rrykztxx.cn.wy5532.com/
200 OK 483 B IP
ASN #43350 NForce Entertainment B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (483), with no line terminators
Hash 60ba26860b9b92ebb7c44d075841ecd1
e782de36aed640168bbf915e9c80b0fab4046b07
a3a79230d51995ea413fb0dee4eeeb0e645fad09bc0052d20e2f45ccd1e70e80
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: rrykztxx.cn.wy5532.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 483
content-type: text/html; charset=utf-8
date: Tue, 06 Dec 2022 15:49:37 GMT
server: nginx
set-cookie: sid=96eb0cb2-757d-11ed-ad2c-b6639f4c09ad; path=/; domain=.wy5532.com; expires=Sun, 24 Dec 2090 19:03:45 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9594
Expires: Tue, 06 Dec 2022 18:29:32 GMT
Date: Tue, 06 Dec 2022 15:49:38 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5258
Cache-Control: max-age=158958
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:38 GMT
Etag: "638f19f6-1d7"
Expires: Thu, 08 Dec 2022 11:58:56 GMT
Last-Modified: Tue, 06 Dec 2022 10:31:18 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 15:20:25 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1753
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11671
Expires: Tue, 06 Dec 2022 19:04:09 GMT
Date: Tue, 06 Dec 2022 15:49:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: cxKu8QZHHWPA50faAJbFU8izUSvamveaOULIAjihSib5OnmCep+TfCFezeN5eaQsV1DSvEdBs6g=
x-amz-request-id: JS7SAZAPE16TJME2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 15:49:00 GMT
age: 38
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 15:49:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
rrykztxx.cn.wy5532.com/favicon.ico
404 Not Found 9 B URL HTTP/1.1 rrykztxx.cn.wy5532.com/favicon.ico
IP
ASN #43350 NForce Entertainment B.V.
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: rrykztxx.cn.wy5532.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rrykztxx.cn.wy5532.com/
Cookie: sid=96eb0cb2-757d-11ed-ad2c-b6639f4c09ad
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Tue, 06 Dec 2022 15:49:37 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 06 Dec 2022 15:08:58 GMT
cache-control: public,max-age=3600
age: 2441
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0f7dcaa590e32cfd1c075255188d5f06
d4bb4954fefdb3b59560b54adf500e806e252e39
195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5233
Cache-Control: max-age=153864
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:39 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 10:34:03 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
rrykztxx.cn.wy5532.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDM0ODk3OCwiaWF0IjoxNjcwMzQxNzc4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc24zdHZxbG5iMmFsYnJobWMwbzYzczciLCJuYmYiOjE2NzAzNDE3NzgsInRzIjoxNjcwMzQxNzc4MTc2ODM5fQ.uDjorj2qQATX-xxBoFr0DPFJWKtxxpHQe17-RaJkF_4&sid=96eb0cb2-757d-11ed-ad2c-b6639f4c09ad
302 Found 11 B URL HTTP/1.1 rrykztxx.cn.wy5532.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDM0ODk3OCwiaWF0IjoxNjcwMzQxNzc4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc24zdHZxbG5iMmFsYnJobWMwbzYzczciLCJuYmYiOjE2NzAzNDE3NzgsInRzIjoxNjcwMzQxNzc4MTc2ODM5fQ.uDjorj2qQATX-xxBoFr0DPFJWKtxxpHQe17-RaJkF_4&sid=96eb0cb2-757d-11ed-ad2c-b6639f4c09ad
IP
ASN #43350 NForce Entertainment B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDM0ODk3OCwiaWF0IjoxNjcwMzQxNzc4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc24zdHZxbG5iMmFsYnJobWMwbzYzczciLCJuYmYiOjE2NzAzNDE3NzgsInRzIjoxNjcwMzQxNzc4MTc2ODM5fQ.uDjorj2qQATX-xxBoFr0DPFJWKtxxpHQe17-RaJkF_4&sid=96eb0cb2-757d-11ed-ad2c-b6639f4c09ad HTTP/1.1
Host: rrykztxx.cn.wy5532.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rrykztxx.cn.wy5532.com/
Cookie: sid=96eb0cb2-757d-11ed-ad2c-b6639f4c09ad
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Tue, 06 Dec 2022 15:49:38 GMT
location: http://clarus-che.com/zcvisitor/97366681-757d-11ed-bf8f-0a4582d73d67/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
server: nginx
set-cookie: sid=96eb0cb2-757d-11ed-ad2c-b6639f4c09ad; path=/; domain=.wy5532.com; expires=Sun, 24 Dec 2090 19:03:46 GMT; max-age=2147483647; HttpOnly
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Kr9lpfRmMTzf5b2gYIfkKQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YutCfnAtpyDdWkXy3Md9EI/TyEs=
clarus-che.com/zcvisitor/97366681-757d-11ed-bf8f-0a4582d73d67/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
200 1.1 kB URL HTTP/1.1 clarus-che.com/zcvisitor/97366681-757d-11ed-bf8f-0a4582d73d67/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2eb6d71ef872bf853bcab44115dac326
266547f6d38249e5a23672f0a49324d032570f31
7f926a8fd99a51ea3b9eb4da447b1e6e87e1818f311a783aea450025f80809da
GET /zcvisitor/97366681-757d-11ed-bf8f-0a4582d73d67/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51 HTTP/1.1
Host: clarus-che.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://rrykztxx.cn.wy5532.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 06 Dec 2022 15:49:39 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: YOjGknSY
clarus-che.com/zcredirect?visitid=97366681-757d-11ed-bf8f-0a4582d73d67&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
200 356 B URL HTTP/1.1 clarus-che.com/zcredirect?visitid=97366681-757d-11ed-bf8f-0a4582d73d67&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9d114559ed5dc381324cb32d47063d90
4b16f733768b87ec64f017f9e576275330c9dbde
dbe17731b5f728e5aed60c87ffcb6473d0c9df855bbe13f29d6f5f0dd1cb61b6
GET /zcredirect?visitid=97366681-757d-11ed-bf8f-0a4582d73d67&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: clarus-che.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://clarus-che.com/zcvisitor/97366681-757d-11ed-bf8f-0a4582d73d67/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 06 Dec 2022 15:49:39 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: ZEYzqczC
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4c50cf3b9cfd560c72960180f06ecda1
7be75bee92b3c3dd70df44ece8fbf8b1462a827d
443f582fe21161435d7ca206373b039fc1b5eb47cb9eab4996a270fa56e12e37
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "443F582FE21161435D7CA206373B039FC1B5EB47CB9EAB4996A270FA56E12E37"
Last-Modified: Tue, 06 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=579
Expires: Tue, 06 Dec 2022 15:59:19 GMT
Date: Tue, 06 Dec 2022 15:49:40 GMT
Connection: keep-alive
clever-redirect.com/s/r6?s=623619497&s2=badious-buzzard&s3=romeo-sic-vqpeyj59e3
200 OK 354 B URL HTTP/2 clever-redirect.com/s/r6?s=623619497&s2=badious-buzzard&s3=romeo-sic-vqpeyj59e3
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (354), with no line terminators
Hash 334cfd69f814c9c1a32058b36369d73f
5a6f1316fd073b8a25f1a4cbe477081781d58494
c8dfeefa7325fc50aa612c71ab135ac7e1a594b51d88b3f5ea16433047ca2148
GET /s/r6?s=623619497&s2=badious-buzzard&s3=romeo-sic-vqpeyj59e3 HTTP/1.1
Host: clever-redirect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clarus-che.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
referrer-policy: no-referrer
x-powered-by: PHP/7.4.27
set-cookie: 958be8703366f2597197d832c2bd0dcb=a18168f592f7002587d637e460b2c2e95ff9145681a896e2a37780827015a2f4a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%22958be8703366f2597197d832c2bd0dcb%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Wed, 07-Dec-2022 15:49:40 GMT; Max-Age=86400; path=/; HttpOnly
content-length: 354
content-type: text/html; charset=UTF-8
date: Tue, 06 Dec 2022 15:49:40 GMT
server: Apache/2.4.52 (codeit) OpenSSL/1.1.1m PHP/7.4.27
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd85c6c3b1be3bca3f6b16f5cfdb67f8
9f3f92b7bbd625d5e8ba3c6d26d505eb6ae410f8
39170e2d0d0b69936007265e5ddb763f1e0d955d5967e7493f72e58b79adc5d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39170E2D0D0B69936007265E5DDB763F1E0D955D5967E7493F72E58B79ADC5D1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17684
Expires: Tue, 06 Dec 2022 20:44:24 GMT
Date: Tue, 06 Dec 2022 15:49:40 GMT
Connection: keep-alive
lookandfind.me/s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=gullshoppen.no&s1=623619497&s2=badious-buzzard&s3=romeo-sic-vqpeyj59e3&s5=cf
200 OK 616 B URL HTTP/1.1 lookandfind.me/s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=gullshoppen.no&s1=623619497&s2=badious-buzzard&s3=romeo-sic-vqpeyj59e3&s5=cf
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document, ASCII text, with very long lines (616), with no line terminators
Hash 85d2dacd0a0cb93140333610253b0d2b
42bd20c504f62fcd6ad88183b359192362e520f3
6be4ae40adcacfd4428f77ddea11d7ca8a2f4e73043738324497be31048735ab
GET /s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=gullshoppen.no&s1=623619497&s2=badious-buzzard&s3=romeo-sic-vqpeyj59e3&s5=cf HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:40 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.10
Set-Cookie: 41b779f38fc398219798919f06db1e5a=17e5fb14a01579f5ab2b7d0ab196a5076b4b90d75cc6ef9a7ad963e840081543a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2241b779f38fc398219798919f06db1e5a%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Wed, 07-Dec-2022 15:49:40 GMT; Max-Age=86400; path=/; HttpOnly
Referrer-Policy: strict-origin-when-cross-origin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%2Fdeeplink%3Fe%3DcytYNkdVcy8wUW5pQVE3QUZMVVVQNTFwRDJLWktUdnFkRThDcUd6OWMwVUlwVzBvenZsVXR3UXNLNGZtNFdldHZLRDMzaTIrN1hDTWUxREpYajc4K3B0VkpaRzBnWm9iWFNYa3RCdnhlY21xUHdtQ1NBQk93cVF0RGNJQjFHT1JIYzYyaWM5WnJXaG42SnkzenJPNWZoSzFqSWo2NzVWTERWVWRTSjdlM3o3VEVUST0%3D%26i%3DVyInPCQ91BzIXcKz%26placementId%3Df6c4de17f880a7d2b79168f2602d0e5e&h=5f30843b4bde32202231d0d21f7ae1fd
200 OK 544 B URL HTTP/1.1 lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%2Fdeeplink%3Fe%3DcytYNkdVcy8wUW5pQVE3QUZMVVVQNTFwRDJLWktUdnFkRThDcUd6OWMwVUlwVzBvenZsVXR3UXNLNGZtNFdldHZLRDMzaTIrN1hDTWUxREpYajc4K3B0VkpaRzBnWm9iWFNYa3RCdnhlY21xUHdtQ1NBQk93cVF0RGNJQjFHT1JIYzYyaWM5WnJXaG42SnkzenJPNWZoSzFqSWo2NzVWTERWVWRTSjdlM3o3VEVUST0%3D%26i%3DVyInPCQ91BzIXcKz%26placementId%3Df6c4de17f880a7d2b79168f2602d0e5e&h=5f30843b4bde32202231d0d21f7ae1fd
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (544), with no line terminators
Hash ee03c6f43bd34f45e492c6b527bef0d0
4764086a0481fcd543097f0b278daff31c580d2c
64481a55775463335b6a74b3f407dcdeec451cd864541a1dd3badcd770c9a0fb
