firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 02 Oct 2022 04:03:00 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 46b5aeb0e7bcc8895e9b923ffd4a3896.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: dK4q-mwmKHOaJ1vQTHuZh8UfRZCtWHAmbQPAlbIKG5dbg-q37akExw==
Age: 245
mkkuei4kdsz.com/662/211.html
200 OK 329 B URL HTTP/1.1 mkkuei4kdsz.com/662/211.html
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ecbcb8bae64098de3e587487b474f8b8
e275409fb40ea27c3826af493f70faf147d0f995
2597a3f2418586d8a9fb0764743a84486ba066c6af3ff194922fb6c65a783688
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /662/211.html HTTP/1.1
Host: mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sun, 02 Oct 2022 04:07:05 GMT
content-type: text/html
last-modified: Wed, 12 Jan 2022 17:20:45 GMT
etag: W/"61df0ded-1ad"
content-encoding: gzip
transfer-encoding: chunked
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24cdc937930ac2ef9c8f46ba1deabcc5
397417929951bf20f235d5f91510163ac213dc71
eb128aec099dbf1919ee5d965221e904ad3a2162583683cec44518640b505447
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB128AEC099DBF1919EE5D965221E904AD3A2162583683CEC44518640B505447"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4576
Expires: Sun, 02 Oct 2022 05:23:21 GMT
Date: Sun, 02 Oct 2022 04:07:05 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 02 Oct 2022 03:33:17 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 b349539e70f05aae8b25110799b51862.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: rdBMrXfeRJdFf81QFDIHGELjUggm0uyA5iIJYd1PZ12cxmz0nfndbA==
age: 2029
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 04:07:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 368d9af378ebd4638f441077ccdcf171
7b4532100b1e80cbfc349d00f7e56f1b287f7174
df1de1005aa2f274ce930f332072bb0d1d871b8ce49b851e2071ef3c263029f5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "DF1DE1005AA2F274CE930F332072BB0D1D871B8CE49B851E2071EF3C263029F5"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10757
Expires: Sun, 02 Oct 2022 07:06:23 GMT
Date: Sun, 02 Oct 2022 04:07:06 GMT
Connection: keep-alive
domaincntrol.com/?orighost=http://mkkuei4kdsz.com/662/211.html
200 OK 28 B URL HTTP/2 domaincntrol.com/?orighost=http://mkkuei4kdsz.com/662/211.html
IP
File type ASCII text, with no line terminators
Hash 7aae16ed70d2e07943585bbb1cd02b55
3209123510c034e6e38ca45edf14307f1375a8f5
51bfb53a70df6adc48f0670be59a16a657ab5a2bafc176973a32d5c36a4fc5d3
GET /?orighost=http://mkkuei4kdsz.com/662/211.html HTTP/1.1
Host: domaincntrol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mkkuei4kdsz.com
Connection: keep-alive
Referer: http://mkkuei4kdsz.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:06 GMT
content-type: text/javascript;charset=UTF-8
content-length: 28
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1LiZWH9%2Bqmw1pxoPZKGl11c51MMItTMtAxTrUrol9tmcMzrIm3oNoqRtcCqWGIx9crFBV2w31K%2FkUlONfTwogDR4oUbQBzPgssWRQkktF6IOP2vWOL1N4hkfXhBpfnCi790%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 753a91b74b4cb509-OSL
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sun, 02 Oct 2022 03:32:53 GMT
Expires: Sun, 02 Oct 2022 04:26:30 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 35f1076ba1ff613e428e9cf6a2f57580.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: _Lfhc4rxMKhuWVqnfoMhLP9S2TM09mAC4yzAX7jymPhZdExC9ct2cQ==
Age: 2053
ocsp.digicert.com/
200 OK 471 B IP
Hash 829e839c217bf861b8cf90c8d636f510
459714fcf0d374bdc078ef59d122d59bf9312c5f
36282e09bb25caf3d7350c4bee485cb87947aabc7d7409169caf15c2e75d8b7d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2541
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:06 GMT
Last-Modified: Sun, 02 Oct 2022 03:24:45 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aj1vz27FiKsMvq31U84E9g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: U2AolkK+LyvCSq2AdPm324IFAb0=
ww2.mkkuei4kdsz.com/
200 OK 1.3 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (700)
Hash 47718747c90e3c46e69e11032e62b736
d3685bf04c28ae8e48c4f33bccfa32f771d517a9
a216907b91d225eea275b243cb6805fff0d7cbb6b27c7cd00869eaac9e01820a
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: ww2.mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mkkuei4kdsz.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Sun, 02 Oct 2022 04:07:07 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_RlGSCujrTwIV09ewwdBk8PiCOXknsvjzonXp/BabLYsbM4wWv0k1teTkRJynKg7Y1QeTz1UsnxJZ/TvhfinDdA==
last-modified: Sun, 02 Oct 2022 04:07:06 GMT
x-cache-miss-from: parking-7f9f948885-lnx78
server: NginX
content-encoding: gzip
img.sedoparking.com/images/js_preloader.gif
200 OK 4.3 kB URL HTTP/1.1 img.sedoparking.com/images/js_preloader.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 90c93102a88c2ab94bff1575b7a6e86e
56d71bf13de464534643db9d127629a0a3bf677a
5f6ad7031600056b578a6e8c6b34bc718d13125cc8256aa4a9050e549576f81a
GET /images/js_preloader.gif HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.mkkuei4kdsz.com/
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 04:07:07 GMT
Content-Type: image/gif
Content-Length: 4254
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Sun, 09 Oct 2022 04:07:07 GMT
X-CFHash: "90c93102a88c2ab94bff1575b7a6e86e"
X-CFF: B
Last-Modified: Fri, 15 Mar 2019 12:24:07 GMT
X-CF3: H
CF4Age: 156700
x-cf-tsc: 1648179742
CF4ttl: 31536000.000
X-CF2: H
Server: CFS 0215
X-CF-ReqID: 6dd3915e43c6bfcacf63f464c06d59af
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes
ww2.mkkuei4kdsz.com/search/tsc.php?200=MzgzNDQ1ODM3&21=OTEuOTAuNDIuMTU0&681=MTY2NDY4MzYyNzYyOTZiMjNjMTJkYTYxODQwNTM4YTFkZjRhMWQ4MWEx&crc=a9e18de35c3723018e3a8745dbb3c2ec7d621a61&cv=1
200 OK 0 B URL HTTP/1.1 ww2.mkkuei4kdsz.com/search/tsc.php?200=MzgzNDQ1ODM3&21=OTEuOTAuNDIuMTU0&681=MTY2NDY4MzYyNzYyOTZiMjNjMTJkYTYxODQwNTM4YTFkZjRhMWQ4MWEx&crc=a9e18de35c3723018e3a8745dbb3c2ec7d621a61&cv=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /search/tsc.php?200=MzgzNDQ1ODM3&21=OTEuOTAuNDIuMTU0&681=MTY2NDY4MzYyNzYyOTZiMjNjMTJkYTYxODQwNTM4YTFkZjRhMWQ4MWEx&crc=a9e18de35c3723018e3a8745dbb3c2ec7d621a61&cv=1 HTTP/1.1
Host: ww2.mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.mkkuei4kdsz.com/
HTTP/1.1 200 OK
date: Sun, 02 Oct 2022 04:07:07 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/8.1.9
x-cache-miss-from: parking-7f9f948885-fnz2p
server: NginX
ww2.mkkuei4kdsz.com/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfT8NTdFbsNU_0&v=NTU1ZWZjZTRmODJlOWFlYzMzMjU4ZmRkYzZhOWRmNDgJMQl3dzIubWtrdWVpNGtkc3ouY29tNjMzOTBlNmE4MDgyNTMuNDQ3ODEwMTIJd3cyLm1ra3VlaTRrZHN6LmNvbTYzMzkwZTZhODA4Njk3LjE1NDc2MjkxCTE2NjQ2ODM2MjcJYWRfNjNfMA==&l=OAk1OWMyNzg5Zjc1NDE3NGIxZGRiZWFlMmEwOTk4YjZlYgkwCTM1CTAJMDE2ZjM0OTVjNTEyM2ZjMDZhNjZhNjc2NTIxMWJjNDQJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NjQ2ODM2MjcJMC4wMDA0MjMJTgkwCTEJODMwCTEyMDUJMTk0MDQzMTQyCTkxLjkwLjQyLjE1NAkw
302 Found 0 B URL HTTP/1.1 ww2.mkkuei4kdsz.com/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfT8NTdFbsNU_0&v=NTU1ZWZjZTRmODJlOWFlYzMzMjU4ZmRkYzZhOWRmNDgJMQl3dzIubWtrdWVpNGtkc3ouY29tNjMzOTBlNmE4MDgyNTMuNDQ3ODEwMTIJd3cyLm1ra3VlaTRrZHN6LmNvbTYzMzkwZTZhODA4Njk3LjE1NDc2MjkxCTE2NjQ2ODM2MjcJYWRfNjNfMA==&l=OAk1OWMyNzg5Zjc1NDE3NGIxZGRiZWFlMmEwOTk4YjZlYgkwCTM1CTAJMDE2ZjM0OTVjNTEyM2ZjMDZhNjZhNjc2NTIxMWJjNDQJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NjQ2ODM2MjcJMC4wMDA0MjMJTgkwCTEJODMwCTEyMDUJMTk0MDQzMTQyCTkxLjkwLjQyLjE1NAkw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfT8NTdFbsNU_0&v=NTU1ZWZjZTRmODJlOWFlYzMzMjU4ZmRkYzZhOWRmNDgJMQl3dzIubWtrdWVpNGtkc3ouY29tNjMzOTBlNmE4MDgyNTMuNDQ3ODEwMTIJd3cyLm1ra3VlaTRrZHN6LmNvbTYzMzkwZTZhODA4Njk3LjE1NDc2MjkxCTE2NjQ2ODM2MjcJYWRfNjNfMA==&l=OAk1OWMyNzg5Zjc1NDE3NGIxZGRiZWFlMmEwOTk4YjZlYgkwCTM1CTAJMDE2ZjM0OTVjNTEyM2ZjMDZhNjZhNjc2NTIxMWJjNDQJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NjQ2ODM2MjcJMC4wMDA0MjMJTgkwCTEJODMwCTEyMDUJMTk0MDQzMTQyCTkxLjkwLjQyLjE1NAkw HTTP/1.1
Host: ww2.mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.mkkuei4kdsz.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Sun, 02 Oct 2022 04:07:07 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sun, 02 Oct 2022 04:07:07 GMT
location: /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfT8NTdFbsNU_0&v=NTU1ZWZjZTRmODJlOWFlYzMzMjU4ZmRkYzZhOWRmNDgJMQl3dzIubWtrdWVpNGtkc3ouY29tNjMzOTBlNmE4MDgyNTMuNDQ3ODEwMTIJd3cyLm1ra3VlaTRrZHN6LmNvbTYzMzkwZTZhODA4Njk3LjE1NDc2MjkxCTE2NjQ2ODM2MjcJYWRfNjNfMA==&l=OAk1OWMyNzg5Zjc1NDE3NGIxZGRiZWFlMmEwOTk4YjZlYgkwCTM1CTAJMDE2ZjM0OTVjNTEyM2ZjMDZhNjZhNjc2NTIxMWJjNDQJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NjQ2ODM2MjcJMC4wMDA0MjMJTgkwCTEJODMwCTEyMDUJMTk0MDQzMTQyCTkxLjkwLjQyLjE1NAkw
x-cache-miss-from: parking-7f9f948885-p8cxg
server: NginX
ww2.mkkuei4kdsz.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfT8NTdFbsNU_0&v=NTU1ZWZjZTRmODJlOWFlYzMzMjU4ZmRkYzZhOWRmNDgJMQl3dzIubWtrdWVpNGtkc3ouY29tNjMzOTBlNmE4MDgyNTMuNDQ3ODEwMTIJd3cyLm1ra3VlaTRrZHN6LmNvbTYzMzkwZTZhODA4Njk3LjE1NDc2MjkxCTE2NjQ2ODM2MjcJYWRfNjNfMA==&l=OAk1OWMyNzg5Zjc1NDE3NGIxZGRiZWFlMmEwOTk4YjZlYgkwCTM1CTAJMDE2ZjM0OTVjNTEyM2ZjMDZhNjZhNjc2NTIxMWJjNDQJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NjQ2ODM2MjcJMC4wMDA0MjMJTgkwCTEJODMwCTEyMDUJMTk0MDQzMTQyCTkxLjkwLjQyLjE1NAkw
302 Found 311 B URL HTTP/1.1 ww2.mkkuei4kdsz.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfT8NTdFbsNU_0&v=NTU1ZWZjZTRmODJlOWFlYzMzMjU4ZmRkYzZhOWRmNDgJMQl3dzIubWtrdWVpNGtkc3ouY29tNjMzOTBlNmE4MDgyNTMuNDQ3ODEwMTIJd3cyLm1ra3VlaTRrZHN6LmNvbTYzMzkwZTZhODA4Njk3LjE1NDc2MjkxCTE2NjQ2ODM2MjcJYWRfNjNfMA==&l=OAk1OWMyNzg5Zjc1NDE3NGIxZGRiZWFlMmEwOTk4YjZlYgkwCTM1CTAJMDE2ZjM0OTVjNTEyM2ZjMDZhNjZhNjc2NTIxMWJjNDQJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NjQ2ODM2MjcJMC4wMDA0MjMJTgkwCTEJODMwCTEyMDUJMTk0MDQzMTQyCTkxLjkwLjQyLjE1NAkw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash fa3bec610a85ea74ff818a4b8ab2c416
275bafe452ad8a81e18ad98e233575bedf037a30
ee94f3d82346adf7735b20dee0e683e0d7a9fd7c54109ba2d71b20a7bca7eb06
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfT8NTdFbsNU_0&v=NTU1ZWZjZTRmODJlOWFlYzMzMjU4ZmRkYzZhOWRmNDgJMQl3dzIubWtrdWVpNGtkc3ouY29tNjMzOTBlNmE4MDgyNTMuNDQ3ODEwMTIJd3cyLm1ra3VlaTRrZHN6LmNvbTYzMzkwZTZhODA4Njk3LjE1NDc2MjkxCTE2NjQ2ODM2MjcJYWRfNjNfMA==&l=OAk1OWMyNzg5Zjc1NDE3NGIxZGRiZWFlMmEwOTk4YjZlYgkwCTM1CTAJMDE2ZjM0OTVjNTEyM2ZjMDZhNjZhNjc2NTIxMWJjNDQJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NjQ2ODM2MjcJMC4wMDA0MjMJTgkwCTEJODMwCTEyMDUJMTk0MDQzMTQyCTkxLjkwLjQyLjE1NAkw HTTP/1.1
Host: ww2.mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Sun, 02 Oct 2022 04:07:07 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sun, 02 Oct 2022 04:07:07 GMT
location: http://xml.sedodna.com/click?i=fT8NTdFbsNU_0
x-cache-miss-from: parking-7f9f948885-lnx78
server: NginX
xml.sedodna.com/click?i=fT8NTdFbsNU_0
302 Found 0 B URL HTTP/1.1 xml.sedodna.com/click?i=fT8NTdFbsNU_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=fT8NTdFbsNU_0 HTTP/1.1
Host: xml.sedodna.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://mybetterck.com/aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XQaiCg3BLRsq7qVxrtzI4f-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwGDRVCpBjTwrtcM7EN724MzNiE03EdAwuxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYgOzeSdXSQud8gLQ0QuNbeEbnJ8YaKdtRakgjafBu8ZEc1YVEhOQQJCpbRMnPinmkgkzzF7bpCXRUouSWJHSs17TrREasjs5ydU5tbZSjQnG_xSH9WuMsJZjr3oFzyJlWxHrYujGz0-zMP_KEp0Atoa2R7kE4hYKaJRfDnKMK_hbJ0EOA7hH3K8IZgjAXe1aQoPBZCL9NcfBJ4h5hUB6nPV0EMDx59TR3FaPkIqahg3lzwfgDSrgntEqsUhYON29Zstuo61Bk7899ecmECTsnGT_J0ey-pXFh-qMFTH8ZQnVCFNP84tPqKNxeFfSQuj9TfJrKdDxmRIpejK_ziYuar8kUgXGDiXQeMOVBQWYRwM82uiYB8ojAE1MhlujlyfvxwW4ritglbkl9a_MVjEXESqbCb8IFTJNx-XyEGNQGAhAOVtgbRXqPwnavJ2oEM2ryGUZYdIYiGnaLONi23GMqdElXrgTh189hywn4lk6GoTC2IkW9GkKl7jiecqKI3NbawOVOM0ib8oBaNpQk3XYgtP2kZvAIExrg-cNyfqPy8_EwXMIfZ0rRLFsoaGT0ii66euvnThgv6Zv5QNN9uACBcMP6nMn_nMd7duHrvublOqsJi7-BBLDkb6G77Ta3zsCKfPOMcfVOYg0-JLVcxwn31OMqc84DL-tigwtcX2sP_s2rIh0M5cDlUeYXnWkGyxppjTJ0BJMGhH252es-BF3x8XrTwHuVwzYJv0V3-IYGFRZAjY93z4Mpp4wcyfBbWR98RZueH1B2Iw46q7hZVtoIQVUAvejSKFHe4Y-V-nEwvAXhRGaWKF4jb82bm6ZETSltmc_mMnWAtU-FosXlUHPbhCxTWJhmIEFehoiTOq1ZsJfKG471g3ZH-CFrdmDUhQaGNZBP8pniM8DW0JAcNt3ErF5GW3PAUVDhi5o6Z0JEfM65kSHR8wMseUrbmvTqlbC7v9OVFpo_DAQsZAxCeTcyiyJOB5hvnf4dSwoiLCUk7KLkDsrPZfoVMWgPzRAhvAMVF0JbdXBukNEFxXUHGzkCk_8fOlb7MvllhJe0iea3f1eKd8zCfuuwBdrH-djaNlINsolYG4cvhJkdl6zmwxYmZRLjddtNgvdsvFKwAFgloip-VM2AK-x1doEy2D91pxACPgPgyN2g-SbVPv1BUIhmGsqxyCsyVAA54h6s0pPikYO6m9jz3k3JaIQgNqcqkPS2MdJSOMgl0_99pPAWJjhMVo92GLOW9VsQvRBpLKWX7EUXOTps5XJEUr-V-wvxXnTkEH39XULhQqgpkoEtMxirQsv_jgrljvvJtetrPeDa_33Cli4W6NYiLwzbe5xkr3q9-Owopq6iVqSuVps-PWA-Pgc4wUYNEwgLnei-l83mtbztZUxn8wo33DXH8dLYd0OJGQoFsh4DWQqieHOn1CSbaoJcSIgcdrBIzVqh9TrlD2qPlXVzoQ8JQEFMT6asUD5tQ29PJj_cBRcHs-IvdR_5D3LQfT_IIMuEUkmCW2w-oi0T9LOjAbBU0wo9wgLTACrvWYlSnzX0nSV_f0cXQc5mKiIWM3HpOiP2SkREFsP1kmGtxSVawkHrXwKcq6kEpyemFl4D3YcbYajai4qMtRDDflfv5PIt02LVpZEo1OOJwZOGg6A32nM3GCJL-0OMaOKwbEJxtkch4yg8i1f4OxuuorOYwwqJPWDKxkmVbuTT6kqhq8o62imYsH1K98_DLu54Sic6os2yskgg2uEPzdStx2TOI3rgHalJmiKJnGVN0lxXlnLKtLG-WhiLuQgOS85hTgcm6cqkr2IZPSEUKtZUoDaG3wKgIN_EdlkkLEB146pQ
Pragma: no-cache
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3118
Expires: Sun, 02 Oct 2022 04:59:06 GMT
Date: Sun, 02 Oct 2022 04:07:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3118
Expires: Sun, 02 Oct 2022 04:59:06 GMT
Date: Sun, 02 Oct 2022 04:07:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3118
Expires: Sun, 02 Oct 2022 04:59:06 GMT
Date: Sun, 02 Oct 2022 04:07:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3118
Expires: Sun, 02 Oct 2022 04:59:06 GMT
Date: Sun, 02 Oct 2022 04:07:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash edded48f558f739287a040151349ef67
d63b6ba630736d32c364b0e6a369274b2389b7ff
33b4a459df0ba7b36b907ba96d74e08660cc75640c42a5748b97d18ec2e9d533
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11083
x-amzn-requestid: 53e2c961-bcc0-4977-8648-ee3c1aed9cde
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHRFWfIAMFhlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3c7-070212d7386d5efa1b4aa8d3;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Z1KmxHJh9QNfg5x0enkqOjbmiqHvg7nlQiMnuDuCRNWQUBFEiKELbw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:36 GMT
etag: "d63b6ba630736d32c364b0e6a369274b2389b7ff"
content-type: image/jpeg
age: 22712
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa35a86a2-6f2d-47bd-970a-75f2caba5ecc.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa35a86a2-6f2d-47bd-970a-75f2caba5ecc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 31c14c715893e82dd04f10bb9c863e64
55f0192d2aabb99c72ee0827013e26cd38baaf81
6f1c716bd7062a97bfe20e6fcdd3f5a7d69248d3673f517fb92b15363e936a4d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa35a86a2-6f2d-47bd-970a-75f2caba5ecc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7733
x-amzn-requestid: ecc1e276-bf29-4c81-b415-065b0eea0a70
