Overview

URL mkkuei4kdsz.com/662/211.html
IP64.225.91.73
ASNDIGITALOCEAN-ASN
Location United States
Report completed2022-10-02 04:07:17 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-02 2 mkkuei4kdsz.com/662/211.html Malware
2022-10-02 2 ww2.mkkuei4kdsz.com/ Malware
mnemonic secure dns
Scan Date Severity Indicator Comment
2022-10-02 2 mkkuei4kdsz.com Sinkholed
2022-10-02 2 mkkuei4kdsz.com Sinkholed
2022-10-02 2 mkkuei4kdsz.com Sinkholed
2022-10-02 2 mkkuei4kdsz.com Sinkholed
2022-10-02 2 mkkuei4kdsz.com Sinkholed
Quad9 DNS
Scan Date Severity Indicator Comment
2022-10-02 2 mkkuei4kdsz.com Sinkholed
2022-10-02 2 mkkuei4kdsz.com Sinkholed
2022-10-02 2 mkkuei4kdsz.com Sinkholed
2022-10-02 2 mkkuei4kdsz.com Sinkholed
2022-10-02 2 mkkuei4kdsz.com Sinkholed


Files

No files detected



Passive DNS (44)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS www.lampegiganten.no (1) 0 2014-01-23 08:39:20 UTC 2022-10-01 17:38:51 UTC 104.18.32.197 Unknown ranking
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-01 05:17:12 UTC 108.156.28.51
mnemonic passive DNS www.promoprawn.com (1) 0 2022-02-16 19:50:27 UTC 2022-10-01 03:44:40 UTC 167.235.15.78 Unknown ranking
mnemonic passive DNS www.gstatic.com (3) 0 2016-07-26 09:37:06 UTC 2022-10-01 10:15:55 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS c.searchhub.io (1) 101716 2018-07-30 12:47:12 UTC 2022-10-01 13:26:45 UTC 108.156.28.67
mnemonic passive DNS xml.sedodna.com (1) 278378 2020-10-22 08:18:03 UTC 2022-10-01 23:07:50 UTC 173.239.53.32
mnemonic passive DNS status.thawte.com (1) 5123 2017-11-27 12:33:51 UTC 2022-10-01 23:52:17 UTC 93.184.220.29
mnemonic passive DNS ww2.mkkuei4kdsz.com (4) 0 2022-01-21 14:07:05 UTC 2022-09-29 04:37:25 UTC 64.190.63.136 Unknown ranking
mnemonic passive DNS api-js.datadome.co (1) 8155 2017-10-11 14:14:56 UTC 2022-10-02 01:10:15 UTC 16.170.188.27
mnemonic passive DNS r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-10-01 04:59:16 UTC 23.36.76.226
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-01 05:00:18 UTC 34.117.237.239
mnemonic passive DNS e1.o.lencr.org (1) 6159 2021-08-20 07:36:30 UTC 2022-10-01 07:19:26 UTC 23.36.76.226
mnemonic passive DNS domaincntrol.com (1) 274993 2018-01-06 22:46:59 UTC 2022-10-01 18:52:02 UTC 104.26.10.61
mnemonic passive DNS translate.googleapis.com (2) 1005 2014-07-21 13:19:59 UTC 2022-10-01 22:54:13 UTC 172.217.21.170
mnemonic passive DNS r.srvtrck.com (3) 45104 2015-03-03 12:59:37 UTC 2022-10-01 13:45:19 UTC 104.19.169.96
mnemonic passive DNS dd.kelkoogroup.net (1) 0 2022-06-24 10:22:42 UTC 2022-10-01 22:19:15 UTC 216.137.44.26 Domain (kelkoogroup.net) ranked at: 79339
mnemonic passive DNS cdn.consentmanager.mgr.consensu.org (1) 15682 2019-08-27 20:29:30 UTC 2022-10-01 19:28:53 UTC 185.76.9.23
mnemonic passive DNS mkkuei4kdsz.com (1) 0 2012-11-29 20:21:30 UTC 2022-10-01 04:37:35 UTC 64.225.91.73 Unknown ranking
mnemonic passive DNS ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2022-10-01 19:20:31 UTC 93.184.220.29
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-01 05:28:34 UTC 35.165.143.157
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-01 14:59:59 UTC 34.120.237.76
mnemonic passive DNS r.srvtrck.com (3) 45104 2015-03-03 12:59:37 UTC 2022-10-01 13:45:19 UTC 104.19.168.96
mnemonic passive DNS assets.emarsys.net (1) 51250 2020-05-03 04:51:56 UTC 2022-10-01 10:38:23 UTC 108.156.28.129
mnemonic passive DNS img.sedoparking.com (1) 54200 2013-04-22 22:23:29 UTC 2022-10-02 02:02:21 UTC 205.234.175.175
mnemonic passive DNS mybetterck.com (1) 21362 2022-02-06 09:33:01 UTC 2022-10-01 03:45:15 UTC 108.168.193.189
mnemonic passive DNS promoprawn.com (54) 0 2022-02-16 19:50:27 UTC 2022-10-01 03:45:15 UTC 167.235.15.78 Unknown ranking
mnemonic passive DNS region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-10-01 07:34:05 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401
mnemonic passive DNS ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2022-10-01 05:00:56 UTC 104.18.20.226
mnemonic passive DNS track.productsup.io (1) 128916 2017-01-30 07:12:50 UTC 2022-09-30 11:56:00 UTC 116.203.222.30
mnemonic passive DNS lw-cdn.com (10) 395171 2020-09-14 10:13:29 UTC 2022-10-01 13:26:45 UTC 172.64.153.138
mnemonic passive DNS connect.facebook.net (2) 139 2012-05-22 02:51:28 UTC 2022-10-01 04:59:22 UTC 157.240.221.16
mnemonic passive DNS www.google-analytics.com (2) 40 2012-10-03 01:04:21 UTC 2022-10-02 01:10:15 UTC 142.250.74.174
mnemonic passive DNS consentmanager.mgr.consensu.org (1) 14455 2018-05-18 12:19:31 UTC 2022-10-01 18:25:55 UTC 87.230.98.74
mnemonic passive DNS static.scarabresearch.com (2) 14309 2020-04-02 00:04:38 UTC 2022-10-01 18:25:15 UTC 108.138.217.38
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-01 23:23:54 UTC 18.164.68.8
mnemonic passive DNS ocsp.sectigo.com (2) 487 2018-12-17 11:31:55 UTC 2022-10-01 19:37:47 UTC 104.18.32.68
mnemonic passive DNS cdn.jsdelivr.net (1) 439 2012-09-30 00:15:09 UTC 2022-10-01 04:58:51 UTC 151.101.85.229
mnemonic passive DNS ocsp.pki.goog (10) 175 2017-06-14 07:23:31 UTC 2022-10-01 04:58:47 UTC 142.250.74.3
mnemonic passive DNS p201298.mybetterck.com (1) 0 2022-06-05 13:01:18 UTC 2022-09-05 05:55:50 UTC 108.168.193.189 Domain (mybetterck.com) ranked at: 21362
mnemonic passive DNS translate.google.com (1) 1156 2012-05-30 01:30:32 UTC 2022-10-01 15:27:08 UTC 142.250.74.46
mnemonic passive DNS www.facebook.com (2) 99 2017-01-30 05:00:00 UTC 2022-10-01 04:58:25 UTC 157.240.221.35
mnemonic passive DNS no-go.kelkoogroup.net (4) 0 2017-10-30 14:27:38 UTC 2022-10-02 01:10:15 UTC 95.211.116.27 Domain (kelkoogroup.net) ranked at: 79339
mnemonic passive DNS ocsp.usertrust.com (1) 899 2012-05-21 15:43:18 UTC 2022-10-01 13:10:48 UTC 104.18.32.68
mnemonic passive DNS www.googletagmanager.com (2) 75 2012-12-25 14:52:06 UTC 2022-10-01 15:05:47 UTC 142.250.74.72


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 64.225.91.73

Date UQ / IDS / BL URL IP
2022-11-26 12:12:15 +0000
0 - 0 - 19 mkkuei4kdsz.com/323/32.html 64.225.91.73
2022-11-26 11:45:22 +0000
0 - 0 - 6 paypaly.me/ 64.225.91.73
2022-11-26 08:59:54 +0000
0 - 0 - 1 montielstreeservice.biz/ 64.225.91.73
2022-11-26 08:58:26 +0000
0 - 0 - 1 ketogenicdiethome.club/ 64.225.91.73
2022-11-26 06:57:04 +0000
0 - 0 - 2 64.225.91.73/19/528.html 64.225.91.73

Last 5 reports on ASN: DIGITALOCEAN-ASN

Date UQ / IDS / BL URL IP
2022-11-26 13:06:21 +0000
0 - 0 - 9 gepackagingstore.com/ 206.189.128.126
2022-11-26 13:02:39 +0000
0 - 0 - 1 sg.clean-1-clean.club/sx/ 143.198.202.236
2022-11-26 12:48:50 +0000
0 - 0 - 13 sqlserb0manager.tempurl.host/TrackingService/ 159.203.63.170
2022-11-26 12:48:39 +0000
0 - 0 - 1 gwghjiyhsq.ii1l.autos/api.php 144.126.210.108
2022-11-26 12:48:22 +0000
0 - 0 - 1 gwghjiyhsq.ii1l.autos/yclpm/gt/WTJWdFpYUkFaR3 (...) 144.126.210.108

Last 5 reports on domain: mkkuei4kdsz.com

Date UQ / IDS / BL URL IP
2022-11-26 12:12:15 +0000
0 - 0 - 19 mkkuei4kdsz.com/323/32.html 64.225.91.73
2022-11-26 04:09:04 +0000
0 - 0 - 11 mkkuei4kdsz.com/720/619.html 64.225.91.73
2022-11-25 06:10:18 +0000
0 - 0 - 7 mkkuei4kdsz.com/116/468.html 64.225.91.73
2022-11-25 05:40:39 +0000
0 - 0 - 7 mkkuei4kdsz.com/612/306.html 64.225.91.73
2022-11-25 03:07:35 +0000
0 - 0 - 7 mkkuei4kdsz.com/379/601.html 64.225.91.73

No other reports with similar screenshot



JavaScript

Executed Scripts (128)


Executed Evals (19)

#1 JavaScript::Eval (size: 68, repeated: 1) - SHA256: 924c8d41ae077e61494223068053773629a7b91a9249ec21b15e8495b96120b5

                                        (function() {
    return google_tag_manager["GTM-K6DHVZ"].macro(6) / 10
})();
                                    

#2 JavaScript::Eval (size: 146, repeated: 1) - SHA256: 5ad2069305030db0b1795e329655966639b1f54c6bde694638d45d3be5dcaba2

                                        (function() {
    if ("undefined" != typeof google_tag_manager["GTM-K6DHVZ"].macro(21)) return 5E3 < parseInt(google_tag_manager["GTM-K6DHVZ"].macro(24))
})();
                                    

#3 JavaScript::Eval (size: 66, repeated: 1) - SHA256: 52fde1ff3041ce7f53b7ec220b18d7b3021788fe6476589937fc71f86a0069af

                                        (function() {
    return google_tag_manager["GTM-K6DHVZ"].macro(39)
})();
                                    

#4 JavaScript::Eval (size: 728, repeated: 1) - SHA256: 91f6a361024cd6367519fa8a060e6d632440d974b06be69700dfbf308faa93fa

                                        (function() {
    if (!!google_tag_manager["GTM-K6DHVZ"].macro(42))
        if (!!google_tag_manager["GTM-K6DHVZ"].macro(43)) {
            if (google_tag_manager["GTM-K6DHVZ"].macro(44) == "company") return "b2b";
            if (google_tag_manager["GTM-K6DHVZ"].macro(45) != "company") return "b2c"
        } else return "b2c";
    else if (!google_tag_manager["GTM-K6DHVZ"].macro(46))
        if (!!google_tag_manager["GTM-K6DHVZ"].macro(47)) {
            if (google_tag_manager["GTM-K6DHVZ"].macro(48) == "company") return "b2b";
            if (google_tag_manager["GTM-K6DHVZ"].macro(49) != "company") return "b2c"
        } else if (!!google_tag_manager["GTM-K6DHVZ"].macro(50) && google_tag_manager["GTM-K6DHVZ"].macro(51).indexOf("b2b") > -1) return "b2b";
    else if (!!google_tag_manager["GTM-K6DHVZ"].macro(52)) return "b2b";
    else return "b2c";
    return "b2c"
})();
                                    

#5 JavaScript::Eval (size: 68, repeated: 1) - SHA256: 52bddc4c2c05d65e9fc32a9aa65bf57ff323243d70d4747fbbb9a10530997fac

                                        (function() {
    return google_tag_manager["GTM-K6DHVZ"].macro(3) / 10
})();
                                    

#6 JavaScript::Eval (size: 144, repeated: 1) - SHA256: d2ded1ad64576b504474b7ad4c1c3a90d47835acd0777dfd9d0973dd8b878c16

                                        (function() {
    if ("undefined" != typeof google_tag_manager["GTM-K6DHVZ"].macro(4)) return 5E3 < parseInt(google_tag_manager["GTM-K6DHVZ"].macro(7))
})();
                                    

#7 JavaScript::Eval (size: 728, repeated: 1) - SHA256: 49b20a5eb456c7e3995b5d622ad8e2d669bb266be61591e19bf430da46f0b138