GET /s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%2Fdeeplink%3Fe%3DcytYNkdVcy8wUW5pQVE3QUZMVVVQNTFwRDJLWktUdnFkRThDcUd6OWMwVUlwVzBvenZsVXR3UXNLNGZtNFdldHZLRDMzaTIrN1hDTWUxREpYajc4K3B0VkpaRzBnWm9iWFNYa3RCdnhlY21xUHdtQ1NBQk93cVF0RGNJQjFHT1JIYzYyaWM5WnJXaG42SnkzenJPNWZoSzFqSWo2NzVWTERWVWRTSjdlM3o3VEVUST0%3D%26i%3DVyInPCQ91BzIXcKz%26placementId%3Df6c4de17f880a7d2b79168f2602d0e5e&h=5f30843b4bde32202231d0d21f7ae1fd HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 41b779f38fc398219798919f06db1e5a=17e5fb14a01579f5ab2b7d0ab196a5076b4b90d75cc6ef9a7ad963e840081543a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2241b779f38fc398219798919f06db1e5a%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:40 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.10
Referrer-Policy: strict-origin-when-cross-origin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03dd558337c92fdc6fd362d890661212
f35c309124a6516b9fd1221474235da1bc91b6a1
0b43d2ce84b4ad000aac4cd5d8067d95fd6405499e7ccf326492e866d6bfc941
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0B43D2CE84B4AD000AAC4CD5D8067D95FD6405499E7CCF326492E866D6BFC941"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17941
Expires: Tue, 06 Dec 2022 20:48:41 GMT
Date: Tue, 06 Dec 2022 15:49:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3815
Expires: Tue, 06 Dec 2022 16:53:15 GMT
Date: Tue, 06 Dec 2022 15:49:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3815
Expires: Tue, 06 Dec 2022 16:53:15 GMT
Date: Tue, 06 Dec 2022 15:49:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3815
Expires: Tue, 06 Dec 2022 16:53:15 GMT
Date: Tue, 06 Dec 2022 15:49:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3801236dc22938e1cc18947e90ea5326
5979d7dc3ba0eb61947282a4adeac8208b4148ae
3bd4eab29590ec3c316597abd2be65281cd9a6137add037ad57c093f1fca12e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5995
x-amzn-requestid: 25b34277-c486-4642-aea7-21e0598babc3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSzOGGjoAMF4kw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64e1-6f43ab8e0c1a5260327bce11;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YzpOZW9e-54LuSSOigtmFRb0sUGpIRpqZ-UtINp-B_Uzk6lFPnb6dw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:25:46 GMT
age: 62634
etag: "5979d7dc3ba0eb61947282a4adeac8208b4148ae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b15136d60fd0a5e0f657a4f5c75d540f
36082b7329d473829178f280cb71a83b1531e486
79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: YVR50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tGtiCE9C3j0BUruNaFN2j1mKxCSouLmocmTXpmLMBJaLNyVwkXu1gQ==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:09:28 GMT
age: 63612
etag: "36082b7329d473829178f280cb71a83b1531e486"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 99d1ff8fa2e095dcf2bda3d1e1af1221
f914f04a0e1fb45a221d31d2105bfc73015b03e6
90325d4299a44dbd213857ada6f6880db8c33ad61685cfcb60c4a2455a84cf87
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10183
x-amzn-requestid: 0cdea572-aab4-4d52-948b-976170a787a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_uLHQZoAMF4hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1327-7948052f39c4f6071b4a0e0d;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WDqUFMBT59kulx4WLxNh5XTsHzr4_u524juvZJnGMYBH-mUaJclnTg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:49:44 GMT
age: 64796
etag: "f914f04a0e1fb45a221d31d2105bfc73015b03e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00b01871-cd98-4bab-b47d-4a29bb438277.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00b01871-cd98-4bab-b47d-4a29bb438277.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2e11524d75503e35c404d6c9a12ac540
5626b75f5c2523f1a0fc301839a06a4e2407f106
d5eb74d026014c0a68893bde1107a9a111b1f0af835e28bb740308017ef80b7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00b01871-cd98-4bab-b47d-4a29bb438277.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9354
x-amzn-requestid: fb2dad44-2f8c-4f02-bbc5-405e9586e5af
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmctYGLdoAMFyDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e55-28b5680933de0ff4208240be;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0mv3_bOi4kymDF7KB35kOjvgE9egGYnCMAXLGIse_PJE8bBMGLxdqw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 04:07:10 GMT
age: 42150
etag: "5626b75f5c2523f1a0fc301839a06a4e2407f106"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffaf0de04-19bf-4944-9ac5-5178afafb192.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffaf0de04-19bf-4944-9ac5-5178afafb192.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7f2c354a00ab51d4a41221b6bf191c10
01ceb7233fe05ad8dff3a0a43eef879ea2b83ec4
7d3c8417e1db0db41ceb8b4bf3f506864392dd1ad29319a06a8a6055f6f2ed12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffaf0de04-19bf-4944-9ac5-5178afafb192.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11352
x-amzn-requestid: 7c3fc7bb-eb1f-46ec-8e92-b6ffc6261848
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSwuF1ToAMFiIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64d1-7c53152a279f00595b9886bd;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:25 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: EQorA5VTb0s2BEIWBkdkhDho-bLdLVvu8LnAIQsQqsIjgBLneYqCzg==
via: 1.1 b6d577696b14c86cbfeb5b3459f38c50.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:48:22 GMT
age: 64878
etag: "01ceb7233fe05ad8dff3a0a43eef879ea2b83ec4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8b8df80-ffce-4960-a0e3-83eaf7ee52f3.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8b8df80-ffce-4960-a0e3-83eaf7ee52f3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ebd3528452aecd80e39bbf82d3f71f2c
eaa956309d27052d466f7c4bd75b3bdf8443f251
680066dadbddc2cd7179ad5bdfbf9b2014ea601561e585d18dfcda73512ae84a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8b8df80-ffce-4960-a0e3-83eaf7ee52f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6352
x-amzn-requestid: cd970b83-2a99-4e38-afed-580d733040a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSuWF1bIAMFcpg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64c2-1ba552306e857bb37424d679;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: m_QprITRv6aKoKB1VsoqgcIM18ZcHIrJk2gs7710QElOJBtrcskrJw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:41:55 GMT
etag: "eaa956309d27052d466f7c4bd75b3bdf8443f251"
content-type: image/jpeg
age: 65265
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7d4d1cdd98655b3c2f56cf079e38b239
4d1275dc340f1833b5a765da463d043aa4c5ed18
ab347482b9dc002661c158c5cca630e4449d79bb869bd6fa1f6092a024c00e31
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=131237
Date: Tue, 06 Dec 2022 15:49:40 GMT
Etag: "638eb625-1d7"
Expires: Thu, 08 Dec 2022 04:16:57 GMT
Last-Modified: Tue, 06 Dec 2022 03:25:25 GMT
Server: ECS (dcb/7F5E)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1mzNh9HohGBCQmKlUdavmwTxU5iQQvuxYi29-vGAEMb8YNGWjlXedA==
Age: 3092
api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Fgullshoppen.no%2F&custom1=b9207e7c874c425915cb64a1080d99ce745fac7531d5dd937e07c95775ecb530&custom2=SRdytlITOR16&custom3=false
200 OK 32 kB URL HTTP/2 api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Fgullshoppen.no%2F&custom1=b9207e7c874c425915cb64a1080d99ce745fac7531d5dd937e07c95775ecb530&custom2=SRdytlITOR16&custom3=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13002)
Hash 8ea2ebbdfead41fe790109b4cf493f7f
35ad75570f6a3fc27d14c55e4ec23b237870cac5
13d8c9e997384dfe75e54d657718a629c415f216d20bddcf0a17b4207ad9ffc0
GET /publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Fgullshoppen.no%2F&custom1=b9207e7c874c425915cb64a1080d99ce745fac7531d5dd937e07c95775ecb530&custom2=SRdytlITOR16&custom3=false HTTP/1.1
Host: api.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 31646
x-gravitee-transaction-id: 2cc5bd2c-e889-4ad3-85bd-2ce8890ad388
x-gravitee-request-id: 2cc5bd2c-e889-4ad3-85bd-2ce8890ad388
leadid: dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1670341781708_2611108
clickid: 107698111_1670341781015_162094
country: no
accept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
set-cookie: datadome=6QZuaQT-FWASQEVaWao0mWSwhXgMiZ-~YSdDUrztF687K6c46KpTG4CjL7MVqKybrSA4ZNcHDy3gRFEl6hHZg2bMdb4T~3xqt-9JgJlVbT557QauwthUR0QuzXChrMNz; Max-Age=31536000; Expires=Wed, 06 Dec 2023 15:49:41 GMT; SameSite=Lax; Path=/; Domain=.kelkoo.net; Secure
kelkooID=a4c626f-184e820e617-c614; Max-Age=31536000; Expires=Wed, 06 Dec 2023 15:49:41 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
x-datadome: protected
request-time: PT0.697501S
x-robots-tag: noindex,nofollow
referrer-policy: origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
date: Tue, 06 Dec 2022 15:49:41 GMT
x-cache: Miss from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pj2Km5_D6LE-fhQDflEu59RUolUQecXuhsHfRS15a6voBS4wsyphqA==
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 7e5ad4121411ba414363ddb3e423cf8c
fe08cede309cac27b94c7c99975b6cb10eea3036
6d457360466f2b57f859d0aa9c1b919329087d57f455fa6a7e81a93c0260c571
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5841
Cache-Control: max-age=98312
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:41 GMT
Etag: "638e2acc-1d7"
Expires: Wed, 07 Dec 2022 19:08:13 GMT
Last-Modified: Mon, 05 Dec 2022 17:30:52 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 7e5ad4121411ba414363ddb3e423cf8c
fe08cede309cac27b94c7c99975b6cb10eea3036
6d457360466f2b57f859d0aa9c1b919329087d57f455fa6a7e81a93c0260c571
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5411
Cache-Control: max-age=97882
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:41 GMT
Etag: "638e2acc-1d7"
Expires: Wed, 07 Dec 2022 19:01:03 GMT
Last-Modified: Mon, 05 Dec 2022 17:30:52 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1670341781708_2611108&clickId=107698111_1670341781015_162094&url=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef2462604210ead21577c9213d0401a24678538819c549b23c53172039bf3fa9fd4ed3c876ce1cd18a21c6fc715b47a45f86512c57ef95f43245db006fd8af763496c1b7c5f68d2dcbe792639e3ff7bec1c3c3f04aa5307181a7f84db9e24a6c6cebcfe3ace93452a155c4b3ee02b155d27811156cd89834a542c2ce6b4a7c1c118b484c949de38d87b1a1b27ee6c2553b5ff1050dc1d06954458a74aa017111064b0eaa6403dd2612a4b62cb79335e1f232aad01473e19387c29479571549621fd3a6db917c28d6ed78f43207853a6cff33a9851ba9bd398689adef7e6dfc988e7755fcc68e21c8074cfaf64d6e01119f41e0e2240cb1f677bb89a923254b404ffcff54819256021a1f529454e&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1670341781708_2611108&clickId=107698111_1670341781015_162094&url=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef2462604210ead21577c9213d0401a24678538819c549b23c53172039bf3fa9fd4ed3c876ce1cd18a21c6fc715b47a45f86512c57ef95f43245db006fd8af763496c1b7c5f68d2dcbe792639e3ff7bec1c3c3f04aa5307181a7f84db9e24a6c6cebcfe3ace93452a155c4b3ee02b155d27811156cd89834a542c2ce6b4a7c1c118b484c949de38d87b1a1b27ee6c2553b5ff1050dc1d06954458a74aa017111064b0eaa6403dd2612a4b62cb79335e1f232aad01473e19387c29479571549621fd3a6db917c28d6ed78f43207853a6cff33a9851ba9bd398689adef7e6dfc988e7755fcc68e21c8074cfaf64d6e01119f41e0e2240cb1f677bb89a923254b404ffcff54819256021a1f529454e&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1670341781708_2611108&clickId=107698111_1670341781015_162094&url=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/