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHnEwNoAMFcOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ca-3b6b2da5041c65ed11b97e66;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:26 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: PE-7riXxL8vF5moOsmQCiKO6sKwPFErA0dYJ9RfpdVcQoAdianLv3Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:26 GMT
etag: "55f0192d2aabb99c72ee0827013e26cd38baaf81"
content-type: image/jpeg
age: 22722
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e251a53-c5b8-4c0a-b486-8ef8a6fd4d77.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e251a53-c5b8-4c0a-b486-8ef8a6fd4d77.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6299d2938a1195b694844a0556a569b3
82123a6c3e74a7ff90b5db0cb8a333a64cefe71c
b65f713b3c94586b0d09a04b6873004d8cdfe6a13d364863fc1a6cd2d1ceac83
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e251a53-c5b8-4c0a-b486-8ef8a6fd4d77.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5503
x-amzn-requestid: e5e2b912-6deb-4736-b455-c9e37e1701ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDgdHE-oAMFq3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cf-12a1f95320eadd1105daba75;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: zHzIjHe7MqjqSn1ejlTA-tD_gJBAizq91U3sI_prwcx7Vx4ai4B0DQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:26 GMT
etag: "82123a6c3e74a7ff90b5db0cb8a333a64cefe71c"
content-type: image/jpeg
age: 22722
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4043a1cb-a427-407b-90c2-59adcca462c8.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4043a1cb-a427-407b-90c2-59adcca462c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8342b284a0d5383fff1aae9375ef009
b5122a1c700e68a2322300a1e9d38453a1c3eb3a
b316b4db642e349e452b09cf49767c8b05ebd2db05f217e927065a571c9aa1fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4043a1cb-a427-407b-90c2-59adcca462c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7725
x-amzn-requestid: 2b15132c-03f8-4b9a-b3a9-2217fbfd89c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEIQHviIAMFtYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ce-749367997b2e5c9c106d8380;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:30 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BUYB6NasOkQ9eOkG3-59ioLAe206_V0Q4X-aTN-Kvv7-6fEf7zDX2Q==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:56:35 GMT
age: 22233
etag: "b5122a1c700e68a2322300a1e9d38453a1c3eb3a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 206fb65e75dbadf119512f71e0b78402
58ff0bf8ce7528b303d28bab01a80ad721705569
56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: f0791b53-3c5f-4d94-954d-992a529ebb60
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPnunF35oAMFYbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63361ff6-2adb303349153ced73ccecf6;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 22:45:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RGS_T9Cwl5Vjs_bxngHRomiYppE5fLe0SnH19VEfc5-PCT5tb5ku1A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 04:40:52 GMT
age: 84376
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1a669b2-0d3a-4091-8e1b-d039baf0b678.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1a669b2-0d3a-4091-8e1b-d039baf0b678.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6ae0054af58fd05a3cc83a805fcfd23d
1aa90c115a4506342fb287e9a3dd35c13e0cc682
f48ea45cddfdfca94445b0de37f722332ad1ea499c44e658c491bf7b862936f9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1a669b2-0d3a-4091-8e1b-d039baf0b678.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8629
x-amzn-requestid: 56667412-f4d8-4ffa-92f2-5ee71a5d2bff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEJ_Gb7IAMF2_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3d9-75ac43520455000b6170a7b0;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:41 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -lhklpM7rZ2NAic4uCrwQlp21sW8X_mstYGEtRF_w6NXke54N9-ttA==
via: 1.1 d16c3f15bd14953a9d4109eaaa991de2.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:56:35 GMT
etag: "1aa90c115a4506342fb287e9a3dd35c13e0cc682"
content-type: image/jpeg
age: 22233
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 626fa408afaa243b0d53e5d685ceca78
7e0b89a2df952a05c0aa7c3d506f079239022e5d
30b747f9b464afaec4df72c36e56397aac631521b390e9997012fbc1e192664e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 04:07:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 07:20:06 GMT
Expires: Fri, 07 Oct 2022 07:20:05 GMT
Etag: "7e0b89a2df952a05c0aa7c3d506f079239022e5d"
Cache-Control: max-age=442976,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 753a91c26d4eb50f-OSL
mybetterck.com/aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XQaiCg3BLRsq7qVxrtzI4f-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwGDRVCpBjTwrtcM7EN724MzNiE03EdAwuxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYgOzeSdXSQud8gLQ0QuNbeEbnJ8YaKdtRakgjafBu8ZEc1YVEhOQQJCpbRMnPinmkgkzzF7bpCXRUouSWJHSs17TrREasjs5ydU5tbZSjQnG_xSH9WuMsJZjr3oFzyJlWxHrYujGz0-zMP_KEp0Atoa2R7kE4hYKaJRfDnKMK_hbJ0EOA7hH3K8IZgjAXe1aQoPBZCL9NcfBJ4h5hUB6nPV0EMDx59TR3FaPkIqahg3lzwfgDSrgntEqsUhYON29Zstuo61Bk7899ecmECTsnGT_J0ey-pXFh-qMFTH8ZQnVCFNP84tPqKNxeFfSQuj9TfJrKdDxmRIpejK_ziYuar8kUgXGDiXQeMOVBQWYRwM82uiYB8ojAE1MhlujlyfvxwW4ritglbkl9a_MVjEXESqbCb8IFTJNx-XyEGNQGAhAOVtgbRXqPwnavJ2oEM2ryGUZYdIYiGnaLONi23GMqdElXrgTh189hywn4lk6GoTC2IkW9GkKl7jiecqKI3NbawOVOM0ib8oBaNpQk3XYgtP2kZvAIExrg-cNyfqPy8_EwXMIfZ0rRLFsoaGT0ii66euvnThgv6Zv5QNN9uACBcMP6nMn_nMd7duHrvublOqsJi7-BBLDkb6G77Ta3zsCKfPOMcfVOYg0-JLVcxwn31OMqc84DL-tigwtcX2sP_s2rIh0M5cDlUeYXnWkGyxppjTJ0BJMGhH252es-BF3x8XrTwHuVwzYJv0V3-IYGFRZAjY93z4Mpp4wcyfBbWR98RZueH1B2Iw46q7hZVtoIQVUAvejSKFHe4Y-V-nEwvAXhRGaWKF4jb82bm6ZETSltmc_mMnWAtU-FosXlUHPbhCxTWJhmIEFehoiTOq1ZsJfKG471g3ZH-CFrdmDUhQaGNZBP8pniM8DW0JAcNt3ErF5GW3PAUVDhi5o6Z0JEfM65kSHR8wMseUrbmvTqlbC7v9OVFpo_DAQsZAxCeTcyiyJOB5hvnf4dSwoiLCUk7KLkDsrPZfoVMWgPzRAhvAMVF0JbdXBukNEFxXUHGzkCk_8fOlb7MvllhJe0iea3f1eKd8zCfuuwBdrH-djaNlINsolYG4cvhJkdl6zmwxYmZRLjddtNgvdsvFKwAFgloip-VM2AK-x1doEy2D91pxACPgPgyN2g-SbVPv1BUIhmGsqxyCsyVAA54h6s0pPikYO6m9jz3k3JaIQgNqcqkPS2MdJSOMgl0_99pPAWJjhMVo92GLOW9VsQvRBpLKWX7EUXOTps5XJEUr-V-wvxXnTkEH39XULhQqgpkoEtMxirQsv_jgrljvvJtetrPeDa_33Cli4W6NYiLwzbe5xkr3q9-Owopq6iVqSuVps-PWA-Pgc4wUYNEwgLnei-l83mtbztZUxn8wo33DXH8dLYd0OJGQoFsh4DWQqieHOn1CSbaoJcSIgcdrBIzVqh9TrlD2qPlXVzoQ8JQEFMT6asUD5tQ29PJj_cBRcHs-IvdR_5D3LQfT_IIMuEUkmCW2w-oi0T9LOjAbBU0wo9wgLTACrvWYlSnzX0nSV_f0cXQc5mKiIWM3HpOiP2SkREFsP1kmGtxSVawkHrXwKcq6kEpyemFl4D3YcbYajai4qMtRDDflfv5PIt02LVpZEo1OOJwZOGg6A32nM3GCJL-0OMaOKwbEJxtkch4yg8i1f4OxuuorOYwwqJPWDKxkmVbuTT6kqhq8o62imYsH1K98_DLu54Sic6os2yskgg2uEPzdStx2TOI3rgHalJmiKJnGVN0lxXlnLKtLG-WhiLuQgOS85hTgcm6cqkr2IZPSEUKtZUoDaG3wKgIN_EdlkkLEB146pQ
302 Found 0 B URL HTTP/2 mybetterck.com/aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XQaiCg3BLRsq7qVxrtzI4f-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwGDRVCpBjTwrtcM7EN724MzNiE03EdAwuxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYgOzeSdXSQud8gLQ0QuNbeEbnJ8YaKdtRakgjafBu8ZEc1YVEhOQQJCpbRMnPinmkgkzzF7bpCXRUouSWJHSs17TrREasjs5ydU5tbZSjQnG_xSH9WuMsJZjr3oFzyJlWxHrYujGz0-zMP_KEp0Atoa2R7kE4hYKaJRfDnKMK_hbJ0EOA7hH3K8IZgjAXe1aQoPBZCL9NcfBJ4h5hUB6nPV0EMDx59TR3FaPkIqahg3lzwfgDSrgntEqsUhYON29Zstuo61Bk7899ecmECTsnGT_J0ey-pXFh-qMFTH8ZQnVCFNP84tPqKNxeFfSQuj9TfJrKdDxmRIpejK_ziYuar8kUgXGDiXQeMOVBQWYRwM82uiYB8ojAE1MhlujlyfvxwW4ritglbkl9a_MVjEXESqbCb8IFTJNx-XyEGNQGAhAOVtgbRXqPwnavJ2oEM2ryGUZYdIYiGnaLONi23GMqdElXrgTh189hywn4lk6GoTC2IkW9GkKl7jiecqKI3NbawOVOM0ib8oBaNpQk3XYgtP2kZvAIExrg-cNyfqPy8_EwXMIfZ0rRLFsoaGT0ii66euvnThgv6Zv5QNN9uACBcMP6nMn_nMd7duHrvublOqsJi7-BBLDkb6G77Ta3zsCKfPOMcfVOYg0-JLVcxwn31OMqc84DL-tigwtcX2sP_s2rIh0M5cDlUeYXnWkGyxppjTJ0BJMGhH252es-BF3x8XrTwHuVwzYJv0V3-IYGFRZAjY93z4Mpp4wcyfBbWR98RZueH1B2Iw46q7hZVtoIQVUAvejSKFHe4Y-V-nEwvAXhRGaWKF4jb82bm6ZETSltmc_mMnWAtU-FosXlUHPbhCxTWJhmIEFehoiTOq1ZsJfKG471g3ZH-CFrdmDUhQaGNZBP8pniM8DW0JAcNt3ErF5GW3PAUVDhi5o6Z0JEfM65kSHR8wMseUrbmvTqlbC7v9OVFpo_DAQsZAxCeTcyiyJOB5hvnf4dSwoiLCUk7KLkDsrPZfoVMWgPzRAhvAMVF0JbdXBukNEFxXUHGzkCk_8fOlb7MvllhJe0iea3f1eKd8zCfuuwBdrH-djaNlINsolYG4cvhJkdl6zmwxYmZRLjddtNgvdsvFKwAFgloip-VM2AK-x1doEy2D91pxACPgPgyN2g-SbVPv1BUIhmGsqxyCsyVAA54h6s0pPikYO6m9jz3k3JaIQgNqcqkPS2MdJSOMgl0_99pPAWJjhMVo92GLOW9VsQvRBpLKWX7EUXOTps5XJEUr-V-wvxXnTkEH39XULhQqgpkoEtMxirQsv_jgrljvvJtetrPeDa_33Cli4W6NYiLwzbe5xkr3q9-Owopq6iVqSuVps-PWA-Pgc4wUYNEwgLnei-l83mtbztZUxn8wo33DXH8dLYd0OJGQoFsh4DWQqieHOn1CSbaoJcSIgcdrBIzVqh9TrlD2qPlXVzoQ8JQEFMT6asUD5tQ29PJj_cBRcHs-IvdR_5D3LQfT_IIMuEUkmCW2w-oi0T9LOjAbBU0wo9wgLTACrvWYlSnzX0nSV_f0cXQc5mKiIWM3HpOiP2SkREFsP1kmGtxSVawkHrXwKcq6kEpyemFl4D3YcbYajai4qMtRDDflfv5PIt02LVpZEo1OOJwZOGg6A32nM3GCJL-0OMaOKwbEJxtkch4yg8i1f4OxuuorOYwwqJPWDKxkmVbuTT6kqhq8o62imYsH1K98_DLu54Sic6os2yskgg2uEPzdStx2TOI3rgHalJmiKJnGVN0lxXlnLKtLG-WhiLuQgOS85hTgcm6cqkr2IZPSEUKtZUoDaG3wKgIN_EdlkkLEB146pQ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XQaiCg3BLRsq7qVxrtzI4f-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwGDRVCpBjTwrtcM7EN724MzNiE03EdAwuxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYgOzeSdXSQud8gLQ0QuNbeEbnJ8YaKdtRakgjafBu8ZEc1YVEhOQQJCpbRMnPinmkgkzzF7bpCXRUouSWJHSs17TrREasjs5ydU5tbZSjQnG_xSH9WuMsJZjr3oFzyJlWxHrYujGz0-zMP_KEp0Atoa2R7kE4hYKaJRfDnKMK_hbJ0EOA7hH3K8IZgjAXe1aQoPBZCL9NcfBJ4h5hUB6nPV0EMDx59TR3FaPkIqahg3lzwfgDSrgntEqsUhYON29Zstuo61Bk7899ecmECTsnGT_J0ey-pXFh-qMFTH8ZQnVCFNP84tPqKNxeFfSQuj9TfJrKdDxmRIpejK_ziYuar8kUgXGDiXQeMOVBQWYRwM82uiYB8ojAE1MhlujlyfvxwW4ritglbkl9a_MVjEXESqbCb8IFTJNx-XyEGNQGAhAOVtgbRXqPwnavJ2oEM2ryGUZYdIYiGnaLONi23GMqdElXrgTh189hywn4lk6GoTC2IkW9GkKl7jiecqKI3NbawOVOM0ib8oBaNpQk3XYgtP2kZvAIExrg-cNyfqPy8_EwXMIfZ0rRLFsoaGT0ii66euvnThgv6Zv5QNN9uACBcMP6nMn_nMd7duHrvublOqsJi7-BBLDkb6G77Ta3zsCKfPOMcfVOYg0-JLVcxwn31OMqc84DL-tigwtcX2sP_s2rIh0M5cDlUeYXnWkGyxppjTJ0BJMGhH252es-BF3x8XrTwHuVwzYJv0V3-IYGFRZAjY93z4Mpp4wcyfBbWR98RZueH1B2Iw46q7hZVtoIQVUAvejSKFHe4Y-V-nEwvAXhRGaWKF4jb82bm6ZETSltmc_mMnWAtU-FosXlUHPbhCxTWJhmIEFehoiTOq1ZsJfKG471g3ZH-CFrdmDUhQaGNZBP8pniM8DW0JAcNt3ErF5GW3PAUVDhi5o6Z0JEfM65kSHR8wMseUrbmvTqlbC7v9OVFpo_DAQsZAxCeTcyiyJOB5hvnf4dSwoiLCUk7KLkDsrPZfoVMWgPzRAhvAMVF0JbdXBukNEFxXUHGzkCk_8fOlb7MvllhJe0iea3f1eKd8zCfuuwBdrH-djaNlINsolYG4cvhJkdl6zmwxYmZRLjddtNgvdsvFKwAFgloip-VM2AK-x1doEy2D91pxACPgPgyN2g-SbVPv1BUIhmGsqxyCsyVAA54h6s0pPikYO6m9jz3k3JaIQgNqcqkPS2MdJSOMgl0_99pPAWJjhMVo92GLOW9VsQvRBpLKWX7EUXOTps5XJEUr-V-wvxXnTkEH39XULhQqgpkoEtMxirQsv_jgrljvvJtetrPeDa_33Cli4W6NYiLwzbe5xkr3q9-Owopq6iVqSuVps-PWA-Pgc4wUYNEwgLnei-l83mtbztZUxn8wo33DXH8dLYd0OJGQoFsh4DWQqieHOn1CSbaoJcSIgcdrBIzVqh9TrlD2qPlXVzoQ8JQEFMT6asUD5tQ29PJj_cBRcHs-IvdR_5D3LQfT_IIMuEUkmCW2w-oi0T9LOjAbBU0wo9wgLTACrvWYlSnzX0nSV_f0cXQc5mKiIWM3HpOiP2SkREFsP1kmGtxSVawkHrXwKcq6kEpyemFl4D3YcbYajai4qMtRDDflfv5PIt02LVpZEo1OOJwZOGg6A32nM3GCJL-0OMaOKwbEJxtkch4yg8i1f4OxuuorOYwwqJPWDKxkmVbuTT6kqhq8o62imYsH1K98_DLu54Sic6os2yskgg2uEPzdStx2TOI3rgHalJmiKJnGVN0lxXlnLKtLG-WhiLuQgOS85hTgcm6cqkr2IZPSEUKtZUoDaG3wKgIN_EdlkkLEB146pQ HTTP/1.1
Host: mybetterck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Cookie: rhid=81412752446
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 02 Oct 2022 04:07:08 GMT
content-length: 0
set-cookie: rhid=81412752446; Max-Age=15552000; Expires=Fri, 31-Mar-2023 04:07:08 GMT; Domain=mybetterck.com; Path=/; SameSite=None; secure;
location: https://p201298.mybetterck.com/adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDGSZVu5NPqSq-h2rSoksoBqNG2LV3Zkk-L8FPCSjKZr_YsQ0yRxpJ6k8LlotqmtX7ErGSkvN2YlGY4HZ8X7cx-dM1QaxFxK0PHGpJGlCLAoWMnzoVZuce8ueVaQ0F217-cHwFJ-CDJF8T7C2wcJ1dqtoOgN9pzNxgl6S4oChQzOvrPE96Ym7CMGlXRdGMK-TkKMF_XSxG7q5c9lRJWHNr4s5bSTdWcYVZJciO9bgcuS1jIeAEiXnU3VYEUAru7F_DuXugOnM5m-8Jm7EhOsk27bxGYd3vi6Mg4f18T9CpHqCT2L9NFyVXF55Q47z-CV1ol2k4XVJzHJX8mFgHSWE3TZes2Wal4z2_6cr0kIIvFC278sDJBVR-ujw_o9HKkL8PaMhDqf7kErmDrOr0d6CIh0L3FtHWHx7HCl1j57-JOeaUbfHK1lWXoIZq44qh-mYNBTP6LhN0GpIW2jB4zFuRTFWdau7IN9FdV9I9zFVCeL5p92cp-vkcPmEf3qd4ONyUKC7q00sm1d_81VZTL6WTs8WO4QP-Vi7zRe7zzBJbLAQvEGFQ0jWJkN4bvlPQAriragptoHmn24iKiXhLmiyflhHQ2DhJtv57Pgpt-TBvcxCEwrLEAaOW_hUUutSGhrofXDf5i3bPUyKJAzwVqRCBUrBs34dAjVMmg&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPo-uYf9mCLnEA8c2lnrFKUQKLg4gPmnc1uYwW_D3BpodB8__exuaSE5Pp3aWhe23l17BgNqBNBHw&si=1&oref=e2905b67c440133e06d94d472902354c&optunit=g1X1rV7f4BpBS4YUfGI2rw&rb=LW_v4KVZAgI&rr=4&abtg=0
X-Firefox-Spdy: h2
promoprawn.com/norway?utm_source=no&utm_medium=89427525383
301 Moved Permanently 0 B URL HTTP/2 promoprawn.com/norway?utm_source=no&utm_medium=89427525383
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /norway?utm_source=no&utm_medium=89427525383 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.4.28
set-cookie: utm_source=no; expires=Tue, 01-Nov-2022 04:07:08 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_medium=89427525383; expires=Tue, 01-Nov-2022 04:07:08 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; expires=Tue, 01-Nov-2022 04:07:08 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ip=91.90.42.154; expires=Tue, 01-Nov-2022 04:07:08 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; expires=Tue, 01-Nov-2022 04:07:08 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://promoprawn.com/norway/?utm_source=no&utm_medium=89427525383
content-length: 0
date: Sun, 02 Oct 2022 04:07:08 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/norway/?utm_source=no&utm_medium=89427525383
302 Found 0 B URL HTTP/2 promoprawn.com/norway/?utm_source=no&utm_medium=89427525383
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /norway/?utm_source=no&utm_medium=89427525383 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
x-powered-by: PHP/7.4.28
set-cookie: utm_source=no; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_medium=89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ip=91.90.42.154; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%2F%3Futm_source%3Dno%26utm_medium%3D89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://promoprawn.com/go-to-lampegiganten-no
content-length: 0
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/go-to-lampegiganten-no
301 Moved Permanently 0 B URL HTTP/2 promoprawn.com/go-to-lampegiganten-no
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go-to-lampegiganten-no HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%2F%3Futm_source%3Dno%26utm_medium%3D89427525383
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.4.28
set-cookie: utm_source=no; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_medium=89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ip=91.90.42.154; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
content-type: text/html; charset=UTF-8
x-pingback: https://promoprawn.com/xmlrpc.php
x-redirect-by: WordPress
location: https://promoprawn.com/go-to-lampegiganten-no/
content-length: 0
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/gtranslate/gtranslate-style16.css?ver=6.0.2
200 OK 234 B URL HTTP/2 promoprawn.com/wp-content/plugins/gtranslate/gtranslate-style16.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash 4526c392337283c2a34e10b7cc7579b7
159f80ba532dcc67bc75ddf1bbe7e43f9b7fb33f
df0dff97ed83544627a440c3f3fbd460fb24b34814b10a1aa15e965e3f1f1f9c