                                        (function() {
    if (!!google_tag_manager["GTM-K6DHVZ"].macro(25))
        if (!!google_tag_manager["GTM-K6DHVZ"].macro(26)) {
            if (google_tag_manager["GTM-K6DHVZ"].macro(27) == "company") return "b2b";
            if (google_tag_manager["GTM-K6DHVZ"].macro(28) != "company") return "b2c"
        } else return "b2c";
    else if (!google_tag_manager["GTM-K6DHVZ"].macro(29))
        if (!!google_tag_manager["GTM-K6DHVZ"].macro(30)) {
            if (google_tag_manager["GTM-K6DHVZ"].macro(31) == "company") return "b2b";
            if (google_tag_manager["GTM-K6DHVZ"].macro(32) != "company") return "b2c"
        } else if (!!google_tag_manager["GTM-K6DHVZ"].macro(33) && google_tag_manager["GTM-K6DHVZ"].macro(34).indexOf("b2b") > -1) return "b2b";
    else if (!!google_tag_manager["GTM-K6DHVZ"].macro(35)) return "b2b";
    else return "b2c";
    return "b2c"
})();
                                    

#8 JavaScript::Eval (size: 69, repeated: 1) - SHA256: 132cdda44ebdfe87749b10f6aaae987c581f58bbfcf24bdc0652100beac3b214

                                        (function() {
    return google_tag_manager["GTM-K6DHVZ"].macro(37) / 10
})();
                                    

#9 JavaScript::Eval (size: 146, repeated: 1) - SHA256: 08c623e0feb181031aca4c2bd9262e2d9eb0b97cd140e414a611e9e825f65ec4

                                        (function() {
    if ("undefined" != typeof google_tag_manager["GTM-K6DHVZ"].macro(38)) return 5E3 < parseInt(google_tag_manager["GTM-K6DHVZ"].macro(41))
})();
                                    

#10 JavaScript::Eval (size: 391, repeated: 1) - SHA256: 1fd0b64b78935464d6acf535e880f80758729e26205f482445f7fb182340a0da

                                        class� _� extends Array {
    constructor(j = `a`, ...c) {
        const q = (({
            u: e
        }) => {
            return {
                [`${c}`]: Symbol(j)
            };
        })({});
        super(j, q, ...c)
    }
}
new Promise(f => {
    const a = function*() {
        return "\u{20BB7}".match(/./u)[0].length === 2 || !0
    };
    for (let z of a()) {
        const [x, y, w, k] = [new Set(), new WeakSet(), new Map(), new WeakMap()];
        break
    }
    f(new Proxy({}, {get: (h, i) => i in h ? h[i] : "j".repeat(0 o2)
    }))
}).then(t => new� _�(t.d))
                                    

#11 JavaScript::Eval (size: 69, repeated: 1) - SHA256: d87c238b912ed3eca255cd974446f16d2b6a5c3786f1135cbfe07ed557998266

                                        (function() {
    return google_tag_manager["GTM-K6DHVZ"].macro(20) / 10
})();
                                    

#12 JavaScript::Eval (size: 66, repeated: 1) - SHA256: 1e6f46b42857a6602a7b956d5dc4aea512cbf47a6733e5dee9ea9f7f07fe994d

                                        (function() {
    return google_tag_manager["GTM-K6DHVZ"].macro(36)
})();
                                    

#13 JavaScript::Eval (size: 69, repeated: 1) - SHA256: 4ab057f755ee7d0ba3afdbaa4d673894db74b02e840a56ddc19620880a84555f

                                        (function() {
    return google_tag_manager["GTM-K6DHVZ"].macro(40) / 10
})();
                                    

#14 JavaScript::Eval (size: 65, repeated: 1) - SHA256: 41185dbc56dab53a44a62c501b3d64c9a5abdc13d4db8b021c098bfeda3b5ef5

                                        (function() {
    return google_tag_manager["GTM-K6DHVZ"].macro(2)
})();
                                    

#15 JavaScript::Eval (size: 65, repeated: 1) - SHA256: 13d6855b13483a9e60e9623a4d607eb9cdbc66741db6b795b2263b8ce3360c31

                                        (function() {
    return google_tag_manager["GTM-K6DHVZ"].macro(5)
})();
                                    

#16 JavaScript::Eval (size: 726, repeated: 1) - SHA256: f06cd53282cee2021a14f7b106613c50a0191bacc20f4669591b9592f73d5667

                                        (function() {
    if (!!google_tag_manager["GTM-K6DHVZ"].macro(8))
        if (!!google_tag_manager["GTM-K6DHVZ"].macro(9)) {
            if (google_tag_manager["GTM-K6DHVZ"].macro(10) == "company") return "b2b";
            if (google_tag_manager["GTM-K6DHVZ"].macro(11) != "company") return "b2c"
        } else return "b2c";
    else if (!google_tag_manager["GTM-K6DHVZ"].macro(12))
        if (!!google_tag_manager["GTM-K6DHVZ"].macro(13)) {
            if (google_tag_manager["GTM-K6DHVZ"].macro(14) == "company") return "b2b";
            if (google_tag_manager["GTM-K6DHVZ"].macro(15) != "company") return "b2c"
        } else if (!!google_tag_manager["GTM-K6DHVZ"].macro(16) && google_tag_manager["GTM-K6DHVZ"].macro(17).indexOf("b2b") > -1) return "b2b";
    else if (!!google_tag_manager["GTM-K6DHVZ"].macro(18)) return "b2b";
    else return "b2c";
    return "b2c"
})();
                                    

#17 JavaScript::Eval (size: 66, repeated: 1) - SHA256: 23a7962183e0a90c31ea6eaf9ba321d76948d45ff0aeb4f7b5e1333bd757ddfa

                                        (function() {
    return google_tag_manager["GTM-K6DHVZ"].macro(19)
})();
                                    

#18 JavaScript::Eval (size: 66, repeated: 1) - SHA256: 8fd10ef24395d42fbfbbad5b26a9ed39db3eacb6e5d5db14b4f223c4380e1ad1

                                        (function() {
    return google_tag_manager["GTM-K6DHVZ"].macro(22)
})();
                                    

#19 JavaScript::Eval (size: 69, repeated: 1) - SHA256: 9a2f8f04731821e0997d83a765c137a8da98ce8fb0211a2197a00481c810db8f

                                        (function() {
    return google_tag_manager["GTM-K6DHVZ"].macro(23) / 10
})();
                                    

Executed Writes (0)



HTTP Transactions (144)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         18.164.68.8
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 02 Oct 2022 04:03:00 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 46b5aeb0e7bcc8895e9b923ffd4a3896.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: dK4q-mwmKHOaJ1vQTHuZh8UfRZCtWHAmbQPAlbIKG5dbg-q37akExw==
Age: 245


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            GET /662/211.html HTTP/1.1 
Host: mkkuei4kdsz.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         64.225.91.73
HTTP/1.1 200 OK
content-type: text/html
                                        
server: nginx/1.18.0 (Ubuntu)
date: Sun, 02 Oct 2022 04:07:05 GMT
last-modified: Wed, 12 Jan 2022 17:20:45 GMT
etag: W/"61df0ded-1ad"
content-encoding: gzip
transfer-encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   329
Md5:    ecbcb8bae64098de3e587487b474f8b8
Sha1:   e275409fb40ea27c3826af493f70faf147d0f995
Sha256: 2597a3f2418586d8a9fb0764743a84486ba066c6af3ff194922fb6c65a783688

Alerts:
  Blocklists:
    - fortinet: Malware
    - mnemonic_dns: Sinkholed
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EB128AEC099DBF1919EE5D965221E904AD3A2162583683CEC44518640B505447"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4576
Expires: Sun, 02 Oct 2022 05:23:21 GMT
Date: Sun, 02 Oct 2022 04:07:05 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         108.156.28.51
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 02 Oct 2022 03:33:17 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 b349539e70f05aae8b25110799b51862.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: rdBMrXfeRJdFf81QFDIHGELjUggm0uyA5iIJYd1PZ12cxmz0nfndbA==
age: 2029
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 02 Oct 2022 04:07:05 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 346
ETag: "DF1DE1005AA2F274CE930F332072BB0D1D871B8CE49B851E2071EF3C263029F5"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10757
Expires: Sun, 02 Oct 2022 07:06:23 GMT
Date: Sun, 02 Oct 2022 04:07:06 GMT
Connection: keep-alive

                                        
                                            GET /?orighost=http://mkkuei4kdsz.com/662/211.html HTTP/1.1 
Host: domaincntrol.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mkkuei4kdsz.com
Connection: keep-alive
Referer: http://mkkuei4kdsz.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.26.10.61
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
                                        
date: Sun, 02 Oct 2022 04:07:06 GMT
content-length: 28
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1LiZWH9%2Bqmw1pxoPZKGl11c51MMItTMtAxTrUrol9tmcMzrIm3oNoqRtcCqWGIx9crFBV2w31K%2FkUlONfTwogDR4oUbQBzPgssWRQkktF6IOP2vWOL1N4hkfXhBpfnCi790%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 753a91b74b4cb509-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   28
Md5:    7aae16ed70d2e07943585bbb1cd02b55
Sha1:   3209123510c034e6e38ca45edf14307f1375a8f5
Sha256: 51bfb53a70df6adc48f0670be59a16a657ab5a2bafc176973a32d5c36a4fc5d3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         18.164.68.8
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sun, 02 Oct 2022 03:32:53 GMT
Expires: Sun, 02 Oct 2022 04:26:30 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 35f1076ba1ff613e428e9cf6a2f57580.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: _Lfhc4rxMKhuWVqnfoMhLP9S2TM09mAC4yzAX7jymPhZdExC9ct2cQ==
Age: 2053


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2541
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 04:07:06 GMT
Last-Modified: Sun, 02 Oct 2022 03:24:45 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aj1vz27FiKsMvq31U84E9g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.165.143.157
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: U2AolkK+LyvCSq2AdPm324IFAb0=

                                        
                                            GET / HTTP/1.1 
Host: ww2.mkkuei4kdsz.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mkkuei4kdsz.com/
Upgrade-Insecure-Requests: 1

                                         
                                         64.190.63.136
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Sun, 02 Oct 2022 04:07:07 GMT
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_RlGSCujrTwIV09ewwdBk8PiCOXknsvjzonXp/BabLYsbM4wWv0k1teTkRJynKg7Y1QeTz1UsnxJZ/TvhfinDdA==
last-modified: Sun, 02 Oct 2022 04:07:06 GMT
x-cache-miss-from: parking-7f9f948885-lnx78
server: NginX
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (700)
Size:   1318
Md5:    47718747c90e3c46e69e11032e62b736
Sha1:   d3685bf04c28ae8e48c4f33bccfa32f771d517a9
Sha256: a216907b91d225eea275b243cb6805fff0d7cbb6b27c7cd00869eaac9e01820a

Alerts:
  Blocklists:
    - fortinet: Malware
    - mnemonic_dns: Sinkholed
    - quad9: Sinkholed
                                        
                                            GET /images/js_preloader.gif HTTP/1.1 
Host: img.sedoparking.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.mkkuei4kdsz.com/

                                         
                                         205.234.175.175
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 02 Oct 2022 04:07:07 GMT
Content-Length: 4254
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Sun, 09 Oct 2022 04:07:07 GMT
X-CFHash: "90c93102a88c2ab94bff1575b7a6e86e"
X-CFF: B
Last-Modified: Fri, 15 Mar 2019 12:24:07 GMT
X-CF3: H
CF4Age: 156700
x-cf-tsc: 1648179742
CF4ttl: 31536000.000
X-CF2: H
Server: CFS 0215
X-CF-ReqID: 6dd3915e43c6bfcacf63f464c06d59af
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16\012- data
Size:   4254
Md5:    90c93102a88c2ab94bff1575b7a6e86e
Sha1:   56d71bf13de464534643db9d127629a0a3bf677a
Sha256: 5f6ad7031600056b578a6e8c6b34bc718d13125cc8256aa4a9050e549576f81a
                                        
                                            GET /search/tsc.php?200=MzgzNDQ1ODM3&21=OTEuOTAuNDIuMTU0&681=MTY2NDY4MzYyNzYyOTZiMjNjMTJkYTYxODQwNTM4YTFkZjRhMWQ4MWEx&crc=a9e18de35c3723018e3a8745dbb3c2ec7d621a61&cv=1 HTTP/1.1 
Host: ww2.mkkuei4kdsz.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.mkkuei4kdsz.com/

                                         
                                         64.190.63.136
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Sun, 02 Oct 2022 04:07:07 GMT
content-length: 0
x-powered-by: PHP/8.1.9
x-cache-miss-from: parking-7f9f948885-fnz2p
server: NginX


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - mnemonic_dns: Sinkholed
    - quad9: Sinkholed
                                        
                                            GET /search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfT8NTdFbsNU_0&v=NTU1ZWZjZTRmODJlOWFlYzMzMjU4ZmRkYzZhOWRmNDgJMQl3dzIubWtrdWVpNGtkc3ouY29tNjMzOTBlNmE4MDgyNTMuNDQ3ODEwMTIJd3cyLm1ra3VlaTRrZHN6LmNvbTYzMzkwZTZhODA4Njk3LjE1NDc2MjkxCTE2NjQ2ODM2MjcJYWRfNjNfMA==&l=OAk1OWMyNzg5Zjc1NDE3NGIxZGRiZWFlMmEwOTk4YjZlYgkwCTM1CTAJMDE2ZjM0OTVjNTEyM2ZjMDZhNjZhNjc2NTIxMWJjNDQJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NjQ2ODM2MjcJMC4wMDA0MjMJTgkwCTEJODMwCTEyMDUJMTk0MDQzMTQyCTkxLjkwLjQyLjE1NAkw HTTP/1.1 
Host: ww2.mkkuei4kdsz.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.mkkuei4kdsz.com/
Upgrade-Insecure-Requests: 1

