000
Expires: Thu, 06 Oct 2022 07:54:41 GMT
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 4589
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/quick-topup.svg
200 OK 794 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/quick-topup.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (568)
Hash cf1e3a7aa04f38e1620d798558f2d606
2c9ad3c5756a3992d80838aea679b7d13fe2e17b
aa9f77e1ebcb1a541bf88994cecc556f52cf27c8176ee8ae14789f38ff55de84
GET /wp-content/themes/Divi-child/img/quick-topup.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 794
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:38 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Sep 2022 08:24:09 GMT
Cache-Control: 2592000
ETag: "cf1e3a7aa04f38e1620d798558f2d606"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: TEiDbqOJZ7_5AxCiu_PJb4dhgAImrroQqwxv0AmkKmQrMmKZ8Owe9A==
Age: 40865
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/buy-bundles.svg
200 OK 525 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/buy-bundles.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 089df5ad1f13ed4a67ba8ed563f2fb7a
49a349c8d3912f6c9ef5db1519a76519f890b934
0064959abecb0e9b2ec31a3ef0e7560bcc6ecd0dc246374e49dd674ae6e510b6
GET /wp-content/themes/Divi-child/img/buy-bundles.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:33 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 19:07:40 GMT
Cache-Control: 2592000
ETag: W/"5fb98b5d9331ffac000aa38ccddcc058"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZFfqHnY71aYbcJwtsKY1nP7KYSco3kNc35sGLeUtbeJk6R8w_SzmfQ==
Age: 2254
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/store-locator.svg
200 OK 958 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/store-locator.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e21443e37ca744aa7d29d2829b46591a
ca3158f56f1c6e1de9564583c398e78d097ed4c4
d07b478885d58c759e9494a4756dbec42b616fc46a14d5b5eed6bbc0dae35352
GET /wp-content/themes/Divi-child/img/store-locator.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 958
Connection: keep-alive
Date: Sun, 11 Sep 2022 07:10:42 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:39 GMT
ETag: "e21443e37ca744aa7d29d2829b46591a"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YDVZwsDZyp8zmCFmuD-hxsG-dkRpKc3QoUbN8ATXJ5J2gUR0tKK2pA==
Age: 45272
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/international-1.svg
200 OK 2.0 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/international-1.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e241cbde90ecbd5a21a851ec1c0d806e
66e85e599a77f141b5b51f7f56fda9a05c348631
bfe76a79be638c8c32cc23e2cc26ac45743aeaf3c16c6851e10d3683f56d17be
GET /wp-content/themes/Divi-child/img/international-1.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:37 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 09:11:11 GMT
Cache-Control: 2592000
ETag: W/"5056ce6c6883a123509cb1cca4031429"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FgJCZEtvYHtAlXTY47XghCQVClhAGJ1z5mA-xo3UmZ_1_bA6P4v1Rw==
Age: 38043
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/contactus.svg
200 OK 646 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/contactus.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b127a283d70bf1c4ecbfab932da2aa69
90be95e05ee092b3b78059ec4d8451468c0f3b64
9d9ef67ed9cdf2eae32c4f8ffb5a1c154501573a36d37bfd0ca910e1e8ae5ca2
GET /wp-content/themes/Divi-child/img/contactus.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 11 Sep 2022 08:01:45 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:36 GMT
ETag: W/"be5d61340a17d803b181cf8d2cee077c"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rVjTqlXaurbReJbN1s8wLVaBFAjLQTX92JjyvklwVToAiQHKx1obFg==
Age: 42209
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 2eed3e79d00bb4bc002d5cff16db207b
dc4cdaf71a4d8fa44eabfe5530403988de1d2bf8
0ed56bfe2a738fc69afc0c991d8c65abe9f5a2204c9a44fa0570e5bd8e47466f
GET /wp-content/themes/Divi-child/img/favicon.ico HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/x-icon
Content-Length: 1150
Connection: keep-alive
Last-Modified: Mon, 18 Oct 2021 07:31:03 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Sep 2022 13:18:17 GMT
ETag: "2eed3e79d00bb4bc002d5cff16db207b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rmBNzMl4gykoE5YKooTugWUUTUJfUdlU2_91OqEdnwnL6AVrOUjA4g==
Age: 23217
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/roaming.svg
200 OK 1.2 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/roaming.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 85a478244d79ab2a1e7caa74f73e89f7
eb1209457084c01a4a6685a268d4e495ea67a5d0
cab3eb0e16aec816bf8f738a6fbe7de33f67f2703c00fd13213385314f497f60
GET /wp-content/themes/Divi-child/img/roaming.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:38 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 06:37:51 GMT
Cache-Control: 2592000
ETag: W/"babdb0858ab2d63fb92348873cb8ddba"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mllAWFkFJNPFh1slnY6aGxixpx2VG1f4kAUxhgVJd5wD1JLbKQGNUQ==
Age: 47243
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/mobile-settings.svg
200 OK 1.2 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/mobile-settings.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3b9d0b16e49f983feb68c71c0c435ec4
e6d82cd2b529e1ec219aa8503080b5815a3d271f
9e17a9e0e46f86caaac0774b886dce68c39a3de44469efb7088200e449343d22
GET /wp-content/themes/Divi-child/img/mobile-settings.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:37 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 07:10:42 GMT
Cache-Control: 2592000
ETag: W/"94e63e235909be075a2884c96906c941"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RhM0-sgaPMxuuMFc3kiKkUch7RLwYRFGFyg6V6v1XFkUc3dYKy1uZg==
Age: 45272
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/faq.svg
200 OK 785 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/faq.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b97c7e4122996f575e68c944d87095d8
d8a4695fe27064b95e4918099aaa3c2be1821f32
42ab849ec5e04c9bad98c11a45f2363492238778f29a64b0a9dc5896dcc90892
GET /wp-content/themes/Divi-child/img/faq.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:36 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 08:24:09 GMT
Cache-Control: 2592000
ETag: W/"6f426cc5e8b051ff22516894f385ff7b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NQT1lV6G_5jS2ydRfygqkT_jJlQT4qRDmHLJw8ZVii51IGDdx_x8Ng==
Age: 40865
www.lyca-mobile.no/wp-content/uploads/json_uploads/errorhandle.json
200 OK 4.1 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/uploads/json_uploads/errorhandle.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1442)
Hash 9c8e140cc95739dfbfa7e6bb132e890c
6995f8ca8d9fb5a68cd8fae4460502bc73fa2c92
3906c7164353e4321efbc4637888bd17c95938e6329f2df1f19c444350f7bbad
GET /wp-content/uploads/json_uploads/errorhandle.json HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Sun, 11 Sep 2022 19:45:13 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:58 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 4099
Connection: keep-alive
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102139/header-fb-new.svg
200 OK 8.4 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102139/header-fb-new.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (11262)
Hash 852b81efbbae0dcfd857f87d6c98189a
d8022ff32daac638cb94b4bd15ec7e7891eaefcb
58480bbcf53220a5a596bebc793c65cd7a22b77f49e4329c0f5f7c8ed8da125a
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102139/header-fb-new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: tmMhLWAti0hd7r2okIzA+P9aEkXHGcITHE7GBSMNDLBzvXhfvPANl3XlewD0Ga/mD1ZNjHkjQQg=
x-amz-request-id: GR64T3MJQDXA9QBK
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:37 GMT
ETag: "852b81efbbae0dcfd857f87d6c98189a"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:39 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 8393
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102142/header-insta-new.svg
200 OK 18 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102142/header-insta-new.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (23958)
Hash 9a55d81cd439e49798109bd463dd1f1b