GET /wp-content/plugins/gtranslate/gtranslate-style16.css?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2af-62cff464-19604d8;br"
last-modified: Thu, 14 Jul 2022 10:48:04 GMT
content-type: text/css
content-length: 234
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 11 kB URL HTTP/2 promoprawn.com/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (43771)
Hash 55bbab41f9fc950b6f2939d5a5b11d98
d3fc3d679d075648a22d83f95a08773b4e4a3383
2a5b528b068ef00c9d5acc922818724fe63fd5a8ad107d2d8831797fd244afb1
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "15b64-62c2d8bd-19a03ff;br"
last-modified: Mon, 04 Jul 2022 12:10:37 GMT
content-type: text/css
content-length: 10775
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/yc-url-redirection/public/css/yc-url-redirection-public.css?ver=1.0.0
200 OK 98 B URL HTTP/2 promoprawn.com/wp-content/plugins/yc-url-redirection/public/css/yc-url-redirection-public.css?ver=1.0.0
IP
ASN #24940 Hetzner Online GmbH
Hash e6094661d8923e95b233019ebff7c8f0
cfd836d385d475baffee45d85cfeb9bb36e70d9e
547dda3c14b284819be511be1e410da94a5efc6ccc4a9afe1c75394f9333191a
GET /wp-content/plugins/yc-url-redirection/public/css/yc-url-redirection-public.css?ver=1.0.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "62-63232e83-19601e3;;;"
last-modified: Thu, 15 Sep 2022 13:54:11 GMT
content-type: text/css
content-length: 98
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/css/dashicons.min.css?ver=6.0.2
200 OK 35 kB URL HTTP/2 promoprawn.com/wp-includes/css/dashicons.min.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (58981)
Hash 378455dbd7bf57fceffe7d3e27b264da
d2a55ec3793edbd18b929337e20e02fd1d8e9ad7
87ae07b42b93eedcd94fbfb13a24e8bc997b29589ba33664858fccc5083c5057
GET /wp-includes/css/dashicons.min.css?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "e688-603ffca6-19a043e;br"
last-modified: Wed, 03 Mar 2021 21:16:22 GMT
content-type: text/css
content-length: 35099
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/css/foundation.min.css?ver=6.4.3
200 OK 10 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/css/foundation.min.css?ver=6.4.3
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65531), with no line terminators
Hash 7b179e8f61b3fd5ce76c658751ce95aa
eb9fdfaea9ed6214de7dbd1b5475019effabd663
fa0b913fbb15c761c1e14120cbffe4d8d56108c2deb5ecff51b6a627688e0209
GET /wp-content/themes/clipper/assets/css/foundation.min.css?ver=6.4.3 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "111d7-620e11aa-1980a5b;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 10386
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick.min.css?ver=1.7.1
200 OK 399 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick.min.css?ver=1.7.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1342)
Hash 11a7eccde25705200f80299d3c7bc10b
d2ff227b3213365f049c53e34b50bf5ccf3f43a9
ec96ae71c7fe8b4ec4984c78c42e122082b9c9372813e0ea2388fc2f6694b027
GET /wp-content/themes/clipper/assets/js/lib/slick/slick.min.css?ver=1.7.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "53f-620e11aa-1980a4d;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 399
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick-theme.min.css?ver=1.7.1
200 OK 659 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick-theme.min.css?ver=1.7.1
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 (with BOM) text, with very long lines (2403)
Hash 56d376ae1b4ec1b202f1471c1c9a61dc
edee0781ae929fa5487763400b0d11dd958f2219
15145ebdf1f1d20797fdc47487405ccddb039a013b0590c3bd15a7663d9deb21
GET /wp-content/themes/clipper/assets/js/lib/slick/slick-theme.min.css?ver=1.7.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "971-620e11aa-1980a4c;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 659
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/theme-framework/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
200 OK 6.6 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/theme-framework/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (30837)
Hash e99e647b2bcbac735756f147437cd30d
a7feff175eb69bc219a4915f56213eb8177116ac
d942ce1121b2caa437ff304808a9079b017b83c77d36e08852cab601efd17b73
GET /wp-content/themes/clipper/theme-framework/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "7917-620e11aa-1980a80;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 6644
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9
200 OK 14 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash 809e3b62565e9e4578c4ece133445c3c
6fec1ad5fff86bfba5b75e071511f14f22105ca2
50d491d4546fc91311de7b0cc59ba70b6f9f9e7c1c14964d25c4562ba5c9105c
GET /wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "107a9-620e11aa-1980a63;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 13965
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/styles/red.css?ver=6.0.2
200 OK 250 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/styles/red.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash 8967441e38649571c6d6671114814c04
8f071b4be7214b99d23f66a1d4473660e34c6c59
dae814740c901b9bf2ff1f43a2aa6b6b02bb335d7114787cc46c1d7fbe035b29
GET /wp-content/themes/clipper/styles/red.css?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "27c-620e11aa-1980a73;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 250
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
cdn.jsdelivr.net/fontawesome/4.7.0/css/font-awesome.min.css?ver=4.7.0
200 OK 7.1 kB URL HTTP/2 cdn.jsdelivr.net/fontawesome/4.7.0/css/font-awesome.min.css?ver=4.7.0
IP
File type ASCII text, with very long lines (30837)
Hash c68c38b6f53bfc3bee6b736afa488757
871df21572c702142a7c237259326013ec2df26a
e2100c6e7b6f0d358ac92d33b11278661c9a80e4c62c056677e24bc572d6da34
GET /fontawesome/4.7.0/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
etag: W/"7918-USx9eQM+MCipvmG1QM8aaHDIlvg"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:09 GMT
age: 7956681
x-served-by: cache-fra19147-FRA, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7055
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a2d3925dad8ae1248c7b5d96220bd00a
8b6326da45860d5f480504e23864de0c28523b61
421d30a538dc347afc7fc8eee0fa6502aa65d789eb2353eb9c9f8bd0c5f3b3d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
promoprawn.com/wp-content/themes/clipper/theme-framework/js/colorbox/colorbox.min.css?ver=1.6.1
200 OK 801 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/theme-framework/js/colorbox/colorbox.min.css?ver=1.6.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (2982)
Hash ed0023e818060f2cc95064da01f70a9f
2a6a701f475d738846ea06fd45437fa80b2ecbb1
262ae1ae3fa68f6e5f74cd07770cea411453c6c8c82212129b316369e89fdac5
GET /wp-content/themes/clipper/theme-framework/js/colorbox/colorbox.min.css?ver=1.6.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "ba7-620e11aa-1980abd;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 801
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/framework/styles/jquery-ui/jquery-ui.min.css?ver=1.11.2
200 OK 7.0 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/framework/styles/jquery-ui/jquery-ui.min.css?ver=1.11.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (28367)
Hash 058d6ca773fb6164c07655e85c6902bc
60764b86a193c2daf22278e44059d961c4655cb0
c8fa6e1f1f00e858d665c09d56068347d1f70b612e22a572623d1d0f5b335cce
GET /wp-content/themes/clipper/framework/styles/jquery-ui/jquery-ui.min.css?ver=1.11.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "75d3-620e11ac-198075e;br"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: text/css
content-length: 6962
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/framework/styles/datepicker/datepicker.css?ver=6.0.2
200 OK 1.1 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/framework/styles/datepicker/datepicker.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash 9fee7a86a975b17368a842826ddb99c9
78fcdcd23065d6d685e5c9d6c427ff625747d42b
f1374de81cad252dd96c1aec50b73ff5f0325299a0095dae61b06b9cb8544e37
GET /wp-content/themes/clipper/framework/styles/datepicker/datepicker.css?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "1c06-620e11ac-198075a;br"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: text/css
content-length: 1059
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/includes/reports/style.css?ver=1.0
200 OK 235 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/includes/reports/style.css?ver=1.0
IP
ASN #24940 Hetzner Online GmbH
Hash 19f0401629c2112542768cd94d2d417e
dc7c931dbe8e75a2509917ee6b82b447b33e69f4
47de8110c32b0348d010fe1e717c37dd983f83d9bb1c2e887856917a94516458
GET /wp-content/themes/clipper/includes/reports/style.css?ver=1.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2d6-620e11aa-1980853;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: text/css
content-length: 235
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.0 kB URL HTTP/2 promoprawn.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11126)
Hash e32c5db077b45cddc36bbdec187ba4c4
dfdbe8e2f28238b3a218785514a452884aa789a8
51bd9696f8c91a26501c40b40842e759b5cbcd352b3ce7d1f6875996abec46f6
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2bd8-5fb4e3fe-19a013a;br"
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
content-type: application/x-javascript
content-length: 3992
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.0.2
200 OK 1.3 kB URL HTTP/2 promoprawn.com/wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash 002b38bcf8af7d7872f4de5705c8f7a0
a66362e316d0696a15e13acfe7678535a5ced687
3e72ce357bf0551646ad5e2595fa9b6bb08402d56b4a20ece22c5ee7cced5d66
GET /wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "df1-62cff46c-1960206;br"
last-modified: Thu, 14 Jul 2022 10:48:12 GMT
content-type: application/x-javascript
content-length: 1266
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.0.2
200 OK 627 B URL HTTP/2 promoprawn.com/wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash addf86ac7ac144fac1f7a1a2f3a27482
2c56ecd51714ebdb0d13f4b16cee2e9a1cafd7fc
71a3a8064fcf51f5acd5a186eeec760653b31fdb8b6e4caa1bf7cc62038f5370
GET /wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "5f5-62cff46c-1960204;br"
last-modified: Thu, 14 Jul 2022 10:48:12 GMT
content-type: application/x-javascript
content-length: 627
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/yc-url-redirection/public/js/yc-url-redirection-public.js?ver=1.0.0
200 OK 411 B URL HTTP/2 promoprawn.com/wp-content/plugins/yc-url-redirection/public/js/yc-url-redirection-public.js?ver=1.0.0
IP
ASN #24940 Hetzner Online GmbH
Hash cf6087d65d454b825a08b1179d2338f1
c1f877b976a59019a9dcce8a8c9c0e208350790b
294f446fb350d542dbff182a02b74e22074c6314f13b301e905a27ab6ba0205e
GET /wp-content/plugins/yc-url-redirection/public/js/yc-url-redirection-public.js?ver=1.0.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "346-63232e83-19601e0;br"
last-modified: Thu, 15 Sep 2022 13:54:11 GMT
content-type: application/x-javascript
content-length: 411
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
200 OK 6.6 kB URL HTTP/2 promoprawn.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash e2e16e8517ff2fdb0cdc9963f6e6edee
04ad2a9b8f3006d611ab2d9a2e8fadbc249e6cbf
3c49689f85907683c8da5d226bb14a550fcbdaad22582712b774d3ecd67c01b2
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "50eb-625095f6-19a012a;br"
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-type: application/x-javascript
content-length: 6622
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.1
200 OK 10 kB URL HTTP/2 promoprawn.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (36560)
Hash fde7d72716207b5314405ae291f64fbe
9651db9753198caba63070531c4e9f2c02cc204e
bce9e74b8745969dcc949d3c8f4765a1ab00be91371c34afd7663bc4364d8594
GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "8f87-625095f6-19a010d;br"
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-type: application/x-javascript
content-length: 10462
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/includes/js/easing.js?ver=1.3
200 OK 979 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/includes/js/easing.js?ver=1.3
IP
ASN #24940 Hetzner Online GmbH
Hash 9b4413eb236c6e142927da48f3543cc4
ecc3c20045f147b96d363adb0a1424242983d0d1
fb6f81269a0536629540fa1417fd8d29a1dc8aa3deb816aa6697ed6bf1cf31ae
GET /wp-content/themes/clipper/includes/js/easing.js?ver=1.3 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "1277-620e11aa-19809db;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 979
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/includes/js/jcarousellite.min.js?ver=1.8.5
200 OK 2.8 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/includes/js/jcarousellite.min.js?ver=1.8.5
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text, with very long lines (6965)
Hash 37d9d8e921e53bb7969d679141f1b3c6
5f99634ceb3820c25be3a0973e7d22326e69b4f8
cd2daf3d56682e97107fcf76247704e0404391214677acd10e12fb3e96f8ef5e
GET /wp-content/themes/clipper/includes/js/jcarousellite.min.js?ver=1.8.5 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "1c1a-620e11aa-19809da;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 2791
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/includes/js/clipboard.min.js?ver=1.5.15
200 OK 3.1 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/includes/js/clipboard.min.js?ver=1.5.15
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (10167)
Hash 475123ae9c99e82e1a8435ee4f985b03
bbb5978c0cbd47869a8d20080393ec83b9359d7a
7fc6d0240ec8286042ded4e070250917b4524c031803a81d7827f7c639036c42
GET /wp-content/themes/clipper/includes/js/clipboard.min.js?ver=1.5.15 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2824-620e11aa-19809d1;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 3118
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/theme-framework/js/colorbox/jquery.colorbox.min.js?ver=1.6.1
200 OK 4.5 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/theme-framework/js/colorbox/jquery.colorbox.min.js?ver=1.6.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11827)
Hash ad6d60444980e8a4874117f0f458127f
1f16fe23622ca20745b7607a56b3fba4f5bdf349
cfa97d63da39b950511a6b97941d1d715c67b7abd23ef89788e8571a7da8ba8c
GET /wp-content/themes/clipper/theme-framework/js/colorbox/jquery.colorbox.min.js?ver=1.6.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2e7c-620e11aa-1980ab6;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 4456
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/framework/js/validate/jquery.validate.min.js?ver=1.15.0
200 OK 7.0 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/framework/js/validate/jquery.validate.min.js?ver=1.15.0
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (22550), with CRLF line terminators
Hash ef006467da5ca47503437a4c6bab084c
c08f15f2f3626d0f70067692555eeb9deca5c757
86fe98d71dc4ea98d9b43dbf5c67643f57c732dfb97908aa104b8b9cf3c9de34