                                         
                                         64.190.63.136
HTTP/1.1 302 Found
content-type: text/html; charset=UTF-8
                                        
date: Sun, 02 Oct 2022 04:07:07 GMT
content-length: 0
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sun, 02 Oct 2022 04:07:07 GMT
location: /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfT8NTdFbsNU_0&v=NTU1ZWZjZTRmODJlOWFlYzMzMjU4ZmRkYzZhOWRmNDgJMQl3dzIubWtrdWVpNGtkc3ouY29tNjMzOTBlNmE4MDgyNTMuNDQ3ODEwMTIJd3cyLm1ra3VlaTRrZHN6LmNvbTYzMzkwZTZhODA4Njk3LjE1NDc2MjkxCTE2NjQ2ODM2MjcJYWRfNjNfMA==&l=OAk1OWMyNzg5Zjc1NDE3NGIxZGRiZWFlMmEwOTk4YjZlYgkwCTM1CTAJMDE2ZjM0OTVjNTEyM2ZjMDZhNjZhNjc2NTIxMWJjNDQJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NjQ2ODM2MjcJMC4wMDA0MjMJTgkwCTEJODMwCTEyMDUJMTk0MDQzMTQyCTkxLjkwLjQyLjE1NAkw
x-cache-miss-from: parking-7f9f948885-p8cxg
server: NginX


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - mnemonic_dns: Sinkholed
    - quad9: Sinkholed
                                        
                                            GET /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DfT8NTdFbsNU_0&v=NTU1ZWZjZTRmODJlOWFlYzMzMjU4ZmRkYzZhOWRmNDgJMQl3dzIubWtrdWVpNGtkc3ouY29tNjMzOTBlNmE4MDgyNTMuNDQ3ODEwMTIJd3cyLm1ra3VlaTRrZHN6LmNvbTYzMzkwZTZhODA4Njk3LjE1NDc2MjkxCTE2NjQ2ODM2MjcJYWRfNjNfMA==&l=OAk1OWMyNzg5Zjc1NDE3NGIxZGRiZWFlMmEwOTk4YjZlYgkwCTM1CTAJMDE2ZjM0OTVjNTEyM2ZjMDZhNjZhNjc2NTIxMWJjNDQJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2NjQ2ODM2MjcJMC4wMDA0MjMJTgkwCTEJODMwCTEyMDUJMTk0MDQzMTQyCTkxLjkwLjQyLjE1NAkw HTTP/1.1 
Host: ww2.mkkuei4kdsz.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         64.190.63.136
HTTP/1.1 302 Found
content-type: text/html; charset=UTF-8
                                        
date: Sun, 02 Oct 2022 04:07:07 GMT
transfer-encoding: chunked
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sun, 02 Oct 2022 04:07:07 GMT
location: http://xml.sedodna.com/click?i=fT8NTdFbsNU_0
x-cache-miss-from: parking-7f9f948885-lnx78
server: NginX


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   311
Md5:    fa3bec610a85ea74ff818a4b8ab2c416
Sha1:   275bafe452ad8a81e18ad98e233575bedf037a30
Sha256: ee94f3d82346adf7735b20dee0e683e0d7a9fd7c54109ba2d71b20a7bca7eb06

Alerts:
  Blocklists:
    - mnemonic_dns: Sinkholed
    - quad9: Sinkholed
                                        
                                            GET /click?i=fT8NTdFbsNU_0 HTTP/1.1 
Host: xml.sedodna.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         173.239.53.32
HTTP/1.1 302 Found
                                        
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://mybetterck.com/aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XQaiCg3BLRsq7qVxrtzI4f-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwGDRVCpBjTwrtcM7EN724MzNiE03EdAwuxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYgOzeSdXSQud8gLQ0QuNbeEbnJ8YaKdtRakgjafBu8ZEc1YVEhOQQJCpbRMnPinmkgkzzF7bpCXRUouSWJHSs17TrREasjs5ydU5tbZSjQnG_xSH9WuMsJZjr3oFzyJlWxHrYujGz0-zMP_KEp0Atoa2R7kE4hYKaJRfDnKMK_hbJ0EOA7hH3K8IZgjAXe1aQoPBZCL9NcfBJ4h5hUB6nPV0EMDx59TR3FaPkIqahg3lzwfgDSrgntEqsUhYON29Zstuo61Bk7899ecmECTsnGT_J0ey-pXFh-qMFTH8ZQnVCFNP84tPqKNxeFfSQuj9TfJrKdDxmRIpejK_ziYuar8kUgXGDiXQeMOVBQWYRwM82uiYB8ojAE1MhlujlyfvxwW4ritglbkl9a_MVjEXESqbCb8IFTJNx-XyEGNQGAhAOVtgbRXqPwnavJ2oEM2ryGUZYdIYiGnaLONi23GMqdElXrgTh189hywn4lk6GoTC2IkW9GkKl7jiecqKI3NbawOVOM0ib8oBaNpQk3XYgtP2kZvAIExrg-cNyfqPy8_EwXMIfZ0rRLFsoaGT0ii66euvnThgv6Zv5QNN9uACBcMP6nMn_nMd7duHrvublOqsJi7-BBLDkb6G77Ta3zsCKfPOMcfVOYg0-JLVcxwn31OMqc84DL-tigwtcX2sP_s2rIh0M5cDlUeYXnWkGyxppjTJ0BJMGhH252es-BF3x8XrTwHuVwzYJv0V3-IYGFRZAjY93z4Mpp4wcyfBbWR98RZueH1B2Iw46q7hZVtoIQVUAvejSKFHe4Y-V-nEwvAXhRGaWKF4jb82bm6ZETSltmc_mMnWAtU-FosXlUHPbhCxTWJhmIEFehoiTOq1ZsJfKG471g3ZH-CFrdmDUhQaGNZBP8pniM8DW0JAcNt3ErF5GW3PAUVDhi5o6Z0JEfM65kSHR8wMseUrbmvTqlbC7v9OVFpo_DAQsZAxCeTcyiyJOB5hvnf4dSwoiLCUk7KLkDsrPZfoVMWgPzRAhvAMVF0JbdXBukNEFxXUHGzkCk_8fOlb7MvllhJe0iea3f1eKd8zCfuuwBdrH-djaNlINsolYG4cvhJkdl6zmwxYmZRLjddtNgvdsvFKwAFgloip-VM2AK-x1doEy2D91pxACPgPgyN2g-SbVPv1BUIhmGsqxyCsyVAA54h6s0pPikYO6m9jz3k3JaIQgNqcqkPS2MdJSOMgl0_99pPAWJjhMVo92GLOW9VsQvRBpLKWX7EUXOTps5XJEUr-V-wvxXnTkEH39XULhQqgpkoEtMxirQsv_jgrljvvJtetrPeDa_33Cli4W6NYiLwzbe5xkr3q9-Owopq6iVqSuVps-PWA-Pgc4wUYNEwgLnei-l83mtbztZUxn8wo33DXH8dLYd0OJGQoFsh4DWQqieHOn1CSbaoJcSIgcdrBIzVqh9TrlD2qPlXVzoQ8JQEFMT6asUD5tQ29PJj_cBRcHs-IvdR_5D3LQfT_IIMuEUkmCW2w-oi0T9LOjAbBU0wo9wgLTACrvWYlSnzX0nSV_f0cXQc5mKiIWM3HpOiP2SkREFsP1kmGtxSVawkHrXwKcq6kEpyemFl4D3YcbYajai4qMtRDDflfv5PIt02LVpZEo1OOJwZOGg6A32nM3GCJL-0OMaOKwbEJxtkch4yg8i1f4OxuuorOYwwqJPWDKxkmVbuTT6kqhq8o62imYsH1K98_DLu54Sic6os2yskgg2uEPzdStx2TOI3rgHalJmiKJnGVN0lxXlnLKtLG-WhiLuQgOS85hTgcm6cqkr2IZPSEUKtZUoDaG3wKgIN_EdlkkLEB146pQ
Pragma: no-cache

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3118
Expires: Sun, 02 Oct 2022 04:59:06 GMT
Date: Sun, 02 Oct 2022 04:07:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3118
Expires: Sun, 02 Oct 2022 04:59:06 GMT
Date: Sun, 02 Oct 2022 04:07:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3118
Expires: Sun, 02 Oct 2022 04:59:06 GMT
Date: Sun, 02 Oct 2022 04:07:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3118
Expires: Sun, 02 Oct 2022 04:59:06 GMT
Date: Sun, 02 Oct 2022 04:07:08 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11083
x-amzn-requestid: 53e2c961-bcc0-4977-8648-ee3c1aed9cde
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHRFWfIAMFhlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3c7-070212d7386d5efa1b4aa8d3;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Z1KmxHJh9QNfg5x0enkqOjbmiqHvg7nlQiMnuDuCRNWQUBFEiKELbw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:36 GMT
etag: "d63b6ba630736d32c364b0e6a369274b2389b7ff"
age: 22712
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11083
Md5:    edded48f558f739287a040151349ef67
Sha1:   d63b6ba630736d32c364b0e6a369274b2389b7ff
Sha256: 33b4a459df0ba7b36b907ba96d74e08660cc75640c42a5748b97d18ec2e9d533
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa35a86a2-6f2d-47bd-970a-75f2caba5ecc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7733
x-amzn-requestid: ecc1e276-bf29-4c81-b415-065b0eea0a70
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHnEwNoAMFcOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ca-3b6b2da5041c65ed11b97e66;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:26 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: PE-7riXxL8vF5moOsmQCiKO6sKwPFErA0dYJ9RfpdVcQoAdianLv3Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:26 GMT
etag: "55f0192d2aabb99c72ee0827013e26cd38baaf81"
age: 22722
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7733
Md5:    31c14c715893e82dd04f10bb9c863e64
Sha1:   55f0192d2aabb99c72ee0827013e26cd38baaf81
Sha256: 6f1c716bd7062a97bfe20e6fcdd3f5a7d69248d3673f517fb92b15363e936a4d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e251a53-c5b8-4c0a-b486-8ef8a6fd4d77.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5503
x-amzn-requestid: e5e2b912-6deb-4736-b455-c9e37e1701ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDgdHE-oAMFq3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cf-12a1f95320eadd1105daba75;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: zHzIjHe7MqjqSn1ejlTA-tD_gJBAizq91U3sI_prwcx7Vx4ai4B0DQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:48:26 GMT
etag: "82123a6c3e74a7ff90b5db0cb8a333a64cefe71c"
age: 22722
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5503
Md5:    6299d2938a1195b694844a0556a569b3
Sha1:   82123a6c3e74a7ff90b5db0cb8a333a64cefe71c
Sha256: b65f713b3c94586b0d09a04b6873004d8cdfe6a13d364863fc1a6cd2d1ceac83
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4043a1cb-a427-407b-90c2-59adcca462c8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7725
x-amzn-requestid: 2b15132c-03f8-4b9a-b3a9-2217fbfd89c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEIQHviIAMFtYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ce-749367997b2e5c9c106d8380;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:30 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BUYB6NasOkQ9eOkG3-59ioLAe206_V0Q4X-aTN-Kvv7-6fEf7zDX2Q==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:56:35 GMT
age: 22233
etag: "b5122a1c700e68a2322300a1e9d38453a1c3eb3a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7725
Md5:    d8342b284a0d5383fff1aae9375ef009
Sha1:   b5122a1c700e68a2322300a1e9d38453a1c3eb3a
Sha256: b316b4db642e349e452b09cf49767c8b05ebd2db05f217e927065a571c9aa1fe
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: f0791b53-3c5f-4d94-954d-992a529ebb60
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPnunF35oAMFYbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63361ff6-2adb303349153ced73ccecf6;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 22:45:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RGS_T9Cwl5Vjs_bxngHRomiYppE5fLe0SnH19VEfc5-PCT5tb5ku1A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 04:40:52 GMT
age: 84376
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1a669b2-0d3a-4091-8e1b-d039baf0b678.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8629
x-amzn-requestid: 56667412-f4d8-4ffa-92f2-5ee71a5d2bff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEJ_Gb7IAMF2_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3d9-75ac43520455000b6170a7b0;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:41 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -lhklpM7rZ2NAic4uCrwQlp21sW8X_mstYGEtRF_w6NXke54N9-ttA==
via: 1.1 d16c3f15bd14953a9d4109eaaa991de2.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:56:35 GMT
etag: "1aa90c115a4506342fb287e9a3dd35c13e0cc682"
age: 22233
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8629
Md5:    6ae0054af58fd05a3cc83a805fcfd23d
Sha1:   1aa90c115a4506342fb287e9a3dd35c13e0cc682
Sha256: f48ea45cddfdfca94445b0de37f722332ad1ea499c44e658c491bf7b862936f9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:08 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 07:20:06 GMT
Expires: Fri, 07 Oct 2022 07:20:05 GMT
Etag: "7e0b89a2df952a05c0aa7c3d506f079239022e5d"
Cache-Control: max-age=442976,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 753a91c26d4eb50f-OSL