1afef555c1541124cc9b6c85ae258a72b6818ec1
61f9f838ab4dd5a633b7ae5329af4d2acae8045d2e0e667fd73a3f116b00dab6
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102142/header-insta-new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: rVXIHdFmlGj8XJ1aVJbjmahEJgqOQblur7Jlo+yMvYsFUulGSCKDN7Tf1OGTDBKmotMbHa/fR1A=
x-amz-request-id: GR65MJDPQPRQEHEC
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:40 GMT
ETag: "9a55d81cd439e49798109bd463dd1f1b"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:42 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 17998
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102144/header-twitter-new.svg
200 OK 15 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102144/header-twitter-new.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (20393)
Hash 1b0607b1b648a1f756b1419bbbfaacd9
fd5d74112b7172baffc62e024b91f398f0d280cd
2fedb7c9aad7c7e9473f4ce37fe4ffb0f23ed83dbc188a14aad73de5e858e542
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102144/header-twitter-new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: cr0xybSI/ZlkV7yYaeTrMuQnH59YERlwaXRIrrY36jBQNEttq2gf/WvLypMhvuXuYimx6nHAmLk=
x-amz-request-id: GR69GWV9GXMG2QFX
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:42 GMT
ETag: "1b0607b1b648a1f756b1419bbbfaacd9"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:44 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 15288
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/11065021/european-union_new.svg
200 OK 726 B URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/11065021/european-union_new.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2193), with no line terminators
Hash 300ca84c801a3dff40b9f85bd024669a
d6a6b760a33b8db7e552cb63ad7ca064ef4fae70
9de40f884583d6bc5bbd40bd5b74d0b20c853538aa6a3fabf4144c23ef674983
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/11065021/european-union_new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: qftopP/AV2ZzLptFp0GBRtQFbwyF0fZPX3RhgDV/x8e94Rh0ujN4ttelSTP+gWzDYaevEMSEJ6I=
x-amz-request-id: GR65TM2N7JRF85EZ
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 11 Oct 2021 06:50:14 GMT
ETag: "300ca84c801a3dff40b9f85bd024669a"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Tue, 11 Oct 2022 06:50:21 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 726
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102146/header-youtube-new.svg
200 OK 18 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102146/header-youtube-new.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (24655)
Hash 74d50291fad9e577ecbde522f9882145
7dcf477169f8d5a1d0ee5dd970c10da54cde13f1
a9fc0811ec1d0594b50275f6bb1e275a61144d25f8885333fd5172d34b7f8655
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102146/header-youtube-new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: CBwITA7gxhE9B0yNtNorbrxLbzK0Kl/CvfzoPLgjNq8pV55Zxz31xfrBjGIe6Loec6CIVsz12O8=
x-amz-request-id: GR6A2120YKGEECS8
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:44 GMT
ETag: "74d50291fad9e577ecbde522f9882145"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:46 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 18504
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/07072809/breadcrumb_newbrand_be.png
200 OK 24 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/07072809/breadcrumb_newbrand_be.png
IP
File type PNG image data, 1920 x 140, 8-bit/color RGB, non-interlaced\012- data
Hash ad2b8da460e7f9706da7008773b132b3
5f7ddfbb68f26ba1fb5f0769dca8f88bc01d7829
a55b84d8174fc43917cae9c623df2b1758d7c05493b0881252a55ca87dcfdbf0
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/07072809/breadcrumb_newbrand_be.png HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 84tKzMBXmQCBsgTYj2pSQoz173decVMQIxuY+jDqPvelErG8Z0wS5wi4IJYk4DuhUzmbXxvGlqQ=
x-amz-request-id: GR6BEZ5AYZ0VGXX6
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Thu, 07 Oct 2021 07:25:03 GMT
ETag: "ad2b8da460e7f9706da7008773b132b3"
Cache-Control: max-age=31536000
Expires: Fri, 07 Oct 2022 07:28:09 GMT
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 23600
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 16ad98d05f603eaba421beb08f841d57
a08cf385a9d21355bfef3ab1d477dd10c2d57fec
62830da392ac2a501039971d086a0e63bd174d9519d5addfe7831c754c20777b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 19:45:13 GMT
Last-Modified: Sun, 11 Sep 2022 18:51:56 GMT
Server: ECS (nyb/1D14)
X-Cache: Miss from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: stVLL6j1BMGXnNgvEdKEZ395_8FhlwYgJ_V-71ZMam1SWABxNWaewg==
Age: 3197
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 16ad98d05f603eaba421beb08f841d57
a08cf385a9d21355bfef3ab1d477dd10c2d57fec
62830da392ac2a501039971d086a0e63bd174d9519d5addfe7831c754c20777b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 19:45:13 GMT
Last-Modified: Sun, 11 Sep 2022 18:12:53 GMT
Server: ECS (nyb/1D15)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: M9U1O2TxjkSO6a6gYeFm7nd4QWWnXXPez-s0KoTqo6ZIyiwqmufRew==
Age: 5540
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dbe3a0cdacad2b3866fd4934190bd431
969e13ad553587f1577d23125c6119e773a16c59
91dd0e187bc2576c0830567d1ceeadd3a106afe08622ccd6498fe0bdd32f4d4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
consent.cookiebot.com/uc.js
200 OK 31 kB URL HTTP/2 consent.cookiebot.com/uc.js
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Hash bfd5d0da3a9fa6771af0a51a693752ba
89714adfe7ccb0273694a820f1987ea9a64fdac8
25aef9f0356f966fa85489dc0252fc78179bf3900a654f0a2d521a651df1cd4a
GET /uc.js HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 23 Aug 2022 07:31:36 GMT
accept-ranges: bytes
etag: "aeea9f60c2b6d81:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 31207
cache-control: public, max-age=143
expires: Sun, 11 Sep 2022 19:47:36 GMT
date: Sun, 11 Sep 2022 19:45:13 GMT
X-Firefox-Spdy: h2
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05104722/Belgium1.png
200 OK 3.1 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05104722/Belgium1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 05b0430105aa244028af3d4812cfa862
9eab0b05bd6168d57cce062705562be4feb82f6f
58c034ac6bd3419e05ea16f2ebfbc4682fb594f29a4e2d5d794bcfec5b0993fb
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05104722/Belgium1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 2ZRJKI9w0v3mP21uHpNWZ+DfBZT07E4+Ertwjak9UrVE5nRic5Y1hBJIuOpRgGsQpyRE/8MkPRk=
x-amz-request-id: GR660VQ37929MDD6
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:28 GMT
ETag: "05b0430105aa244028af3d4812cfa862"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 10:47:22 GMT
x-amz-version-id: xPo84QQnS78MMDy3NywneivcwR8deWQC
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3134
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111205/Denmark1.png
200 OK 3.9 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111205/Denmark1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 017dcaacabe7f7dfbf5b430b8188b614
f4cdef6d7cd166e354bcd343aac76dd867eac2eb
4b7007c107f881d48678205fd27f0fdd50d23088bdbf1c7b12af442630909a34
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111205/Denmark1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: dbsizXFNajhr/w1uBVBM7ET2V6B9ebnjsDbhrjXj4nSvPGEFvBH6GjucALiTr+gI3Fhd3MMUusI=
x-amz-request-id: GR6FNJ2FJD3GK6S9
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "017dcaacabe7f7dfbf5b430b8188b614"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:12:05 GMT
x-amz-version-id: uiFsOj3HohBE.Jebck2oQOY6RiDfxk3Q
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3893
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 16ad98d05f603eaba421beb08f841d57
a08cf385a9d21355bfef3ab1d477dd10c2d57fec
62830da392ac2a501039971d086a0e63bd174d9519d5addfe7831c754c20777b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 19:45:13 GMT
Last-Modified: Sun, 11 Sep 2022 18:21:21 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XclSo9L0MqQgNmJGroC0t4Sp55VrX1VnIw-hVbLJbCo0zwDIT3iMlA==
Age: 5032
11029147.fls.doubleclick.net/activityi;src=11029147;type=invmedia;cat=nolyc0;ord=4171283530755;gtm=2wg970;auiddc=1648854537.1662925502;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D?