GET /wp-content/themes/clipper/framework/js/validate/jquery.validate.min.js?ver=1.15.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "58a3-620e11ac-1980755;br"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: application/x-javascript
content-length: 7039
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/framework/js/validate/jquery.validate-lang.js?ver=6.0.2
200 OK 231 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/framework/js/validate/jquery.validate-lang.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash f390bf7ad5ec9e840cbe75c6df24e5db
7758356d7a9319bf54b1286492369cb9ab2f9878
5e3cea34e2e7e5b62411117dbba36fbe66b87913a350d3b8f2193af0710fac40
GET /wp-content/themes/clipper/framework/js/validate/jquery.validate-lang.js?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2f7-620e11ac-1980751;br"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: application/x-javascript
content-length: 231
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/includes/js/jquery.tinynav.min.js?ver=1.2
200 OK 434 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/includes/js/jquery.tinynav.min.js?ver=1.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (507)
Hash 44ffdc8bc270e1c6cbc7007c09847b44
6721a81c984ac211221fe1675e046a9b1e95f711
06c9d5a72f21a345facab20aca443e55b6e5ab95e87ebb565de6e13198f41d8b
GET /wp-content/themes/clipper/includes/js/jquery.tinynav.min.js?ver=1.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "352-620e11aa-19809d0;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 434
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 30 kB URL HTTP/2 promoprawn.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65447)
Hash 9f5dbb0b07808181d3bceeeb95120419
ff69f040200c921ffbcd3e01ffddee3c6d63a30d
4398cce5635c0d26b99ca763fb8174721a50403908ec2ad688902891938bfefe
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "15db1-6048e0ac-19a0136;br"
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
content-type: application/x-javascript
content-length: 30118
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/gtranslate/flags/svg/en.svg
200 OK 428 B URL HTTP/2 promoprawn.com/wp-content/plugins/gtranslate/flags/svg/en.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (862), with no line terminators
Hash 34112ac5b6e76ddfc1f3e393f4588ab5
2a204dbd10899d9e2b645188459a2feea2257150
ab75706d74d752940b60a70940f493975b8b60e33def12f6ff3111b74c8693bf
GET /wp-content/plugins/gtranslate/flags/svg/en.svg HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "35e-62cff464-19603ee;br"
last-modified: Thu, 14 Jul 2022 10:48:04 GMT
content-type: image/svg+xml
content-length: 428
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/go-to-lampegiganten-no/
200 OK 76 kB URL HTTP/2 promoprawn.com/go-to-lampegiganten-no/
IP
ASN #24940 Hetzner Online GmbH
Hash a1c831e935faa59bc1d635e60a405b65
e01166ffcd08e0d320435befe3a8b8c7af62269e
cd7affa652926d54552316ddff8ad66bcd7236ee521a8908429b09d1a9cf4d09
GET /go-to-lampegiganten-no/ HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.28
set-cookie: utm_source=no; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_medium=89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ip=91.90.42.154; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com
email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
content-type: text/html; charset=UTF-8
x-pingback: https://promoprawn.com/xmlrpc.php
link: <https://promoprawn.com/wp-json/>; rel="https://api.w.org/", <https://promoprawn.com/wp-json/wp/v2/pages/2975>; rel="alternate"; type="application/json", <https://promoprawn.com/?p=2975>; rel=shortlink
content-encoding: gzip
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.promoprawn.com/wp-content/uploads/2022/02/logo-with-writing.jpg
200 OK 99 kB URL HTTP/2 www.promoprawn.com/wp-content/uploads/2022/02/logo-with-writing.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 960x678, components 3\012- data
Hash 8f1781d3eba83d8482d02be904b306d8
c04a74d3273720db6e0cfa828b9a76eb193451ba
59efb0d045dfcdf62c836f3e72d44843a832fa071bb4fdffa97b99099eb625db
GET /wp-content/uploads/2022/02/logo-with-writing.jpg HTTP/1.1
Host: www.promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "181e2-620dba86-1940646;;;"
last-modified: Thu, 17 Feb 2022 03:01:26 GMT
content-type: image/jpeg
content-length: 98786
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 4.6 kB URL HTTP/2 promoprawn.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (15660)
Hash 8b21827e4cc06ac9d6c686e463be1fb2
395e1545d76868371b3110d48179027eadef1b39
bf023dff36bcaa1d34063e0804ebfc1598550f64915890b39a2afbe95b8aed8a
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "48b9-62551487-19a00d3;br"
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
content-type: application/x-javascript
content-length: 4584
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.3.7
200 OK 19 B URL HTTP/2 promoprawn.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.3.7
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with no line terminators
Hash 8102dc9eee0565de28649497220d8d17
a32963be36656f3dd149892540138913bc88de6c
51ff2b4b46acab057eba32dc5fbd0bcf410f0ad2bb75d7a92b230bc627d930d6
GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.3.7 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "13-62cff458-1960a36;;;"
last-modified: Thu, 14 Jul 2022 10:47:52 GMT
content-type: application/x-javascript
content-length: 19
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.1
200 OK 2.9 kB URL HTTP/2 promoprawn.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (9937)
Hash 9fcb59dd74df643e90b84727f98b2ecc
ac7ffd31e16f3d8c8479ab2640e8c45c111f364d
9683f9fd0a6cc5c891901c7f792a5e01bd58a7499ab45229b7e3bd7a469fb9bb
GET /wp-includes/js/jquery/ui/menu.min.js?ver=1.13.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2782-625095f6-19a0105;br"
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-type: application/x-javascript
content-length: 2868
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.4 kB URL HTTP/2 promoprawn.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (6475), with no line terminators
Hash 6fc7f6a64943fb700809729d3bd733b4
5f794ac00a49aa543c1f9c3eb7b1d20bc797e6f2
3101fde9e69cf266ba9486abd29a0f82fa43e6d3bebd43218b6d3f9c0fd903bc
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "194b-6254194e-19a0248;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-type: application/x-javascript
content-length: 2356
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 6.9 kB URL HTTP/2 promoprawn.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash 647e9639c172ea1329b55aea96c5ccd5
0de233c1691cf0a3c9d61d5658ee5b6953fbd958
d1f34aecec229d7714b3fb38af4e4bea63cf3532420bd2d0b02732a64fdba2f8
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "4ac6-6254194e-19a0253;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-type: application/x-javascript
content-length: 6871
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/dist/dom-ready.min.js?ver=d996b53411d1533a84951212ab6ac4ff
200 OK 282 B URL HTTP/2 promoprawn.com/wp-includes/js/dist/dom-ready.min.js?ver=d996b53411d1533a84951212ab6ac4ff
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (463)
Hash 76f8633b8a727174600f2bf180b2fc62
601739aff913ae441dc5da803fdee8d0812c4747
b06a5da5f87d6f76cfc4b6975730e91a118919b519f02c3f01ac791a85480c08
GET /wp-includes/js/dist/dom-ready.min.js?ver=d996b53411d1533a84951212ab6ac4ff HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "1f2-6254194e-19a023b;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-type: application/x-javascript
content-length: 282
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
200 OK 1.6 kB URL HTTP/2 promoprawn.com/wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (4875)
Hash 334c10434c5114c1b6a896a4bfb97762
3141a7c37d1d5775dd56e0a971420aa95e952eed
4bc9855c90cecf283f832865270bd1a718c3d5cf3054e2df60cecbbb6fdd51e0
GET /wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "132e-6254194e-19a028f;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-type: application/x-javascript
content-length: 1575
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
200 OK 3.7 kB URL HTTP/2 promoprawn.com/wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94
IP
ASN #24940 Hetzner Online GmbH
Hash f76cd901010039724af10d37e014d290
61bb0147adee02a22e013aacd95b40bc18431603
ddee8f13a9822816f3f427e407c6b5e268dedc80c6cc02df03fd4c754bfbddd3
GET /wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "27ee-625596ef-19a02af;br"
last-modified: Tue, 12 Apr 2022 15:12:47 GMT
content-type: application/x-javascript
content-length: 3718
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/dist/a11y.min.js?ver=a38319d7ba46c6e60f7f9d4c371222c5
200 OK 858 B URL HTTP/2 promoprawn.com/wp-includes/js/dist/a11y.min.js?ver=a38319d7ba46c6e60f7f9d4c371222c5
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (2472)
Hash b0c4f225b053a315d5079627f1091a62
c3840f47d840cbc0acd525900895d812abd4346c
99162da318f3a7cc12a83fc818fe8240e921a5b9e8416ceb0f48e3e70d9d4fcc
GET /wp-includes/js/dist/a11y.min.js?ver=a38319d7ba46c6e60f7f9d4c371222c5 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "9cc-6254194e-19a0235;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-type: application/x-javascript
content-length: 858
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick.min.js?ver=1.7.1
200 OK 9.9 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/js/lib/slick/slick.min.js?ver=1.7.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (42634)
Hash 762efe221b6b5e41560e5ea0b4d311f0
8a26e405ab5656759decc9b662a6da1b277bf596
1a4f5d684b37667a6dd73cc0b5fddba230d9537adfd3b30ff5e2298729a9e962
GET /wp-content/themes/clipper/assets/js/lib/slick/slick.min.js?ver=1.7.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "a68b-620e11aa-1980a4e;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 9941
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash ca86bde2afd41c1e1a7ec111ddf4f4c4
ae40af8bc78ab930ccac2ba680eb8f77dc8db78a
d9625c5b018082f37f6e39f6dfa97cdeae2d7718da4e63c1f6944f6cb01c14d2
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 04:07:10 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "3645C90952D883055BDB84FEBBBAD449A8F3B49F"
Expires: Sun, 02 Oct 2022 15:00:00 GMT
Last-Modified: Sun, 02 Oct 2022 03:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 936
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 753a91d02ae5b4eb-OSL
promoprawn.com/wp-content/themes/clipper/assets/js/lib/foundation/foundation.min.js?ver=6.4.3
200 OK 30 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/js/lib/foundation/foundation.min.js?ver=6.4.3
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash ee3061888f79f5f4d331d2de2abeed64
85523c19a2d0da39e67f407cde66afe45961e1a4
35d8dd7c8c79159886c47f42195ea63f02656238632afda83d9fb8b130684cf6
GET /wp-content/themes/clipper/assets/js/lib/foundation/foundation.min.js?ver=6.4.3 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2440f-620e11aa-1980a54;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 30137
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/lib/foundation/motion-ui.min.js?ver=1.2.2
200 OK 672 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/js/lib/foundation/motion-ui.min.js?ver=1.2.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1683), with no line terminators
Hash b94465fd6a5dca879afbe6e86dad686f
ca81a8c96e5a440e08dc6036cefcfdc6b3779008
373c770a484e647dafe5c8b30ac0d7c8b942b32b1a29e0c2cc32645ed60f646f
GET /wp-content/themes/clipper/assets/js/lib/foundation/motion-ui.min.js?ver=1.2.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "693-620e11aa-1980a53;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 672
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/assets/js/theme-scripts.min.js?ver=2.0.9
200 OK 2.2 kB URL HTTP/2 promoprawn.com/wp-content/themes/clipper/assets/js/theme-scripts.min.js?ver=2.0.9
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (6814), with no line terminators
Hash 0639cf7204db2598b7b6e44666a279eb
aef294252f44cb8875cc52cb1d836d969ac9cf3c
33ddb4f2dad0f29729bd7dd78dedf8b20ca78c82e45eaafc8a4e44d19287d4d4
GET /wp-content/themes/clipper/assets/js/theme-scripts.min.js?ver=2.0.9 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "1a9e-620e11aa-1980a58;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 2172
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/includes/reports/scripts/reports.js?ver=1.0
200 OK 412 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/includes/reports/scripts/reports.js?ver=1.0
IP
ASN #24940 Hetzner Online GmbH
Hash 257ae7dae5cf066cc3ffa06d37a2f556
79b845a88029af15e79d0c1f1569ba3f1208bd90
6c4fedce38d11dee2749ae828ead9f3569ef0a0e4551a71eafd17a31d1d66b2b
GET /wp-content/themes/clipper/includes/reports/scripts/reports.js?ver=1.0 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "40a-620e11aa-1980851;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-type: application/x-javascript
content-length: 412
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a2d3925dad8ae1248c7b5d96220bd00a
8b6326da45860d5f480504e23864de0c28523b61
421d30a538dc347afc7fc8eee0fa6502aa65d789eb2353eb9c9f8bd0c5f3b3d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
promoprawn.com/wp-content/themes/clipper/images/bg-sidebox-line.png
200 OK 113 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/images/bg-sidebox-line.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 1 x 19, 8-bit gray+alpha, non-interlaced\012- data
Hash d759e787150faba42a8e2c123ee015ae
0403b47562bb5cebcd5111d572fdf665fcdc1e6c
9826d17ba5806594bcda5d7c739422b90c809d7bb3ac91221c7ccd0135c58a7d
GET /wp-content/themes/clipper/images/bg-sidebox-line.png HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:10 GMT
etag: "71-620e11ac-1980822;;;"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: image/png
content-length: 113
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:10 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/framework/js/jquery-ui/jquery.ui.datepicker-lang.js?ver=6.0.2
200 OK 354 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/framework/js/jquery-ui/jquery.ui.datepicker-lang.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash 15edced6bcb0515698f0d7e9069073f2
5bdf5626ef4773cdc1a414cba3d776fd0f8ff531
ac0893cef5260bcda4667351bad2f9c37496ed94e73c41ce50f441533ef7b9d4
GET /wp-content/themes/clipper/framework/js/jquery-ui/jquery.ui.datepicker-lang.js?ver=6.0.2 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "e6-620e11ac-198074f;gz"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: application/x-javascript
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/themes/clipper/images/bg-footer-red.gif
200 OK 157 B URL HTTP/2 promoprawn.com/wp-content/themes/clipper/images/bg-footer-red.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 87a, 1 x 45\012- data
Hash b29b8e308afb688f3f5664660226f9c8
ac3eb9351fdb042c4795cbad9350783b24a44294
563ad2a9e240a6743ae9ff8d8de9e5903d8edb010ea02da74c93abda378afa15