                                        
                                            GET /aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XQaiCg3BLRsq7qVxrtzI4f-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwGDRVCpBjTwrtcM7EN724MzNiE03EdAwuxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYgOzeSdXSQud8gLQ0QuNbeEbnJ8YaKdtRakgjafBu8ZEc1YVEhOQQJCpbRMnPinmkgkzzF7bpCXRUouSWJHSs17TrREasjs5ydU5tbZSjQnG_xSH9WuMsJZjr3oFzyJlWxHrYujGz0-zMP_KEp0Atoa2R7kE4hYKaJRfDnKMK_hbJ0EOA7hH3K8IZgjAXe1aQoPBZCL9NcfBJ4h5hUB6nPV0EMDx59TR3FaPkIqahg3lzwfgDSrgntEqsUhYON29Zstuo61Bk7899ecmECTsnGT_J0ey-pXFh-qMFTH8ZQnVCFNP84tPqKNxeFfSQuj9TfJrKdDxmRIpejK_ziYuar8kUgXGDiXQeMOVBQWYRwM82uiYB8ojAE1MhlujlyfvxwW4ritglbkl9a_MVjEXESqbCb8IFTJNx-XyEGNQGAhAOVtgbRXqPwnavJ2oEM2ryGUZYdIYiGnaLONi23GMqdElXrgTh189hywn4lk6GoTC2IkW9GkKl7jiecqKI3NbawOVOM0ib8oBaNpQk3XYgtP2kZvAIExrg-cNyfqPy8_EwXMIfZ0rRLFsoaGT0ii66euvnThgv6Zv5QNN9uACBcMP6nMn_nMd7duHrvublOqsJi7-BBLDkb6G77Ta3zsCKfPOMcfVOYg0-JLVcxwn31OMqc84DL-tigwtcX2sP_s2rIh0M5cDlUeYXnWkGyxppjTJ0BJMGhH252es-BF3x8XrTwHuVwzYJv0V3-IYGFRZAjY93z4Mpp4wcyfBbWR98RZueH1B2Iw46q7hZVtoIQVUAvejSKFHe4Y-V-nEwvAXhRGaWKF4jb82bm6ZETSltmc_mMnWAtU-FosXlUHPbhCxTWJhmIEFehoiTOq1ZsJfKG471g3ZH-CFrdmDUhQaGNZBP8pniM8DW0JAcNt3ErF5GW3PAUVDhi5o6Z0JEfM65kSHR8wMseUrbmvTqlbC7v9OVFpo_DAQsZAxCeTcyiyJOB5hvnf4dSwoiLCUk7KLkDsrPZfoVMWgPzRAhvAMVF0JbdXBukNEFxXUHGzkCk_8fOlb7MvllhJe0iea3f1eKd8zCfuuwBdrH-djaNlINsolYG4cvhJkdl6zmwxYmZRLjddtNgvdsvFKwAFgloip-VM2AK-x1doEy2D91pxACPgPgyN2g-SbVPv1BUIhmGsqxyCsyVAA54h6s0pPikYO6m9jz3k3JaIQgNqcqkPS2MdJSOMgl0_99pPAWJjhMVo92GLOW9VsQvRBpLKWX7EUXOTps5XJEUr-V-wvxXnTkEH39XULhQqgpkoEtMxirQsv_jgrljvvJtetrPeDa_33Cli4W6NYiLwzbe5xkr3q9-Owopq6iVqSuVps-PWA-Pgc4wUYNEwgLnei-l83mtbztZUxn8wo33DXH8dLYd0OJGQoFsh4DWQqieHOn1CSbaoJcSIgcdrBIzVqh9TrlD2qPlXVzoQ8JQEFMT6asUD5tQ29PJj_cBRcHs-IvdR_5D3LQfT_IIMuEUkmCW2w-oi0T9LOjAbBU0wo9wgLTACrvWYlSnzX0nSV_f0cXQc5mKiIWM3HpOiP2SkREFsP1kmGtxSVawkHrXwKcq6kEpyemFl4D3YcbYajai4qMtRDDflfv5PIt02LVpZEo1OOJwZOGg6A32nM3GCJL-0OMaOKwbEJxtkch4yg8i1f4OxuuorOYwwqJPWDKxkmVbuTT6kqhq8o62imYsH1K98_DLu54Sic6os2yskgg2uEPzdStx2TOI3rgHalJmiKJnGVN0lxXlnLKtLG-WhiLuQgOS85hTgcm6cqkr2IZPSEUKtZUoDaG3wKgIN_EdlkkLEB146pQ HTTP/1.1 
Host: mybetterck.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Cookie: rhid=81412752446
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         108.168.193.189
HTTP/2 302 Found
                                        
server: nginx
date: Sun, 02 Oct 2022 04:07:08 GMT
content-length: 0
set-cookie: rhid=81412752446; Max-Age=15552000; Expires=Fri, 31-Mar-2023 04:07:08 GMT; Domain=mybetterck.com; Path=/; SameSite=None; secure;
location: https://p201298.mybetterck.com/adServe/domainClick?ai=gNSPw4YcvsCApKkKBx7IDGSZVu5NPqSq-h2rSoksoBqNG2LV3Zkk-L8FPCSjKZr_YsQ0yRxpJ6k8LlotqmtX7ErGSkvN2YlGY4HZ8X7cx-dM1QaxFxK0PHGpJGlCLAoWMnzoVZuce8ueVaQ0F217-cHwFJ-CDJF8T7C2wcJ1dqtoOgN9pzNxgl6S4oChQzOvrPE96Ym7CMGlXRdGMK-TkKMF_XSxG7q5c9lRJWHNr4s5bSTdWcYVZJciO9bgcuS1jIeAEiXnU3VYEUAru7F_DuXugOnM5m-8Jm7EhOsk27bxGYd3vi6Mg4f18T9CpHqCT2L9NFyVXF55Q47z-CV1ol2k4XVJzHJX8mFgHSWE3TZes2Wal4z2_6cr0kIIvFC278sDJBVR-ujw_o9HKkL8PaMhDqf7kErmDrOr0d6CIh0L3FtHWHx7HCl1j57-JOeaUbfHK1lWXoIZq44qh-mYNBTP6LhN0GpIW2jB4zFuRTFWdau7IN9FdV9I9zFVCeL5p92cp-vkcPmEf3qd4ONyUKC7q00sm1d_81VZTL6WTs8WO4QP-Vi7zRe7zzBJbLAQvEGFQ0jWJkN4bvlPQAriragptoHmn24iKiXhLmiyflhHQ2DhJtv57Pgpt-TBvcxCEwrLEAaOW_hUUutSGhrofXDf5i3bPUyKJAzwVqRCBUrBs34dAjVMmg&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPo-uYf9mCLnEA8c2lnrFKUQKLg4gPmnc1uYwW_D3BpodB8__exuaSE5Pp3aWhe23l17BgNqBNBHw&si=1&oref=e2905b67c440133e06d94d472902354c&optunit=g1X1rV7f4BpBS4YUfGI2rw&rb=LW_v4KVZAgI&rr=4&abtg=0
X-Firefox-Spdy: h2

                                        
                                            GET /norway?utm_source=no&utm_medium=89427525383 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         167.235.15.78
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                        
x-powered-by: PHP/7.4.28
set-cookie: utm_source=no; expires=Tue, 01-Nov-2022 04:07:08 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com utm_medium=89427525383; expires=Tue, 01-Nov-2022 04:07:08 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; expires=Tue, 01-Nov-2022 04:07:08 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com handl_ip=91.90.42.154; expires=Tue, 01-Nov-2022 04:07:08 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; expires=Tue, 01-Nov-2022 04:07:08 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
x-redirect-by: WordPress
location: https://promoprawn.com/norway/?utm_source=no&utm_medium=89427525383
content-length: 0
date: Sun, 02 Oct 2022 04:07:08 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

                                        
                                            GET /norway/?utm_source=no&utm_medium=89427525383 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
x-powered-by: PHP/7.4.28
set-cookie: utm_source=no; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com utm_medium=89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com handl_ip=91.90.42.154; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%2F%3Futm_source%3Dno%26utm_medium%3D89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
x-redirect-by: WordPress
location: https://promoprawn.com/go-to-lampegiganten-no
content-length: 0
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

                                        
                                            GET /go-to-lampegiganten-no HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fnorway%2F%3Futm_source%3Dno%26utm_medium%3D89427525383
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                        
x-powered-by: PHP/7.4.28
set-cookie: utm_source=no; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com utm_medium=89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com handl_ip=91.90.42.154; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
x-pingback: https://promoprawn.com/xmlrpc.php
x-redirect-by: WordPress
location: https://promoprawn.com/go-to-lampegiganten-no/
content-length: 0
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

                                        
                                            GET /wp-content/plugins/gtranslate/gtranslate-style16.css?ver=6.0.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2af-62cff464-19604d8;br"
last-modified: Thu, 14 Jul 2022 10:48:04 GMT
content-length: 234
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   234
Md5:    4526c392337283c2a34e10b7cc7579b7
Sha1:   159f80ba532dcc67bc75ddf1bbe7e43f9b7fb33f
Sha256: df0dff97ed83544627a440c3f3fbd460fb24b34814b10a1aa15e965e3f1f1f9c
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "15b64-62c2d8bd-19a03ff;br"
last-modified: Mon, 04 Jul 2022 12:10:37 GMT
content-length: 10775
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (43771)
Size:   10775
Md5:    55bbab41f9fc950b6f2939d5a5b11d98
Sha1:   d3fc3d679d075648a22d83f95a08773b4e4a3383
Sha256: 2a5b528b068ef00c9d5acc922818724fe63fd5a8ad107d2d8831797fd244afb1
                                        
                                            GET /wp-content/plugins/yc-url-redirection/public/css/yc-url-redirection-public.css?ver=1.0.0 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "62-63232e83-19601e3;;;"
last-modified: Thu, 15 Sep 2022 13:54:11 GMT
content-length: 98
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   98
Md5:    e6094661d8923e95b233019ebff7c8f0
Sha1:   cfd836d385d475baffee45d85cfeb9bb36e70d9e
Sha256: 547dda3c14b284819be511be1e410da94a5efc6ccc4a9afe1c75394f9333191a
                                        
                                            GET /wp-includes/css/dashicons.min.css?ver=6.0.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "e688-603ffca6-19a043e;br"
last-modified: Wed, 03 Mar 2021 21:16:22 GMT
content-length: 35099
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (58981)
Size:   35099
Md5:    378455dbd7bf57fceffe7d3e27b264da
Sha1:   d2a55ec3793edbd18b929337e20e02fd1d8e9ad7
Sha256: 87ae07b42b93eedcd94fbfb13a24e8bc997b29589ba33664858fccc5083c5057
                                        
                                            GET /wp-content/themes/clipper/assets/css/foundation.min.css?ver=6.4.3 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "111d7-620e11aa-1980a5b;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 10386
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (65531), with no line terminators
Size:   10386
Md5:    7b179e8f61b3fd5ce76c658751ce95aa
Sha1:   eb9fdfaea9ed6214de7dbd1b5475019effabd663
Sha256: fa0b913fbb15c761c1e14120cbffe4d8d56108c2deb5ecff51b6a627688e0209
                                        
                                            GET /wp-content/themes/clipper/assets/js/lib/slick/slick.min.css?ver=1.7.1 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "53f-620e11aa-1980a4d;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 399
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1342)
Size:   399
Md5:    11a7eccde25705200f80299d3c7bc10b
Sha1:   d2ff227b3213365f049c53e34b50bf5ccf3f43a9
Sha256: ec96ae71c7fe8b4ec4984c78c42e122082b9c9372813e0ea2388fc2f6694b027
                                        
                                            GET /wp-content/themes/clipper/assets/js/lib/slick/slick-theme.min.css?ver=1.7.1 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "971-620e11aa-1980a4c;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 659
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (2403)
Size:   659
Md5:    56d376ae1b4ec1b202f1471c1c9a61dc
Sha1:   edee0781ae929fa5487763400b0d11dd958f2219
Sha256: 15145ebdf1f1d20797fdc47487405ccddb039a013b0590c3bd15a7663d9deb21
                                        
                                            GET /wp-content/themes/clipper/theme-framework/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "7917-620e11aa-1980a80;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 6644
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   6644
Md5:    e99e647b2bcbac735756f147437cd30d
Sha1:   a7feff175eb69bc219a4915f56213eb8177116ac
Sha256: d942ce1121b2caa437ff304808a9079b017b83c77d36e08852cab601efd17b73
                                        
                                            GET /wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "107a9-620e11aa-1980a63;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 13965
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   13965
Md5:    809e3b62565e9e4578c4ece133445c3c
Sha1:   6fec1ad5fff86bfba5b75e071511f14f22105ca2
Sha256: 50d491d4546fc91311de7b0cc59ba70b6f9f9e7c1c14964d25c4562ba5c9105c
                                        
                                            GET /wp-content/themes/clipper/styles/red.css?ver=6.0.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "27c-620e11aa-1980a73;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 250
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   250
Md5:    8967441e38649571c6d6671114814c04
Sha1:   8f071b4be7214b99d23f66a1d4473660e34c6c59
Sha256: dae814740c901b9bf2ff1f43a2aa6b6b02bb335d7114787cc46c1d7fbe035b29
                                        
                                            GET /fontawesome/4.7.0/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.229
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
etag: W/"7918-USx9eQM+MCipvmG1QM8aaHDIlvg"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:09 GMT
age: 7956681
x-served-by: cache-fra19147-FRA, cache-bma1632-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7055
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   7055
Md5:    c68c38b6f53bfc3bee6b736afa488757
Sha1:   871df21572c702142a7c237259326013ec2df26a
Sha256: e2100c6e7b6f0d358ac92d33b11278661c9a80e4c62c056677e24bc572d6da34
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/clipper/theme-framework/js/colorbox/colorbox.min.css?ver=1.6.1 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "ba7-620e11aa-1980abd;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 801
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2982)
Size:   801
Md5:    ed0023e818060f2cc95064da01f70a9f
Sha1:   2a6a701f475d738846ea06fd45437fa80b2ecbb1
Sha256: 262ae1ae3fa68f6e5f74cd07770cea411453c6c8c82212129b316369e89fdac5
                                        
                                            GET /wp-content/themes/clipper/framework/styles/jquery-ui/jquery-ui.min.css?ver=1.11.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "75d3-620e11ac-198075e;br"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-length: 6962
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (28367)
Size:   6962
Md5:    058d6ca773fb6164c07655e85c6902bc
Sha1:   60764b86a193c2daf22278e44059d961c4655cb0
Sha256: c8fa6e1f1f00e858d665c09d56068347d1f70b612e22a572623d1d0f5b335cce
                                        
                                            GET /wp-content/themes/clipper/framework/styles/datepicker/datepicker.css?ver=6.0.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "1c06-620e11ac-198075a;br"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-length: 1059
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1059
Md5:    9fee7a86a975b17368a842826ddb99c9
Sha1:   78fcdcd23065d6d685e5c9d6c427ff625747d42b
Sha256: f1374de81cad252dd96c1aec50b73ff5f0325299a0095dae61b06b9cb8544e37
                                        