200 OK 467 B URL HTTP/2 11029147.fls.doubleclick.net/activityi;src=11029147;type=invmedia;cat=nolyc0;ord=4171283530755;gtm=2wg970;auiddc=1648854537.1662925502;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (642), with no line terminators
Hash cf6f72240c6ce2acb16936f7b8710384
e136210b89ac7ded5af0c9e82f6e67f5a7f37927
b4834d2d79f67ebfce450d458779303a59f67545741ceb61d186bae917598c62
GET /activityi;src=11029147;type=invmedia;cat=nolyc0;ord=4171283530755;gtm=2wg970;auiddc=1648854537.1662925502;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D? HTTP/1.1
Host: 11029147.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 11 Sep 2022 19:45:13 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 467
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 11-Sep-2022 20:00:13 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111007/Cyprus1.png
200 OK 7.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111007/Cyprus1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a07ecb819e9041e7aaa1ba734b925e10
3d0a03e7fb4b990a576f3ebe8d07d1cd58ccf0a1
5a7be5dbead23ec1820ad5e47695ccac7082151c22b119af4aa025b7c235596d
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111007/Cyprus1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 56ezaaRvI9yuGlS4dhvHamHvESqKee1654wKaSv3MZfh56shNagAhdm4UGz94eu3kPMP6q5FW54=
x-amz-request-id: GR633HQCSA0MG6WM
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "a07ecb819e9041e7aaa1ba734b925e10"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:10:07 GMT
x-amz-version-id: clCEU3GO5qQuk5QhAMDw0v0RnkhC3c6d
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 7763
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 16ad98d05f603eaba421beb08f841d57
a08cf385a9d21355bfef3ab1d477dd10c2d57fec
62830da392ac2a501039971d086a0e63bd174d9519d5addfe7831c754c20777b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 19:45:13 GMT
Last-Modified: Sun, 11 Sep 2022 18:12:53 GMT
Server: ECS (nyb/1D15)
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: R2npSyuIr-wzI1VhHNCN2mrx8VY_LBrcyxVPkt99OVbOmgmGqJuYyw==
Age: 5540
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 16ad98d05f603eaba421beb08f841d57
a08cf385a9d21355bfef3ab1d477dd10c2d57fec
62830da392ac2a501039971d086a0e63bd174d9519d5addfe7831c754c20777b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=132332
Date: Sun, 11 Sep 2022 19:45:13 GMT
Etag: "631d8628-1d7"
Expires: Tue, 13 Sep 2022 08:30:45 GMT
Last-Modified: Sun, 11 Sep 2022 06:54:32 GMT
Server: ECS (nyb/1D0B)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: h-VwXOuuOyMxoqKBePotqGVV6jlV6YzHfvQcu6eoIkNXfkV16tUSqg==
Age: 5773
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112541/greece1.png
200 OK 4.4 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112541/greece1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 9f96f9ec7e6c20ae3e2fffad9e2d5935
d20f275da48cf934daae0622fba00ac789996576
a5bf00e8fce671f3814258643082db0739a309e5c4f9900e34e08eb12203ab14
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112541/greece1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: MGi0OrCEw94/C4+sSCNKGSHviJiGm8Lu7ndSr4vgSaNISJOx2rkMb8VSQo3h/a30HYD/8UupuTs=
x-amz-request-id: GR60YYRD6T59H8CW
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "9f96f9ec7e6c20ae3e2fffad9e2d5935"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:25:41 GMT
x-amz-version-id: Q7IT_DK9DqY8YXPoF3wYqidHHps8u5mo
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 4373
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113518/Ireland1.png
200 OK 2.4 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113518/Ireland1.png
IP
File type PNG image data, 128 x 128, 8-bit colormap, non-interlaced\012- data
Hash 43d299857d925a89b5e9d9ed735137e6
98dfeb70ca2e020803d0bce2b702762856c1bbe9
f3582ced229071311c510cec9ec473bc624d73866c637def53b9156c8e0007a3
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113518/Ireland1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: hDkcCFbbtHaI99t7d1R+9ImwmcJW97B7zwEWmVUpJxKB2ni2iEQDO8Rx9rcG4vR97Tm6Gr+dl/s=
x-amz-request-id: GR6FNS5DM9DS7CG0
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Wed, 14 Jul 2021 12:18:42 GMT
ETag: "43d299857d925a89b5e9d9ed735137e6"
x-amz-version-id: 144H9sB0.wvoZ7J_SgDb17LmdFMdZ4mk
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 2353
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113718/Italy1.png
200 OK 3.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113718/Italy1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 0f891a07f54e96ad26eab45eff4a4ac4
4216d39a4d5d857a5043a74344e38fae2d57cbb4
b8b8229f776ee43d90df36e703367c559bbb484b837e824b87cd0d0667f96f68
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113718/Italy1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: LJ/rGEvlAidUjG+wv925QDfjAaxZryOuFsTavWom8qL7zbZk20i3MD0eUqzfkcuY0B30ubNIRx8=
x-amz-request-id: GR6FCQGR5NGGPYJ2
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:36 GMT
ETag: "0f891a07f54e96ad26eab45eff4a4ac4"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:37:18 GMT
x-amz-version-id: GTF1L1A9A6.2B4uTj.N2PdO2SsTH.sh1
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3807
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05105612/Bulgaria1.png
200 OK 3.6 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05105612/Bulgaria1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a988ef19186744cb92fbb0b29fd46956
f44b4bca4cbeb6af59414d97e487de1177106ac5
c0a8e61b25f5d6a64c9f45deda84748f57d25db76108601fca0a705188664d3c
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05105612/Bulgaria1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: K7+YX5Xo9htPpx5BnEdRrG9Os6XlMFDjJ+Gl+EmkqXvHEV+W3fQfai6HD8Ti0cl3DCweWaokp1E=
x-amz-request-id: GR6BXKBXFSWXBN94
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:28 GMT
ETag: "a988ef19186744cb92fbb0b29fd46956"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 10:56:12 GMT
x-amz-version-id: rhxVu5a7c0dtIOfOVBZfLRNgZLQcxKbW
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3556
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dbe3a0cdacad2b3866fd4934190bd431
969e13ad553587f1577d23125c6119e773a16c59
91dd0e187bc2576c0830567d1ceeadd3a106afe08622ccd6498fe0bdd32f4d4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112045/France1.png
200 OK 3.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112045/France1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a77830776e897150a6ff71086e102b0d
d51b723d1070266baa7c5f7d7c848245791f7729
aef7056201ef0b57ad96204bca42e09d38886c1139ed77c6d4d102fcdac339fd
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112045/France1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 617rorG8cK67v8KUU5CGiR/ndMw8HJk/R/KthhGQ86wozYv27ie9cf2o8aWQ2nYSR01ylO/Xbwc=
x-amz-request-id: GR63YA67WC57CTCM
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "a77830776e897150a6ff71086e102b0d"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:20:45 GMT
x-amz-version-id: pu8R6M7CKxBCciwISencqH_AybVJLBjI
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3805
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112017/Finland1.png
200 OK 3.6 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112017/Finland1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 5e1cfce111a4d74a372c674d4cc37413
83f346da964635dea608a27d54f85df4477e1fb9
618376f66c76753dbe413321c2600f615d7a86cad126b13f07878c0af4d554d7
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112017/Finland1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: DZXKu7blQ2AgePxPrbwJSyIzvln+apf9S8NW1Csh4u+APufjnHQdvjoHtMXk+6ZU6xGWUx5Nubk=
x-amz-request-id: GR62REXX0RG8HZ2Q