GET /wp-content/themes/clipper/images/bg-footer-red.gif HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/wp-content/themes/clipper/styles/red.css?ver=6.0.2
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:10 GMT
etag: "9d-620e11ac-19807b8;;;"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-type: image/gif
content-length: 157
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:10 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-192x192.png
200 OK 21 kB URL HTTP/2 promoprawn.com/wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-192x192.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 75336744e0240d8bb03a116fe4a0fe71
d4edee03869b0d53596193c745e6f8bdf537c646
e6e770dc40baafdca752013a5a39125b26ccd5d1f5b4235df61ff72fc5069dbb
GET /wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-192x192.png HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:10 GMT
etag: "50e1-620dd166-19406c3;;;"
last-modified: Thu, 17 Feb 2022 04:39:02 GMT
content-type: image/png
content-length: 20705
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:10 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-32x32.png
200 OK 1.1 kB URL HTTP/2 promoprawn.com/wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-32x32.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash c029e0b9abdc5aacb520f5b9faf03105
dca9e8e13b5260dd951da772d79bd0c04f0f87e5
09711854e11cce389d4c9d3931975604849a2376ea31786e69dce5e20bb6115f
GET /wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-32x32.png HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:10 GMT
etag: "467-620dd166-194065a;;;"
last-modified: Thu, 17 Feb 2022 04:39:02 GMT
content-type: image/png
content-length: 1127
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:10 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ab779588f01243aca896d41395f8bd90
b8ef2d7cdc6366c283db0d608766a126dce37164
5531deca73d8380883740395d82457f4d39761134404876881242e2135b1546a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash afdf50c16ee3edd56884ca2c654e0a20
f6de83540fb91f3fcc2077574e1bfd6ceb308939
39d0a58f97a6f1ede1b50f865af2df4d39055802fe658c4c627294cab300ce60
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5712
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:10 GMT
Last-Modified: Sun, 02 Oct 2022 02:31:58 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_GB/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_GB/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash 46074ef70fe81eeb29f6b113068ad7c5
5f9b64f5f6c0b69ff71a809448a507f708db3b3d
a7350f1bbe443d765f98cc5ee190d39cc5da5cff0ba4b6183202b05ab3bc34c1
GET /en_GB/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 1fa4d7c6fb57f462add81b5ebc187680
etag: "de071ca0d100e86887597374735e9d71"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 02 Oct 2022 04:19:05 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
document-policy: force-load-at-top
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: RgdO9w/oHusp9rETBorXxQ==
x-fb-debug: SOAXiCWAees2jpxI9CnlkEYyiDvTCiNdVQ1441xHnQoMr8PRdyZ2piRw1vcgxUdQWSHGOlHYYzluKOponvxhbw==
content-length: 1689
x-fb-trip-id: 1679558926
date: Sun, 02 Oct 2022 04:07:10 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash afdf50c16ee3edd56884ca2c654e0a20
f6de83540fb91f3fcc2077574e1bfd6ceb308939
39d0a58f97a6f1ede1b50f865af2df4d39055802fe658c4c627294cab300ce60
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5712
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:10 GMT
Last-Modified: Sun, 02 Oct 2022 02:31:58 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ab779588f01243aca896d41395f8bd90
b8ef2d7cdc6366c283db0d608766a126dce37164
5531deca73d8380883740395d82457f4d39761134404876881242e2135b1546a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83f9407574c75ca600c57af0637cb200
4ebabbc1900b8f575e90186e2024e48097b0c8d2
1e166ac737e5c3c015e0dc0c68115ebc5eeb53958682a9b77928ddb647137ac1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
translate.googleapis.com/translate_static/css/translateelement.css
200 OK 3.6 kB URL HTTP/2 translate.googleapis.com/translate_static/css/translateelement.css
IP
File type ASCII text, with very long lines (18670)
Hash 897ba9a21d9625286674da769dacc2e2
84b4923ab7dee562395160824d53496314499b77
696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 02 Oct 2022 03:10:24 GMT
expires: Sun, 02 Oct 2022 04:10:24 GMT
cache-control: public, max-age=3600
age: 3406
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.lLH6XiwjNog.O/d=1/exm=el_conf/ed=1/rs=AN8SPfovjPHo2bwAuuffoPV8hwfpGtKH6A/m=el_main
200 OK 94 kB URL HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.lLH6XiwjNog.O/d=1/exm=el_conf/ed=1/rs=AN8SPfovjPHo2bwAuuffoPV8hwfpGtKH6A/m=el_main
IP
File type ASCII text, with very long lines (1613)
Hash 542ffbd176620aadfc951b1b5e916ea2
c595c824743e936408a799841d44e2442b29b85a
5bbd2304a95ab386892e42526de07507c733391fa17e063bbd010a05cf918df8
GET /_/translate_http/_/js/k=translate_http.tr.no.lLH6XiwjNog.O/d=1/exm=el_conf/ed=1/rs=AN8SPfovjPHo2bwAuuffoPV8hwfpGtKH6A/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 93874
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Sep 2022 20:03:41 GMT
expires: Fri, 29 Sep 2023 20:03:41 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 Sep 2022 05:12:45 GMT
content-type: text/javascript; charset=UTF-8
age: 201809
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Sun, 02 Oct 2022 02:41:09 GMT
expires: Sun, 02 Oct 2022 04:41:09 GMT
cache-control: public, max-age=7200
age: 5161
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_GB/sdk.js?hash=557d2f7992f69ccf4508844146019b25
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_GB/sdk.js?hash=557d2f7992f69ccf4508844146019b25
IP
File type ASCII text, with very long lines (13192)
Hash cf6336df2e435aa804b3aa57b0a181c1
b23f2a40dbfa99abf5bbd0c1266ee4bd3a413dfb
74ba3742b3794e505cb0bc5ca95639182b102b0d87e361987db5321d30759253
GET /en_GB/sdk.js?hash=557d2f7992f69ccf4508844146019b25 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promoprawn.com
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: ebe6785a98b33996c7a342ee260ac397
etag: "9f8fc9440cf0000dd51050cac259cc6d"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 02 Oct 2023 03:45:43 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: z2M23y5DWqgEs6pXsKGBwQ==
x-fb-debug: VCh3zxkHa7t7KYnsNIbRBSh/FvlyERHyeUf2D0UHOASLoOA1oR0HrGIf8T8Lp5SHP50wneKFGL7uERsnfY5Htw==
priority: u=3,i
content-length: 86941
x-fb-trip-id: 1679558926
date: Sun, 02 Oct 2022 04:07:10 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb2de1a6c4c76b62bd9b5844ac8f0711
205f8666f86cf5f699ed5c8252c46004492fa88e
d0f5a54640474e3d0383d5302a9899e8060456287379906d2359925c6d36c46b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/images/branding/product/1x/translate_24dp.png
200 OK 846 B URL HTTP/2 www.gstatic.com/images/branding/product/1x/translate_24dp.png
IP
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e9cd262114358f26b7608b56905185dc
6dbde0a96deaab2b529723ce26c62043cf9180ab
5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
GET /images/branding/product/1x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 02 Oct 2022 00:14:05 GMT
expires: Mon, 02 Oct 2023 00:14:05 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
age: 13985
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb2de1a6c4c76b62bd9b5844ac8f0711
205f8666f86cf5f699ed5c8252c46004492fa88e
d0f5a54640474e3d0383d5302a9899e8060456287379906d2359925c6d36c46b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/images/branding/product/2x/translate_24dp.png
200 OK 1.8 kB URL HTTP/2 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://translate.googleapis.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 22:47:59 GMT
expires: Sun, 01 Oct 2023 22:47:59 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
age: 19151
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
200 OK 910 B URL HTTP/2 www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
IP
File type PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash efa6bb2bfe459bc6f4bdafa3db0383f6
52d15ce52fe50643e542c17812de43f4ed1b6ee0
6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 10:05:49 GMT
expires: Sat, 30 Sep 2023 10:05:49 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
age: 151281
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eb2de1a6c4c76b62bd9b5844ac8f0711
205f8666f86cf5f699ed5c8252c46004492fa88e
d0f5a54640474e3d0383d5302a9899e8060456287379906d2359925c6d36c46b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/v2.3/plugins/page.php?adapt_container_width=true&app_id=235643263204884&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df33955abc6263e8%26domain%3Dpromoprawn.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fpromoprawn.com%252Ff31c82b3cd5b71e%26relation%3Dparent.parent&container_width=361&height=290&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Fappthemes&locale=en_GB&sdk=joey&show_facepile=true&show_posts=false&small_header=false&width=268
302 Found 0 B URL HTTP/2 www.facebook.com/v2.3/plugins/page.php?adapt_container_width=true&app_id=235643263204884&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df33955abc6263e8%26domain%3Dpromoprawn.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fpromoprawn.com%252Ff31c82b3cd5b71e%26relation%3Dparent.parent&container_width=361&height=290&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Fappthemes&locale=en_GB&sdk=joey&show_facepile=true&show_posts=false&small_header=false&width=268
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2.3/plugins/page.php?adapt_container_width=true&app_id=235643263204884&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df33955abc6263e8%26domain%3Dpromoprawn.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fpromoprawn.com%252Ff31c82b3cd5b71e%26relation%3Dparent.parent&container_width=361&height=290&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Fappthemes&locale=en_GB&sdk=joey&show_facepile=true&show_posts=false&small_header=false&width=268 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fplugins%2Fpage.php%3Fadapt_container_width%3Dtrue%26app_id%3D235643263204884%26channel%3Dhttps%253A%252F%252Fstaticxx.facebook.com%252Fx%252Fconnect%252Fxd_arbiter%252F%253Fversion%253D46%2523cb%253Df33955abc6263e8%2526domain%253Dpromoprawn.com%2526is_canvas%253Dfalse%2526origin%253Dhttps%25253A%25252F%25252Fpromoprawn.com%25252Ff31c82b3cd5b71e%2526relation%253Dparent.parent%26container_width%3D361%26height%3D290%26hide_cover%3Dfalse%26hide_cta%3Dfalse%26href%3Dhttps%253A%252F%252Fwww.facebook.com%252Fappthemes%26locale%3Den_GB%26sdk%3Djoey%26show_facepile%3Dtrue%26show_posts%3Dfalse%26small_header%3Dfalse%26width%3D268
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v8.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: oSy1LR5BKETddpBYm6oTVfrW7kOH/OGn+FqOliJUB9er8SHsheGUHU6hdK0OQCNqwaQG93npExg28+eeDqGmdg==
content-length: 0
date: Sun, 02 Oct 2022 04:07:11 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r.srvtrck.com/v1/redirect?url=https%3A%2F%2Flampegiganten.no&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89427525383
301 Moved Permanently 0 B URL HTTP/1.1 r.srvtrck.com/v1/redirect?url=https%3A%2F%2Flampegiganten.no&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89427525383
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/redirect?url=https%3A%2F%2Flampegiganten.no&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89427525383 HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 02 Oct 2022 04:07:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 02 Oct 2022 05:07:11 GMT
Location: https://r.srvtrck.com/v1/redirect?url=https%3A%2F%2Flampegiganten.no&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89427525383
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 753a91d72f21b51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
region1.google-analytics.com/g/collect?v=2&tid=G-GZH27V8EPY>m=2oe9s0&_p=1060789317&gdid=dZTNiMT&cid=805338310.1664683627&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664683627&sct=1&seg=0&dl=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F&dt=Go%20to%20lampegiganten-no&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-GZH27V8EPY>m=2oe9s0&_p=1060789317&gdid=dZTNiMT&cid=805338310.1664683627&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664683627&sct=1&seg=0&dl=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F&dt=Go%20to%20lampegiganten-no&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GZH27V8EPY>m=2oe9s0&_p=1060789317&gdid=dZTNiMT&cid=805338310.1664683627&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664683627&sct=1&seg=0&dl=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F&dt=Go%20to%20lampegiganten-no&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promoprawn.com
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://promoprawn.com
date: Sun, 02 Oct 2022 04:07:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r.srvtrck.com/v1/redirect?url=https%3A%2F%2Flampegiganten.no&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89427525383
302 Found 0 B URL HTTP/2 r.srvtrck.com/v1/redirect?url=https%3A%2F%2Flampegiganten.no&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89427525383
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/redirect?url=https%3A%2F%2Flampegiganten.no&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89427525383 HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 02 Oct 2022 04:07:11 GMT
content-length: 0
p3p: CP="CAO PSA OUR"
set-cookie: ykuid=2d501a03d2ea483a86e72dfc940f4473; Domain=.srvtrck.com; Expires=Mon, 02-Oct-2023 04:07:11 GMT; Path=/
location: /v2/go?t=gtipo%3Au%2Fcoag8.defk0o0r3u2.5e7%2F6ta%2F5obs6t7s%3DamctGu%3F%26t0%3D0694987641b6b%261s4g1X3a8d3kaQ5x0g4S0Z0c0t0N%3D_mct%26uf%26iuittsoaIa%3Dd6d6a6455c9m3d8172-9718%26bo5n-rd%3D7o6o9f3r1d%3D8I6e3of%26638e5i7r7s681109f16_68a1%266e8r4h6d_1271130066004%3D1I6c6a3s3e3972488d835e%26ae2v9c1%3D06et7ken4d%3D3Ibe3f3%26-ndy6t4u7c-3d909a4a%3D8Iaod%2612%266d9e9Pdrnmi%3Darlefcas-oW1ovp324c0a1y2V6Y6fduct3T9%3Dfi2.07a833636656218sc.coshor2eeeeib%2F1gblac4tan8p5odg9oel5k3o7--no%2Fpsntnh&e=1&ai=164f8848a31e47beb99ae39a190fc81b&sct=1&ct=1664683631910&cu=56ad3c83391f4210bab346769592080c&ykuid=2d501a03d2ea483a86e72dfc940f4473&sc=1&cs=fb145f7e4a93572bbfe879d87bc08667
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 753a91d76d030b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash a087aae37c022f004658fd419660c4e6
080f236ac75ea7b3a496bd7f4786f9394a69dbed
b17a98101a974c129365776af8eb2c9a7f85e9dfd0b31d35055a9658e04ead29
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3621
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:12 GMT
Last-Modified: Sun, 02 Oct 2022 03:06:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664683631867&.sig=XTatdukfQYxVgySaZcc2tpNo_Wc-&affiliationId=96966625&comId=14299913&country=no&offerId=846e37fe608159727a6e130df86269ae&searchId=1076100361024_1664683631387_41898158&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v03040001420656ad3c83391f4210bab346769592080c&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