                                            GET /wp-content/themes/clipper/includes/reports/style.css?ver=1.0 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/css
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2d6-620e11aa-1980853;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 235
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   235
Md5:    19f0401629c2112542768cd94d2d417e
Sha1:   dc7c931dbe8e75a2509917ee6b82b447b33e69f4
Sha256: 47de8110c32b0348d010fe1e717c37dd983f83d9bb1c2e887856917a94516458
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2bd8-5fb4e3fe-19a013a;br"
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
content-length: 3992
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   3992
Md5:    e32c5db077b45cddc36bbdec187ba4c4
Sha1:   dfdbe8e2f28238b3a218785514a452884aa789a8
Sha256: 51bd9696f8c91a26501c40b40842e759b5cbcd352b3ce7d1f6875996abec46f6
                                        
                                            GET /wp-content/plugins/handl-utm-grabber/js/js.cookie.js?ver=6.0.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "df1-62cff46c-1960206;br"
last-modified: Thu, 14 Jul 2022 10:48:12 GMT
content-length: 1266
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1266
Md5:    002b38bcf8af7d7872f4de5705c8f7a0
Sha1:   a66362e316d0696a15e13acfe7678535a5ced687
Sha256: 3e72ce357bf0551646ad5e2595fa9b6bb08402d56b4a20ece22c5ee7cced5d66
                                        
                                            GET /wp-content/plugins/handl-utm-grabber/js/handl-utm-grabber.js?ver=6.0.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "5f5-62cff46c-1960204;br"
last-modified: Thu, 14 Jul 2022 10:48:12 GMT
content-length: 627
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   627
Md5:    addf86ac7ac144fac1f7a1a2f3a27482
Sha1:   2c56ecd51714ebdb0d13f4b16cee2e9a1cafd7fc
Sha256: 71a3a8064fcf51f5acd5a186eeec760653b31fdb8b6e4caa1bf7cc62038f5370
                                        
                                            GET /wp-content/plugins/yc-url-redirection/public/js/yc-url-redirection-public.js?ver=1.0.0 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "346-63232e83-19601e0;br"
last-modified: Thu, 15 Sep 2022 13:54:11 GMT
content-length: 411
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   411
Md5:    cf6087d65d454b825a08b1179d2338f1
Sha1:   c1f877b976a59019a9dcce8a8c9c0e208350790b
Sha256: 294f446fb350d542dbff182a02b74e22074c6314f13b301e905a27ab6ba0205e
                                        
                                            GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "50eb-625095f6-19a012a;br"
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-length: 6622
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8189)
Size:   6622
Md5:    e2e16e8517ff2fdb0cdc9963f6e6edee
Sha1:   04ad2a9b8f3006d611ab2d9a2e8fadbc249e6cbf
Sha256: 3c49689f85907683c8da5d226bb14a550fcbdaad22582712b774d3ecd67c01b2
                                        
                                            GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.13.1 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "8f87-625095f6-19a010d;br"
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-length: 10462
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (36560)
Size:   10462
Md5:    fde7d72716207b5314405ae291f64fbe
Sha1:   9651db9753198caba63070531c4e9f2c02cc204e
Sha256: bce9e74b8745969dcc949d3c8f4765a1ab00be91371c34afd7663bc4364d8594
                                        
                                            GET /wp-content/themes/clipper/includes/js/easing.js?ver=1.3 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "1277-620e11aa-19809db;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 979
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   979
Md5:    9b4413eb236c6e142927da48f3543cc4
Sha1:   ecc3c20045f147b96d363adb0a1424242983d0d1
Sha256: fb6f81269a0536629540fa1417fd8d29a1dc8aa3deb816aa6697ed6bf1cf31ae
                                        
                                            GET /wp-content/themes/clipper/includes/js/jcarousellite.min.js?ver=1.8.5 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "1c1a-620e11aa-19809da;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 2791
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (6965)
Size:   2791
Md5:    37d9d8e921e53bb7969d679141f1b3c6
Sha1:   5f99634ceb3820c25be3a0973e7d22326e69b4f8
Sha256: cd2daf3d56682e97107fcf76247704e0404391214677acd10e12fb3e96f8ef5e
                                        
                                            GET /wp-content/themes/clipper/includes/js/clipboard.min.js?ver=1.5.15 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2824-620e11aa-19809d1;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 3118
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (10167)
Size:   3118
Md5:    475123ae9c99e82e1a8435ee4f985b03
Sha1:   bbb5978c0cbd47869a8d20080393ec83b9359d7a
Sha256: 7fc6d0240ec8286042ded4e070250917b4524c031803a81d7827f7c639036c42
                                        
                                            GET /wp-content/themes/clipper/theme-framework/js/colorbox/jquery.colorbox.min.js?ver=1.6.1 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2e7c-620e11aa-1980ab6;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 4456
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11827)
Size:   4456
Md5:    ad6d60444980e8a4874117f0f458127f
Sha1:   1f16fe23622ca20745b7607a56b3fba4f5bdf349
Sha256: cfa97d63da39b950511a6b97941d1d715c67b7abd23ef89788e8571a7da8ba8c
                                        
                                            GET /wp-content/themes/clipper/framework/js/validate/jquery.validate.min.js?ver=1.15.0 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "58a3-620e11ac-1980755;br"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-length: 7039
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (22550), with CRLF line terminators
Size:   7039
Md5:    ef006467da5ca47503437a4c6bab084c
Sha1:   c08f15f2f3626d0f70067692555eeb9deca5c757
Sha256: 86fe98d71dc4ea98d9b43dbf5c67643f57c732dfb97908aa104b8b9cf3c9de34
                                        
                                            GET /wp-content/themes/clipper/framework/js/validate/jquery.validate-lang.js?ver=6.0.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2f7-620e11ac-1980751;br"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-length: 231
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   231
Md5:    f390bf7ad5ec9e840cbe75c6df24e5db
Sha1:   7758356d7a9319bf54b1286492369cb9ab2f9878
Sha256: 5e3cea34e2e7e5b62411117dbba36fbe66b87913a350d3b8f2193af0710fac40
                                        
                                            GET /wp-content/themes/clipper/includes/js/jquery.tinynav.min.js?ver=1.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "352-620e11aa-19809d0;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 434
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (507)
Size:   434
Md5:    44ffdc8bc270e1c6cbc7007c09847b44
Sha1:   6721a81c984ac211221fe1675e046a9b1e95f711
Sha256: 06c9d5a72f21a345facab20aca443e55b6e5ab95e87ebb565de6e13198f41d8b
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "15db1-6048e0ac-19a0136;br"
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
content-length: 30118
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   30118
Md5:    9f5dbb0b07808181d3bceeeb95120419
Sha1:   ff69f040200c921ffbcd3e01ffddee3c6d63a30d
Sha256: 4398cce5635c0d26b99ca763fb8174721a50403908ec2ad688902891938bfefe
                                        
                                            GET /wp-content/plugins/gtranslate/flags/svg/en.svg HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: image/svg+xml
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "35e-62cff464-19603ee;br"
last-modified: Thu, 14 Jul 2022 10:48:04 GMT
content-length: 428
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (862), with no line terminators
Size:   428
Md5:    34112ac5b6e76ddfc1f3e393f4588ab5
Sha1:   2a204dbd10899d9e2b645188459a2feea2257150
Sha256: ab75706d74d752940b60a70940f493975b8b60e33def12f6ff3111b74c8693bf
                                        
                                            GET /go-to-lampegiganten-no/ HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
x-powered-by: PHP/7.4.28
set-cookie: utm_source=no; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com utm_medium=89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com gclid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com handl_original_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com handl_ip=91.90.42.154; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com handl_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F; expires=Tue, 01-Nov-2022 04:07:09 GMT; Max-Age=2592000; path=/; domain=.promoprawn.com email=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com username=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.promoprawn.com
x-pingback: https://promoprawn.com/xmlrpc.php
link: <https://promoprawn.com/wp-json/>; rel="https://api.w.org/", <https://promoprawn.com/wp-json/wp/v2/pages/2975>; rel="alternate"; type="application/json", <https://promoprawn.com/?p=2975>; rel=shortlink
content-encoding: gzip
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   76200
Md5:    a1c831e935faa59bc1d635e60a405b65
Sha1:   e01166ffcd08e0d320435befe3a8b8c7af62269e
Sha256: cd7affa652926d54552316ddff8ad66bcd7236ee521a8908429b09d1a9cf4d09
                                        
                                            GET /wp-content/uploads/2022/02/logo-with-writing.jpg HTTP/1.1 
Host: www.promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: image/jpeg
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "181e2-620dba86-1940646;;;"
last-modified: Thu, 17 Feb 2022 03:01:26 GMT
content-length: 98786
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 192x192, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 960x678, components 3\012- data
Size:   98786
Md5:    8f1781d3eba83d8482d02be904b306d8
Sha1:   c04a74d3273720db6e0cfa828b9a76eb193451ba
Sha256: 59efb0d045dfcdf62c836f3e72d44843a832fa071bb4fdffa97b99099eb625db
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "48b9-62551487-19a00d3;br"
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
content-length: 4584
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   4584
Md5:    8b21827e4cc06ac9d6c686e463be1fb2
Sha1:   395e1545d76868371b3110d48179027eadef1b39
Sha256: bf023dff36bcaa1d34063e0804ebfc1598550f64915890b39a2afbe95b8aed8a
                                        
                                            GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.3.7 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "13-62cff458-1960a36;;;"
last-modified: Thu, 14 Jul 2022 10:47:52 GMT
content-length: 19
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   19
Md5:    8102dc9eee0565de28649497220d8d17
Sha1:   a32963be36656f3dd149892540138913bc88de6c
Sha256: 51ff2b4b46acab057eba32dc5fbd0bcf410f0ad2bb75d7a92b230bc627d930d6
                                        
                                            GET /wp-includes/js/jquery/ui/menu.min.js?ver=1.13.1 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2782-625095f6-19a0105;br"
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
content-length: 2868
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (9937)
Size:   2868
Md5:    9fcb59dd74df643e90b84727f98b2ecc
Sha1:   ac7ffd31e16f3d8c8479ab2640e8c45c111f364d
Sha256: 9683f9fd0a6cc5c891901c7f792a5e01bd58a7499ab45229b7e3bd7a469fb9bb
                                        
                                            GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "194b-6254194e-19a0248;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-length: 2356
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6475), with no line terminators
Size:   2356
Md5:    6fc7f6a64943fb700809729d3bd733b4
Sha1:   5f794ac00a49aa543c1f9c3eb7b1d20bc797e6f2
Sha256: 3101fde9e69cf266ba9486abd29a0f82fa43e6d3bebd43218b6d3f9c0fd903bc
                                        
                                            GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "4ac6-6254194e-19a0253;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-length: 6871
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Size:   6871
Md5:    647e9639c172ea1329b55aea96c5ccd5
Sha1:   0de233c1691cf0a3c9d61d5658ee5b6953fbd958
Sha256: d1f34aecec229d7714b3fb38af4e4bea63cf3532420bd2d0b02732a64fdba2f8
                                        
                                            GET /wp-includes/js/dist/dom-ready.min.js?ver=d996b53411d1533a84951212ab6ac4ff HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "1f2-6254194e-19a023b;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-length: 282
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (463)
Size:   282
Md5:    76f8633b8a727174600f2bf180b2fc62
Sha1:   601739aff913ae441dc5da803fdee8d0812c4747
Sha256: b06a5da5f87d6f76cfc4b6975730e91a118919b519f02c3f01ac791a85480c08
                                        
                                            GET /wp-includes/js/dist/hooks.min.js?ver=c6d64f2cb8f5c6bb49caca37f8828ce3 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "132e-6254194e-19a028f;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-length: 1575
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4875)
Size:   1575
Md5:    334c10434c5114c1b6a896a4bfb97762
Sha1:   3141a7c37d1d5775dd56e0a971420aa95e952eed
Sha256: 4bc9855c90cecf283f832865270bd1a718c3d5cf3054e2df60cecbbb6fdd51e0
                                        
                                            GET /wp-includes/js/dist/i18n.min.js?ver=ebee46757c6a411e38fd079a7ac71d94 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "27ee-625596ef-19a02af;br"
last-modified: Tue, 12 Apr 2022 15:12:47 GMT
content-length: 3718
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   3718
Md5:    f76cd901010039724af10d37e014d290
Sha1:   61bb0147adee02a22e013aacd95b40bc18431603
Sha256: ddee8f13a9822816f3f427e407c6b5e268dedc80c6cc02df03fd4c754bfbddd3
                                        
                                            GET /wp-includes/js/dist/a11y.min.js?ver=a38319d7ba46c6e60f7f9d4c371222c5 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "9cc-6254194e-19a0235;br"
last-modified: Mon, 11 Apr 2022 12:04:30 GMT
content-length: 858
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (2472)
Size:   858
Md5:    b0c4f225b053a315d5079627f1091a62
Sha1:   c3840f47d840cbc0acd525900895d812abd4346c
Sha256: 99162da318f3a7cc12a83fc818fe8240e921a5b9e8416ceb0f48e3e70d9d4fcc
                                        
                                            GET /wp-content/themes/clipper/assets/js/lib/slick/slick.min.js?ver=1.7.1 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "a68b-620e11aa-1980a4e;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 9941
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (42634)
Size:   9941
Md5:    762efe221b6b5e41560e5ea0b4d311f0
Sha1:   8a26e405ab5656759decc9b662a6da1b277bf596
Sha256: 1a4f5d684b37667a6dd73cc0b5fddba230d9537adfd3b30ff5e2298729a9e962
                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "3645C90952D883055BDB84FEBBBAD449A8F3B49F"
Expires: Sun, 02 Oct 2022 15:00:00 GMT
Last-Modified: Sun, 02 Oct 2022 03:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 936
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 753a91d02ae5b4eb-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    ca86bde2afd41c1e1a7ec111ddf4f4c4
Sha1:   ae40af8bc78ab930ccac2ba680eb8f77dc8db78a
Sha256: d9625c5b018082f37f6e39f6dfa97cdeae2d7718da4e63c1f6944f6cb01c14d2
                                        