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "5e1cfce111a4d74a372c674d4cc37413"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:20:17 GMT
x-amz-version-id: OwXKXGP8WQZs7BHDS_f4YevL7kKbeDCt
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3636
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114724/Latvia1.png
200 OK 3.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114724/Latvia1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash b9c786d407210d6bc0c2a86265d9f7b0
beb959603fc7cb94368ac2b0db83d5157fc3ed59
88cbf9a06a0e429b27afe129c11e2668cf4dc3cf61918e25b717546ba5f74cc8
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114724/Latvia1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: AVzRrP+00Xd2KrumEvE83arv0BDNS9u+02pdun2DjOPSzB2v2jz3pDIpBgE2Osk5mgtQEZskGgs=
x-amz-request-id: GR60PFSD0A08M4M9
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:36 GMT
ETag: "b9c786d407210d6bc0c2a86265d9f7b0"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:47:24 GMT
x-amz-version-id: hBXvw2q1TABuXXEllSZB6IP18vQ.9xX4
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3774
www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.js
200 OK 3.9 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.js
IP
Hash 2bcea2869112db9a45348df3a5635c24
05f022a59b8e0a0973309ebceeef184f76387a81
f6b0d4241d0d93d79acb7f9037b4a279c28286fb30835b826afa11d2f486fdc7
GET /wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
transfer-encoding: chunked
Connection: keep-alive
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115017/Luxembourg1.png
200 OK 3.9 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115017/Luxembourg1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 3e651c805d98f379e5b0ad3576d5ee0b
a921beaf6a7a518db0d5a33b7367b77f0e1fa471
f0c25debbfdc38763304b11360d01fc4ac3c911e869f7af0c995842d611501ae
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115017/Luxembourg1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: PX3CoOU50e1MzxjqIBVv9DLlKSyo8bRmHlcdQYPRYbGJ0MW+zi8ejV+aA9ZQBZknzAJLWPkUqTg=
x-amz-request-id: GR69EPEA1JG407YA
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:36 GMT
ETag: "3e651c805d98f379e5b0ad3576d5ee0b"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:50:17 GMT
x-amz-version-id: 0cOqMsF0_Ak37NCNNGamM71CWdVZEacS
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3869
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115743/Malta1.png
200 OK 4.3 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115743/Malta1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a83ad8aa720acb4451c0d59cd08c628f
086e729447dbc761c4b2561973314882a4d8cf7c
dda9ab435b2059745ebf794a823a6f72b2ffa34a18b178c5bdd9673b962baf12
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115743/Malta1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: kRKvqWAi1HNBUMwzY2cnk7TfIwHQlSIpJ05Q0ybMp+xaGJ1++nsb1r03gpjWXclivwLnn3aH9pY=
x-amz-request-id: GR64WCRWYQZXD8RF
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:40 GMT
ETag: "a83ad8aa720acb4451c0d59cd08c628f"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:57:43 GMT
x-amz-version-id: rqG497F_yoU1eO77PnVOCv8uXhA_1r2V
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 4287
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05134701/Netherlands1.png
200 OK 3.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05134701/Netherlands1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a19874c7d02744990237b827439132a4
d9a7a1eb5ee2e5a4dbbc75e43d7905b17ec0f6c0
e75bffa1dae0a23fa6d5cfa73835a321f5933810079f7c61d733a4a0f033d605
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05134701/Netherlands1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: cieH/KKaJAJo4iHZZuyVJYWCSUiQzvLXZY5oPrVlbdlzLtQFwoUY+zC6EwD7fi4mLXwFDYDhRe8=
x-amz-request-id: GR6FBBXQHWBRF5JA
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:41 GMT
ETag: "a19874c7d02744990237b827439132a4"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 13:47:01 GMT
x-amz-version-id: 28LeGCtB6pYn.FjZ8bQqfzeq4Hz2DMmS
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3841
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05135311/Norway1.png
200 OK 3.1 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05135311/Norway1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 9021ba1b169c443fcf1ef4205c66746b
57b448f98b746fdd70b85c2c3db3a692c59ed4e9
29be706a53e4348fc185d63ce98c4747e517c1371e9806be940e13637eeed375
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05135311/Norway1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: n0fOOsLJu+HigesUApiGMl0FTmikUljiefBF9iBBOyLsYEcDpYUEAEoSJkwVR1gAZ/dXczDOnjU=
x-amz-request-id: GR696YFCH482027R
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Wed, 14 Jul 2021 12:09:56 GMT
ETag: "9021ba1b169c443fcf1ef4205c66746b"
x-amz-version-id: U31NsyBZvHkqDUS_Ugic5SNoLOgwf_dQ
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3056
consent.cookiebot.com/96a1d7e4-5650-4b38-a86a-76e9471fade7/cc.js?renew=false&referer=www.lyca-mobile.no&dnt=false&init=false
200 OK 59 kB URL HTTP/2 consent.cookiebot.com/96a1d7e4-5650-4b38-a86a-76e9471fade7/cc.js?renew=false&referer=www.lyca-mobile.no&dnt=false&init=false
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65499)
Hash a99d2f19da457c88b278aca36aee6d2a
5e52c7ab003fbbf3c06fb88a1c828d651e18d7bf
80f3f251b518b92282eeec5aae69739983da0b1b17eaf21669691cf67e07b469
GET /96a1d7e4-5650-4b38-a86a-76e9471fade7/cc.js?renew=false&referer=www.lyca-mobile.no&dnt=false&init=false HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=1200
content-type: application/x-javascript; charset=utf-8
content-encoding: gzip
last-modified: Sun, 11 Sep 2022 19:45:13 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 59363
date: Sun, 11 Sep 2022 19:45:13 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 437c7ccd2c357dd83d6b9a5118d4b402
e0002389b286a960b454a92aeb3d1a1e08317ff2
9a5b3bdb7765ea21d7147a0c8022198a1be6c8256fa594b53732cf59e86532b9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zerossl.ocsp.sectigo.com/
200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash a521e6a408c7c10fe00067b54e0d433b
36357d5a340dbc0c201e97980de168d466c6606b
a0cff091df0fb773e6cc2a247fcd14cf9088c20005bbd5f751f5c2bd578c6871
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 19:45:13 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Sat, 10 Sep 2022 03:46:24 GMT
Expires: Sat, 17 Sep 2022 03:46:23 GMT
Etag: "36357d5a340dbc0c201e97980de168d466c6606b"
Cache-Control: max-age=460269,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7492e70c29770b51-OSL
zerossl.ocsp.sectigo.com/
200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash a521e6a408c7c10fe00067b54e0d433b
36357d5a340dbc0c201e97980de168d466c6606b
a0cff091df0fb773e6cc2a247fcd14cf9088c20005bbd5f751f5c2bd578c6871
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 19:45:13 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Sat, 10 Sep 2022 03:46:24 GMT
Expires: Sat, 17 Sep 2022 03:46:23 GMT
Etag: "36357d5a340dbc0c201e97980de168d466c6606b"
Cache-Control: max-age=460269,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7492e70c38f30b41-OSL
adservice.google.com/ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=4171283530755;gtm=2wg970;auiddc=1648854537.1662925502;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D
200 OK 465 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=4171283530755;gtm=2wg970;auiddc=1648854537.1662925502;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (641), with no line terminators
Hash d76b27040ecba9c69885c654585e6422
37d454a719572245016217969ba9d449076add61
38b7a99e802474cbe5fd16a0a862c29437793e9fb4b5493ab001d870fb460986