200 OK 31 kB URL HTTP/1.1 no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664683631867&.sig=XTatdukfQYxVgySaZcc2tpNo_Wc-&affiliationId=96966625&comId=14299913&country=no&offerId=846e37fe608159727a6e130df86269ae&searchId=1076100361024_1664683631387_41898158&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v03040001420656ad3c83391f4210bab346769592080c&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12978)
Hash b6280e14ee17bd97b4595ebee0425582
361657eb12f031c0011c25e1f20d70f9fa3de005
59a4ae424dfc0813e47c4d824d224531a951362904a84de15dd87ee7c07ff6af
GET /ctl/go/sitesearchGo?.ts=1664683631867&.sig=XTatdukfQYxVgySaZcc2tpNo_Wc-&affiliationId=96966625&comId=14299913&country=no&offerId=846e37fe608159727a6e130df86269ae&searchId=1076100361024_1664683631387_41898158&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v03040001420656ad3c83391f4210bab346769592080c&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.srvtrck.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 04:07:12 GMT
leadId: dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401
clickId: 107698148_1664683632148_2060202
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.020112S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/html; charset=UTF-8
Content-Length: 31060
Set-Cookie: datadome=B0Vf~5Jucnk7GGbQaxsWGVRQmAgGhtoKsvUYgfj6f~D6cbqESE4KMs8UuKqgxHbyLoA7Ycl47iwAv6zNmKsPNA7F~dGFpGdXpwysBjcwZsL~CXx9jPi~3X~xceT79bk; Max-Age=31536000; Expires=Mon, 02 Oct 2023 04:07:12 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
kelkooID=a4c6294-18396e06615-8068c; Max-Age=31536000; Expires=Mon, 02 Oct 2023 04:07:12 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=93
Connection: Keep-Alive
r.srvtrck.com/v2/go?t=gtipo%3Au%2Fcoag8.defk0o0r3u2.5e7%2F6ta%2F5obs6t7s%3DamctGu%3F%26t0%3D0694987641b6b%261s4g1X3a8d3kaQ5x0g4S0Z0c0t0N%3D_mct%26uf%26iuittsoaIa%3Dd6d6a6455c9m3d8172-9718%26bo5n-rd%3D7o6o9f3r1d%3D8I6e3of%26638e5i7r7s681109f16_68a1%266e8r4h6d_1271130066004%3D1I6c6a3s3e3972488d835e%26ae2v9c1%3D06et7ken4d%3D3Ibe3f3%26-ndy6t4u7c-3d909a4a%3D8Iaod%2612%266d9e9Pdrnmi%3Darlefcas-oW1ovp324c0a1y2V6Y6fduct3T9%3Dfi2.07a833636656218sc.coshor2eeeeib%2F1gblac4tan8p5odg9oel5k3o7--no%2Fpsntnh&e=1&ai=164f8848a31e47beb99ae39a190fc81b&sct=1&ct=1664683631910&cu=56ad3c83391f4210bab346769592080c&ykuid=2d501a03d2ea483a86e72dfc940f4473&sc=1&cs=fb145f7e4a93572bbfe879d87bc08667
200 OK 800 B URL HTTP/2 r.srvtrck.com/v2/go?t=gtipo%3Au%2Fcoag8.defk0o0r3u2.5e7%2F6ta%2F5obs6t7s%3DamctGu%3F%26t0%3D0694987641b6b%261s4g1X3a8d3kaQ5x0g4S0Z0c0t0N%3D_mct%26uf%26iuittsoaIa%3Dd6d6a6455c9m3d8172-9718%26bo5n-rd%3D7o6o9f3r1d%3D8I6e3of%26638e5i7r7s681109f16_68a1%266e8r4h6d_1271130066004%3D1I6c6a3s3e3972488d835e%26ae2v9c1%3D06et7ken4d%3D3Ibe3f3%26-ndy6t4u7c-3d909a4a%3D8Iaod%2612%266d9e9Pdrnmi%3Darlefcas-oW1ovp324c0a1y2V6Y6fduct3T9%3Dfi2.07a833636656218sc.coshor2eeeeib%2F1gblac4tan8p5odg9oel5k3o7--no%2Fpsntnh&e=1&ai=164f8848a31e47beb99ae39a190fc81b&sct=1&ct=1664683631910&cu=56ad3c83391f4210bab346769592080c&ykuid=2d501a03d2ea483a86e72dfc940f4473&sc=1&cs=fb145f7e4a93572bbfe879d87bc08667
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (578)
Hash 26899fac063e01b25e5b121f3a2832e5
73814863e5dc0a9fe27c3bc54b4d0f14f100c4a4
13525fc4583c49700711cb2c939519e3c41b4958c183c183ad4884d250de46cf
GET /v2/go?t=gtipo%3Au%2Fcoag8.defk0o0r3u2.5e7%2F6ta%2F5obs6t7s%3DamctGu%3F%26t0%3D0694987641b6b%261s4g1X3a8d3kaQ5x0g4S0Z0c0t0N%3D_mct%26uf%26iuittsoaIa%3Dd6d6a6455c9m3d8172-9718%26bo5n-rd%3D7o6o9f3r1d%3D8I6e3of%26638e5i7r7s681109f16_68a1%266e8r4h6d_1271130066004%3D1I6c6a3s3e3972488d835e%26ae2v9c1%3D06et7ken4d%3D3Ibe3f3%26-ndy6t4u7c-3d909a4a%3D8Iaod%2612%266d9e9Pdrnmi%3Darlefcas-oW1ovp324c0a1y2V6Y6fduct3T9%3Dfi2.07a833636656218sc.coshor2eeeeib%2F1gblac4tan8p5odg9oel5k3o7--no%2Fpsntnh&e=1&ai=164f8848a31e47beb99ae39a190fc81b&sct=1&ct=1664683631910&cu=56ad3c83391f4210bab346769592080c&ykuid=2d501a03d2ea483a86e72dfc940f4473&sc=1&cs=fb145f7e4a93572bbfe879d87bc08667 HTTP/1.1
Host: r.srvtrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ykuid=2d501a03d2ea483a86e72dfc940f4473
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:11 GMT
content-type: text/html;charset=UTF-8
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 753a91db9e810b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401&clickId=107698148_1664683632148_2060202
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401&clickId=107698148_1664683632148_2060202
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401&clickId=107698148_1664683632148_2060202 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664683631867&.sig=XTatdukfQYxVgySaZcc2tpNo_Wc-&affiliationId=96966625&comId=14299913&country=no&offerId=846e37fe608159727a6e130df86269ae&searchId=1076100361024_1664683631387_41898158&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v03040001420656ad3c83391f4210bab346769592080c&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
Content-Type: text/plain;charset=utf-8
Content-Length: 520
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=B0Vf~5Jucnk7GGbQaxsWGVRQmAgGhtoKsvUYgfj6f~D6cbqESE4KMs8UuKqgxHbyLoA7Ycl47iwAv6zNmKsPNA7F~dGFpGdXpwysBjcwZsL~CXx9jPi~3X~xceT79bk; kelkooID=a4c6294-18396e06615-8068c; _ga=GA1.2.572007895.1664683628; _gid=GA1.2.469405717.1664683628
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 04:07:12 GMT
Request-Time: PT0.002859S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=92
Connection: Keep-Alive
dd.kelkoogroup.net/tags.js
200 OK 43 kB URL HTTP/2 dd.kelkoogroup.net/tags.js
IP
File type ASCII text, with very long lines (65432)
Hash a9f75aaa24c508083c6eda2912cb2929
c47edaa4aa173610bef816ec6078b8385b271bca
092fecd8bdaf2416d3c813569c99ca72665726b2231a01308c07db16489ca93d
GET /tags.js HTTP/1.1
Host: dd.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=B0Vf~5Jucnk7GGbQaxsWGVRQmAgGhtoKsvUYgfj6f~D6cbqESE4KMs8UuKqgxHbyLoA7Ycl47iwAv6zNmKsPNA7F~dGFpGdXpwysBjcwZsL~CXx9jPi~3X~xceT79bk; kelkooID=a4c6294-18396e06615-8068c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 43000
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Fri, 30 Sep 2022 11:57:45 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 289a9745961f61628764c51baab54288.cloudfront.net (CloudFront), 1.1 b16cebff619862e7e4cf8eb234632e3a.cloudfront.net (CloudFront)
date: Sun, 02 Oct 2022 03:58:33 GMT
cache-control: max-age=3600, public
expires: Sun, 02 Oct 2022 04:58:29 GMT
etag: "33929-5e9e3b3bbc8ac-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: LHR50-P2, LHR61-P2
x-amz-cf-id: nuHsx28rtFXNUK0zMHaDRZFVUEMvuETAR14beRY9F2tWg0MRVFz3tg==
age: 523
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/favicon.ico
403 Forbidden 0 B URL HTTP/1.0 no-go.kelkoogroup.net/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664683631867&.sig=XTatdukfQYxVgySaZcc2tpNo_Wc-&affiliationId=96966625&comId=14299913&country=no&offerId=846e37fe608159727a6e130df86269ae&searchId=1076100361024_1664683631387_41898158&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v03040001420656ad3c83391f4210bab346769592080c&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
Connection: keep-alive
Cookie: datadome=B0Vf~5Jucnk7GGbQaxsWGVRQmAgGhtoKsvUYgfj6f~D6cbqESE4KMs8UuKqgxHbyLoA7Ycl47iwAv6zNmKsPNA7F~dGFpGdXpwysBjcwZsL~CXx9jPi~3X~xceT79bk; kelkooID=a4c6294-18396e06615-8068c; _ga=GA1.2.572007895.1664683628; _gid=GA1.2.469405717.1664683628
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.0 403 Forbidden
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
no-go.kelkoogroup.net/redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff4373002ebc12b4ed46472d678ee0160318d4834df775c386b0254896139bbbb8029fbe623b2c91e088a91da8379a8062be440235a858ea8b4ea00256342ca14f43b3aa252e8a7cc39d5513ed6198485ef3c7aa82808028dd26f9b9ca70f5b47a467879a3e801c0c274c43d15e3dd46fbdcefd64b182a52d3137303bbccd64d37433383a8ebd4c37f38bc9d516d0f363429ef1182fceee6e0e8df96dfab240cc3adff34523855f559caccec81fe1ce6c92da829e23fe7548c69a397896d3fe2a69a2b1c29473cfca0212ca41d2566d342c2232b72f53befdde07e080b97bb3e0ad49aa349067abe106b45a3a834d7382809d5c28aaecbb57395b9a379ef00741bdda1a2051104cdcb050&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401&clickId=107698148_1664683632148_2060202&url=https%3A%2F%2Ftrack.productsup.io%2Fclick.redir%3Fsiteid%3D469050%26version%3D1.0%26pup_e%3D7%26pup_cid%3D79446%26pup_id%3D9627421%26redir%3Dhttps%253A%252F%252Fwww.lampegiganten.no%252Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%253Fkk%253Da4c6294-18396e06615-8068c%2526utm_medium%253Dpv%2526utm_source%253Dkelkoo%2526utm_campaign%253Dcpc_no%2526utm_content%253D9627421%2526utm_term%253D21&initiator=timeout
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff4373002ebc12b4ed46472d678ee0160318d4834df775c386b0254896139bbbb8029fbe623b2c91e088a91da8379a8062be440235a858ea8b4ea00256342ca14f43b3aa252e8a7cc39d5513ed6198485ef3c7aa82808028dd26f9b9ca70f5b47a467879a3e801c0c274c43d15e3dd46fbdcefd64b182a52d3137303bbccd64d37433383a8ebd4c37f38bc9d516d0f363429ef1182fceee6e0e8df96dfab240cc3adff34523855f559caccec81fe1ce6c92da829e23fe7548c69a397896d3fe2a69a2b1c29473cfca0212ca41d2566d342c2232b72f53befdde07e080b97bb3e0ad49aa349067abe106b45a3a834d7382809d5c28aaecbb57395b9a379ef00741bdda1a2051104cdcb050&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401&clickId=107698148_1664683632148_2060202&url=https%3A%2F%2Ftrack.productsup.io%2Fclick.redir%3Fsiteid%3D469050%26version%3D1.0%26pup_e%3D7%26pup_cid%3D79446%26pup_id%3D9627421%26redir%3Dhttps%253A%252F%252Fwww.lampegiganten.no%252Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%253Fkk%253Da4c6294-18396e06615-8068c%2526utm_medium%253Dpv%2526utm_source%253Dkelkoo%2526utm_campaign%253Dcpc_no%2526utm_content%253D9627421%2526utm_term%253D21&initiator=timeout
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401&clickId=107698148_1664683632148_2060202&url=https%3A%2F%2Ftrack.productsup.io%2Fclick.redir%3Fsiteid%3D469050%26version%3D1.0%26pup_e%3D7%26pup_cid%3D79446%26pup_id%3D9627421%26redir%3Dhttps%253A%252F%252Fwww.lampegiganten.no%252Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%253Fkk%253Da4c6294-18396e06615-8068c%2526utm_medium%253Dpv%2526utm_source%253Dkelkoo%2526utm_campaign%253Dcpc_no%2526utm_content%253D9627421%2526utm_term%253D21&initiator=timeout HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664683631867&.sig=XTatdukfQYxVgySaZcc2tpNo_Wc-&affiliationId=96966625&comId=14299913&country=no&offerId=846e37fe608159727a6e130df86269ae&searchId=1076100361024_1664683631387_41898158&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v03040001420656ad3c83391f4210bab346769592080c&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
Connection: keep-alive
Cookie: datadome=B0Vf~5Jucnk7GGbQaxsWGVRQmAgGhtoKsvUYgfj6f~D6cbqESE4KMs8UuKqgxHbyLoA7Ycl47iwAv6zNmKsPNA7F~dGFpGdXpwysBjcwZsL~CXx9jPi~3X~xceT79bk; kelkooID=a4c6294-18396e06615-8068c; _ga=GA1.2.572007895.1664683628; _gid=GA1.2.469405717.1664683628
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
Date: Sun, 02 Oct 2022 04:07:12 GMT
leadId: dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401
clickId: 107698148_1664683632148_2060202
country: no
Location: https://track.productsup.io/click.redir?siteid=469050&version=1.0&pup_e=7&pup_cid=79446&pup_id=9627421&redir=https%3A%2F%2Fwww.lampegiganten.no%2Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%3Fkk%3Da4c6294-18396e06615-8068c%26utm_medium%3Dpv%26utm_source%3Dkelkoo%26utm_campaign%3Dcpc_no%26utm_content%3D9627421%26utm_term%3D21
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.012723S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=cTW_klPD-D.8n6J-Z95ldACGnpqXVhKDtB8Cn.OyDHRgA5m2whdE7z3aY~6zKsxFetfqAwVaDPI88Jl6Lb6cUCc2RAdCLU_Swy6yXrCd2lsGNe5BC56F3tEFFD664TA; Max-Age=31536000; Expires=Mon, 02 Oct 2023 04:07:12 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=94
Connection: Keep-Alive
Content-Type: text/plain
ocsp.usertrust.com/
200 OK 471 B IP
Hash 2a6d948b5514c9ae557883c057e96e97
dec4a6e716c54a9a51796c4d61d39cb5d521e6fd
12f73ad3879c888938080f3b8093695492e574e4e897bf9db05b0936a35ba2d3
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 04:07:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 08:57:00 GMT
Expires: Fri, 07 Oct 2022 08:56:59 GMT
Etag: "dec4a6e716c54a9a51796c4d61d39cb5d521e6fd"
Cache-Control: max-age=603572,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1577
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 753a91df8d960b59-OSL
api-js.datadome.co/js/
200 OK 235 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2df056ffd0cdf332647de1a9a0c5b981
4d63f821358425d3925aa40482cc28d008b93a36
b0ba5014a17c814cdd02810a548ba9636023e4674cc5c02f00b7651f89397015
POST /js/ HTTP/1.1
Host: api-js.datadome.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4165
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:12 GMT
content-type: application/json;charset=utf-8
content-length: 235
server: DataDome
access-control-allow-origin: *
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 6209d72c2c5f7be2d8e3ef4b50c29151
61616e9df0e225bed52824bfc5008467934c2712
bb032db5f32685574db1e2a0ec1ccf521a3faa8389235145e5ea88c8d86cedd5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 04:07:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 04:00:20 GMT
Expires: Sat, 08 Oct 2022 04:00:19 GMT
Etag: "61616e9df0e225bed52824bfc5008467934c2712"
Cache-Control: max-age=517386,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 753a91df9d63b50f-OSL
track.productsup.io/click.redir?siteid=469050&version=1.0&pup_e=7&pup_cid=79446&pup_id=9627421&redir=https%3A%2F%2Fwww.lampegiganten.no%2Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%3Fkk%3Da4c6294-18396e06615-8068c%26utm_medium%3Dpv%26utm_source%3Dkelkoo%26utm_campaign%3Dcpc_no%26utm_content%3D9627421%26utm_term%3D21
301 Moved Permanently 191 B URL HTTP/1.1 track.productsup.io/click.redir?siteid=469050&version=1.0&pup_e=7&pup_cid=79446&pup_id=9627421&redir=https%3A%2F%2Fwww.lampegiganten.no%2Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%3Fkk%3Da4c6294-18396e06615-8068c%26utm_medium%3Dpv%26utm_source%3Dkelkoo%26utm_campaign%3Dcpc_no%26utm_content%3D9627421%26utm_term%3D21
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 071fd8ecafea25912fcd3ac36da047f8
1df9fbcde3170de426d4ca7fa23870e69ac7f5a7
6a0441175769a66b712c9e317a0c46df05120400370b4f9fc9828d30e9338b08
GET /click.redir?siteid=469050&version=1.0&pup_e=7&pup_cid=79446&pup_id=9627421&redir=https%3A%2F%2Fwww.lampegiganten.no%2Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%3Fkk%3Da4c6294-18396e06615-8068c%26utm_medium%3Dpv%26utm_source%3Dkelkoo%26utm_campaign%3Dcpc_no%26utm_content%3D9627421%26utm_term%3D21 HTTP/1.1
Host: track.productsup.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: openresty/1.13.6.2
Date: Sun, 02 Oct 2022 04:07:12 GMT