Connection: keep-alive
Cookie: kelkooID=a4c626f-184e820e617-c614; _ga=GA1.2.1531782939.1670341781; _gid=GA1.2.1105670528.1670341781
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/1.1 303 See Other
Date: Tue, 06 Dec 2022 15:49:41 GMT
leadId: dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1670341781708_2611108
clickId: 107698111_1670341781015_162094
country: no
Location: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.012842S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=1~d1tYi4~l2o5Lo0C~2pBh1r_vUk7cLUnqaKXY~g88SYcLyya9AEFa~xEpsQ~JkvgbmJ8j4An4Ww2qeZKBm7DSYHBWEjn_AsdUHWFLcg3bM0fF4j0TkDsmWsXSvz0zUS; Max-Age=31536000; Expires=Wed, 06 Dec 2023 15:49:41 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=100
Connection: Keep-Alive
Content-Type: text/plain
no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1670341781708_2611108&clickId=107698111_1670341781015_162094
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1670341781708_2611108&clickId=107698111_1670341781015_162094
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1670341781708_2611108&clickId=107698111_1670341781015_162094 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/
Content-Type: text/plain;charset=utf-8
Content-Length: 536
Origin: https://api.kelkoogroup.net
Connection: keep-alive
Cookie: kelkooID=a4c626f-184e820e617-c614; _ga=GA1.2.1531782939.1670341781; _gid=GA1.2.1105670528.1670341781
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:41 GMT
Request-Time: PT0.002524S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=100
Connection: Keep-Alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fapi.kelkoogroup.net%2Fpublisher%2Fshopping%2Fv2%2Flink-monetizer%2Flink%3Fcountry%3Dno%26id%3De4ef5dec-03eb-11eb-bf21-ba5ec25d7100%26merchantUrl%3Dhttps%253A%252F%252Fgullshoppen.no%252F%26custom1%3Db9207e7c874c425915cb64a1080d99ce745fac7531d5dd937e07c95775ecb530%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F%7C9443823%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20gullshoppen.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1531782939.1670341781&tid=UA-168544891-6&_gid=1105670528.1670341781&_r=1&cd1=&cd2=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1670341781708_2611108&cd3=9443823&cd4=a4c626f-184e820e617-c614&cd5=&cd6=%7C9443823%7C&z=1425171906
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fapi.kelkoogroup.net%2Fpublisher%2Fshopping%2Fv2%2Flink-monetizer%2Flink%3Fcountry%3Dno%26id%3De4ef5dec-03eb-11eb-bf21-ba5ec25d7100%26merchantUrl%3Dhttps%253A%252F%252Fgullshoppen.no%252F%26custom1%3Db9207e7c874c425915cb64a1080d99ce745fac7531d5dd937e07c95775ecb530%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F%7C9443823%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20gullshoppen.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1531782939.1670341781&tid=UA-168544891-6&_gid=1105670528.1670341781&_r=1&cd1=&cd2=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1670341781708_2611108&cd3=9443823&cd4=a4c626f-184e820e617-c614&cd5=&cd6=%7C9443823%7C&z=1425171906
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fapi.kelkoogroup.net%2Fpublisher%2Fshopping%2Fv2%2Flink-monetizer%2Flink%3Fcountry%3Dno%26id%3De4ef5dec-03eb-11eb-bf21-ba5ec25d7100%26merchantUrl%3Dhttps%253A%252F%252Fgullshoppen.no%252F%26custom1%3Db9207e7c874c425915cb64a1080d99ce745fac7531d5dd937e07c95775ecb530%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F%7C9443823%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20gullshoppen.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1531782939.1670341781&tid=UA-168544891-6&_gid=1105670528.1670341781&_r=1&cd1=&cd2=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1670341781708_2611108&cd3=9443823&cd4=a4c626f-184e820e617-c614&cd5=&cd6=%7C9443823%7C&z=1425171906 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://api.kelkoogroup.net
Connection: keep-alive
Referer: https://api.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://api.kelkoogroup.net
date: Tue, 06 Dec 2022 15:49:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
200 OK 40 kB URL HTTP/1.1 gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (30539), with CRLF, LF line terminators
Hash 85e52b0f8745b3b9d460bde1a6d4c241
272b652ebd20067e245b88541335eb08dc0714cb
3ccae5577ed051f6e15323f52aff9e2c08a85995fd153ff87de1b6f6a97e34a2
GET /?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://api.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:42 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Link: <https://gullshoppen.no/wp-json/>; rel="https://api.w.org/", <https://gullshoppen.no/wp-json/wp/v2/pages/16405>; rel="alternate"; type="application/json", <https://gullshoppen.no/>; rel=shortlink
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 39905
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
gullshoppen.no/wordpress/wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.9.2
200 OK 12 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.9.2
IP
File type ASCII text, with very long lines (63070), with CRLF line terminators
Hash aab8da333613933cc37485d8a7ba13be
29762b20907f8feda444d83de5e1b08b07351713
02762812ff8f9094fca15e4e5361fcffbb7b9be75acfb46ed6e87f43acdcbbdc
GET /wordpress/wp-content/themes/astra/assets/css/minified/style.min.css?ver=3.9.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:44 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 14:19:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 11733
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 12 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (43771)
Hash e5548800176e913a9084f47a3e1e04f6
eff4604acc5c26ae82a19188de2f98bf5b79d80c
a2569c768eaca09f2483b971fcebb97badd57c9a16b5ae3e16b8cdcd8c688b07
GET /wordpress/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:44 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 13:59:29 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 11681
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/css/bwg-fonts/fonts.css?ver=0.0.1
200 OK 890 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/css/bwg-fonts/fonts.css?ver=0.0.1
IP
Hash 77844a96d72d03c84c5e6970c1fe631b
5f02982c93cf4bf4f70d77ea6dfe04d2efcd9b81
0b5162518ddfdb56914db022a95c1a5eca3271ae2f062cfaa939cc5b7094d63c
GET /wordpress/wp-content/plugins/photo-gallery/css/bwg-fonts/fonts.css?ver=0.0.1 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:44 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:01:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 890
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.5
200 OK 2.0 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.5
IP
File type ASCII text, with very long lines (10435), with no line terminators
Hash 38b1f483d4bf6b1548990385c8673746
1668edb02c5170be308368292a4c12033d0a42f4
98138d83d7cb12e99802ba034b400a67e0d7b6e378d8bcd1b4d9f4fe44ce1111
GET /wordpress/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=8.7.5 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:44 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:02:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1962
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/LayerSlider/static/css/layerslider.css?ver=5.4.0
200 OK 3.0 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/LayerSlider/static/css/layerslider.css?ver=5.4.0
IP
Hash 1811315f559d111bc9bf151b01995707
f6de1413feae3c2c6119e5b527ade4d2c096330d
d72585cac4e03af85b315de18dcf2fe0b3e3bef77ee3b2838e8c0fb0cfa68b97
GET /wordpress/wp-content/plugins/LayerSlider/static/css/layerslider.css?ver=5.4.0 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:44 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 3044
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
200 OK 972 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
IP
Hash 8bf268dfcca7cb20719b7ea14373ef4a
58bd839bbf0e8cc082f0a488b538b4ec71bebd2e
eece4a14939273c7af07bce8bab3a6cfc2c9de44c0eea82cc886abac13cb3870
GET /wordpress/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:44 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:00:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 972
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/themes/astra/assets/css/minified/compatibility/contact-form-7-main.min.css?ver=3.9.2
200 OK 424 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/themes/astra/assets/css/minified/compatibility/contact-form-7-main.min.css?ver=3.9.2
IP
File type ASCII text, with very long lines (882), with no line terminators
Hash ee80e5093d4e46344ea1eadd7306ae9f
63a9ad2501f4a6dc61ba9a31230ccb96e2fc99d9
ad7a17c7be30b44ef409671f71e0e2c6f99d839e1927a4825e6b3f930be4a7c7
GET /wordpress/wp-content/themes/astra/assets/css/minified/compatibility/contact-form-7-main.min.css?ver=3.9.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:44 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 14:19:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 424
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.5
200 OK 24 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.5
IP
File type Unicode text, UTF-8 text, with very long lines (65527), with no line terminators
Hash f4b081e0f93afb4620f474fc36155678
f8e737ec06645c43cb94388c865609f6ce34e340
14c731b71ee9a157791e5d07c14fc669a122d9016f61581feb79f5d12fba95ac
GET /wordpress/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=8.7.5 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:44 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:02:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 24470
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/css/sumoselect.min.css?ver=3.4.6
200 OK 2.1 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/css/sumoselect.min.css?ver=3.4.6
IP
File type ASCII text, with very long lines (7609)
Hash b7c2fd201680d0fdae258d6e7c0b0e16
d6b0c3c069b8c33115b8e33c5ce1eff64ef33139
3457dbccf9f39fb5588b077fbe22d0059bdb686e7298ff7b3c4b8154fe550580
GET /wordpress/wp-content/plugins/photo-gallery/css/sumoselect.min.css?ver=3.4.6 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:01:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2081
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.min.css?ver=3.1.5
200 OK 4.0 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.min.css?ver=3.1.5