GET /ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=4171283530755;gtm=2wg970;auiddc=1648854537.1662925502;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://11029147.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 11 Sep 2022 19:45:13 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 465
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tracker.selectivv.com/view?clickid={clickid}
400 Bad Request 46 B URL HTTP/1.1 tracker.selectivv.com/view?clickid={clickid}
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e4a33c59b51dbdbf84b51054c586a9d
7cff1535efd061f8d1d5b8ac61f2c1517bc8569e
4fd44ea9678a34eca7c647ce4877e6faa94745ac95947a1eeffde864d9026204
GET /view?clickid={clickid} HTTP/1.1
Host: tracker.selectivv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 400 Bad Request
Server: nginx/1.21.3
Date: Sun, 11 Sep 2022 19:45:13 GMT
Content-Type: application/json
Content-Length: 46
Connection: keep-alive
tracker.selectivv.com/uniclick.js?defaultcampaignid=620d05b69b851500013fe531&attribution=lastpaid®viewonce=false&cookiedomain=lyca-mobile.no&cookieduration=30
200 OK 5.0 kB URL HTTP/1.1 tracker.selectivv.com/uniclick.js?defaultcampaignid=620d05b69b851500013fe531&attribution=lastpaid®viewonce=false&cookiedomain=lyca-mobile.no&cookieduration=30
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash e7910221398fb0f44728667851e745b8
ccae17db0ac09ef4577a1d646def200c486000e9
eeb36f1cfec8bf102d377e6ee18385de5987160d2ce963e254eae3ddc0c80292
GET /uniclick.js?defaultcampaignid=620d05b69b851500013fe531&attribution=lastpaid®viewonce=false&cookiedomain=lyca-mobile.no&cookieduration=30 HTTP/1.1
Host: tracker.selectivv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 11 Sep 2022 19:45:13 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/04/Norway.png
200 OK 3.1 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/04/Norway.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 9021ba1b169c443fcf1ef4205c66746b
57b448f98b746fdd70b85c2c3db3a692c59ed4e9
29be706a53e4348fc185d63ce98c4747e517c1371e9806be940e13637eeed375
GET /wp-content/uploads/2017/04/Norway.png HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3056
Connection: keep-alive
Date: Sun, 11 Sep 2022 02:34:04 GMT
Last-Modified: Tue, 27 Aug 2019 08:28:07 GMT
ETag: "9021ba1b169c443fcf1ef4205c66746b"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: l5Kguw638O5W0bfY6aLQlmtSu_3xLfX-CxVcENHsGovFd37Z2Q7hrQ==
Age: 61870
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/national-text.svg
200 OK 379 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/national-text.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (379), with no line terminators
Hash 873789b36bcca252488070dc6727c3b3
03147946a7c606a77334fc61848099d96a240a4b
6a8c3a01af957fe571fd86413bf84ac367df9b687f811efa6dc0814600d331cb
GET /wp-content/uploads/2017/06/national-text.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 379
Connection: keep-alive
Date: Sun, 11 Sep 2022 09:40:13 GMT
Last-Modified: Tue, 15 Feb 2022 04:56:38 GMT
ETag: "873789b36bcca252488070dc6727c3b3"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: u1tzPM3W7_KuLrsVEtr9wFZC0QQb16Hnb1jE5bttYm8tsBGZuT1KKQ==
Age: 36301
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/phone-call.svg
200 OK 604 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/phone-call.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with very long lines (469)
Hash 2a3c2d102f0a6647ff4c989f9e5183dd
bfaf1194f81cb8b5300a3789624534c6786c8cb1
0c7b8c0063cebc49797c54a410e7e9b783047885c1a925c9bd4f1948353733c7
GET /wp-content/uploads/2017/06/phone-call.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 604
Connection: keep-alive
Last-Modified: Tue, 15 Feb 2022 04:56:36 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Sep 2022 07:56:31 GMT
ETag: "2a3c2d102f0a6647ff4c989f9e5183dd"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IzuxjJXzhh0ReFP9mjZZ-A1OrwDW96MHaTonP79MRPX_A9OAR-3SZg==
Age: 42523
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/mobile_icons_svg_bundle.svg
200 OK 422 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/mobile_icons_svg_bundle.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash efc5d499203342c7943e44c68c22f670
6cd73fa1bfb854fa47ca2323986aca519e566936
adbb8b4b73d3eec20f434af5a3207f4076f2d47cc4e8f94b916a6b9a5a827454
GET /wp-content/uploads/2017/06/mobile_icons_svg_bundle.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 422
Connection: keep-alive
Date: Sun, 11 Sep 2022 16:37:01 GMT
Last-Modified: Tue, 15 Feb 2022 04:56:40 GMT
ETag: "efc5d499203342c7943e44c68c22f670"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WTomEHaRYxJtsmEEMah9CidvsSTXFuI-fNvBEql_EiupJnx33IS69A==
Age: 11293
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2018/06/buy_sim_new-br-1.png
200 OK 15 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2018/06/buy_sim_new-br-1.png
IP
File type PNG image data, 522 x 235, 8-bit/color RGBA, non-interlaced\012- data
Hash 445a17c3cfa8b089268d00afb9cc2a12
9ab22aafb3bf1f21831e8fff3770306a4da50fcc
955ea640ad8413dcbd59590421eb5462a49c8224cdfa4638db9bcef8ff8d2d9b
GET /wp-content/uploads/2018/06/buy_sim_new-br-1.png HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 15283
Connection: keep-alive
Last-Modified: Mon, 18 Oct 2021 05:20:16 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Sep 2022 07:19:01 GMT
ETag: "445a17c3cfa8b089268d00afb9cc2a12"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 48_ixLfZeEzUwWwLbc0nC9boX9i3bymxpn65shOthx_QGGDBjIJYWA==
Age: 44773
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6c2fea93ba89de81c2b01aaca1a87835
0a7f50001f709285bc10f6ef044ef39a60535bff
6cae8a5f9949975a3adedc41088196b8c9dd984e4023e54bbe655800a9478349
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tracker.selectivv.com/view?clickid={clickid}&referrer=http://eu.dspsuper.com/
400 Bad Request 46 B URL HTTP/1.1 tracker.selectivv.com/view?clickid={clickid}&referrer=http://eu.dspsuper.com/
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e4a33c59b51dbdbf84b51054c586a9d
7cff1535efd061f8d1d5b8ac61f2c1517bc8569e
4fd44ea9678a34eca7c647ce4877e6faa94745ac95947a1eeffde864d9026204
GET /view?clickid={clickid}&referrer=http://eu.dspsuper.com/ HTTP/1.1
Host: tracker.selectivv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 400 Bad Request
Server: nginx/1.21.3
Date: Sun, 11 Sep 2022 19:45:13 GMT
Content-Type: application/json
Content-Length: 46
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c52f00dc203483501330b93da8673ea
bb58935fa272c810572d3290a9835e1390a8ef35
4cbe66c98fdaa1bdce29769a8dda769b7b46e14a8bdab5c61bba9e171ec925f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6195
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:13 GMT
Last-Modified: Sun, 11 Sep 2022 18:01:58 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=2A8478E9681F6B0F25866AF569EA6A49; domain=.bing.com; expires=Fri, 06-Oct-2023 19:45:13 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 116B7EC05F7D4C0BA24D7CA7155AB3B5 Ref B: OSL30EDGE0111 Ref C: 2022-09-11T19:45:13Z
date: Sun, 11 Sep 2022 19:45:13 GMT
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sun, 11 Sep 2022 18:41:12 GMT
expires: Sun, 11 Sep 2022 20:41:12 GMT
cache-control: public, max-age=7200
age: 3841
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57443), with no line terminators
Hash 1e9c4d503a9e162d8b549dc3d9c040e2
1fa99d7d7e878cdd45567af4b0c3c65542036c1d
f936c0124c595fe5d0c7858277f3a5f3bd104de39d36ac92557501fa1dec8563
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 20:19:10 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "d4de8398858246712016031c834bb061+gzip+gzip"
accept-ranges: bytes
date: Sun, 11 Sep 2022 19:45:13 GMT
x-served-by: cache-iad-kjyo7100104-IAD, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15317
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 8e7e24fb3539746aa8b869558f589615
d8086d86bbd5cfacc3b6a5ef14aa917830e137dd
7304497ee417a664bdea67d7307ca36a36013556b927c3ea5bca6c04b66236ef
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: cd6GK6QkvAWlk0XVBW4g93tbM3wk9B4mXxhWVTKNekCjL9unh6pbqI8GCSkMUW3GWyTsZpJIuTcS5k+wkZT3xw==
priority: u=3,i
content-length: 26737
x-fb-trip-id: 1679558926
date: Sun, 11 Sep 2022 19:45:13 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 25e12d7b35a1a6efb4bc97945209072e
72b67424bbd3042de531de92a57bfd97036e9526
3836fa49727f6b0cff300e4aaa480a76848ceda64f98d1a6e4e4986284fcd1ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da7b1c24eee0db0c23872933557b7521
b8bc1215b4073784c048587e51a40152bd88c8ed
6ba38b5c68971135ed3f1fbe7afa658ce883240142a4244ce7d84fa251a64c3f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c52f00dc203483501330b93da8673ea
bb58935fa272c810572d3290a9835e1390a8ef35
4cbe66c98fdaa1bdce29769a8dda769b7b46e14a8bdab5c61bba9e171ec925f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6196
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Sun, 11 Sep 2022 18:01:58 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
adservice.google.no/ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=4171283530755;gtm=2wg970;auiddc=1648854537.1662925502;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D
200 OK 177 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=4171283530755;gtm=2wg970;auiddc=1648854537.1662925502;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9393b28661a65a763699c108887882eb
c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
GET /ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=4171283530755;gtm=2wg970;auiddc=1648854537.1662925502;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 11 Sep 2022 19:45:14 GMT
expires: Sun, 11 Sep 2022 19:45:14 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/conversion_async.js
200 OK 16 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1623)
Hash 4738d969770682feba80f04bf171d65b
be0e0ceb91bf5ed0c64b0f3f2cc2c99c6d4cd6b7
1daca97cf9e8078299f94c50346e45fead45bf908ca97ded912f26986c1c4e9a
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 11 Sep 2022 19:45:14 GMT
expires: Sun, 11 Sep 2022 19:45:14 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 15579141248118922429
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15687
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 25e12d7b35a1a6efb4bc97945209072e
72b67424bbd3042de531de92a57bfd97036e9526
3836fa49727f6b0cff300e4aaa480a76848ceda64f98d1a6e4e4986284fcd1ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 312 B IP
Hash 0d293bb73257e39e254a84191e86a47d
94a0b20ac609f35d3e3605de1be249100e5d0dad
cb927716ae6a15744451a21e491199a9feb7b736ca624f20bd72536d2ca80ca2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2682
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Sun, 11 Sep 2022 19:00:32 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 312
inv-dmp.admixer.net/dmpcnt.js?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1
200 OK 1.2 kB URL HTTP/1.1 inv-dmp.admixer.net/dmpcnt.js?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1
IP
ASN #20773 Host Europe GmbH
File type ASCII text, with CRLF line terminators
Hash 76b1f331b626aa9a8bccdebbe871fc55
04c13715ccb86a2e8eaaf0127c31c57632a0e3f9
e95b462122653d04ea612d666f0bea68da9a4dadcd3e6907106b75879c98d7c0
GET /dmpcnt.js?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1 HTTP/1.1
Host: inv-dmp.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:45:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store
Expires: Wed, 21 Oct 2015 07:28:00 GMT
Set-Cookie: am-uid=30ec375043a84fa080186fface382f62; expires=Sat, 10 Dec 2022 19:45:14 GMT;domain=.admixer.net;path=/;secure;SameSite=None
P3P: CP="NID DSP ALL COR"
Keep-Alive: timeout=25
t.co/i/adsct?bci=3&eci=2&event_id=b17014e3-22be-46a9-adbb-de72ab9b6c47&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fba1717e-ecc7-41d5-9d1d-63a212435bda&tw_document_href=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o13z4&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=b17014e3-22be-46a9-adbb-de72ab9b6c47&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fba1717e-ecc7-41d5-9d1d-63a212435bda&tw_document_href=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o13z4&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=b17014e3-22be-46a9-adbb-de72ab9b6c47&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=fba1717e-ecc7-41d5-9d1d-63a212435bda&tw_document_href=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o13z4&type=javascript&version=2.3.27 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 19:45:14 GMT
server: tsa_o
set-cookie: muc_ads=feff5312-01d1-4e68-84b6-ff443d5c485f; Max-Age=63072000; Expires=Tue, 10 Sep 2024 19:45:14 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
strict-transport-security: max-age=0
x-response-time: 112
x-connection-hash: 8b23e30244af9f24ba61ad5a4b5cf5eb2de4484fb43495accfb9687ec6872505
X-Firefox-Spdy: h2
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/register.js
200 OK 471 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/register.js
IP
Hash 5b36f6508bf779a395d4b559b41d267d
a653f55ef7e337bd259cd76d14fe2adc91c11603
91e3696c53649e8d76b738dca29ed03b8b935f9fc230c735d2fd729428742605
GET /wp-content/themes/Divi-child/js/register.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 20 Feb 2020 06:59:06 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 17:36:33 GMT
ETag: W/"a4c47e49f1b792925db5d2ee23d17942"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: um3dTe4a6t-iY4a0dQpGcfZlbPus4C-RgV4OXFGWHsAIjiuQSWYW9w==
Age: 7720
my.rtmark.net/p.js?f=sync&lr=1&partner=473b8bc3bdca24c35606febcd8b32398d0535658845a248b665bbd0d9b9f9df4
200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=473b8bc3bdca24c35606febcd8b32398d0535658845a248b665bbd0d9b9f9df4
IP
Hash 2b7b1b11c547b114ff62014920325ec3
dcfd06ea418764ac4c32c310000a0c4af864f283
ff0ba5752d3c1490c62a811381e6dabd467e5a8b9fd2101c719831c39097cd26
GET /p.js?f=sync&lr=1&partner=473b8bc3bdca24c35606febcd8b32398d0535658845a248b665bbd0d9b9f9df4 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 19:45:14 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash e77a7e8aed6b9c75f900aca435e60d41
02d081cbd31ff48b5aa77397eeabe9d868f1e2e5
f0761a4cf7e2a12aaeba570e4aa75a3dd8df6772277303a4cf949f53db11bacd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 19:45:14 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 23:44:14 GMT
Expires: Thu, 15 Sep 2022 23:44:13 GMT
Etag: "02d081cbd31ff48b5aa77397eeabe9d868f1e2e5"
Cache-Control: max-age=359338,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7492e7101bbe0b65-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash e77a7e8aed6b9c75f900aca435e60d41
02d081cbd31ff48b5aa77397eeabe9d868f1e2e5
f0761a4cf7e2a12aaeba570e4aa75a3dd8df6772277303a4cf949f53db11bacd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 19:45:14 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 23:44:14 GMT
Expires: Thu, 15 Sep 2022 23:44:13 GMT
Etag: "02d081cbd31ff48b5aa77397eeabe9d868f1e2e5"
Cache-Control: max-age=359338,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7492e7101b15b515-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 55d14c90ec16748861894ce8f82eafcd
f3ebe8972971c1201c1ec7c533f019f79c36cde5
fa0dc0f0a76f3407dad8dae59a4817ef6b1371fcaa930448373d64720a036698
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.admixer.net/analytics/tag-manager.js?m=data-from-dom
200 OK 97 kB URL HTTP/2 cdn.admixer.net/analytics/tag-manager.js?m=data-from-dom
IP
ASN #199524 G-Core Labs S.A.