                                            GET /wp-content/themes/clipper/assets/js/lib/foundation/foundation.min.js?ver=6.4.3 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "2440f-620e11aa-1980a54;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 30137
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   30137
Md5:    ee3061888f79f5f4d331d2de2abeed64
Sha1:   85523c19a2d0da39e67f407cde66afe45961e1a4
Sha256: 35d8dd7c8c79159886c47f42195ea63f02656238632afda83d9fb8b130684cf6
                                        
                                            GET /wp-content/themes/clipper/assets/js/lib/foundation/motion-ui.min.js?ver=1.2.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "693-620e11aa-1980a53;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 672
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1683), with no line terminators
Size:   672
Md5:    b94465fd6a5dca879afbe6e86dad686f
Sha1:   ca81a8c96e5a440e08dc6036cefcfdc6b3779008
Sha256: 373c770a484e647dafe5c8b30ac0d7c8b942b32b1a29e0c2cc32645ed60f646f
                                        
                                            GET /wp-content/themes/clipper/assets/js/theme-scripts.min.js?ver=2.0.9 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "1a9e-620e11aa-1980a58;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 2172
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6814), with no line terminators
Size:   2172
Md5:    0639cf7204db2598b7b6e44666a279eb
Sha1:   aef294252f44cb8875cc52cb1d836d969ac9cf3c
Sha256: 33ddb4f2dad0f29729bd7dd78dedf8b20ca78c82e45eaafc8a4e44d19287d4d4
                                        
                                            GET /wp-content/themes/clipper/includes/reports/scripts/reports.js?ver=1.0 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "40a-620e11aa-1980851;br"
last-modified: Thu, 17 Feb 2022 09:13:14 GMT
content-length: 412
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   412
Md5:    257ae7dae5cf066cc3ffa06d37a2f556
Sha1:   79b845a88029af15e79d0c1f1569ba3f1208bd90
Sha256: 6c4fedce38d11dee2749ae828ead9f3569ef0a0e4551a71eafd17a31d1d66b2b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/clipper/images/bg-sidebox-line.png HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/wp-content/themes/clipper/assets/css/style.min.css?ver=2.0.9
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:10 GMT
etag: "71-620e11ac-1980822;;;"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-length: 113
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:10 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 19, 8-bit gray+alpha, non-interlaced\012- data
Size:   113
Md5:    d759e787150faba42a8e2c123ee015ae
Sha1:   0403b47562bb5cebcd5111d572fdf665fcdc1e6c
Sha256: 9826d17ba5806594bcda5d7c739422b90c809d7bb3ac91221c7ccd0135c58a7d
                                        
                                            GET /wp-content/themes/clipper/framework/js/jquery-ui/jquery.ui.datepicker-lang.js?ver=6.0.2 HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: application/x-javascript
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:09 GMT
etag: "e6-620e11ac-198074f;gz"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:09 GMT
server: LiteSpeed
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

                                        
                                            GET /wp-content/themes/clipper/images/bg-footer-red.gif HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/wp-content/themes/clipper/styles/red.css?ver=6.0.2
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:10 GMT
etag: "9d-620e11ac-19807b8;;;"
last-modified: Thu, 17 Feb 2022 09:13:16 GMT
content-length: 157
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:10 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 45\012- data
Size:   157
Md5:    b29b8e308afb688f3f5664660226f9c8
Sha1:   ac3eb9351fdb042c4795cbad9350783b24a44294
Sha256: 563ad2a9e240a6743ae9ff8d8de9e5903d8edb010ea02da74c93abda378afa15
                                        
                                            GET /wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-192x192.png HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:10 GMT
etag: "50e1-620dd166-19406c3;;;"
last-modified: Thu, 17 Feb 2022 04:39:02 GMT
content-length: 20705
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:10 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size:   20705
Md5:    75336744e0240d8bb03a116fe4a0fe71
Sha1:   d4edee03869b0d53596193c745e6f8bdf537c646
Sha256: e6e770dc40baafdca752013a5a39125b26ccd5d1f5b4235df61ff72fc5069dbb
                                        
                                            GET /wp-content/uploads/2022/02/cropped-prawn_favicon-removebg-preview-32x32.png HTTP/1.1 
Host: promoprawn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/go-to-lampegiganten-no/
Cookie: utm_source=no; utm_medium=89427525383; handl_landing_page=https%3A%2F%2Fpromoprawn.com%2Fnorway%3Futm_source%3Dno%26utm_medium%3D89427525383; handl_ip=91.90.42.154; handl_url=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         167.235.15.78
HTTP/2 200 OK
content-type: image/png
                                        
cache-control: public, max-age=43200
expires: Sun, 02 Oct 2022 16:07:10 GMT
etag: "467-620dd166-194065a;;;"
last-modified: Thu, 17 Feb 2022 04:39:02 GMT
content-length: 1127
accept-ranges: bytes
date: Sun, 02 Oct 2022 04:07:10 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   1127
Md5:    c029e0b9abdc5aacb520f5b9faf03105
Sha1:   dca9e8e13b5260dd951da772d79bd0c04f0f87e5
Sha256: 09711854e11cce389d4c9d3931975604849a2376ea31786e69dce5e20bb6115f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5712
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 04:07:10 GMT
Last-Modified: Sun, 02 Oct 2022 02:31:58 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /en_GB/sdk.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.221.16
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 1fa4d7c6fb57f462add81b5ebc187680
etag: "de071ca0d100e86887597374735e9d71"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 02 Oct 2022 04:19:05 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
document-policy: force-load-at-top
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: RgdO9w/oHusp9rETBorXxQ==
x-fb-debug: SOAXiCWAees2jpxI9CnlkEYyiDvTCiNdVQ1441xHnQoMr8PRdyZ2piRw1vcgxUdQWSHGOlHYYzluKOponvxhbw==
content-length: 1689
x-fb-trip-id: 1679558926
date: Sun, 02 Oct 2022 04:07:10 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1961)
Size:   1689
Md5:    46074ef70fe81eeb29f6b113068ad7c5
Sha1:   5f9b64f5f6c0b69ff71a809448a507f708db3b3d
Sha256: a7350f1bbe443d765f98cc5ee190d39cc5da5cff0ba4b6183202b05ab3bc34c1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5712
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 04:07:10 GMT
Last-Modified: Sun, 02 Oct 2022 02:31:58 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /translate_static/css/translateelement.css HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         172.217.21.170
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 02 Oct 2022 03:10:24 GMT
expires: Sun, 02 Oct 2022 04:10:24 GMT
cache-control: public, max-age=3600
age: 3406
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18670)
Size:   3619
Md5:    897ba9a21d9625286674da769dacc2e2
Sha1:   84b4923ab7dee562395160824d53496314499b77
Sha256: 696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
                                        
                                            GET /_/translate_http/_/js/k=translate_http.tr.no.lLH6XiwjNog.O/d=1/exm=el_conf/ed=1/rs=AN8SPfovjPHo2bwAuuffoPV8hwfpGtKH6A/m=el_main HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.217.21.170
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 93874
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Sep 2022 20:03:41 GMT
expires: Fri, 29 Sep 2023 20:03:41 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 Sep 2022 05:12:45 GMT
age: 201809
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1613)
Size:   93874
Md5:    542ffbd176620aadfc951b1b5e916ea2
Sha1:   c595c824743e936408a799841d44e2442b29b85a
Sha256: 5bbd2304a95ab386892e42526de07507c733391fa17e063bbd010a05cf918df8
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Sun, 02 Oct 2022 02:41:09 GMT
expires: Sun, 02 Oct 2022 04:41:09 GMT
cache-control: public, max-age=7200
age: 5161
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   19826
Md5:    cae538dcce82598fbe43c0bf443e62dd
Sha1:   cc68ac6be9c5e0087a0000e5735b83270ace30f5
Sha256: 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
                                        
                                            GET /en_GB/sdk.js?hash=557d2f7992f69ccf4508844146019b25 HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promoprawn.com
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.221.16
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: ebe6785a98b33996c7a342ee260ac397
etag: "9f8fc9440cf0000dd51050cac259cc6d"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 02 Oct 2023 03:45:43 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: z2M23y5DWqgEs6pXsKGBwQ==
x-fb-debug: VCh3zxkHa7t7KYnsNIbRBSh/FvlyERHyeUf2D0UHOASLoOA1oR0HrGIf8T8Lp5SHP50wneKFGL7uERsnfY5Htw==
priority: u=3,i
content-length: 86941
x-fb-trip-id: 1679558926
date: Sun, 02 Oct 2022 04:07:10 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13192)
Size:   86941
Md5:    cf6336df2e435aa804b3aa57b0a181c1
Sha1:   b23f2a40dbfa99abf5bbd0c1266ee4bd3a413dfb
Sha256: 74ba3742b3794e505cb0bc5ca95639182b102b0d87e361987db5321d30759253
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /images/branding/product/1x/translate_24dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 02 Oct 2022 00:14:05 GMT
expires: Mon, 02 Oct 2023 00:14:05 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
age: 13985
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size:   846
Md5:    e9cd262114358f26b7608b56905185dc
Sha1:   6dbde0a96deaab2b529723ce26c62043cf9180ab
Sha256: 5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /images/branding/product/2x/translate_24dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://translate.googleapis.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 22:47:59 GMT
expires: Sun, 01 Oct 2023 22:47:59 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
age: 19151
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size:   1842
Md5:    c69c796362406f9e11c7f4bf5bb628da
Sha1:   e489ce95ab56208090868882113d7416abf46775
Sha256: 4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
                                        
                                            GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 10:05:49 GMT
expires: Sat, 30 Sep 2023 10:05:49 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
age: 151281
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   910
Md5:    efa6bb2bfe459bc6f4bdafa3db0383f6
Sha1:   52d15ce52fe50643e542c17812de43f4ed1b6ee0
Sha256: 6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v2.3/plugins/page.php?adapt_container_width=true&app_id=235643263204884&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df33955abc6263e8%26domain%3Dpromoprawn.com%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fpromoprawn.com%252Ff31c82b3cd5b71e%26relation%3Dparent.parent&container_width=361&height=290&hide_cover=false&hide_cta=false&href=https%3A%2F%2Fwww.facebook.com%2Fappthemes&locale=en_GB&sdk=joey&show_facepile=true&show_posts=false&small_header=false&width=268 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promoprawn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         157.240.221.35
HTTP/2 302 Found
content-type: text/html; charset="utf-8"
                                        
location: https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fplugins%2Fpage.php%3Fadapt_container_width%3Dtrue%26app_id%3D235643263204884%26channel%3Dhttps%253A%252F%252Fstaticxx.facebook.com%252Fx%252Fconnect%252Fxd_arbiter%252F%253Fversion%253D46%2523cb%253Df33955abc6263e8%2526domain%253Dpromoprawn.com%2526is_canvas%253Dfalse%2526origin%253Dhttps%25253A%25252F%25252Fpromoprawn.com%25252Ff31c82b3cd5b71e%2526relation%253Dparent.parent%26container_width%3D361%26height%3D290%26hide_cover%3Dfalse%26hide_cta%3Dfalse%26href%3Dhttps%253A%252F%252Fwww.facebook.com%252Fappthemes%26locale%3Den_GB%26sdk%3Djoey%26show_facepile%3Dtrue%26show_posts%3Dfalse%26small_header%3Dfalse%26width%3D268
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v8.0
strict-transport-security: max-age=15552000; preload
x-fb-debug: oSy1LR5BKETddpBYm6oTVfrW7kOH/OGn+FqOliJUB9er8SHsheGUHU6hdK0OQCNqwaQG93npExg28+eeDqGmdg==
content-length: 0
date: Sun, 02 Oct 2022 04:07:11 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            GET /v1/redirect?url=https%3A%2F%2Flampegiganten.no&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89427525383 HTTP/1.1 
Host: r.srvtrck.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         104.19.169.96
HTTP/1.1 301 Moved Permanently
                                        
Date: Sun, 02 Oct 2022 04:07:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 02 Oct 2022 05:07:11 GMT
Location: https://r.srvtrck.com/v1/redirect?url=https%3A%2F%2Flampegiganten.no&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89427525383
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 753a91d72f21b51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