IP
File type ASCII text, with very long lines (42839), with no line terminators
Hash e7d460fe41c87ad9e87c0695426d2f92
f16685ccaa6474b82a282f394ef673b27f07fcc9
b92e0e744425caad084ada130f27b25b00c07eecbca8de743686ab33d3cf100f
GET /wordpress/wp-content/plugins/photo-gallery/css/jquery.mCustomScrollbar.min.css?ver=3.1.5 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:01:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 3984
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/shop_shortcode.css?ver=6.0.2
200 OK 6.0 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/shop_shortcode.css?ver=6.0.2
IP
Hash 93e4021b9e33b1c86102efd7ee87b454
9e0a66bcfcd3b691c38a5769d0fc9a60622f5c10
0405f508026e58fde1ee9bdc432ad332159fc32f9214d692b22dbab8de75b8c1
GET /wordpress/wp-content/plugins/wd_shortcode/css/shop_shortcode.css?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5976
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/css/styles.min.css?ver=1.8.1
200 OK 7.3 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/css/styles.min.css?ver=1.8.1
IP
File type ASCII text, with very long lines (45857), with no line terminators
Hash 5b7f76b9021caeed57532323bd9ac803
9102ac2f9cc75ac35c7f05f2f086615d99183502
a9e164289a6bcc2f3ec0917b351510c460a1b0de40d02f51563c110c7dbd9c3f
GET /wordpress/wp-content/plugins/photo-gallery/css/styles.min.css?ver=1.8.1 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:01:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7260
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/blog_shortcode.css?ver=6.0.2
200 OK 7.5 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/blog_shortcode.css?ver=6.0.2
IP
File type ASCII text, with very long lines (447)
Hash 08c6663e9d7c848a1e49ef13f5506d6e
37683c963302a8a5a057e775f55201a96e62b7e5
574af4cf29c07ce224a914233e33ed2c7a99a149be8e71e080696a4ec08f1354
GET /wordpress/wp-content/plugins/wd_shortcode/css/blog_shortcode.css?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7519
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/team.css?ver=6.0.2
200 OK 1.5 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/team.css?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash 65ac01cabf1a9f22b1dd0752733b4703
b2716f56d5c7768fc15c367da3405a73980febfa
7e9c774abdeb94219eae89338010880cbffd4dd948cdfefd8dc49dde5c20d402
GET /wordpress/wp-content/plugins/wd_shortcode/css/team.css?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1453
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/bootstrap.min.css?ver=6.0.2
200 OK 18 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/bootstrap.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (65302)
Hash b71b71edb219149caa8b18a159735419
9c1fd8fdac2e4aa5b05d36a44204892d5447204c
d51408972a75b3317c8dd550ac1d3656841c5be65b31797fb97de0bf5f39c108
GET /wordpress/wp-content/plugins/wd_shortcode/css/bootstrap.min.css?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 18167
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/bootstrap-style.css?ver=6.0.2
200 OK 15 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/bootstrap-style.css?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash 65c00c9df16486aa52a50ab324f0d3c3
0135a43d3838db0ff056fcd935191816472b0de3
2c4650061501a907f0e4fe640a1960020c187320e7397f02737986f8d384680b
GET /wordpress/wp-content/plugins/wd_shortcode/css/bootstrap-style.css?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 14801
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/css/converter.css?ver=6.0.2
200 OK 223 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/css/converter.css?ver=6.0.2
IP
Hash 3224d7c57b418c3e6432c4cad3c4f9c9
6104a855bb0e3f47b7aafdd5a7e0e6da4a4fb80b
5513a41e93f4b2ae1cfb8c9182bf233c1f8a62711310fc02fe49e7ddbffb68a7
GET /wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/css/converter.css?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 223
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
api.yadore.com/v2/r/deeplink?e=cytYNkdVcy8wUW5pQVE3QUZMVVVQNTFwRDJLWktUdnFkRThDcUd6OWMwVUlwVzBvenZsVXR3UXNLNGZtNFdldHZLRDMzaTIrN1hDTWUxREpYajc4K3B0VkpaRzBnWm9iWFNYa3RCdnhlY21xUHdtQ1NBQk93cVF0RGNJQjFHT1JIYzYyaWM5WnJXaG42SnkzenJPNWZoSzFqSWo2NzVWTERWVWRTSjdlM3o3VEVUST0=&i=VyInPCQ91BzIXcKz&placementId=f6c4de17f880a7d2b79168f2602d0e5e
302 Found 4.3 kB URL HTTP/2 api.yadore.com/v2/r/deeplink?e=cytYNkdVcy8wUW5pQVE3QUZMVVVQNTFwRDJLWktUdnFkRThDcUd6OWMwVUlwVzBvenZsVXR3UXNLNGZtNFdldHZLRDMzaTIrN1hDTWUxREpYajc4K3B0VkpaRzBnWm9iWFNYa3RCdnhlY21xUHdtQ1NBQk93cVF0RGNJQjFHT1JIYzYyaWM5WnJXaG42SnkzenJPNWZoSzFqSWo2NzVWTERWVWRTSjdlM3o3VEVUST0=&i=VyInPCQ91BzIXcKz&placementId=f6c4de17f880a7d2b79168f2602d0e5e
IP
ASN #24940 Hetzner Online GmbH
File type gzip compressed data, from Unix\012- data
Hash 1b569b4cde225c37fc3ab1d072e5e66b
8433e64ca5e978b8a874b229a0deb8a59a715afa
46a8d19b1ce5bb0f1c5963706a256f784f994791e8576555944465d0e6a46f9a
GET /v2/r/deeplink?e=cytYNkdVcy8wUW5pQVE3QUZMVVVQNTFwRDJLWktUdnFkRThDcUd6OWMwVUlwVzBvenZsVXR3UXNLNGZtNFdldHZLRDMzaTIrN1hDTWUxREpYajc4K3B0VkpaRzBnWm9iWFNYa3RCdnhlY21xUHdtQ1NBQk93cVF0RGNJQjFHT1JIYzYyaWM5WnJXaG42SnkzenJPNWZoSzFqSWo2NzVWTERWVWRTSjdlM3o3VEVUST0=&i=VyInPCQ91BzIXcKz&placementId=f6c4de17f880a7d2b79168f2602d0e5e HTTP/1.1
Host: api.yadore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
date: Tue, 06 Dec 2022 15:49:40 GMT
location: https://api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Fgullshoppen.no%2F&custom1=b9207e7c874c425915cb64a1080d99ce745fac7531d5dd937e07c95775ecb530&custom2=SRdytlITOR16&custom3=false
server: nginx
x-powered-by: PHP/8.0.25
X-Firefox-Spdy: h2
gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/testimonial.css?ver=6.0.2
200 OK 969 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/testimonial.css?ver=6.0.2
IP
File type ASCII text, with CRLF line terminators
Hash 86442ec13fffa89bb623b1c3a0656eda
494806027c921c49da3fae2000ec2f24864ad36a
568f7cfd105f53a25e50617e28c746363a244e432c6a823546d3cbcf178af0e1
GET /wordpress/wp-content/plugins/wd_shortcode/css/testimonial.css?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 969
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/font-awesome-ie7.min.css?ver=6.0.2
200 OK 2.8 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/css/font-awesome-ie7.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (24177)
Hash 3ad7fec7b2e02a3c7f9372941a0b7b2c
a13ad2051fe6df081f316115afc46e5e0424efcd
4fa5ba4fa1a2979f864c36c5f6161e0575c6dd7c5308b96b85432fe4b75dfcfc
GET /wordpress/wp-content/plugins/wd_shortcode/css/font-awesome-ie7.min.css?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2776
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout.min.css?ver=3.9.2
200 OK 2.1 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout.min.css?ver=3.9.2
IP
File type ASCII text, with very long lines (18333), with no line terminators
Hash 493b5458e78e50e8f3f4c5b7201f4fe5
827d9dd1a7048fc26cbbea5cca8a003917a55f08
21e51535a4b3701189a71e9a8a3760cd5392eefcc7fd835ca98c374809313d43
GET /wordpress/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout.min.css?ver=3.9.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 14:19:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2147
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce.min.css?ver=3.9.2
200 OK 16 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce.min.css?ver=3.9.2
IP
File type Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Hash d3f08474921c6d851d14c2ed696171ba
a11eaa3c3efb9d26ddaab9f3556b116d7f0bcade
df57e23dcaa0a4737c4b68672b7277e3affb1cef2521e5eecc65238db3fcf770
GET /wordpress/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce.min.css?ver=3.9.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 14:19:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 16217
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/uploads/astra-addon/astra-addon-637631095af183-19528134.css?ver=3.9.3
200 OK 12 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/uploads/astra-addon/astra-addon-637631095af183-19528134.css?ver=3.9.3
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash a9bb75c366e3e7b133d091c4ad1acf9b
87cd747424d982521b086e4ce1968ce853f68c28
a6b17c471e28454f1f07bf3df8671b0b4a4e4a275f72dc85571afcea8290c017
GET /wordpress/wp-content/uploads/astra-addon/astra-addon-637631095af183-19528134.css?ver=3.9.3 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:03:05 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 11538
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/wd_slide/css/bootstrap-ie8-buttonfix.css?ver=6.0.2
200 OK 480 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_slide/css/bootstrap-ie8-buttonfix.css?ver=6.0.2
IP
Hash f542c964722b921f89eed3362b83d250
f79699911365c26041d91ccb0c3219a399fa7cfa
fd10c0d79fe34db5599d404e1a398b5f4dcb99b24c94af6ec0dab4d4152ddce8
GET /wordpress/wp-content/plugins/wd_slide/css/bootstrap-ie8-buttonfix.css?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 480
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/wd_slide/css/wd_slide.css?ver=6.0.2
200 OK 1.3 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_slide/css/wd_slide.css?ver=6.0.2
IP
Hash aecd9b0aabd8923680b83fede0266eb7
a55a0c44f8ea819a5433a6c81644cd2f6d7e3535
b41062366af63709f537a3ef14ef44eafcbe53ef5488a2052f3f521cfd048d62
GET /wordpress/wp-content/plugins/wd_slide/css/wd_slide.css?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1302
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/wd_countdown/assets/css/countdown.css?ver=6.0.2
200 OK 412 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_countdown/assets/css/countdown.css?ver=6.0.2
IP
Hash 21145c0514ed6b3eb0c13975659ebd1d
72797e8cf18001c49fd1f2a9f43ed1ad0148979a
0f9f5a2ce1ba2dc1936f2c34632cc3cf1f361ca619f58d3a59a1dfbe93291ad5
GET /wordpress/wp-content/plugins/wd_countdown/assets/css/countdown.css?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 412
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
gullshoppen.no/wordpress/wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-gtag.min.js?ver=7.10.1
200 OK 3.2 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-gtag.min.js?ver=7.10.1
IP
File type ASCII text, with very long lines (1571)
Hash 967b1fb5314d24ef7f24fcb9c90e7013
e971e58ebd738600b27b966ded6dab8733f22339
c8d80ecc14430de7c5fd23d9abab5f71a62eb506344da0e1882845478d6eec50
GET /wordpress/wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-gtag.min.js?ver=7.10.1 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:01:02 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 3244
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/LayerSlider/static/js/greensock.js?ver=1.11.8
200 OK 25 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/LayerSlider/static/js/greensock.js?ver=1.11.8
IP
File type ASCII text, with very long lines (52549)
Hash 1773fcc934d2583de716eff2119eadf2
1039eddf1e4d6e4a48d31f4025671b61ff3691f6
35206b140206600776f6d5015899b1c5ffba22e4fe8ca76f5d92a21cc3224448
GET /wordpress/wp-content/plugins/LayerSlider/static/js/greensock.js?ver=1.11.8 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 24930
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 31 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (65447)
Hash 9640915738503451aa21181699feab5b
c053eaf36ef0da96619706b3abda326305063bd6
f8834e669ad1f4039442c26aaa373ec39c35a233b9786d374fc3f670f16b0adc
GET /wordpress/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Wed, 21 Jul 2021 00:40:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 30908
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
GET /wordpress/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Wed, 09 Dec 2020 02:06:56 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4169
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0
200 OK 19 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0
IP
File type ASCII text, with very long lines (53674)
Hash 0372c61b0643e575f92b50418b96d7ed
d72310bd5ef072b50d21851e526de4885fb6a8b3
852024e01c0266548840f099d4d2511695ac92a6fc7eb9e021495d16845129e9
GET /wordpress/wp-content/plugins/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 18911
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/LayerSlider/static/js/layerslider.transitions.js?ver=5.4.0
200 OK 3.2 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/LayerSlider/static/js/layerslider.transitions.js?ver=5.4.0
IP
File type ASCII text, with very long lines (20890)
Hash b3aa8c67ec2755b174a584326aabe1d0
7b2cee308d45978ccc2f218044c3b99f0b2e96ad
78aa15e45f3ac28adf3287cfdfef9f842bc8b1455fe40ae49300d48b1f166603
GET /wordpress/wp-content/plugins/LayerSlider/static/js/layerslider.transitions.js?ver=5.4.0 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 3190
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=3.4.6
200 OK 7.9 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=3.4.6
IP
File type ASCII text, with very long lines (1518)
Hash af7b8363167c766fc5c415c5831609de
2fe2c8d1f1c7e256c3b9cd97b50098c60bd50d3e
1371f4af47e8ab2d5de2d86f16942e0d89acd924c9065c823c6e22295d384b8d
GET /wordpress/wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=3.4.6 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:01:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7883
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=3.1.5
200 OK 13 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=3.1.5
IP
File type ASCII text, with very long lines (32001)
Hash e24f931251f056652e0b8ba2a0d3e6ee
161dc1e62ac932d0072b3f31e1c7374fc7798864
b550aebced99bdaf156b11639171d479c1e705df85e33cea2e958a3465b44350
GET /wordpress/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=3.1.5 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:01:37 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 12940
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/js/jquery.fullscreen.min.js?ver=0.6.0
200 OK 2.2 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/js/jquery.fullscreen.min.js?ver=0.6.0
IP
File type Unicode text, UTF-8 text, with very long lines (5661)
Hash 3db40b3f7c407d30d76f440e241f5ad5
f9af12bf4d63638552de17e006c6e2b67fb5fa97
6deec47a77d780ae266a29dfcdcb0caec7f130886c6cf9789a956e868f8a0dc4
GET /wordpress/wp-content/plugins/photo-gallery/js/jquery.fullscreen.min.js?ver=0.6.0 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:01:36 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2171
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/js/circle-progress.js?ver=1.8.1
200 OK 4.5 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/js/circle-progress.js?ver=1.8.1
IP
Hash 0943a0de5840e9168a804e914a5a09f6
ec0adbe60f690ff1138aca466c7ad2f50789033c
cac0563d56df8fe2f8d1fe93013d95fd8de6a7e70ef373d26ca6394a77ba1d5a
GET /wordpress/wp-content/plugins/photo-gallery/js/circle-progress.js?ver=1.8.1 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:01:36 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4528
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/js/bootstrap.min.js?ver=6.0.2
200 OK 7.6 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/js/bootstrap.min.js?ver=6.0.2
IP
File type ASCII text, with very long lines (28995)
Hash d5a56e23fd8799b1c3062b9853ec91bf
30b968f01bc9d7d017877d77617b66498d38a68e
f65a9c9f45c87410a512565f084bab8c4f810ae6f8c60376e10f4f906c05db77
GET /wordpress/wp-content/plugins/wd_shortcode/js/bootstrap.min.js?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7619
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/js/modernizr.custom.js?ver=6.0.2
200 OK 4.3 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_shortcode/js/modernizr.custom.js?ver=6.0.2
IP
File type HTML document, ASCII text, with very long lines (8197)
Hash 611c33786c03af3413ae98a19ce1e9fa
919f6faf5755bf4acd98cf1288d3e0d3f68394e8
44794728979d213a4010317572eb2b91fcd7523127a105c7c1c6acd4bcd6c6d4
GET /wordpress/wp-content/plugins/wd_shortcode/js/modernizr.custom.js?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4341
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/wd_countdown/assets/js/jquery.plugin.min.js?ver=6.0.2
200 OK 1.4 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_countdown/assets/js/jquery.plugin.min.js?ver=6.0.2
IP
File type ASCII text, with very long lines (2982), with CRLF line terminators
Hash 6bce4cba4fe5912d945ac9034af34362
40423a2f3a4dfb98ff8fdb876c674c9d9946ee9e
46bc64f2d8dc9d936c6feb43cebf958e425250c3215a7eaf4d10a76af3b47ba8
GET /wordpress/wp-content/plugins/wd_countdown/assets/js/jquery.plugin.min.js?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1355
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/js/scripts.min.js?ver=1.8.1
200 OK 35 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/photo-gallery/js/scripts.min.js?ver=1.8.1
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash b719eda115973f0f9757a052ad87ecf7
38c8bb8e6bdf3bdb9419d08962074ed24b4dd93a
5c3db1932398ccd9f07b590c6b97297adb8cf8049d2ad1380a8bf56cefc2e11c
GET /wordpress/wp-content/plugins/photo-gallery/js/scripts.min.js?ver=1.8.1 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:01:36 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 34590
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c10bc583c46449dc192a809398b4e814
ff0f7ad905d32d7f3d01e4054552d0ad551503a5
defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gullshoppen.no/wordpress/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-woocommerce-enhanced.js?ver=1.16.2
200 OK 7.1 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-woocommerce-enhanced.js?ver=1.16.2
IP
Hash 6b64cd5075e4ad3530ebc81d1623f76d
f4d6ad81d1f30dbf73cbcf5199f3bb9bb8918b57
247a71fb47949653a23be91620f17a856c94e3c1b7cdc0e751e6ecedee56a099
GET /wordpress/wp-content/plugins/duracelltomi-google-tag-manager/js/gtm4wp-woocommerce-enhanced.js?ver=1.16.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:01:12 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7134
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/wd_countdown/assets/js/countdown.js?ver=6.0.2
200 OK 369 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_countdown/assets/js/countdown.js?ver=6.0.2
IP
Hash 5f36e1e6b3365115c43142897f595c57
01ae495d7d76ef62ee1b2a006e25ff11781472e1
7436bd8c0f76469cb65ed40d7d5585f0a17e42ec3eb06cbf336cb877fc2e62b3
GET /wordpress/wp-content/plugins/wd_countdown/assets/js/countdown.js?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 369
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/themes/astra/assets/js/minified/style.min.js?ver=3.9.2
200 OK 2.7 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/themes/astra/assets/js/minified/style.min.js?ver=3.9.2
IP
File type ASCII text, with very long lines (10398), with no line terminators
Hash 97cea445c7c0cec6df1760fc0cf5fefb
69aef0529522fab7eb0a6807897ade7eb0f4e90c
19f00f952b91cd466ae2dceee052773304dcc4a7f103d9b87d0ea62f9c0d0f4c
GET /wordpress/wp-content/themes/astra/assets/js/minified/style.min.js?ver=3.9.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 14:19:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2744
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 5.0 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
File type ASCII text, with very long lines (15660)
Hash e6624e0b978e6ddba476be41aaaa82df
822e920d8233072110ed7c8a7f379e5b13209b18
dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41
GET /wordpress/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 13:59:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 5009
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
200 OK 2.9 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
IP
File type ASCII text, with very long lines (9937), with no line terminators
Hash 8189a6a3f3f0efc64f857fe869d3729b
bc84b1c1e96a26fd6595da0cb024aad989c1f331
e2683386c2d5a8b3280fa9920d22fedb31a33a8bdca8ec494d3fe4df9fc6b337
GET /wordpress/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:00:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2937
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
200 OK 4.0 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
IP
File type HTML document, ASCII text, with very long lines (12310), with no line terminators
Hash 832eeb1fd498e5839b89bfb5f05a2f0d
cf2d8668aecc5033346ac2906bb8bf7e143cfa4a
35b2b27ba0ba63c065e4c67d15b7cb1878b5868d7f475cc7f6f1724d3988793a
GET /wordpress/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:00:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 3957
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/js/money.min.js?ver=0.1.3
200 OK 648 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/js/money.min.js?ver=0.1.3
IP
File type ASCII text, with very long lines (1218)
Hash 5621c6b162f85b992476e112dfb4765d
8f026f71974d3cd82ba51aa391697c60d34d0445
bfcef3b7e571ab7ee1497c49f9a742592e1d52109c874ec5dd56cfcaca371ef6
GET /wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/js/money.min.js?ver=0.1.3 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 648
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/js/accounting.min.js?ver=0.3.2
200 OK 1.3 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/js/accounting.min.js?ver=0.3.2
IP
File type ASCII text, with very long lines (3010)
Hash b512bffea9d556281aeab6d73dd9e146
177d8529a40d68d4d54faf66a6fae7574536c23b