File type ASCII text, with very long lines (36161)
Hash 15ccf3da102b79af59d5f44904766aa9
ed9e20c8ecfe0b5c4059861654a14cfe9600f228
fb7d2f790a83de7a8993eb535b992b43d1cf7c8f1d4373587f640f25cc7daa09
GET /analytics/tag-manager.js?m=data-from-dom HTTP/1.1
Host: cdn.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Cookie: am-uid=30ec375043a84fa080186fface382f62
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 19:45:14 GMT
content-type: application/javascript
last-modified: Mon, 12 Apr 2021 13:21:02 GMT
vary: Accept-Encoding
etag: W/"6074493e-6e96"
expires: Sun, 23 Jul 2023 11:48:14 GMT
cache-control: max-age=31622400
access-control-expose-headers: content-range
cache: HIT
x-cached-since: 2022-07-22T11:48:14+00:00
x-id: sto5-up-gc13
content-encoding: gzip
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=15267795&tm=gtm002&Ver=2&mid=9866c3f6-a58a-4241-a202-f1607514dfd3&sid=3a7bc860320a11edbbc8b1f46bfb2fd1&vid=3a7beae0320a11ed9667d9ba7f60bd12&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Hello%20Norway%20L%20-%20Lycamobile&p=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&r=http%3A%2F%2Feu.dspsuper.com%2F<=2190&evt=pageLoad&sv=1&rn=819336
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=15267795&tm=gtm002&Ver=2&mid=9866c3f6-a58a-4241-a202-f1607514dfd3&sid=3a7bc860320a11edbbc8b1f46bfb2fd1&vid=3a7beae0320a11ed9667d9ba7f60bd12&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Hello%20Norway%20L%20-%20Lycamobile&p=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&r=http%3A%2F%2Feu.dspsuper.com%2F<=2190&evt=pageLoad&sv=1&rn=819336
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=15267795&tm=gtm002&Ver=2&mid=9866c3f6-a58a-4241-a202-f1607514dfd3&sid=3a7bc860320a11edbbc8b1f46bfb2fd1&vid=3a7beae0320a11ed9667d9ba7f60bd12&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Hello%20Norway%20L%20-%20Lycamobile&p=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&r=http%3A%2F%2Feu.dspsuper.com%2F<=2190&evt=pageLoad&sv=1&rn=819336 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2CC1D5CB8995697D2071C7D78860680F; domain=.bing.com; expires=Fri, 06-Oct-2023 19:45:14 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B27DEFD3F4D64EF38907707134DFCDDC Ref B: OSL30EDGE0111 Ref C: 2022-09-11T19:45:14Z
date: Sun, 11 Sep 2022 19:45:14 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 76663b76e88bbab990d7144d959b3a59
46cae7d019d08a4f2605fa1b5c135a05f890959c
7fda981a3003063e8f17eb0955917cb9d7c36f53d6385a3a110b774c9505528c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5130
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:14 GMT
Last-Modified: Sun, 11 Sep 2022 18:19:44 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 312
googleads.g.doubleclick.net/pagead/viewthroughconversion/10965854962/?random=1662925503028&cv=9&fst=1662925503028&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=5&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&ref=http%3A%2F%2Feu.dspsuper.com%2F&tiba=Hello%20Norway%20L%20-%20Lycamobile&auid=1648854537.1662925502&hn=www.google.com&us_privacy=1---&async=1&rfmt=3&fmt=4
200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10965854962/?random=1662925503028&cv=9&fst=1662925503028&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=5&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&ref=http%3A%2F%2Feu.dspsuper.com%2F&tiba=Hello%20Norway%20L%20-%20Lycamobile&auid=1648854537.1662925502&hn=www.google.com&us_privacy=1---&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2740), with no line terminators
Hash 73c725ab28f726acaa6de299c59fcb1d
647cf435d8548aa6317ff789190e2a2616326b34
d7aa505d7edbb219973bb1f0e3784989d80d56ad6a8b5eb3aa228e4c410828ce
GET /pagead/viewthroughconversion/10965854962/?random=1662925503028&cv=9&fst=1662925503028&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=5&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&ref=http%3A%2F%2Feu.dspsuper.com%2F&tiba=Hello%20Norway%20L%20-%20Lycamobile&auid=1648854537.1662925502&hn=www.google.com&us_privacy=1---&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 11 Sep 2022 19:45:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1176
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 11-Sep-2022 20:00:14 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 324364e9311c1f7cb5e4068f3d947d5d
ddb00dc97404cee267838983ce8bb4ae48d6647a
d6cc296b22c48f9e7bb3a905dd9e899441ae7c29faec4a62e71628e1f23d61a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
inv-nets-eu.admixer.net/dmpapxl.aspx?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1&referrer=http%3A%2F%2Feu.dspsuper.com%2F&page=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D
200 OK 43 B URL HTTP/1.1 inv-nets-eu.admixer.net/dmpapxl.aspx?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1&referrer=http%3A%2F%2Feu.dspsuper.com%2F&page=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D
IP
ASN #20773 Host Europe GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash d3e941fe204d0a9cc5b92782bbf882c8
682a77b3dd546b61ae894285128ffba13a33cf7d
281c5ae8bf152f644e12a943ec5d59681e1950c54fb6c0b3cc77539bf5e69340
POST /dmpapxl.aspx?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1&referrer=http%3A%2F%2Feu.dspsuper.com%2F&page=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D HTTP/1.1
Host: inv-nets-eu.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Cookie: am-uid=30ec375043a84fa080186fface382f62
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:45:14 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store
Expires: Wed, 21 Oct 2015 07:28:00 GMT
Set-Cookie: am-uid=30ec375043a84fa080186fface382f62; expires=Sat, 10 Dec 2022 19:45:14 GMT;domain=.admixer.net;path=/;secure;SameSite=None
P3P: CP="NID DSP ALL COR"
Keep-Alive: timeout=25
inv-nets-eu.admixer.net/cntcm.aspx?pvOId=ad370303-cecc-4b0a-88f6-92819a42d108&ssp=E5485342-9239-467B-BD48-1C9876BA2A52&cntoid=857dd00f-c12c-43ff-be0e-596c692063d1&pv=1&referrer=http%3A%2F%2Feu.dspsuper.com%2F&page=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D
204 No Content 0 B URL HTTP/1.1 inv-nets-eu.admixer.net/cntcm.aspx?pvOId=ad370303-cecc-4b0a-88f6-92819a42d108&ssp=E5485342-9239-467B-BD48-1C9876BA2A52&cntoid=857dd00f-c12c-43ff-be0e-596c692063d1&pv=1&referrer=http%3A%2F%2Feu.dspsuper.com%2F&page=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D
IP
ASN #20773 Host Europe GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cntcm.aspx?pvOId=ad370303-cecc-4b0a-88f6-92819a42d108&ssp=E5485342-9239-467B-BD48-1C9876BA2A52&cntoid=857dd00f-c12c-43ff-be0e-596c692063d1&pv=1&referrer=http%3A%2F%2Feu.dspsuper.com%2F&page=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D HTTP/1.1
Host: inv-nets-eu.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Cookie: am-uid=30ec375043a84fa080186fface382f62
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 204 No Content
Server: nginx
Date: Sun, 11 Sep 2022 19:45:14 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.lyca-mobile.no
X-XSS-Protection: 0
Keep-Alive: timeout=25
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-22755827-1&cid=940857231.1662925503&jid=760502895&gjid=327171204&_gid=2105547471.1662925503&_u=YEBAAEAAAAAAAC~&z=794795387
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-22755827-1&cid=940857231.1662925503&jid=760502895&gjid=327171204&_gid=2105547471.1662925503&_u=YEBAAEAAAAAAAC~&z=794795387
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-22755827-1&cid=940857231.1662925503&jid=760502895&gjid=327171204&_gid=2105547471.1662925503&_u=YEBAAEAAAAAAAC~&z=794795387 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.lyca-mobile.no
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 11 Sep 2022 19:45:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/10965854962/?random=1662925503028&cv=9&fst=1662922800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=5&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&ref=http%3A%2F%2Feu.dspsuper.com%2F&tiba=Hello%20Norway%20L%20-%20Lycamobile&async=1&fmt=3&is_vtc=1&random=4021687660&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10965854962/?random=1662925503028&cv=9&fst=1662922800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=5&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&ref=http%3A%2F%2Feu.dspsuper.com%2F&tiba=Hello%20Norway%20L%20-%20Lycamobile&async=1&fmt=3&is_vtc=1&random=4021687660&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10965854962/?random=1662925503028&cv=9&fst=1662922800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=5&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&ref=http%3A%2F%2Feu.dspsuper.com%2F&tiba=Hello%20Norway%20L%20-%20Lycamobile&async=1&fmt=3&is_vtc=1&random=4021687660&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 11 Sep 2022 19:45:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/p/action/15267795.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/15267795.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/15267795.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=1F121CC422C56065217C0ED8233061EB; domain=.bing.com; expires=Fri, 06-Oct-2023 19:45:14 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C3BE3B4FC42A4E359D72687C41919A01 Ref B: OSL30EDGE0111 Ref C: 2022-09-11T19:45:14Z
date: Sun, 11 Sep 2022 19:45:14 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=538386406931299&ev=PageView&dl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&rl=http%3A%2F%2Feu.dspsuper.com%2F&if=false&ts=1662925503489&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.1.1662925503487.1902335522&it=1662925502896&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=538386406931299&ev=PageView&dl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&rl=http%3A%2F%2Feu.dspsuper.com%2F&if=false&ts=1662925503489&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.1.1662925503487.1902335522&it=1662925502896&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=538386406931299&ev=PageView&dl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D&rl=http%3A%2F%2Feu.dspsuper.com%2F&if=false&ts=1662925503489&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.1.1662925503487.1902335522&it=1662925502896&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Sun, 11 Sep 2022 19:45:14 GMT
expires: Sun, 11 Sep 2022 19:45:14 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.admixer.net/analytics/tag-manager.runtime.js
200 OK 767 B URL HTTP/2 cdn.admixer.net/analytics/tag-manager.runtime.js
IP
ASN #199524 G-Core Labs S.A.
Hash bf5229829a18386bdc3a989ea42678ea
103e40ddc0323a7995355fd2f78d23059497a019
6c7414aa2b7ca2889d47007899b5e7d2c866d38fcd70c81259066adcd151b2d4
GET /analytics/tag-manager.runtime.js HTTP/1.1
Host: cdn.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Cookie: am-uid=30ec375043a84fa080186fface382f62
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 19:45:14 GMT
content-type: application/javascript
last-modified: Mon, 12 Apr 2021 13:21:02 GMT
vary: Accept-Encoding
etag: W/"6074493e-515"
expires: Sun, 23 Jul 2023 11:48:14 GMT
cache-control: max-age=31622400
access-control-expose-headers: content-range
cache: HIT
x-cached-since: 2022-07-22T11:48:14+00:00
x-id: sto5-up-gc13
content-encoding: gzip
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=473b8bc3bdca24c35606febcd8b32398d0535658845a248b665bbd0d9b9f9df4&ttl=&rurl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=473b8bc3bdca24c35606febcd8b32398d0535658845a248b665bbd0d9b9f9df4&ttl=&rurl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=473b8bc3bdca24c35606febcd8b32398d0535658845a248b665bbd0d9b9f9df4&ttl=&rurl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D5828478%26rtkcid%3D%7Bclickid%7D HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 19:45:14 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=d1fe785f52934dd19eff3aee3aff4187; expires=Mon, 11 Sep 2023 19:45:14 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a9e742cef43ca26cae997e441f7fc5a0
487734e0206365f0e76bf4d2010eee95c8603bb3
b9a1e4c65c1df743675eba6d6ba914a25046539b84060afe3e70b0afd4a7b1c1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6029
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:45:15 GMT
Last-Modified: Sun, 11 Sep 2022 18:04:46 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget-customize.js
200 OK 0 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget-customize.js
IP
GET /wp-content/plugins/email-subscribers/widget/es-widget-customize.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=5828478&rtkcid={clickid}
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=e03oebgiiud05nmjaulhmoef86; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Sun, 11 Sep 2022 19:45:12 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1657
Connection: keep-alive
asia.adform.net/serving/scripts/trackpoint/async/
301 Moved Permanently 0 B URL HTTP/2 asia.adform.net/serving/scripts/trackpoint/async/
IP
GET /serving/scripts/trackpoint/async/ HTTP/1.1
Host: asia.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 11 Sep 2022 19:45:15 GMT
content-type: text/html
location: https://s2.adform.net/banners/scripts/st/trackpoint-async.js
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
s2.adform.net/banners/scripts/st/trackpoint-async.js
200 OK 0 B URL HTTP/2 s2.adform.net/banners/scripts/st/trackpoint-async.js
IP
GET /banners/scripts/st/trackpoint-async.js HTTP/1.1
Host: s2.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lyca-mobile.no/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 19:45:15 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 25 May 2022 11:34:23 GMT
etag: W/"552eeb5f0620fb6f56733d625b5e719e"
x-amz-request-id: tx00000000000009d6ea7af-00631e2256-3233e6c5-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
23.235.251.114
37.157.5.71
168.119.90.96
139.45.195.8
104.18.32.68
85.17.54.17
51.83.143.92
92.223.97.97
23.33.119.27
104.84.152.233