Content-Type: text/html
Content-Length: 191
Connection: close
Location: https://www.lampegiganten.no/lindby-tirzana-hengelampe-4-lyskilder-morkegra.html?kk=a4c6294-18396e06615-8068c&utm_medium=pv&utm_source=kelkoo&utm_campaign=cpc_no&utm_content=9627421&utm_term=21
X-CW-LOC: PAGE 1.3.4
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: post-check=0, pre-check=0
P3P: CP="NOI DSP COR LAW CUR ADM TAI PSA PSD IVA IVD HIS OUR SAM OTR LEG UNI COM NAV DEM CNT LOC"
Set-Cookie: _auid=2527212600695530452;Domain=.productsup.io;Path=/;Max-Age=2592000;SameSite=None;Secure;
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a2d3925dad8ae1248c7b5d96220bd00a
8b6326da45860d5f480504e23864de0c28523b61
421d30a538dc347afc7fc8eee0fa6502aa65d789eb2353eb9c9f8bd0c5f3b3d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FsitesearchGo%3F.ts%3D1664683631867%26.sig%3DXTatdukfQYxVgySaZcc2tpNo_Wc-%26affiliationId%3D96966625%26comId%3D14299913%26country%3Dno%26offerId%3D846e37fe608159727a6e130df86269ae%26searchId%3D1076100361024_1664683631387_41898158%26service%3D36%26tokenId%3D31b33936-7dd6-457b-8d70-a7a883a9d514%26addedParams%3Dtrue%26custom1%3Dv03040001420656ad3c83391f4210bab346769592080c%26custom2%3De7e6bb15baa647a58253d090ef5d387a-couponing&dr=https%3A%2F%2Fr.srvtrck.com%2F&dp=%2F96966625%7C14299913%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Lampegiganten.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=572007895.1664683628&tid=UA-168544891-6&_gid=469405717.1664683628&_r=1&cd1=96966625&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401&cd3=14299913&cd4=a4c6294-18396e06615-8068c&cd5=&cd6=96966625%7C14299913%7C&z=119793536
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FsitesearchGo%3F.ts%3D1664683631867%26.sig%3DXTatdukfQYxVgySaZcc2tpNo_Wc-%26affiliationId%3D96966625%26comId%3D14299913%26country%3Dno%26offerId%3D846e37fe608159727a6e130df86269ae%26searchId%3D1076100361024_1664683631387_41898158%26service%3D36%26tokenId%3D31b33936-7dd6-457b-8d70-a7a883a9d514%26addedParams%3Dtrue%26custom1%3Dv03040001420656ad3c83391f4210bab346769592080c%26custom2%3De7e6bb15baa647a58253d090ef5d387a-couponing&dr=https%3A%2F%2Fr.srvtrck.com%2F&dp=%2F96966625%7C14299913%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Lampegiganten.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=572007895.1664683628&tid=UA-168544891-6&_gid=469405717.1664683628&_r=1&cd1=96966625&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401&cd3=14299913&cd4=a4c6294-18396e06615-8068c&cd5=&cd6=96966625%7C14299913%7C&z=119793536
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FsitesearchGo%3F.ts%3D1664683631867%26.sig%3DXTatdukfQYxVgySaZcc2tpNo_Wc-%26affiliationId%3D96966625%26comId%3D14299913%26country%3Dno%26offerId%3D846e37fe608159727a6e130df86269ae%26searchId%3D1076100361024_1664683631387_41898158%26service%3D36%26tokenId%3D31b33936-7dd6-457b-8d70-a7a883a9d514%26addedParams%3Dtrue%26custom1%3Dv03040001420656ad3c83391f4210bab346769592080c%26custom2%3De7e6bb15baa647a58253d090ef5d387a-couponing&dr=https%3A%2F%2Fr.srvtrck.com%2F&dp=%2F96966625%7C14299913%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Lampegiganten.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=572007895.1664683628&tid=UA-168544891-6&_gid=469405717.1664683628&_r=1&cd1=96966625&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401&cd3=14299913&cd4=a4c6294-18396e06615-8068c&cd5=&cd6=96966625%7C14299913%7C&z=119793536 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Sun, 02 Oct 2022 04:07:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lw-cdn.com/images/A86BBD22B341/k_47c91c7ae4d548443acc1ef7ed12086b;w_535;h_535;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
200 OK 45 kB URL HTTP/2 lw-cdn.com/images/A86BBD22B341/k_47c91c7ae4d548443acc1ef7ed12086b;w_535;h_535;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 535x535, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 733b3383385c5a79c556beb267942244
ebb4da754c500e0a5d69f10498e04a808ff83c57
d95e0518b66324ab90f07172eb405e88e04081f168e94c6668c7eefde8dfe060
GET /images/A86BBD22B341/k_47c91c7ae4d548443acc1ef7ed12086b;w_535;h_535;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1
Host: lw-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:13 GMT
content-type: image/webp
content-length: 45108
cf-ray: 753a91e75936b51d-OSL
accept-ranges: bytes
age: 391882
cache-control: public, max-age=2678400
etag: "cfes5aBSk5yWgqzy1Ku3XOuQ:47c91c7ae4d548443acc1ef7ed12086b"
expires: Wed, 02 Nov 2022 04:07:13 GMT
last-modified: Thu, 25 Nov 2021 07:56:30 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=80 c=97 v=2022.9.6 l=45108
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
c.searchhub.io/kotlWrNZC
200 OK 21 kB IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash be0d705a1f9e7255f1f965eaec74e358
9adac017680a39d64ac573abd216e2aacd1ed2bd
7dc4075163e420b7f56e012b6f87b7cd364c4df58cf447f86caf093167a4d7df
GET /kotlWrNZC HTTP/1.1
Host: c.searchhub.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 21368
last-modified: Fri, 30 Sep 2022 09:12:38 GMT
content-encoding: gzip
x-amz-version-id: KTUjQLVOZR2JjYHStCzs.d9oj_qXOWPd
accept-ranges: bytes
server: AmazonS3
date: Sun, 02 Oct 2022 03:18:19 GMT
cache-control: max-age=3600
etag: "be0d705a1f9e7255f1f965eaec74e358"
x-cache: Hit from cloudfront
via: 1.1 a6a1a17bbe377bf7c4423397c71959da.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: FhKIvWtxe3rzcbMZoGFeFpZS91RHyze27B03K1GYX__7SGDHVGMRvw==
age: 2962
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 15 kB IP
ASN #20940 Akamai International B.V.
Hash 14dbfbd40a9e05d8478809924d33b684
c8e018ab9913551b6188d0b67cd1440d33a24a8e
127fa1efe2be4c1773b88f5b13b0292fce543e2722f675f16238a4b84b6b9c33
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "389769326D8F3F8416F35D1516A3FEA50C63637D947F93953014963B1970A914"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3994
Expires: Sun, 02 Oct 2022 05:13:47 GMT
Date: Sun, 02 Oct 2022 04:07:13 GMT
Connection: keep-alive
consentmanager.mgr.consensu.org/delivery/cmp.php?id=18922&h=https%3A%2F%2Fwww.lampegiganten.no%2Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%3Fkk%3Da4c6294-18396e06615-8068c%26utm_medium%3Dpv%26utm_source%3Dkelkoo%26utm_campaign%3Dcpc_no%26utm_content%3D9627421%26utm_term%3D21&&l=en&o=1664683629967
200 OK 648 B URL HTTP/1.1 consentmanager.mgr.consensu.org/delivery/cmp.php?id=18922&h=https%3A%2F%2Fwww.lampegiganten.no%2Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%3Fkk%3Da4c6294-18396e06615-8068c%26utm_medium%3Dpv%26utm_source%3Dkelkoo%26utm_campaign%3Dcpc_no%26utm_content%3D9627421%26utm_term%3D21&&l=en&o=1664683629967
IP
ASN #61157 PlusServer GmbH
File type ASCII text, with very long lines (417), with CRLF line terminators
Hash 161710dff7917cc61860c898a404bd9e
4515590a5304a4b511f07887832aba8ef02b44be
2df5db1b4a6beed7d27f0a55dca165b94582ea2f6a12f9734bcad62aeb6f9920
GET /delivery/cmp.php?id=18922&h=https%3A%2F%2Fwww.lampegiganten.no%2Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%3Fkk%3Da4c6294-18396e06615-8068c%26utm_medium%3Dpv%26utm_source%3Dkelkoo%26utm_campaign%3Dcpc_no%26utm_content%3D9627421%26utm_term%3D21&&l=en&o=1664683629967 HTTP/1.1
Host: consentmanager.mgr.consensu.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lampegiganten.no
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 04:07:13 GMT
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: https://www.lampegiganten.no
Access-Control-Allow-Credentials: true
X-XSS-Protection: 0
Set-Cookie: __cmpcc=1; Expires=Wed, 01-Nov-2023 04:07:13 GMT; Path=/; SameSite=None; Secure
Last-Modified: Sun, 02 Oct 2022 04:07:13 GMT
Transfer-Encoding: chunked
Content-Type: application/javascript; charset=utf-8
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a2d3925dad8ae1248c7b5d96220bd00a
8b6326da45860d5f480504e23864de0c28523b61
421d30a538dc347afc7fc8eee0fa6502aa65d789eb2353eb9c9f8bd0c5f3b3d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 04:07:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.consentmanager.mgr.consensu.org/delivery/cmp_en.min.js
200 OK 100 kB URL HTTP/2 cdn.consentmanager.mgr.consensu.org/delivery/cmp_en.min.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (65536), with no line terminators
Hash 15c6e2383865765238d66fc3bf19bb40
ca8e85221983e65ec592f93fd8d2cac471ab2599
6eba1b6d9d9d45adf84e36735f979575a020991665d8bd6c55ab396f52420dd1
GET /delivery/cmp_en.min.js HTTP/1.1
Host: cdn.consentmanager.mgr.consensu.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lampegiganten.no
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:13 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
last-modified: Thu, 29 Sep 2022 20:38:00 GMT
etag: W/"6501c-5e9d6da66da00"
cache-control: max-age=1800, public
strict-transport-security: max-age=63072000; includeSubDomains
access-control-allow-origin: https://www.lampegiganten.no
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-max-age: 1000
x-content-type-options: nosniff
x-accel-expires: @1664684480
server: CDN77-Turbo
x-77-nzt: AblMCRRXaBv/uQMAAA
x-77-nzt-ray: lC5A0Sbuyec
x-cache: HIT
x-age: 953
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-K6DHVZ
200 OK 96 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-K6DHVZ
IP
File type Unicode text, UTF-8 text, with very long lines (56857)
Hash 77bdef1c2db6d08ba78b991b91382725
c0a0e306f2b5feeb1a6a805479a2e7515b2cf277
994d3739b8529be986e9de63e1c04523b6d87ac9cc658566bbd4279dc9c49410
GET /gtm.js?id=GTM-K6DHVZ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:14 GMT
expires: Sun, 02 Oct 2022 04:07:14 GMT
cache-control: private, max-age=900
last-modified: Sun, 02 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 95735
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.scarabresearch.com/wpjs/wploader.js?ts=2752
200 OK 11 kB URL HTTP/1.1 static.scarabresearch.com/wpjs/wploader.js?ts=2752
IP
File type Unicode text, UTF-8 text, with very long lines (26064)
Hash a8bb6d4e39909c8f8e954fed9415e7bc
03f1afa1b1fd6ab09bcd926699bef9ac0125a59f
78103fa79faac4fec3ffb0ced757fb1f5edf05c6bdf00ed3782af6e89ddc3623
GET /wpjs/wploader.js?ts=2752 HTTP/1.1
Host: static.scarabresearch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 09:40:21 GMT
x-amz-version-id: 7SmGps1Uz2H1CReqc_mg7C_t5Y6SW1PY
Server: AmazonS3
Content-Encoding: gzip
Date: Sat, 01 Oct 2022 06:37:45 GMT
Cache-Control: max-age=86400
ETag: W/"5f215c4826918826b30a3bb7edbfb4ae"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 208aec8d7d6b69028fbed7a7605feea6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P3
X-Amz-Cf-Id: Gv6N_y3pZTBFM9gfQ9qzp-5vGjTBzlXTAGKYRZwJbImVrzqLEtsynA==
Age: 78412
static.scarabresearch.com/wpjs/wpes6.js?ts=2752
200 OK 34 kB URL HTTP/1.1 static.scarabresearch.com/wpjs/wpes6.js?ts=2752
IP
Hash 59f6f2f68894f87807342bdaf6c78444
b5670dfb291d2940aa22930900c0687428152672
e5c3a7205640882f67a5ccadae6cd2ebd6da862c39a68209c2fecfecc7972a79
GET /wpjs/wpes6.js?ts=2752 HTTP/1.1
Host: static.scarabresearch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 01 Oct 2022 04:21:21 GMT
Last-Modified: Wed, 07 Sep 2022 09:40:24 GMT
ETag: W/"04898b506b5c3abca388f05e149d6688"
Cache-Control: max-age=86400
x-amz-version-id: _Uvn2vz007TNpY1dCE0kdJtzIBYvUSf0
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 208aec8d7d6b69028fbed7a7605feea6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P3
X-Amz-Cf-Id: Y7CJXUUbPtSxkmRnkxmT4r28G2uS6M4hOJBQYOElqBTBIOUOF8owVA==
Age: 85554
lw-cdn.com/images/D473DEEDC774/k_7f950c5e0f0a57474d05f5db11d37f3e;w_535;h_535;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
200 OK 34 kB URL HTTP/2 lw-cdn.com/images/D473DEEDC774/k_7f950c5e0f0a57474d05f5db11d37f3e;w_535;h_535;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 535x535, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b3e4d291935f4db803b8a67c15be081b
34a3bed947e923df00b4db7c126ffcadfe8c857b
21590ac977b3e3ae76dd9fc981c53fab4b8f2f2d718642d8f175a3128be2565f
GET /images/D473DEEDC774/k_7f950c5e0f0a57474d05f5db11d37f3e;w_535;h_535;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1
Host: lw-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:14 GMT
content-type: image/webp
content-length: 33552
cf-ray: 753a91ebfc26b51d-OSL
accept-ranges: bytes
age: 52228
cache-control: public, max-age=2678400
etag: "cf__4eYWueTZT4VL7xbC6WxA:7f950c5e0f0a57474d05f5db11d37f3e"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:31 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=43 c=92 v=2022.9.7 l=33552
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
lw-cdn.com/images/D93E6BEC6EA0/k_47c91c7ae4d548443acc1ef7ed12086b;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
200 OK 3.8 kB URL HTTP/2 lw-cdn.com/images/D93E6BEC6EA0/k_47c91c7ae4d548443acc1ef7ed12086b;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
IP
Hash 6b454b0151634c9485a8f29e46bf4995
832d0593d87135c85d9e2a61ab13dd20852414b2
9f387717a3246931d487cd534e21bdd8ead0572ac2a20f52f8e404381e793457
GET /images/D93E6BEC6EA0/k_47c91c7ae4d548443acc1ef7ed12086b;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1
Host: lw-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:14 GMT
content-type: image/webp
content-length: 1600
cf-ray: 753a91ebfc29b51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cfhIcyBKbvLmUiCOM6GtpxKg:47c91c7ae4d548443acc1ef7ed12086b"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:30 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=37 c=19 v=2022.9.7 l=1600
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
lw-cdn.com/images/F568A4148CA9/k_7f950c5e0f0a57474d05f5db11d37f3e;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
200 OK 1.6 kB URL HTTP/2 lw-cdn.com/images/F568A4148CA9/k_7f950c5e0f0a57474d05f5db11d37f3e;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 781190d281d11fd417a45024e6b054c1
7b61782b9b99d38cbcc56a2c597258c44d4ef52a
1fd063325e206b296ab207c817a7ca6499a33904e751ce4a8805033c9004d974
GET /images/F568A4148CA9/k_7f950c5e0f0a57474d05f5db11d37f3e;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1
Host: lw-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:14 GMT
content-type: image/webp
content-length: 1564
cf-ray: 753a91ebfc2ab51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cfwgjShQwRR4xAOuYy6KtcSQ:7f950c5e0f0a57474d05f5db11d37f3e"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:31 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=19 c=17 v=2022.9.7 l=1564
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
lw-cdn.com/images/E43C95A00C46/k_ba97e3cbbc2fd8beb31dde50333dbab6;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
200 OK 10 kB URL HTTP/2 lw-cdn.com/images/E43C95A00C46/k_ba97e3cbbc2fd8beb31dde50333dbab6;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
IP
Hash 873adbe8967379a199214e1dc3bd96e7
eb19fc4048efe22cffd2dbaea5d84dff41017815
3f16b61e52676cee6ff393d17b53f63c6b4224cc109ea0d886ff6685f17a99cf
GET /images/E43C95A00C46/k_ba97e3cbbc2fd8beb31dde50333dbab6;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1
Host: lw-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:14 GMT
content-type: image/webp
content-length: 538
cf-ray: 753a91ebfc2cb51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cfrYAWPicyWy7Mirt_pG2LLA:ba97e3cbbc2fd8beb31dde50333dbab6"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:31 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=19 c=7 v=2022.9.7 l=538
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
lw-cdn.com/images/A7728A3B9472/k_6c4d03e0b285af5efdc287cc1f32eafd;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
200 OK 740 B URL HTTP/2 lw-cdn.com/images/A7728A3B9472/k_6c4d03e0b285af5efdc287cc1f32eafd;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b87de23f0906e537355012c0c64d8608
fefa3db5e972de37178b63c37a27e443b2a28b2e
f6fb9bdc7aba36392a07b99ffa8bcb9990149b482f6c6af82f52388ce4055253
GET /images/A7728A3B9472/k_6c4d03e0b285af5efdc287cc1f32eafd;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1
Host: lw-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:14 GMT
content-type: image/webp
content-length: 740
cf-ray: 753a91ebfc2eb51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cfSADzVI9EnJU6AB7AQ0Fbvg:6c4d03e0b285af5efdc287cc1f32eafd"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:32 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=34 c=6 v=2022.9.7 l=740
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
lw-cdn.com/images/40A559526492/k_7ad963d6ff2edda040f6caa1522f57d1;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
200 OK 5.7 kB URL HTTP/2 lw-cdn.com/images/40A559526492/k_7ad963d6ff2edda040f6caa1522f57d1;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
IP
Hash f92e3982e53eed458407b55ea1bbc877
14ced680650e5cd8e23e105b499b6b62443b925e
c4b1fa8496854bd75ff6a31bd472c276185bed94bc3196d2b6595bd4f13e3346
GET /images/40A559526492/k_7ad963d6ff2edda040f6caa1522f57d1;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1
Host: lw-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:14 GMT
content-type: image/webp
content-length: 708
cf-ray: 753a91ec0c30b51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cf8uRnPm_DieWXbqAiANEWNA:7ad963d6ff2edda040f6caa1522f57d1"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:34 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=25 c=15 v=2022.9.7 l=708
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
lw-cdn.com/images/43135B5E0E34/k_d5968a1d8739ce0cdabae86026defd4e;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
200 OK 890 B URL HTTP/2 lw-cdn.com/images/43135B5E0E34/k_d5968a1d8739ce0cdabae86026defd4e;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7efa41e6085b60c4448bd88639498dcb
c25857cbbec58014fe5f7375a6e817dd25dfdbf3
f9914091f16442414b7a67ca7a96635a0d7fd3fdbe6ede77e48de5b038c198fd
GET /images/43135B5E0E34/k_d5968a1d8739ce0cdabae86026defd4e;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1
Host: lw-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:14 GMT
content-type: image/webp
content-length: 890
cf-ray: 753a91ec0c31b51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cfzuHwjnSYKqhen8n9oxgiRQ:d5968a1d8739ce0cdabae86026defd4e"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:34 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/r q=0 n=130 c=10 v=2022.9.7 l=890
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
lw-cdn.com/images/32EC231E4965/k_08def23700ca4787fa99bb38543bb21e;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
200 OK 1.0 kB URL HTTP/2 lw-cdn.com/images/32EC231E4965/k_08def23700ca4787fa99bb38543bb21e;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 27a8344eca9faa06107fd34511e1cb11
545fe3be7c0a8641434ec3e83993913c20020ac6
bed37ef9962144417e8921852bc32fb40ff042a77e50a7d564c59ad58b182afb
GET /images/32EC231E4965/k_08def23700ca4787fa99bb38543bb21e;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1
Host: lw-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:14 GMT
content-type: image/webp
content-length: 1012
cf-ray: 753a91ec0c33b51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cf6QXBAsN-8_qRCjYbUGeTVQ:08def23700ca4787fa99bb38543bb21e"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:35 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/r q=0 n=133 c=9 v=2022.9.7 l=1012
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
assets.emarsys.net/web-emarsys-sdk/3.1.0/web-emarsys-sdk.js
200 OK 15 kB URL HTTP/2 assets.emarsys.net/web-emarsys-sdk/3.1.0/web-emarsys-sdk.js
IP
Hash fe157042d8aecf39c7c2f077eb5984d7
51dd78b35847c856c3ce4e4d9f71757ce3ecc8e9
be205fa12855f19d223781b0aebaf4a04a83483d1b8c2a7d9ecc5e1876ede732
GET /web-emarsys-sdk/3.1.0/web-emarsys-sdk.js HTTP/1.1
Host: assets.emarsys.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 08 Sep 2022 05:25:18 GMT
last-modified: Wed, 08 Sep 2021 12:47:07 GMT
etag: W/"15e8de1995b888be945eb9bfc952e5f0"
cache-control: max-age=315360000, no-transform, public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2fe8f7f5aca4ab098dc7bad8e97a06dc.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: GyhauPtAEG168xEl_yL-8ILyM8PtM0p0PjT1BJF92xLPtfRFSFuTcQ==
age: 2068916
X-Firefox-Spdy: h2
lw-cdn.com/images/A0F8979476C7/k_7b3316c1ecde379d9b78631b4f2cc0b6;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
200 OK 1.0 kB URL HTTP/2 lw-cdn.com/images/A0F8979476C7/k_7b3316c1ecde379d9b78631b4f2cc0b6;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 93bc2f1d6dd05f5fb957b6376580aba4
34cc1938a85d41b8608b54f4f6406cffcc0772b9
753d6acced786052179ec79b7e287870df6f0d5e535abf0cbdf8239cfbe26111
GET /images/A0F8979476C7/k_7b3316c1ecde379d9b78631b4f2cc0b6;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1
Host: lw-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:14 GMT
content-type: image/webp
content-length: 1012
cf-ray: 753a91ec0c37b51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cfqihnQK1onQs60OcycVV4DA:7b3316c1ecde379d9b78631b4f2cc0b6"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:36 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=34 c=8 v=2022.9.7 l=1012
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2
promoprawn.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.1
200 OK 0 B URL HTTP/2 promoprawn.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.1
IP
ASN #24940 Hetzner Online GmbH
GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.1 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "214c-625095f6-19a0128;br"
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-type: application/x-javascript
content-length: 2685
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
promoprawn.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.3.7
200 OK 0 B URL HTTP/2 promoprawn.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.3.7
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.3.7 HTTP/1.1
Host: promoprawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "11c-62cff458-1960a38;gz"
last-modified: Thu, 14 Jul 2022 10:47:52 GMT
content-type: application/x-javascript
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
p201298.mybetterck.com/adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDGSZVu5NPqSq-h2rSoksoBqNG2LV3Zkk-L8FPCSjKZr_YsQ0yRxpJ6k8LlotqmtX7ErGSkvN2YlGY4HZ8X7cx-dM1QaxFxK0PHGpJGlCLAoWMnzoVZuce8ueVaQ0F217-cHwFJ-CDJF8T7C2wcJ1dqtoOgN9pzNxgl6S4oChQzOvrPE96Ym7CMGlXRdGMK-TkKMF_XSxG7q5c9lRJWHNr4s5bSTdWcYVZJciO9bgcuS1jIeAEiXnU3VYEUAru7F_DuXugOnM5m-8Jm7EhOsk27bxGYd3vi6Mg4f18T9CpHqCT2L9NFyVXF55Q47z-CV1ol2k4XVJzHJX8mFgHSWE3TZes2Wal4z2_6cr0kIIvFC278sDJBVR-ujw_o9HKkL8PaMhDqf7kErmDrOr0d6CIh0L3FtHWHx7HCl1j57-JOeaUbfHK1lWXoIZq44qh-mYNBTP6LhN0GpIW2jB4zFuRTFWdau7IN9FdV9I9zFVCeL5p92cp-vkcPmEf3qd4ONyUKC7q00sm1d_81VZTL6WTs8WO4QP-Vi7zRe7zzBJbLAQvEGFQ0jWJkN4bvlPQAriragptoHmn24iKiXhLmiyflhHQ2DhJtv57Pgpt-TBvcxCEwrLEAaOW_hUUutSGhrofXDf5i3bPUyKJAzwVqRCBUrBs34dAjVMmg&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPo-uYf9mCLnEA8c2lnrFKUQKLg4gPmnc1uYwW_D3BpodB8__exuaSE5Pp3aWhe23l17BgNqBNBHw&si=1&oref=e2905b67c440133e06d94d472902354c&optunit=g1X1rV7f4BpBS4YUfGI2rw&rb=LW_v4KVZAgI&rr=4&abtg=0
200 OK 0 B URL HTTP/2 p201298.mybetterck.com/adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDGSZVu5NPqSq-h2rSoksoBqNG2LV3Zkk-L8FPCSjKZr_YsQ0yRxpJ6k8LlotqmtX7ErGSkvN2YlGY4HZ8X7cx-dM1QaxFxK0PHGpJGlCLAoWMnzoVZuce8ueVaQ0F217-cHwFJ-CDJF8T7C2wcJ1dqtoOgN9pzNxgl6S4oChQzOvrPE96Ym7CMGlXRdGMK-TkKMF_XSxG7q5c9lRJWHNr4s5bSTdWcYVZJciO9bgcuS1jIeAEiXnU3VYEUAru7F_DuXugOnM5m-8Jm7EhOsk27bxGYd3vi6Mg4f18T9CpHqCT2L9NFyVXF55Q47z-CV1ol2k4XVJzHJX8mFgHSWE3TZes2Wal4z2_6cr0kIIvFC278sDJBVR-ujw_o9HKkL8PaMhDqf7kErmDrOr0d6CIh0L3FtHWHx7HCl1j57-JOeaUbfHK1lWXoIZq44qh-mYNBTP6LhN0GpIW2jB4zFuRTFWdau7IN9FdV9I9zFVCeL5p92cp-vkcPmEf3qd4ONyUKC7q00sm1d_81VZTL6WTs8WO4QP-Vi7zRe7zzBJbLAQvEGFQ0jWJkN4bvlPQAriragptoHmn24iKiXhLmiyflhHQ2DhJtv57Pgpt-TBvcxCEwrLEAaOW_hUUutSGhrofXDf5i3bPUyKJAzwVqRCBUrBs34dAjVMmg&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPo-uYf9mCLnEA8c2lnrFKUQKLg4gPmnc1uYwW_D3BpodB8__exuaSE5Pp3aWhe23l17BgNqBNBHw&si=1&oref=e2905b67c440133e06d94d472902354c&optunit=g1X1rV7f4BpBS4YUfGI2rw&rb=LW_v4KVZAgI&rr=4&abtg=0
IP
GET /adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDGSZVu5NPqSq-h2rSoksoBqNG2LV3Zkk-L8FPCSjKZr_YsQ0yRxpJ6k8LlotqmtX7ErGSkvN2YlGY4HZ8X7cx-dM1QaxFxK0PHGpJGlCLAoWMnzoVZuce8ueVaQ0F217-cHwFJ-CDJF8T7C2wcJ1dqtoOgN9pzNxgl6S4oChQzOvrPE96Ym7CMGlXRdGMK-TkKMF_XSxG7q5c9lRJWHNr4s5bSTdWcYVZJciO9bgcuS1jIeAEiXnU3VYEUAru7F_DuXugOnM5m-8Jm7EhOsk27bxGYd3vi6Mg4f18T9CpHqCT2L9NFyVXF55Q47z-CV1ol2k4XVJzHJX8mFgHSWE3TZes2Wal4z2_6cr0kIIvFC278sDJBVR-ujw_o9HKkL8PaMhDqf7kErmDrOr0d6CIh0L3FtHWHx7HCl1j57-JOeaUbfHK1lWXoIZq44qh-mYNBTP6LhN0GpIW2jB4zFuRTFWdau7IN9FdV9I9zFVCeL5p92cp-vkcPmEf3qd4ONyUKC7q00sm1d_81VZTL6WTs8WO4QP-Vi7zRe7zzBJbLAQvEGFQ0jWJkN4bvlPQAriragptoHmn24iKiXhLmiyflhHQ2DhJtv57Pgpt-TBvcxCEwrLEAaOW_hUUutSGhrofXDf5i3bPUyKJAzwVqRCBUrBs34dAjVMmg&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPo-uYf9mCLnEA8c2lnrFKUQKLg4gPmnc1uYwW_D3BpodB8__exuaSE5Pp3aWhe23l17BgNqBNBHw&si=1&oref=e2905b67c440133e06d94d472902354c&optunit=g1X1rV7f4BpBS4YUfGI2rw&rb=LW_v4KVZAgI&rr=4&abtg=0 HTTP/1.1
Host: p201298.mybetterck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Cookie: rhid=81412752446
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 04:07:08 GMT
content-type: text/html;charset=ISO-8859-1
vary: Accept-Encoding
set-cookie: rhid=81412752446; Max-Age=15552000; Expires=Fri, 31-Mar-2023 04:07:08 GMT; Domain=mybetterck.com; Path=/; SameSite=None; secure;
loi=ad_1173576_off_617426_aff_86324_cid_201298-MKKUEI4KDSZ.COM_ts_1664683628; Max-Age=3600; Expires=Sun, 02-Oct-2022 05:07:08 GMT; Domain=mybetterck.com; Path=/; SameSite=None; secure;
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-181731366-4
200 OK 0 B URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-181731366-4
IP
GET /gtag/js?id=UA-181731366-4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:10 GMT
expires: Sun, 02 Oct 2022 04:07:10 GMT
cache-control: private, max-age=900
last-modified: Sun, 02 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42365
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
200 OK 0 B URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
IP
GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 02 Oct 2022 04:07:10 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+358; expires=Tue, 01-Oct-2024 04:07:10 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fplugins%2Fpage.php%3Fadapt_container_width%3Dtrue%26app_id%3D235643263204884%26channel%3Dhttps%253A%252F%252Fstaticxx.facebook.com%252Fx%252Fconnect%252Fxd_arbiter%252F%253Fversion%253D46%2523cb%253Df33955abc6263e8%2526domain%253Dpromoprawn.com%2526is_canvas%253Dfalse%2526origin%253Dhttps%25253A%25252F%25252Fpromoprawn.com%25252Ff31c82b3cd5b71e%2526relation%253Dparent.parent%26container_width%3D361%26height%3D290%26hide_cover%3Dfalse%26hide_cta%3Dfalse%26href%3Dhttps%253A%252F%252Fwww.facebook.com%252Fappthemes%26locale%3Den_GB%26sdk%3Djoey%26show_facepile%3Dtrue%26show_posts%3Dfalse%26small_header%3Dfalse%26width%3D268
200 OK 0 B URL HTTP/2 www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fplugins%2Fpage.php%3Fadapt_container_width%3Dtrue%26app_id%3D235643263204884%26channel%3Dhttps%253A%252F%252Fstaticxx.facebook.com%252Fx%252Fconnect%252Fxd_arbiter%252F%253Fversion%253D46%2523cb%253Df33955abc6263e8%2526domain%253Dpromoprawn.com%2526is_canvas%253Dfalse%2526origin%253Dhttps%25253A%25252F%25252Fpromoprawn.com%25252Ff31c82b3cd5b71e%2526relation%253Dparent.parent%26container_width%3D361%26height%3D290%26hide_cover%3Dfalse%26hide_cta%3Dfalse%26href%3Dhttps%253A%252F%252Fwww.facebook.com%252Fappthemes%26locale%3Den_GB%26sdk%3Djoey%26show_facepile%3Dtrue%26show_posts%3Dfalse%26small_header%3Dfalse%26width%3D268
IP
GET /login/?next=https%3A%2F%2Fwww.facebook.com%2Fplugins%2Fpage.php%3Fadapt_container_width%3Dtrue%26app_id%3D235643263204884%26channel%3Dhttps%253A%252F%252Fstaticxx.facebook.com%252Fx%252Fconnect%252Fxd_arbiter%252F%253Fversion%253D46%2523cb%253Df33955abc6263e8%2526domain%253Dpromoprawn.com%2526is_canvas%253Dfalse%2526origin%253Dhttps%25253A%25252F%25252Fpromoprawn.com%25252Ff31c82b3cd5b71e%2526relation%253Dparent.parent%26container_width%3D361%26height%3D290%26hide_cover%3Dfalse%26hide_cta%3Dfalse%26href%3Dhttps%253A%252F%252Fwww.facebook.com%252Fappthemes%26locale%3Den_GB%26sdk%3Djoey%26show_facepile%3Dtrue%26show_posts%3Dfalse%26small_header%3Dfalse%26width%3D268 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promoprawn.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: 8Fq3C7s3CaxInYTGZZ7JbhoaiAAa8AiZKCfyXaBEuCnZtyrsiKzflcBNahmtw7yySRqdJlBCMuFofL8VOFtREw==
date: Sun, 02 Oct 2022 04:07:11 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.lampegiganten.no/lindby-tirzana-hengelampe-4-lyskilder-morkegra.html?kk=a4c6294-18396e06615-8068c&utm_medium=pv&utm_source=kelkoo&utm_campaign=cpc_no&utm_content=9627421&utm_term=21
200 OK 0 B URL HTTP/2 www.lampegiganten.no/lindby-tirzana-hengelampe-4-lyskilder-morkegra.html?kk=a4c6294-18396e06615-8068c&utm_medium=pv&utm_source=kelkoo&utm_campaign=cpc_no&utm_content=9627421&utm_term=21
IP
GET /lindby-tirzana-hengelampe-4-lyskilder-morkegra.html?kk=a4c6294-18396e06615-8068c&utm_medium=pv&utm_source=kelkoo&utm_campaign=cpc_no&utm_content=9627421&utm_term=21 HTTP/1.1
Host: www.lampegiganten.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 04:07:13 GMT
content-type: text/html; charset=UTF-8
cf-ray: 753a91e13889b515-OSL
age: 0
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Mon, 31 Mar 2008 10:00:00 GMT
strict-transport-security: max-age=15724800; includeSubDomains
vary: Accept-Encoding
cf-cache-status: DYNAMIC
p3p: CP="CAO PSA OUR"
pragma: no-cache
x-build: 2408
x-cache-doesi: 1, 1
x-content-type-options: : nosniff
x-frame-options: SAMEORIGIN
x-prefresh:
x-xss-protection: : 1; mode=block
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
64.225.91.73
167.235.15.78
104.18.32.68
185.76.9.23
157.240.221.35
23.36.76.226
95.211.116.27