                                        
                                            POST /g/collect?v=2&tid=G-GZH27V8EPY&gtm=2oe9s0&_p=1060789317&gdid=dZTNiMT&cid=805338310.1664683627&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664683627&sct=1&seg=0&dl=https%3A%2F%2Fpromoprawn.com%2Fgo-to-lampegiganten-no%2F&dt=Go%20to%20lampegiganten-no&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promoprawn.com
Connection: keep-alive
Referer: https://promoprawn.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://promoprawn.com
date: Sun, 02 Oct 2022 04:07:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /v1/redirect?url=https%3A%2F%2Flampegiganten.no&type=url&api_key=75e8ee737d4fc03bfc0d76000b6f72b0&site_id=e7e6bb15baa647a58253d090ef5d387a&yk_tag=89427525383 HTTP/1.1 
Host: r.srvtrck.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         104.19.168.96
HTTP/2 302 Found
                                        
date: Sun, 02 Oct 2022 04:07:11 GMT
content-length: 0
p3p: CP="CAO PSA OUR"
set-cookie: ykuid=2d501a03d2ea483a86e72dfc940f4473; Domain=.srvtrck.com; Expires=Mon, 02-Oct-2023 04:07:11 GMT; Path=/
location: /v2/go?t=gtipo%3Au%2Fcoag8.defk0o0r3u2.5e7%2F6ta%2F5obs6t7s%3DamctGu%3F%26t0%3D0694987641b6b%261s4g1X3a8d3kaQ5x0g4S0Z0c0t0N%3D_mct%26uf%26iuittsoaIa%3Dd6d6a6455c9m3d8172-9718%26bo5n-rd%3D7o6o9f3r1d%3D8I6e3of%26638e5i7r7s681109f16_68a1%266e8r4h6d_1271130066004%3D1I6c6a3s3e3972488d835e%26ae2v9c1%3D06et7ken4d%3D3Ibe3f3%26-ndy6t4u7c-3d909a4a%3D8Iaod%2612%266d9e9Pdrnmi%3Darlefcas-oW1ovp324c0a1y2V6Y6fduct3T9%3Dfi2.07a833636656218sc.coshor2eeeeib%2F1gblac4tan8p5odg9oel5k3o7--no%2Fpsntnh&e=1&ai=164f8848a31e47beb99ae39a190fc81b&sct=1&ct=1664683631910&cu=56ad3c83391f4210bab346769592080c&ykuid=2d501a03d2ea483a86e72dfc940f4473&sc=1&cs=fb145f7e4a93572bbfe879d87bc08667
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 753a91d76d030b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3621
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 04:07:12 GMT
Last-Modified: Sun, 02 Oct 2022 03:06:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ctl/go/sitesearchGo?.ts=1664683631867&.sig=XTatdukfQYxVgySaZcc2tpNo_Wc-&affiliationId=96966625&comId=14299913&country=no&offerId=846e37fe608159727a6e130df86269ae&searchId=1076100361024_1664683631387_41898158&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v03040001420656ad3c83391f4210bab346769592080c&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.srvtrck.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         95.211.116.27
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sun, 02 Oct 2022 04:07:12 GMT
leadId: dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401
clickId: 107698148_1664683632148_2060202
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.020112S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 31060
Set-Cookie: datadome=B0Vf~5Jucnk7GGbQaxsWGVRQmAgGhtoKsvUYgfj6f~D6cbqESE4KMs8UuKqgxHbyLoA7Ycl47iwAv6zNmKsPNA7F~dGFpGdXpwysBjcwZsL~CXx9jPi~3X~xceT79bk; Max-Age=31536000; Expires=Mon, 02 Oct 2023 04:07:12 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure kelkooID=a4c6294-18396e06615-8068c; Max-Age=31536000; Expires=Mon, 02 Oct 2023 04:07:12 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12978)
Size:   31060
Md5:    b6280e14ee17bd97b4595ebee0425582
Sha1:   361657eb12f031c0011c25e1f20d70f9fa3de005
Sha256: 59a4ae424dfc0813e47c4d824d224531a951362904a84de15dd87ee7c07ff6af
                                        
                                            GET /v2/go?t=gtipo%3Au%2Fcoag8.defk0o0r3u2.5e7%2F6ta%2F5obs6t7s%3DamctGu%3F%26t0%3D0694987641b6b%261s4g1X3a8d3kaQ5x0g4S0Z0c0t0N%3D_mct%26uf%26iuittsoaIa%3Dd6d6a6455c9m3d8172-9718%26bo5n-rd%3D7o6o9f3r1d%3D8I6e3of%26638e5i7r7s681109f16_68a1%266e8r4h6d_1271130066004%3D1I6c6a3s3e3972488d835e%26ae2v9c1%3D06et7ken4d%3D3Ibe3f3%26-ndy6t4u7c-3d909a4a%3D8Iaod%2612%266d9e9Pdrnmi%3Darlefcas-oW1ovp324c0a1y2V6Y6fduct3T9%3Dfi2.07a833636656218sc.coshor2eeeeib%2F1gblac4tan8p5odg9oel5k3o7--no%2Fpsntnh&e=1&ai=164f8848a31e47beb99ae39a190fc81b&sct=1&ct=1664683631910&cu=56ad3c83391f4210bab346769592080c&ykuid=2d501a03d2ea483a86e72dfc940f4473&sc=1&cs=fb145f7e4a93572bbfe879d87bc08667 HTTP/1.1 
Host: r.srvtrck.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ykuid=2d501a03d2ea483a86e72dfc940f4473
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.19.168.96
HTTP/2 200 OK
content-type: text/html;charset=UTF-8
                                        
date: Sun, 02 Oct 2022 04:07:11 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 753a91db9e810b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (578)
Size:   800
Md5:    26899fac063e01b25e5b121f3a2832e5
Sha1:   73814863e5dc0a9fe27c3bc54b4d0f14f100c4a4
Sha256: 13525fc4583c49700711cb2c939519e3c41b4958c183c183ad4884d250de46cf
                                        
                                            POST /fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401&clickId=107698148_1664683632148_2060202 HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664683631867&.sig=XTatdukfQYxVgySaZcc2tpNo_Wc-&affiliationId=96966625&comId=14299913&country=no&offerId=846e37fe608159727a6e130df86269ae&searchId=1076100361024_1664683631387_41898158&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v03040001420656ad3c83391f4210bab346769592080c&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
Content-Type: text/plain;charset=utf-8
Content-Length: 520
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=B0Vf~5Jucnk7GGbQaxsWGVRQmAgGhtoKsvUYgfj6f~D6cbqESE4KMs8UuKqgxHbyLoA7Ycl47iwAv6zNmKsPNA7F~dGFpGdXpwysBjcwZsL~CXx9jPi~3X~xceT79bk; kelkooID=a4c6294-18396e06615-8068c; _ga=GA1.2.572007895.1664683628; _gid=GA1.2.469405717.1664683628
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         95.211.116.27
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Date: Sun, 02 Oct 2022 04:07:12 GMT
Request-Time: PT0.002859S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=92
Connection: Keep-Alive

                                        
                                            GET /tags.js HTTP/1.1 
Host: dd.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=B0Vf~5Jucnk7GGbQaxsWGVRQmAgGhtoKsvUYgfj6f~D6cbqESE4KMs8UuKqgxHbyLoA7Ycl47iwAv6zNmKsPNA7F~dGFpGdXpwysBjcwZsL~CXx9jPi~3X~xceT79bk; kelkooID=a4c6294-18396e06615-8068c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         216.137.44.26
HTTP/2 200 OK
content-type: text/javascript
                                        
content-length: 43000
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Fri, 30 Sep 2022 11:57:45 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 289a9745961f61628764c51baab54288.cloudfront.net (CloudFront), 1.1 b16cebff619862e7e4cf8eb234632e3a.cloudfront.net (CloudFront)
date: Sun, 02 Oct 2022 03:58:33 GMT
cache-control: max-age=3600, public
expires: Sun, 02 Oct 2022 04:58:29 GMT
etag: "33929-5e9e3b3bbc8ac-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: LHR50-P2, LHR61-P2
x-amz-cf-id: nuHsx28rtFXNUK0zMHaDRZFVUEMvuETAR14beRY9F2tWg0MRVFz3tg==
age: 523
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65432)
Size:   43000
Md5:    a9f75aaa24c508083c6eda2912cb2929
Sha1:   c47edaa4aa173610bef816ec6078b8385b271bca
Sha256: 092fecd8bdaf2416d3c813569c99ca72665726b2231a01308c07db16489ca93d
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664683631867&.sig=XTatdukfQYxVgySaZcc2tpNo_Wc-&affiliationId=96966625&comId=14299913&country=no&offerId=846e37fe608159727a6e130df86269ae&searchId=1076100361024_1664683631387_41898158&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v03040001420656ad3c83391f4210bab346769592080c&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
Connection: keep-alive
Cookie: datadome=B0Vf~5Jucnk7GGbQaxsWGVRQmAgGhtoKsvUYgfj6f~D6cbqESE4KMs8UuKqgxHbyLoA7Ycl47iwAv6zNmKsPNA7F~dGFpGdXpwysBjcwZsL~CXx9jPi~3X~xceT79bk; kelkooID=a4c6294-18396e06615-8068c; _ga=GA1.2.572007895.1664683628; _gid=GA1.2.469405717.1664683628
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         95.211.116.27
HTTP/1.0 403 Forbidden
                                        
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

                                        
                                            GET /redirect?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401&clickId=107698148_1664683632148_2060202&url=https%3A%2F%2Ftrack.productsup.io%2Fclick.redir%3Fsiteid%3D469050%26version%3D1.0%26pup_e%3D7%26pup_cid%3D79446%26pup_id%3D9627421%26redir%3Dhttps%253A%252F%252Fwww.lampegiganten.no%252Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%253Fkk%253Da4c6294-18396e06615-8068c%2526utm_medium%253Dpv%2526utm_source%253Dkelkoo%2526utm_campaign%253Dcpc_no%2526utm_content%253D9627421%2526utm_term%253D21&initiator=timeout HTTP/1.1 
Host: no-go.kelkoogroup.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/sitesearchGo?.ts=1664683631867&.sig=XTatdukfQYxVgySaZcc2tpNo_Wc-&affiliationId=96966625&comId=14299913&country=no&offerId=846e37fe608159727a6e130df86269ae&searchId=1076100361024_1664683631387_41898158&service=36&tokenId=31b33936-7dd6-457b-8d70-a7a883a9d514&addedParams=true&custom1=v03040001420656ad3c83391f4210bab346769592080c&custom2=e7e6bb15baa647a58253d090ef5d387a-couponing
Connection: keep-alive
Cookie: datadome=B0Vf~5Jucnk7GGbQaxsWGVRQmAgGhtoKsvUYgfj6f~D6cbqESE4KMs8UuKqgxHbyLoA7Ycl47iwAv6zNmKsPNA7F~dGFpGdXpwysBjcwZsL~CXx9jPi~3X~xceT79bk; kelkooID=a4c6294-18396e06615-8068c; _ga=GA1.2.572007895.1664683628; _gid=GA1.2.469405717.1664683628
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

                                         
                                         95.211.116.27
HTTP/1.1 303 See Other
Content-Type: text/plain
                                        
Date: Sun, 02 Oct 2022 04:07:12 GMT
leadId: dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401
clickId: 107698148_1664683632148_2060202
country: no
Location: https://track.productsup.io/click.redir?siteid=469050&version=1.0&pup_e=7&pup_cid=79446&pup_id=9627421&redir=https%3A%2F%2Fwww.lampegiganten.no%2Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%3Fkk%3Da4c6294-18396e06615-8068c%26utm_medium%3Dpv%26utm_source%3Dkelkoo%26utm_campaign%3Dcpc_no%26utm_content%3D9627421%26utm_term%3D21
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.012723S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=cTW_klPD-D.8n6J-Z95ldACGnpqXVhKDtB8Cn.OyDHRgA5m2whdE7z3aY~6zKsxFetfqAwVaDPI88Jl6Lb6cUCc2RAdCLU_Swy6yXrCd2lsGNe5BC56F3tEFFD664TA; Max-Age=31536000; Expires=Mon, 02 Oct 2023 04:07:12 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=94
Connection: Keep-Alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:12 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 08:57:00 GMT
Expires: Fri, 07 Oct 2022 08:56:59 GMT
Etag: "dec4a6e716c54a9a51796c4d61d39cb5d521e6fd"
Cache-Control: max-age=603572,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1577
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 753a91df8d960b59-OSL

                                        
                                            POST /js/ HTTP/1.1 
Host: api-js.datadome.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4165
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         16.170.188.27
HTTP/2 200 OK
content-type: application/json;charset=utf-8
                                        
date: Sun, 02 Oct 2022 04:07:12 GMT
content-length: 235
server: DataDome
access-control-allow-origin: *
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: 0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   235
Md5:    2df056ffd0cdf332647de1a9a0c5b981
Sha1:   4d63f821358425d3925aa40482cc28d008b93a36
Sha256: b0ba5014a17c814cdd02810a548ba9636023e4674cc5c02f00b7651f89397015
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:12 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 04:00:20 GMT
Expires: Sat, 08 Oct 2022 04:00:19 GMT
Etag: "61616e9df0e225bed52824bfc5008467934c2712"
Cache-Control: max-age=517386,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 753a91df9d63b50f-OSL

                                        
                                            GET /click.redir?siteid=469050&version=1.0&pup_e=7&pup_cid=79446&pup_id=9627421&redir=https%3A%2F%2Fwww.lampegiganten.no%2Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%3Fkk%3Da4c6294-18396e06615-8068c%26utm_medium%3Dpv%26utm_source%3Dkelkoo%26utm_campaign%3Dcpc_no%26utm_content%3D9627421%26utm_term%3D21 HTTP/1.1 
Host: track.productsup.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         116.203.222.30
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: openresty/1.13.6.2
Date: Sun, 02 Oct 2022 04:07:12 GMT
Content-Length: 191
Connection: close
Location: https://www.lampegiganten.no/lindby-tirzana-hengelampe-4-lyskilder-morkegra.html?kk=a4c6294-18396e06615-8068c&utm_medium=pv&utm_source=kelkoo&utm_campaign=cpc_no&utm_content=9627421&utm_term=21
X-CW-LOC: PAGE 1.3.4
Pragma: no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: post-check=0, pre-check=0
P3P: CP="NOI DSP COR LAW CUR ADM TAI PSA PSD IVA IVD HIS OUR SAM OTR LEG UNI COM NAV DEM CNT LOC"
Set-Cookie: _auid=2527212600695530452;Domain=.productsup.io;Path=/;Max-Age=2592000;SameSite=None;Secure;


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   191
Md5:    071fd8ecafea25912fcd3ac36da047f8
Sha1:   1df9fbcde3170de426d4ca7fa23870e69ac7f5a7
Sha256: 6a0441175769a66b712c9e317a0c46df05120400370b4f9fc9828d30e9338b08
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FsitesearchGo%3F.ts%3D1664683631867%26.sig%3DXTatdukfQYxVgySaZcc2tpNo_Wc-%26affiliationId%3D96966625%26comId%3D14299913%26country%3Dno%26offerId%3D846e37fe608159727a6e130df86269ae%26searchId%3D1076100361024_1664683631387_41898158%26service%3D36%26tokenId%3D31b33936-7dd6-457b-8d70-a7a883a9d514%26addedParams%3Dtrue%26custom1%3Dv03040001420656ad3c83391f4210bab346769592080c%26custom2%3De7e6bb15baa647a58253d090ef5d387a-couponing&dr=https%3A%2F%2Fr.srvtrck.com%2F&dp=%2F96966625%7C14299913%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Lampegiganten.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=572007895.1664683628&tid=UA-168544891-6&_gid=469405717.1664683628&_r=1&cd1=96966625&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1664683632157_985401&cd3=14299913&cd4=a4c6294-18396e06615-8068c&cd5=&cd6=96966625%7C14299913%7C&z=119793536 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: image/gif
                                        