be90299aff2cb9dd2e18b32f421f3a6a8fd216032b5c84fea4c8481e7c042790
GET /wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/js/accounting.min.js?ver=0.3.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1295
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/js/conversion.min.js?ver=1.2.3
200 OK 1.2 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/js/conversion.min.js?ver=1.2.3
IP
File type ASCII text, with very long lines (4720), with no line terminators
Hash eebed636b6b3045c094f709967c8899e
8ed1246d11b7e17402925f9e0746edfa8aeaa5e5
cce9db5b4de3cc0b75b9b5fac7d1728741d0b5274570973bba91dd58a8ac7ca0
GET /wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/js/conversion.min.js?ver=1.2.3 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1230
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c10bc583c46449dc192a809398b4e814
ff0f7ad905d32d7f3d01e4054552d0ad551503a5
defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gullshoppen.no/wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/js/jquery-cookie/jquery.cookie.min.js?ver=1.3.1
200 OK 685 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/js/jquery-cookie/jquery.cookie.min.js?ver=1.3.1
IP
File type ASCII text, with very long lines (1093)
Hash 259ae9a4c9a7cd00f4dedf152a923ca9
c05a2c867c5980d590a6f8ec488839a5f4b3a155
8b3b74eccf76c4ee00060e088a2b125cc0d0d9302a445975db77566305e5005a
GET /wordpress/wp-content/plugins/woocommerce-currency-converter-widget/assets/js/jquery-cookie/jquery.cookie.min.js?ver=1.3.1 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 685
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0
200 OK 3.5 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0
IP
File type ASCII text, with very long lines (9111)
Hash f6004c12128ba678a6ab8fafb9cb1d61
a023d537a3273176524815baca3f2c42cc601a3c
e516f66f227db9eb26f5bec7605f4647680979c10c9bb61ac1654ccbf7e348af
GET /wordpress/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.1.0 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:02:47 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 3496
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0
200 OK 1.1 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0
IP
File type HTML document, ASCII text, with very long lines (3029), with no line terminators
Hash 3fffd1b8f00bf4175aaf1831974a4e4c
7f16ab9253c92a528f1f8cb20bee07128ce67048
3eeb166e786db324c70ef63628846f825951748a76d0de97c719189a0ab555c3
GET /wordpress/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.1.0 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:02:47 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1088
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0
200 OK 1.0 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0
IP
File type ASCII text, with very long lines (2938), with no line terminators
Hash 45db3d2887c26700a51bf469e3bb3aa1
d070b5fb53d2fbb66964bbfd482270b855d0ee96
1abc0cff49f82d9a063c04cd086b991af6ad00467efc4cb8d8d4e3c9a0f95777
GET /wordpress/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.1.0 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:02:47 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1039
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
www.googletagmanager.com/gtag/js?id=UA-732885-12
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-732885-12
IP
File type ASCII text, with very long lines (1921)
Hash a257fd9c5387de947edf0d4202abe3b2
a67140893198b267a0ccd98c5affe3fc927a786c
de8b4570d0097d03d8e00aaba0b95370f1397df88e48557b3673413334b2a95c
GET /gtag/js?id=UA-732885-12 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Dec 2022 15:49:45 GMT
expires: Tue, 06 Dec 2022 15:49:45 GMT
cache-control: private, max-age=900
last-modified: Tue, 06 Dec 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43596
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gullshoppen.no/wordpress/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0
200 OK 794 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0
IP
File type ASCII text, with very long lines (2139), with no line terminators
Hash 29307e8dec33cf3411ca4e1f2c84e9d0
484402289464d7ffb1475827f3438329d520bfc6
a2db59efaa416ef0c9d5d58f142cd5e44c475348cff20a664586fd3cda1b5f5b
GET /wordpress/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.1.0 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:02:47 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 794
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/uploads/astra-addon/astra-addon-637631095b87c6-80144092.js?ver=3.9.3
200 OK 7.7 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/uploads/astra-addon/astra-addon-637631095b87c6-80144092.js?ver=3.9.3
IP
File type ASCII text, with very long lines (38661), with no line terminators
Hash 31554f63d5fc5a31ce231f3b47d39ff4
297cbe014eeb6d1a1d5978290bc3ac416cc2d131
2b9fd9a15ccfd0206cd16a213d912f596224832c9f00ca68e0e8cd0b377de5c1
GET /wordpress/wp-content/uploads/astra-addon/astra-addon-637631095b87c6-80144092.js?ver=3.9.3 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:03:05 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7656
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
gullshoppen.no/wordpress/wp-content/plugins/astra-addon/addons/woocommerce/assets/js/minified/single-product-ajax-cart.min.js?ver=3.9.3
200 OK 1.1 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/astra-addon/addons/woocommerce/assets/js/minified/single-product-ajax-cart.min.js?ver=3.9.3
IP
File type HTML document, ASCII text, with very long lines (2651), with no line terminators
Hash 91253311984b6b56325c3c8810f90c06
e328984c459971d6ad7ec251a8f1b76ca0277789
2e3bd727f99f7d2d47921cd61ef4485b89ffff00e52f10ea0ada6d7dc79eda43
GET /wordpress/wp-content/plugins/astra-addon/addons/woocommerce/assets/js/minified/single-product-ajax-cart.min.js?ver=3.9.3 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:00:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1109
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
cdn.dibspayment.com/logo/checkout/combo/horiz/DIBS_checkout_kombo_horizontal_04.png
200 OK 4.9 kB URL HTTP/1.1 cdn.dibspayment.com/logo/checkout/combo/horiz/DIBS_checkout_kombo_horizontal_04.png
IP
File type PNG image data, 376 x 67, 8-bit/color RGBA, non-interlaced\012- data
Hash ca52fd199483b201e8f0ea7904ef861b
5f5d0bed42359f3399900d0dc54a6a3053504258
4f8bd782be6c0bd205003580eef627bc4f8bf1b87f9f9e4b8c88f51cbe832cce
GET /logo/checkout/combo/horiz/DIBS_checkout_kombo_horizontal_04.png HTTP/1.1
Host: cdn.dibspayment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 4929
Connection: keep-alive
Last-Modified: Tue, 10 Dec 2019 11:07:15 GMT
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 05 Dec 2022 21:08:35 GMT
ETag: "ca52fd199483b201e8f0ea7904ef861b"
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RXv4ZHP4DgYFAyHenIlO4u0yLyQE6VYmWl8Ewixd4Q8SY-qEuWTaHA==
Age: 67271
gullshoppen.no/wordpress/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-smallscreen.min.css?ver=3.9.2
200 OK 936 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-smallscreen.min.css?ver=3.9.2
IP
File type ASCII text, with very long lines (5992), with no line terminators
Hash a57a348e593978ca4dad7d2927ff983c
df00fa58d343098632bdb9525e6dfe7acc99ff6d
1e1cf17a9bde06b7e012c6334fe7f7803359b0b705f965b8ef82df63a68e86a7
GET /wordpress/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-smallscreen.min.css?ver=3.9.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 14:19:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 936
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c10bc583c46449dc192a809398b4e814
ff0f7ad905d32d7f3d01e4054552d0ad551503a5
defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gullshoppen.no/wordpress/wp-content/uploads/2022/11/Annonse-2020-jul-1-1024x706.png
200 OK 477 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/uploads/2022/11/Annonse-2020-jul-1-1024x706.png
IP
File type PNG image data, 1024 x 706, 8-bit/color RGBA, non-interlaced\012- data
Size 477 kB (477312 bytes)
Hash ab71750ec94ff8df5ff5ddf3b24ac00b
7ef9da2c98d0c867103112b108bb21cb6c356865
a156ddddd12ab7fb980cf6d2490d3befd0bf01130c660b5be9891162466fea71
GET /wordpress/wp-content/uploads/2022/11/Annonse-2020-jul-1-1024x706.png HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:24:25 GMT
Accept-Ranges: bytes
Content-Length: 477312
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
gullshoppen.no/wordpress/wp-content/themes/astra/assets/fonts/astra.woff
200 OK 3.3 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/themes/astra/assets/fonts/astra.woff
IP
File type Web Open Font Format, TrueType, length 3304, version 1.0\012- data
Hash bfe0ed8503c926d68f58ed0408dfe0d0
0346d02d96ff7d2a0278bc10f4dfdf365c80eac3
ec7ef7aa5fd1e019f1c26193e95e46d481d4983673936a9dda086705ada6e3d5
GET /wordpress/wp-content/themes/astra/assets/fonts/astra.woff HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 04 Oct 2022 14:19:34 GMT
Accept-Ranges: bytes
Content-Length: 3304
Vary: Accept-Encoding,User-Agent
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: font/woff
gullshoppen.no/wordpress/wp-content/plugins/woocommerce/assets/fonts/star.woff
200 OK 1.3 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/woocommerce/assets/fonts/star.woff
IP
File type Web Open Font Format, CFF, length 1304, version 1.0\012- data
Hash 335cbf607c55aa32fd06809d1f9eb127
e70dd0cd93614997e251f26477ea815435981e19
d87af7a2528beb59a990e0414df87b4e4115f77f3a4a750f6616ff189b70345a
GET /wordpress/wp-content/plugins/woocommerce/assets/fonts/star.woff HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://gullshoppen.no/wordpress/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce.min.css?ver=3.9.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2022 13:02:48 GMT
Accept-Ranges: bytes
Content-Length: 1304
Vary: Accept-Encoding,User-Agent
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: font/woff
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://gullshoppen.no
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 15:42:33 GMT
expires: Wed, 06 Dec 2023 15:42:33 GMT
cache-control: public, max-age=31536000
age: 432
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gullshoppen.no/wordpress/wp-content/uploads/2010/08/p-302-95ae673abd8f0e819a9fb1e850f09fa0-160x160.jpg
200 OK 3.1 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/uploads/2010/08/p-302-95ae673abd8f0e819a9fb1e850f09fa0-160x160.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 160x160, components 3\012- data
Hash 1b440cef8602ff1af274e848cbc8cfb6
d2768af9f4fcad667887bf9533f9a3cea7e68e90
8f46bac29396310165add86f7541fd411343ba05f47039a62947762e04bbbdf1
GET /wordpress/wp-content/uploads/2010/08/p-302-95ae673abd8f0e819a9fb1e850f09fa0-160x160.jpg HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 17:25:01 GMT
Accept-Ranges: bytes
Content-Length: 3092
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: image/jpeg
gullshoppen.no/wordpress/wp-content/uploads/2010/08/p-595-1e9806459ee0308e86f7af4fd18e5f9f-160x160.jpg
200 OK 3.2 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/uploads/2010/08/p-595-1e9806459ee0308e86f7af4fd18e5f9f-160x160.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 160x160, components 3\012- data
Hash 627f303f2d65561e32f04888b7689f2c
2cf8d49b41996d1a4bdfe5cf5f0576bf2a35cfbb
21f12cc1e63089f498dd27aa3bb752d358b5905591b8319201ee1da3cf8401a3
GET /wordpress/wp-content/uploads/2010/08/p-595-1e9806459ee0308e86f7af4fd18e5f9f-160x160.jpg HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 17:23:20 GMT
Accept-Ranges: bytes
Content-Length: 3245
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/jpeg
gullshoppen.no/wordpress/wp-content/uploads/2010/08/p-367-8636f9b51e2fdc99f2b89d4b58992899-160x160.jpg
200 OK 3.7 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/uploads/2010/08/p-367-8636f9b51e2fdc99f2b89d4b58992899-160x160.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 160x160, components 3\012- data
Hash e12124798e0379c99f71c812f0cbfcba
0e979296a9ebc186ce3ced77af5f8a86acbab0d7
ae6e163f95ac9febab3075f5728b87d1b768b89723c553631c34d400c637e2da
GET /wordpress/wp-content/uploads/2010/08/p-367-8636f9b51e2fdc99f2b89d4b58992899-160x160.jpg HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 17:24:48 GMT
Accept-Ranges: bytes
Content-Length: 3651
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/jpeg
gullshoppen.no/wordpress/wp-content/uploads/2010/08/p-273-f0d36b45ec439432b4e1abd52f81ee3e-160x160.jpg
200 OK 2.8 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/uploads/2010/08/p-273-f0d36b45ec439432b4e1abd52f81ee3e-160x160.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 160x160, components 3\012- data
Hash ce84092507002277dc2cc8bb1405e6e8
8f5ab7efc72f6bb0c76603b8922364d52e7d45e5
1ad7799139e0a9912dee1ca00f5f818b1a1dbc01b8becf0fe344173f5ec987ce
GET /wordpress/wp-content/uploads/2010/08/p-273-f0d36b45ec439432b4e1abd52f81ee3e-160x160.jpg HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 03 May 2022 17:25:09 GMT
Accept-Ranges: bytes
Content-Length: 2826
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/jpeg
gullshoppen.no/wordpress/wp-content/uploads/2010/08/p-602-e14d1395f700c515f594065c942c877b-213x213.jpg
200 OK 7.8 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/uploads/2010/08/p-602-e14d1395f700c515f594065c942c877b-213x213.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 213x213, components 3\012- data
Hash 1a789ca7e40eb2e4fc5bdc1f7a3a202a
aec73789ea1cbde6fde2c7620cf5a7c655cc2637
00901c837d2351a88506bbbb9acf022b0289fc83af46fefa37c7faaac2c13817
GET /wordpress/wp-content/uploads/2010/08/p-602-e14d1395f700c515f594065c942c877b-213x213.jpg HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 03 Nov 2015 13:52:52 GMT
Accept-Ranges: bytes
Content-Length: 7837
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/jpeg
gullshoppen.no/wordpress/wp-content/uploads/2014/12/p-1010-Paris_enstens____548814de44502-150x151.jpg
200 OK 3.2 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/uploads/2014/12/p-1010-Paris_enstens____548814de44502-150x151.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 150x151, components 3\012- data
Hash 4ade6c73f6aa7f1ebfad5a3aee94faee
346b9601bd7ed3b7e339c67a2d96a3a0be9e2e84
584f6d357c8748d11cf6c4e86ffd72cecf513d8011cd77e5f9f3c4b605911cd7
GET /wordpress/wp-content/uploads/2014/12/p-1010-Paris_enstens____548814de44502-150x151.jpg HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 03 Nov 2015 13:50:29 GMT
Accept-Ranges: bytes
Content-Length: 3153
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/jpeg
gullshoppen.no/wordpress/wp-content/uploads/2010/08/p-500-03d5176d30bc90e3ab6d2d9f5477e492-150x150.jpg
200 OK 4.4 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/uploads/2010/08/p-500-03d5176d30bc90e3ab6d2d9f5477e492-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 150x150, components 3\012- data
Hash af91f4c23913a2dbf127c2fa79047875
43faa938b79c6a502d4d2a96f4e4d754839e869a
cc6546fc938771e293c1e5fbbe71e61e59771f1beab756788d1f8e0ed83449bf
GET /wordpress/wp-content/uploads/2010/08/p-500-03d5176d30bc90e3ab6d2d9f5477e492-150x150.jpg HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 03 Nov 2015 13:54:14 GMT
Accept-Ranges: bytes
Content-Length: 4367
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/jpeg
gullshoppen.no/wordpress/wp-content/uploads/2015/02/p-12170-Lykke_0_53_ct__t_54d9ff88dab7a-150x150.jpg
200 OK 3.8 kB URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/uploads/2015/02/p-12170-Lykke_0_53_ct__t_54d9ff88dab7a-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 150x150, components 3\012- data
Hash 2be1ef864d679dae7adb1945deacdc25
0a0ebd2c42bb38ca2538256fbff67c8ea4ec38e9
648870962fe273a500fc3fd97d52356250f94cbdf4353c3f2222931abaa8481d
GET /wordpress/wp-content/uploads/2015/02/p-12170-Lykke_0_53_ct__t_54d9ff88dab7a-150x150.jpg HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Tue, 03 Nov 2015 13:36:56 GMT
Accept-Ranges: bytes
Content-Length: 3754
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: image/jpeg
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 06 Dec 2022 14:41:08 GMT
expires: Tue, 06 Dec 2022 16:41:08 GMT
cache-control: public, max-age=7200
age: 4117
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a179b3b6ab78e29169af8cc2363d6280
501cd2871c5b70c56852c6cd0c87f383504ca933
ceecf34d673dd0d910e3622aa0fa8d84fea748592acc796286c4ec5e76fbc170
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5855
Cache-Control: max-age=86807
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:45 GMT
Etag: "638dfdd1-1d7"
Expires: Wed, 07 Dec 2022 15:56:32 GMT
Last-Modified: Mon, 05 Dec 2022 14:18:57 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/nb_NO/all.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/nb_NO/all.js
IP
File type ASCII text, with very long lines (1957)
Hash 644ee11662a5950e0c1eeebcb4b7d995
ee5ca028e56b55700ecfe5812cf30519904f6bb8
3d27692a47c538f01d70bf6f2939e53f3ac42b7d7c10412baaee4666416b0704
GET /nb_NO/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: e24ba6c4001cf5425e8d8c7fc93ff71b
etag: "1f9ed3441059ec03e1883bd9dbc47dde"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 06 Dec 2022 16:04:42 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: ZE7hFmKllQ4MHu68tLfZlQ==
x-fb-debug: bvF048BiqCtwYBk1RCWU90BreDsPweEnMOXGayqUljzrmE5DXB4PGeGaayTcXMhx2QCoJg+pI1fVn6VSuseOvw==
content-length: 1685
x-fb-trip-id: 2050670934
date: Tue, 06 Dec 2022 15:49:45 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a179b3b6ab78e29169af8cc2363d6280
501cd2871c5b70c56852c6cd0c87f383504ca933
ceecf34d673dd0d910e3622aa0fa8d84fea748592acc796286c4ec5e76fbc170
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5406
Cache-Control: max-age=86358
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:45 GMT
Etag: "638dfdd1-1d7"
Expires: Wed, 07 Dec 2022 15:49:03 GMT
Last-Modified: Mon, 05 Dec 2022 14:18:57 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
s.kk-resources.com/leadtag.js
200 OK 2.6 kB URL HTTP/1.1 s.kk-resources.com/leadtag.js
IP
File type C source, ASCII text, with very long lines (6910)
Hash b9c7aa9898d0e7b5d8dfa27c81eda1ac
3e22a4f4ac1fd469128de60e1a80433513242071
980531f0a81016e3a7a4c3fa56f75e7b791f1f4c09296992221bd766b91a53a0
GET /leadtag.js HTTP/1.1
Host: s.kk-resources.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Length: 2595
Connection: keep-alive
X-Gravitee-Transaction-Id: a60409c4-41f4-4313-8409-c441f4931332
X-Gravitee-Request-Id: a60409c4-41f4-4313-8409-c441f4931332
ETag: "05e089e0c08fd98ee6b4f6497ec87752b123fc2f"
Request-Time: 19
Accept-Ranges: bytes
Cache-Control: public, max-age=3600
Last-Modified: Tue, 12 Jul 2022 13:51:05 GMT
Content-Encoding: gzip
Date: Tue, 06 Dec 2022 15:01:38 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rjzrfuNTIYWBbBmLEuIJ824_ErGlxkyFmFIf36rXVGzP0vnrVb3X5A==
Age: 2888
connect.facebook.net/nb_NO/all.js?hash=4c5cdb7e33c0e2bbf97f5a86b3bfa372
200 OK 88 kB URL HTTP/2 connect.facebook.net/nb_NO/all.js?hash=4c5cdb7e33c0e2bbf97f5a86b3bfa372
IP
File type ASCII text, with very long lines (18605)
Hash f84e48a32c293bcc2f453735f5f5acec
8fe8e14a03bc6d9abf8b41f86e55fa69271e634a
e2366e2a54fd88e5b240f200a0083a37a2ffaa61f549db27d66ae3b4275df493
GET /nb_NO/all.js?hash=4c5cdb7e33c0e2bbf97f5a86b3bfa372 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gullshoppen.no
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 0f377d606675a79cc37effa8298f6d4b
etag: "5389508eadb8e34780acf2be812ad858"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 06 Dec 2023 14:07:41 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: +E5IoywpO8wvRTc19fWs7A==
x-fb-debug: OP0WVzvWgRlCa2dSY/biH2wCxppZh9gEFqr4Y7hL8AFP27U0GrjYUdEE4kqhsYz6I/aLnRDr8fVe6mTsOTHh6g==
content-length: 88281
x-fb-trip-id: 1904183273
date: Tue, 06 Dec 2022 15:49:45 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 7e5ad4121411ba414363ddb3e423cf8c
fe08cede309cac27b94c7c99975b6cb10eea3036
6d457360466f2b57f859d0aa9c1b919329087d57f455fa6a7e81a93c0260c571
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5416
Cache-Control: max-age=97882
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:46 GMT
Etag: "638e2acc-1d7"
Expires: Wed, 07 Dec 2022 19:01:08 GMT
Last-Modified: Mon, 05 Dec 2022 17:30:52 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 7e5ad4121411ba414363ddb3e423cf8c
fe08cede309cac27b94c7c99975b6cb10eea3036
6d457360466f2b57f859d0aa9c1b919329087d57f455fa6a7e81a93c0260c571
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6096
Cache-Control: max-age=98562
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:46 GMT
Etag: "638e2acc-1d7"
Expires: Wed, 07 Dec 2022 19:12:28 GMT
Last-Modified: Mon, 05 Dec 2022 17:30:52 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
fonts.googleapis.com/css?family=Roboto+Condensed%3A400%2C&display=fallback&ver=3.9.2
200 OK 551 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto+Condensed%3A400%2C&display=fallback&ver=3.9.2
IP
Hash 4de84f6b23a0d7e5ad4dc64d11b82281
cd3a2811d1a13a838b6b709e58b7b69df30f1fd6
71b68e6f514c419dae293e4c0425ff29ac041c339e779d0e43bbb867959937b5
GET /css?family=Roboto+Condensed%3A400%2C&display=fallback&ver=3.9.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Dec 2022 15:49:45 GMT
date: Tue, 06 Dec 2022 15:49:45 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.kelkoogroup.net/k.gif
200 OK 43 B IP
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /k.gif HTTP/1.1
Host: s.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
ETag: a2Vsa29vSWQ9YTRjNjI2Zi0xODRlODIwZTYxNy1jNjE0
Origin: https://gullshoppen.no
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-Gravitee-Transaction-Id: c9baafc1-9f2b-43a4-baaf-c19f2be3a474
X-Gravitee-Request-Id: c9baafc1-9f2b-43a4-baaf-c19f2be3a474
ETag: a2Vsa29vSWQ9YTRjNjI2Zi0xODRlODIwZTYxNy1jNjE0
Vary: *,Origin
Pragma: no-cache
Expires: 0
Request-Time: 0
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate
Last-Modified: Fri, 01 Jan 2010 00:00:00 GMT
Access-Control-Allow-Origin: https://gullshoppen.no
Access-Control-Expose-Headers: ETag
Access-Control-Allow-Credentials: true
Date: Tue, 06 Dec 2022 15:49:46 GMT
Content-Type: image/gif
content-length: 43
www.facebook.com/plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1b0494c74ceec4%26domain%3Dgullshoppen.no%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fgullshoppen.no%252Ff77595b0719cb%26relation%3Dparent.parent&color_scheme=light&container_width=0&font=arial&href=https%3A%2F%2Fwww.facebook.com%2FGullshoppenno-125749584117039%2F%3Fref%3Dts%26fref%3Dts&layout=standard&locale=nb_NO&sdk=joey&send=true&show_faces=false&width=400
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1b0494c74ceec4%26domain%3Dgullshoppen.no%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fgullshoppen.no%252Ff77595b0719cb%26relation%3Dparent.parent&color_scheme=light&container_width=0&font=arial&href=https%3A%2F%2Fwww.facebook.com%2FGullshoppenno-125749584117039%2F%3Fref%3Dts%26fref%3Dts&layout=standard&locale=nb_NO&sdk=joey&send=true&show_faces=false&width=400
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/like.php?action=like&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1b0494c74ceec4%26domain%3Dgullshoppen.no%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fgullshoppen.no%252Ff77595b0719cb%26relation%3Dparent.parent&color_scheme=light&container_width=0&font=arial&href=https%3A%2F%2Fwww.facebook.com%2FGullshoppenno-125749584117039%2F%3Fref%3Dts%26fref%3Dts&layout=standard&locale=nb_NO&sdk=joey&send=true&show_faces=false&width=400 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: CG5QW+Ch2/OY8bHDf05QUqsDk8S6u2xiCAW/B0L4Y869r4IB7eJUt0TnaxdhthNxhULLF2vS/OFMryVfOJuR5g==
content-length: 0
date: Tue, 06 Dec 2022 15:49:46 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/833441087/?random=1670341786116&cv=11&fst=1670341786116&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono&ref=https%3A%2F%2Fapi.kelkoogroup.net%2F&tiba=-%20Gullshoppen%20AS&did=dNDMyYj&gdid=dNDMyYj&auid=1960033040.1670341786&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 955 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/833441087/?random=1670341786116&cv=11&fst=1670341786116&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono&ref=https%3A%2F%2Fapi.kelkoogroup.net%2F&tiba=-%20Gullshoppen%20AS&did=dNDMyYj&gdid=dNDMyYj&auid=1960033040.1670341786&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2139), with no line terminators
Hash 4396696918b0d37dc3ad992122b1be02
007606cdcff9618e4cd9626d8bd9431546c9acd5
3867f31d459d441730b0b22c22db4a1a3cc0d6515f1b0e48f69651e7e6fc42ef
GET /pagead/viewthroughconversion/833441087/?random=1670341786116&cv=11&fst=1670341786116&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono&ref=https%3A%2F%2Fapi.kelkoogroup.net%2F&tiba=-%20Gullshoppen%20AS&did=dNDMyYj&gdid=dNDMyYj&auid=1960033040.1670341786&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 15:49:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 955
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Dec-2022 16:04:46 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-1261361-21&cid=1760714497.1670341786&jid=339199739&gjid=643510719&_gid=1217188774.1670341786&_u=aGBAAEIgAAAAACAAI~&z=147639819
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-1261361-21&cid=1760714497.1670341786&jid=339199739&gjid=643510719&_gid=1217188774.1670341786&_u=aGBAAEIgAAAAACAAI~&z=147639819
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-1261361-21&cid=1760714497.1670341786&jid=339199739&gjid=643510719&_gid=1217188774.1670341786&_u=aGBAAEIgAAAAACAAI~&z=147639819 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://gullshoppen.no
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://gullshoppen.no
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 06 Dec 2022 15:49:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5006b8e985c5838b7fd2f2b558a65bc4
183ff15e0faedf346305fd6fe1c70c9c7a1eef4a
fcbfec9f5fd0e10d44778c1df64d8612281cd39881cdfd0aa8ca30d13655655a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5006b8e985c5838b7fd2f2b558a65bc4
183ff15e0faedf346305fd6fe1c70c9c7a1eef4a
fcbfec9f5fd0e10d44778c1df64d8612281cd39881cdfd0aa8ca30d13655655a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/833441087/?random=1670341786116&cv=11&fst=1670338800000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono&ref=https%3A%2F%2Fapi.kelkoogroup.net%2F&tiba=-%20Gullshoppen%20AS&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4049181162&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/833441087/?random=1670341786116&cv=11&fst=1670338800000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono&ref=https%3A%2F%2Fapi.kelkoogroup.net%2F&tiba=-%20Gullshoppen%20AS&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4049181162&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/833441087/?random=1670341786116&cv=11&fst=1670338800000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono&ref=https%3A%2F%2Fapi.kelkoogroup.net%2F&tiba=-%20Gullshoppen%20AS&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4049181162&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 15:49:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/833441087/?random=1670341786116&cv=11&fst=1670338800000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono&ref=https%3A%2F%2Fapi.kelkoogroup.net%2F&tiba=-%20Gullshoppen%20AS&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4049181162&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/833441087/?random=1670341786116&cv=11&fst=1670338800000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono&ref=https%3A%2F%2Fapi.kelkoogroup.net%2F&tiba=-%20Gullshoppen%20AS&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4049181162&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/833441087/?random=1670341786116&cv=11&fst=1670338800000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono&ref=https%3A%2F%2Fapi.kelkoogroup.net%2F&tiba=-%20Gullshoppen%20AS&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4049181162&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 15:49:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-1261361-21&cid=1760714497.1670341786&jid=339199739&_u=aGBAAEIgAAAAACAAI~&z=56325093
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-1261361-21&cid=1760714497.1670341786&jid=339199739&_u=aGBAAEIgAAAAACAAI~&z=56325093
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-1261361-21&cid=1760714497.1670341786&jid=339199739&_u=aGBAAEIgAAAAACAAI~&z=56325093 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 15:49:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-1261361-21&cid=1760714497.1670341786&jid=339199739&_u=aGBAAEIgAAAAACAAI~&z=56325093
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-1261361-21&cid=1760714497.1670341786&jid=339199739&_u=aGBAAEIgAAAAACAAI~&z=56325093
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-1261361-21&cid=1760714497.1670341786&jid=339199739&_u=aGBAAEIgAAAAACAAI~&z=56325093 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 15:49:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee6bfe50f8e4b9c142f971a55496ac26
8c3fd42aaa7fa3ebdedc4f7b0271b8caae166e64
4582e8e1ada92a279cbc5d82904c7fd27b9d4b95bc06c7a8b3c13168978f0b33
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-CBYPCF5T66>m=2oebu0&_p=1964147662&cid=1760714497.1670341786&ul=en-us&sr=1280x1024&_s=1&sid=1670341786&sct=1&seg=0&dl=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono&dr=https%3A%2F%2Fapi.kelkoogroup.net%2F&dt=-%20Gullshoppen%20AS&en=page_view&_fv=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-CBYPCF5T66>m=2oebu0&_p=1964147662&cid=1760714497.1670341786&ul=en-us&sr=1280x1024&_s=1&sid=1670341786&sct=1&seg=0&dl=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono&dr=https%3A%2F%2Fapi.kelkoogroup.net%2F&dt=-%20Gullshoppen%20AS&en=page_view&_fv=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-CBYPCF5T66>m=2oebu0&_p=1964147662&cid=1760714497.1670341786&ul=en-us&sr=1280x1024&_s=1&sid=1670341786&sct=1&seg=0&dl=https%3A%2F%2Fgullshoppen.no%2F%3Fkk%3Da4c626f-184e820e617-c614%26utm_campaign%3Dkelkooclick%26utm_medium%3Dcpc%26utm_source%3Dkelkoono&dr=https%3A%2F%2Fapi.kelkoogroup.net%2F&dt=-%20Gullshoppen%20AS&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gullshoppen.no
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://gullshoppen.no
date: Tue, 06 Dec 2022 15:49:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:100,300,regular,700,900%7COpen+Sans:300%7CIndie+Flower:regular%7COswald:300,regular,700&subset=latin%2Clatin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:100,300,regular,700,900%7COpen+Sans:300%7CIndie+Flower:regular%7COswald:300,regular,700&subset=latin%2Clatin-ext
IP
GET /css?family=Lato:100,300,regular,700,900%7COpen+Sans:300%7CIndie+Flower:regular%7COswald:300,regular,700&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Dec 2022 15:49:45 GMT
date: Tue, 06 Dec 2022 15:49:45 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gullshoppen.no/wordpress/wp-content/plugins/wd_countdown/assets/js/jquery.countdown.min.js?ver=6.0.2
200 OK 0 B URL HTTP/1.1 gullshoppen.no/wordpress/wp-content/plugins/wd_countdown/assets/js/jquery.countdown.min.js?ver=6.0.2
IP
GET /wordpress/wp-content/plugins/wd_countdown/assets/js/jquery.countdown.min.js?ver=6.0.2 HTTP/1.1
Host: gullshoppen.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gullshoppen.no/?kk=a4c626f-184e820e617-c614&utm_campaign=kelkooclick&utm_medium=cpc&utm_source=kelkoono
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:49:45 GMT
Server: Apache
Last-Modified: Thu, 09 Jul 2015 23:41:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4460
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
185.107.56.200
142.250.74.106
185.60.164.26
88.99.112.6
23.36.76.226
93.184.220.29
157.240.200.35
31.13.72.12
0.0.0.0