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Sun, 02 Oct 2022 04:07:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /images/A86BBD22B341/k_47c91c7ae4d548443acc1ef7ed12086b;w_535;h_535;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1 
Host: lw-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         172.64.153.138
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 02 Oct 2022 04:07:13 GMT
content-length: 45108
cf-ray: 753a91e75936b51d-OSL
accept-ranges: bytes
age: 391882
cache-control: public, max-age=2678400
etag: "cfes5aBSk5yWgqzy1Ku3XOuQ:47c91c7ae4d548443acc1ef7ed12086b"
expires: Wed, 02 Nov 2022 04:07:13 GMT
last-modified: Thu, 25 Nov 2021 07:56:30 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=80 c=97 v=2022.9.6 l=45108
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 535x535, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   45108
Md5:    733b3383385c5a79c556beb267942244
Sha1:   ebb4da754c500e0a5d69f10498e04a808ff83c57
Sha256: d95e0518b66324ab90f07172eb405e88e04081f168e94c6668c7eefde8dfe060
                                        
                                            GET /kotlWrNZC HTTP/1.1 
Host: c.searchhub.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         108.156.28.67
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
content-length: 21368
last-modified: Fri, 30 Sep 2022 09:12:38 GMT
content-encoding: gzip
x-amz-version-id: KTUjQLVOZR2JjYHStCzs.d9oj_qXOWPd
accept-ranges: bytes
server: AmazonS3
date: Sun, 02 Oct 2022 03:18:19 GMT
cache-control: max-age=3600
etag: "be0d705a1f9e7255f1f965eaec74e358"
x-cache: Hit from cloudfront
via: 1.1 a6a1a17bbe377bf7c4423397c71959da.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: FhKIvWtxe3rzcbMZoGFeFpZS91RHyze27B03K1GYX__7SGDHVGMRvw==
age: 2962
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   21368
Md5:    be0d705a1f9e7255f1f965eaec74e358
Sha1:   9adac017680a39d64ac573abd216e2aacd1ed2bd
Sha256: 7dc4075163e420b7f56e012b6f87b7cd364c4df58cf447f86caf093167a4d7df
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "389769326D8F3F8416F35D1516A3FEA50C63637D947F93953014963B1970A914"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3994
Expires: Sun, 02 Oct 2022 05:13:47 GMT
Date: Sun, 02 Oct 2022 04:07:13 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   15208
Md5:    14dbfbd40a9e05d8478809924d33b684
Sha1:   c8e018ab9913551b6188d0b67cd1440d33a24a8e
Sha256: 127fa1efe2be4c1773b88f5b13b0292fce543e2722f675f16238a4b84b6b9c33
                                        
                                            GET /delivery/cmp.php?id=18922&h=https%3A%2F%2Fwww.lampegiganten.no%2Flindby-tirzana-hengelampe-4-lyskilder-morkegra.html%3Fkk%3Da4c6294-18396e06615-8068c%26utm_medium%3Dpv%26utm_source%3Dkelkoo%26utm_campaign%3Dcpc_no%26utm_content%3D9627421%26utm_term%3D21&&l=en&o=1664683629967 HTTP/1.1 
Host: consentmanager.mgr.consensu.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lampegiganten.no
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         87.230.98.74
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Sun, 02 Oct 2022 04:07:13 GMT
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: https://www.lampegiganten.no
Access-Control-Allow-Credentials: true
X-XSS-Protection: 0
Set-Cookie: __cmpcc=1; Expires=Wed, 01-Nov-2023 04:07:13 GMT; Path=/; SameSite=None; Secure
Last-Modified: Sun, 02 Oct 2022 04:07:13 GMT
Transfer-Encoding: chunked
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (417), with CRLF line terminators
Size:   648
Md5:    161710dff7917cc61860c898a404bd9e
Sha1:   4515590a5304a4b511f07887832aba8ef02b44be
Sha256: 2df5db1b4a6beed7d27f0a55dca165b94582ea2f6a12f9734bcad62aeb6f9920
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 04:07:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /delivery/cmp_en.min.js HTTP/1.1 
Host: cdn.consentmanager.mgr.consensu.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lampegiganten.no
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.76.9.23
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 02 Oct 2022 04:07:13 GMT
vary: Accept-Encoding, Origin
last-modified: Thu, 29 Sep 2022 20:38:00 GMT
etag: W/"6501c-5e9d6da66da00"
cache-control: max-age=1800, public
strict-transport-security: max-age=63072000; includeSubDomains
access-control-allow-origin: https://www.lampegiganten.no
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-max-age: 1000
x-content-type-options: nosniff
x-accel-expires: @1664684480
server: CDN77-Turbo
x-77-nzt: AblMCRRXaBv/uQMAAA
x-77-nzt-ray: lC5A0Sbuyec
x-cache: HIT
x-age: 953
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   99622
Md5:    15c6e2383865765238d66fc3bf19bb40
Sha1:   ca8e85221983e65ec592f93fd8d2cac471ab2599
Sha256: 6eba1b6d9d9d45adf84e36735f979575a020991665d8bd6c55ab396f52420dd1
                                        
                                            GET /gtm.js?id=GTM-K6DHVZ HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 04:07:14 GMT
expires: Sun, 02 Oct 2022 04:07:14 GMT
cache-control: private, max-age=900
last-modified: Sun, 02 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 95735
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (56857)
Size:   95735
Md5:    77bdef1c2db6d08ba78b991b91382725
Sha1:   c0a0e306f2b5feeb1a6a805479a2e7515b2cf277
Sha256: 994d3739b8529be986e9de63e1c04523b6d87ac9cc658566bbd4279dc9c49410
                                        
                                            GET /wpjs/wploader.js?ts=2752 HTTP/1.1 
Host: static.scarabresearch.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         108.138.217.38
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 09:40:21 GMT
x-amz-version-id: 7SmGps1Uz2H1CReqc_mg7C_t5Y6SW1PY
Server: AmazonS3
Content-Encoding: gzip
Date: Sat, 01 Oct 2022 06:37:45 GMT
Cache-Control: max-age=86400
ETag: W/"5f215c4826918826b30a3bb7edbfb4ae"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 208aec8d7d6b69028fbed7a7605feea6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P3
X-Amz-Cf-Id: Gv6N_y3pZTBFM9gfQ9qzp-5vGjTBzlXTAGKYRZwJbImVrzqLEtsynA==
Age: 78412


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (26064)
Size:   11058
Md5:    a8bb6d4e39909c8f8e954fed9415e7bc
Sha1:   03f1afa1b1fd6ab09bcd926699bef9ac0125a59f
Sha256: 78103fa79faac4fec3ffb0ced757fb1f5edf05c6bdf00ed3782af6e89ddc3623
                                        
                                            GET /wpjs/wpes6.js?ts=2752 HTTP/1.1 
Host: static.scarabresearch.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         108.138.217.38
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 01 Oct 2022 04:21:21 GMT
Last-Modified: Wed, 07 Sep 2022 09:40:24 GMT
ETag: W/"04898b506b5c3abca388f05e149d6688"
Cache-Control: max-age=86400
x-amz-version-id: _Uvn2vz007TNpY1dCE0kdJtzIBYvUSf0
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 208aec8d7d6b69028fbed7a7605feea6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P3
X-Amz-Cf-Id: Y7CJXUUbPtSxkmRnkxmT4r28G2uS6M4hOJBQYOElqBTBIOUOF8owVA==
Age: 85554


--- Additional Info ---
Magic:  data
Size:   33660
Md5:    59f6f2f68894f87807342bdaf6c78444
Sha1:   b5670dfb291d2940aa22930900c0687428152672
Sha256: e5c3a7205640882f67a5ccadae6cd2ebd6da862c39a68209c2fecfecc7972a79
                                        
                                            GET /images/D473DEEDC774/k_7f950c5e0f0a57474d05f5db11d37f3e;w_535;h_535;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1 
Host: lw-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.153.138
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 02 Oct 2022 04:07:14 GMT
content-length: 33552
cf-ray: 753a91ebfc26b51d-OSL
accept-ranges: bytes
age: 52228
cache-control: public, max-age=2678400
etag: "cf__4eYWueTZT4VL7xbC6WxA:7f950c5e0f0a57474d05f5db11d37f3e"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:31 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=43 c=92 v=2022.9.7 l=33552
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 535x535, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   33552
Md5:    b3e4d291935f4db803b8a67c15be081b
Sha1:   34a3bed947e923df00b4db7c126ffcadfe8c857b
Sha256: 21590ac977b3e3ae76dd9fc981c53fab4b8f2f2d718642d8f175a3128be2565f
                                        
                                            GET /images/D93E6BEC6EA0/k_47c91c7ae4d548443acc1ef7ed12086b;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1 
Host: lw-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.153.138
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 02 Oct 2022 04:07:14 GMT
content-length: 1600
cf-ray: 753a91ebfc29b51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cfhIcyBKbvLmUiCOM6GtpxKg:47c91c7ae4d548443acc1ef7ed12086b"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:30 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=37 c=19 v=2022.9.7 l=1600
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   3776
Md5:    6b454b0151634c9485a8f29e46bf4995
Sha1:   832d0593d87135c85d9e2a61ab13dd20852414b2
Sha256: 9f387717a3246931d487cd534e21bdd8ead0572ac2a20f52f8e404381e793457
                                        
                                            GET /images/F568A4148CA9/k_7f950c5e0f0a57474d05f5db11d37f3e;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1 
Host: lw-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.153.138
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 02 Oct 2022 04:07:14 GMT
content-length: 1564
cf-ray: 753a91ebfc2ab51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cfwgjShQwRR4xAOuYy6KtcSQ:7f950c5e0f0a57474d05f5db11d37f3e"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:31 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=19 c=17 v=2022.9.7 l=1564
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   1564
Md5:    781190d281d11fd417a45024e6b054c1
Sha1:   7b61782b9b99d38cbcc56a2c597258c44d4ef52a
Sha256: 1fd063325e206b296ab207c817a7ca6499a33904e751ce4a8805033c9004d974
                                        
                                            GET /images/E43C95A00C46/k_ba97e3cbbc2fd8beb31dde50333dbab6;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1 
Host: lw-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.153.138
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 02 Oct 2022 04:07:14 GMT
content-length: 538
cf-ray: 753a91ebfc2cb51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cfrYAWPicyWy7Mirt_pG2LLA:ba97e3cbbc2fd8beb31dde50333dbab6"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:31 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=19 c=7 v=2022.9.7 l=538
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   10543
Md5:    873adbe8967379a199214e1dc3bd96e7
Sha1:   eb19fc4048efe22cffd2dbaea5d84dff41017815
Sha256: 3f16b61e52676cee6ff393d17b53f63c6b4224cc109ea0d886ff6685f17a99cf
                                        
                                            GET /images/A7728A3B9472/k_6c4d03e0b285af5efdc287cc1f32eafd;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1 
Host: lw-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.153.138
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 02 Oct 2022 04:07:14 GMT
content-length: 740
cf-ray: 753a91ebfc2eb51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cfSADzVI9EnJU6AB7AQ0Fbvg:6c4d03e0b285af5efdc287cc1f32eafd"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:32 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=34 c=6 v=2022.9.7 l=740
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   740
Md5:    b87de23f0906e537355012c0c64d8608
Sha1:   fefa3db5e972de37178b63c37a27e443b2a28b2e
Sha256: f6fb9bdc7aba36392a07b99ffa8bcb9990149b482f6c6af82f52388ce4055253
                                        
                                            GET /images/40A559526492/k_7ad963d6ff2edda040f6caa1522f57d1;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1 
Host: lw-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.153.138
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 02 Oct 2022 04:07:14 GMT
content-length: 708
cf-ray: 753a91ec0c30b51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cf8uRnPm_DieWXbqAiANEWNA:7ad963d6ff2edda040f6caa1522f57d1"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:34 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/h q=0 n=25 c=15 v=2022.9.7 l=708
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5684
Md5:    f92e3982e53eed458407b55ea1bbc877
Sha1:   14ced680650e5cd8e23e105b499b6b62443b925e
Sha256: c4b1fa8496854bd75ff6a31bd472c276185bed94bc3196d2b6595bd4f13e3346
                                        
                                            GET /images/43135B5E0E34/k_d5968a1d8739ce0cdabae86026defd4e;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1 
Host: lw-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.64.153.138
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sun, 02 Oct 2022 04:07:14 GMT
content-length: 890
cf-ray: 753a91ec0c31b51d-OSL
accept-ranges: bytes
age: 52227
cache-control: public, max-age=2678400
etag: "cfzuHwjnSYKqhen8n9oxgiRQ:d5968a1d8739ce0cdabae86026defd4e"
expires: Wed, 02 Nov 2022 04:07:14 GMT
last-modified: Thu, 25 Nov 2021 07:56:34 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:71,h2pri
cf-resized: internal=ok/r q=0 n=130 c=10 v=2022.9.7 l=890
content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'
x-content-type-options: nosniff
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   890
Md5:    7efa41e6085b60c4448bd88639498dcb
Sha1:   c25857cbbec58014fe5f7375a6e817dd25dfdbf3
Sha256: f9914091f16442414b7a67ca7a96635a0d7fd3fdbe6ede77e48de5b038c198fd
                                        
                                            GET /images/32EC231E4965/k_08def23700ca4787fa99bb38543bb21e;w_100;h_100;q_70/lindby-tirzana-hengelampe-4-lyskilder-morkegra.webp HTTP/1.1 
Host: lw-cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lampegiganten.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers