kwmono.su/
1.3 kB IP
ASN #61969 Team Internet AG
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (357)
Hash 87b79a2c702d12c9e13a6778ebbcb1cf
c03c67bf8797083e518b752c30f009f00f5b6658
cb7f9fbee7b4a016f36bd5208d6a38b96d13a0b5565059e98f49200572720975
NIDS Severity Alert suricata medium ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
GET / HTTP/1.1
Host: kwmono.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 22:39:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Redirect: zeropark_zeroclick
X-Buckets: bucket102
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_CfVDPWnDeopkpNFywNOYN3gI4CpCBGr5yBkrxgCL1iViJDFHTMYuLHXfik6ZrIInnxFO5PgpD4gh1+7IfyJjTw==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: kwmono.su
X-Subdomain:
Content-Encoding: gzip
d38psrni17bvxu.cloudfront.net/scripts/js3.js
1.1 kB URL d38psrni17bvxu.cloudfront.net/scripts/js3.js
IP
File type ASCII text, with very long lines (468)
Hash a66b149a7ebc798955373415d683f32a
15ceaba8cfae8368600620ae97aa26ae7331d626
036c94653e84e6078c087abeb3ac8804491d27b27938839ae3df42b31e2238d9
GET /scripts/js3.js HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kwmono.su/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1096
Connection: keep-alive
Server: nginx
Date: Fri, 01 Dec 2023 04:31:19 GMT
Last-Modified: Mon, 23 Jan 2023 11:12:07 GMT
Accept-Ranges: bytes
ETag: "63ce6b87-448"
X-Cache: Hit from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 73DSFREGgKHfbPaGPo47v_l2zGlLaDR-P-TAOFHN1PoDjE5DE0PgGA==
Age: 65287
kwmono.su/track.php?domain=kwmono.su&toggle=browserjs&uid=MTcwMTQ3MDM2Ni4wMzk5OjhlYTQ2ZWI0Y2M4NWFkNmE3NDU1MjBjODA1ZGM0NTNiZTViN2M3MDE1ODVhMTI4MmE1ZTgxMzVkNzIwOWI5MjI6NjU2YTYwOWUwOWJkNw%3D%3D
20 B URL kwmono.su/track.php?domain=kwmono.su&toggle=browserjs&uid=MTcwMTQ3MDM2Ni4wMzk5OjhlYTQ2ZWI0Y2M4NWFkNmE3NDU1MjBjODA1ZGM0NTNiZTViN2M3MDE1ODVhMTI4MmE1ZTgxMzVkNzIwOWI5MjI6NjU2YTYwOWUwOWJkNw%3D%3D
IP
ASN #61969 Team Internet AG
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
NIDS Severity Alert suricata medium ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
GET /track.php?domain=kwmono.su&toggle=browserjs&uid=MTcwMTQ3MDM2Ni4wMzk5OjhlYTQ2ZWI0Y2M4NWFkNmE3NDU1MjBjODA1ZGM0NTNiZTViN2M3MDE1ODVhMTI4MmE1ZTgxMzVkNzIwOWI5MjI6NjU2YTYwOWUwOWJkNw%3D%3D HTTP/1.1
Host: kwmono.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kwmono.su/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 22:39:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
kwmono.su/ls.php?t=656a609e&token=57a9b4b694b0779a4c2e7123fb9e9dc83f6405bb
16 B URL kwmono.su/ls.php?t=656a609e&token=57a9b4b694b0779a4c2e7123fb9e9dc83f6405bb
IP
ASN #61969 Team Internet AG
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
NIDS Severity Alert suricata medium ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
GET /ls.php?t=656a609e&token=57a9b4b694b0779a4c2e7123fb9e9dc83f6405bb HTTP/1.1
Host: kwmono.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kwmono.su/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 201 Created
Server: nginx
Date: Fri, 01 Dec 2023 22:39:27 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 656a609fa44ca134f951c4e8
Charset: utf-8
Access-Control-Allow-Origin:
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_r/ABgC+tvYUIDx4odlpf4SjtrOWuj2kyDwhzaAAlABglvy3wA7WHyNlmNdt29YNgsaL2BGzwCzq20oalfxyUIA==
kwmono.su/favicon.ico
0 B IP
ASN #61969 Team Internet AG
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata medium ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
GET /favicon.ico HTTP/1.1
Host: kwmono.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kwmono.su/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 22:39:27 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
kwmono.su/track.php?click=4da66f0e21539490cb93a4bc4e3d15b9d6bca8eb&domain=kwmono.su&uid=MTcwMTQ3MDM2Ni4wMzk5OjhlYTQ2ZWI0Y2M4NWFkNmE3NDU1MjBjODA1ZGM0NTNiZTViN2M3MDE1ODVhMTI4MmE1ZTgxMzVkNzIwOWI5MjI6NjU2YTYwOWUwOWJkNw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDJ8fHx8fHw2NTZhNjA5ZTA5YmEyfHx8MTcwMTQ3MDM2Ni4zMzIzfDA2ZWJhNTU0NmE2OTIyZDU2YWEwZDJjZjdlMjA4YTliZTc5NDlhYTl8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXw1N2E5YjRiNjk0YjA3NzlhNGMyZTcxMjNmYjllOWRjODNmNjQwNWJifDB8fDB8MHw%3D&kw=&search=&pcat=&bucket=&clientID=&adtest=off
20 B URL kwmono.su/track.php?click=4da66f0e21539490cb93a4bc4e3d15b9d6bca8eb&domain=kwmono.su&uid=MTcwMTQ3MDM2Ni4wMzk5OjhlYTQ2ZWI0Y2M4NWFkNmE3NDU1MjBjODA1ZGM0NTNiZTViN2M3MDE1ODVhMTI4MmE1ZTgxMzVkNzIwOWI5MjI6NjU2YTYwOWUwOWJkNw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDJ8fHx8fHw2NTZhNjA5ZTA5YmEyfHx8MTcwMTQ3MDM2Ni4zMzIzfDA2ZWJhNTU0NmE2OTIyZDU2YWEwZDJjZjdlMjA4YTliZTc5NDlhYTl8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXw1N2E5YjRiNjk0YjA3NzlhNGMyZTcxMjNmYjllOWRjODNmNjQwNWJifDB8fDB8MHw%3D&kw=&search=&pcat=&bucket=&clientID=&adtest=off
IP
ASN #61969 Team Internet AG
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
NIDS Severity Alert suricata medium ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
GET /track.php?click=4da66f0e21539490cb93a4bc4e3d15b9d6bca8eb&domain=kwmono.su&uid=MTcwMTQ3MDM2Ni4wMzk5OjhlYTQ2ZWI0Y2M4NWFkNmE3NDU1MjBjODA1ZGM0NTNiZTViN2M3MDE1ODVhMTI4MmE1ZTgxMzVkNzIwOWI5MjI6NjU2YTYwOWUwOWJkNw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDJ8fHx8fHw2NTZhNjA5ZTA5YmEyfHx8MTcwMTQ3MDM2Ni4zMzIzfDA2ZWJhNTU0NmE2OTIyZDU2YWEwZDJjZjdlMjA4YTliZTc5NDlhYTl8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXw1N2E5YjRiNjk0YjA3NzlhNGMyZTcxMjNmYjllOWRjODNmNjQwNWJifDB8fDB8MHw%3D&kw=&search=&pcat=&bucket=&clientID=&adtest=off HTTP/1.1
Host: kwmono.su
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kwmono.su/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 22:39:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-View-Match: true
X-Custom-Track: none
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
viraj-drm.com/zclkvisitor/7b3ca782-909a-11ee-a094-0aae7c137331/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=ba36fda0-8d20-11ee-b3d7-123f4a2b6bb7
1.1 kB URL viraj-drm.com/zclkvisitor/7b3ca782-909a-11ee-a094-0aae7c137331/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=ba36fda0-8d20-11ee-b3d7-123f4a2b6bb7
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2f55f164027d90c11651ceca9f72ea99
979c6732ef863360b8cfa78961024c03a879c63c
57750fceaebc7d53b7c1e88c62e8120a547a7e923f961b2799aa3ede5418baa5
GET /zclkvisitor/7b3ca782-909a-11ee-a094-0aae7c137331/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=ba36fda0-8d20-11ee-b3d7-123f4a2b6bb7 HTTP/1.1
Host: viraj-drm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://kwmono.su/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Fri, 01 Dec 2023 22:39:27 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: SlAfHVuf
viraj-drm.com/zclkredirect?visitid=7b3ca782-909a-11ee-a094-0aae7c137331&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
348 B URL viraj-drm.com/zclkredirect?visitid=7b3ca782-909a-11ee-a094-0aae7c137331&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash fa3c86e4edb73460e3ab15ed12f741cd
62883347def1f6ba38103105e2cf4e93f39f7308
f06b7c105390c1bfdf8f55205631b926721121a4c93c288daa01f75ec544eda9
GET /zclkredirect?visitid=7b3ca782-909a-11ee-a094-0aae7c137331&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: viraj-drm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://viraj-drm.com/zclkvisitor/7b3ca782-909a-11ee-a094-0aae7c137331/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=ba36fda0-8d20-11ee-b3d7-123f4a2b6bb7
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Fri, 01 Dec 2023 22:39:28 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: SlAfHVuf
viraj-drm.com/favicon.ico
653 B URL viraj-drm.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: viraj-drm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://viraj-drm.com/zclkredirect?visitid=7b3ca782-909a-11ee-a094-0aae7c137331&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404
Date: Fri, 01 Dec 2023 22:39:28 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: gyTHRsro
plorexdry.com/r/b?s=6220144888&s2=lateritious-falcon&s3=echo-pah-1lmygjl6pd
376 B URL plorexdry.com/r/b?s=6220144888&s2=lateritious-falcon&s3=echo-pah-1lmygjl6pd
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (376), with no line terminators
Hash 1b6248ca188b21471f6e475107adc5be
fe630fa5936f475ed21820fa9f88149e4d6a44c0
2e22394a0084cd9e5533915ad640a07a357a8c224a257401dbf1b4bdbf6ec52b
GET /r/b?s=6220144888&s2=lateritious-falcon&s3=echo-pah-1lmygjl6pd HTTP/1.1
Host: plorexdry.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://viraj-drm.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:39:28 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
Referrer-Policy: no-referrer
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
lookandfind.me/s/a2?u=f4bdb01fc36e3f720c2a963a770625c6&m=farmasiet.no&f=10&s1=6220144888&s2=lateritious-falcon&s3=echo-pah-1lmygjl6pd&du=https%3A%2F%2Ffarmasiet.no
284 B URL lookandfind.me/s/a2?u=f4bdb01fc36e3f720c2a963a770625c6&m=farmasiet.no&f=10&s1=6220144888&s2=lateritious-falcon&s3=echo-pah-1lmygjl6pd&du=https%3A%2F%2Ffarmasiet.no
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash b2347a563e849edfa89f2fc2cfa33d30
01781e307d96563bf748ea698690c52b7a7ff455
6925fd40a83ff812274c0d2bc7ee0f58687d2adbe494c01f7a7b97c608e0d422
GET /s/a2?u=f4bdb01fc36e3f720c2a963a770625c6&m=farmasiet.no&f=10&s1=6220144888&s2=lateritious-falcon&s3=echo-pah-1lmygjl6pd&du=https%3A%2F%2Ffarmasiet.no HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:39:29 GMT
Server: Apache/2.4.37 (CentOS Stream) OpenSSL/1.1.1k
X-Powered-By: PHP/8.2.11
Referrer-Policy: strict-origin-when-cross-origin
Access-Control-Allow-Origin: https://lookandfind.me
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
lookandfind.me/s/r2?l=3245c0bf41bc83f7dcc564be3b3fdef4&s=4318ff1ef2114e0d29af5981cf0abfee
588 B URL lookandfind.me/s/r2?l=3245c0bf41bc83f7dcc564be3b3fdef4&s=4318ff1ef2114e0d29af5981cf0abfee
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (588), with no line terminators
Hash f01de7f7fe4cc5874256d68fe221b773
6a2e362e9dc6b4c70fec12d743a07a65c6ff0f98
fbed0524b764b51b4eb58a27a969b67976d8815322a6a5b09663e46ce6e22c34
GET /s/r2?l=3245c0bf41bc83f7dcc564be3b3fdef4&s=4318ff1ef2114e0d29af5981cf0abfee HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 22:39:29 GMT
Server: Apache/2.4.37 (CentOS Stream) OpenSSL/1.1.1k
X-Powered-By: PHP/8.2.11
Referrer-Policy: strict-origin-when-cross-origin
Access-Control-Allow-Origin: https://lookandfind.me
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
api.yadore.com/v2/r/deeplink?e=dHk2OCtxWWo4Y3VuVHMzc2t4cWFlOTVKUStNcTZzZjM5Qk5jUnVuTnRoeitkVGhhNEd5MnAyUHNkMW5QTzF3ZlFrYUNpbUFmaWd1UTg2R1RXTTR5Z0kxWndXQzNEak9EMnV6ZHhTaGpYMFVET2IwekhnWFc0b3BiRnBad2VwRlQ4ZVR1anhBNVZ2bzg2Uy9qYlJWNk1TdmtkT2MrN3RkRStrZ1dqVkNjRk1IdmYyNktRcy9kcnFyazg1cmtWVmREMW5BSXJjeWpXWS9YblVjPQ==&i=adivE2svx0vjkzdq&placementId=f227dc28e56e70d655372f48ca9ccd84
34 kB URL api.yadore.com/v2/r/deeplink?e=dHk2OCtxWWo4Y3VuVHMzc2t4cWFlOTVKUStNcTZzZjM5Qk5jUnVuTnRoeitkVGhhNEd5MnAyUHNkMW5QTzF3ZlFrYUNpbUFmaWd1UTg2R1RXTTR5Z0kxWndXQzNEak9EMnV6ZHhTaGpYMFVET2IwekhnWFc0b3BiRnBad2VwRlQ4ZVR1anhBNVZ2bzg2Uy9qYlJWNk1TdmtkT2MrN3RkRStrZ1dqVkNjRk1IdmYyNktRcy9kcnFyazg1cmtWVmREMW5BSXJjeWpXWS9YblVjPQ==&i=adivE2svx0vjkzdq&placementId=f227dc28e56e70d655372f48ca9ccd84
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13792)
Hash 40ab97fad50d375fd029e5bbec53582e
8710145929240d26510fd1ec034a7fff22038717
fa0f04bb59613eaa696697b33df86e4b25c8dc37cbab4d158423ee6710dbdc97
GET /v2/r/deeplink?e=dHk2OCtxWWo4Y3VuVHMzc2t4cWFlOTVKUStNcTZzZjM5Qk5jUnVuTnRoeitkVGhhNEd5MnAyUHNkMW5QTzF3ZlFrYUNpbUFmaWd1UTg2R1RXTTR5Z0kxWndXQzNEak9EMnV6ZHhTaGpYMFVET2IwekhnWFc0b3BiRnBad2VwRlQ4ZVR1anhBNVZ2bzg2Uy9qYlJWNk1TdmtkT2MrN3RkRStrZ1dqVkNjRk1IdmYyNktRcy9kcnFyazg1cmtWVmREMW5BSXJjeWpXWS9YblVjPQ==&i=adivE2svx0vjkzdq&placementId=f227dc28e56e70d655372f48ca9ccd84 HTTP/1.1
Host: api.yadore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
date: Fri, 01 Dec 2023 22:39:29 GMT
location: https://api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Ffarmasiet.no&custom1=8bfeba9cc4a7dd43c7dc86bb65d40f94c385155bda5f773443f2f99303544a99&publisherSubId=YvCa90x5LHFq&publisherTrafficType=publishernetwork&originReferer=https%253A%252F%252Flookandfind.me%252F
server: nginx
x-powered-by: PHP/8.0.30
X-Firefox-Spdy: h2
status.thawte.com/
471 B IP
Hash fa272fc402e22ee1be0225e4b1e778e9
b0d0d0e64700960a55688e8056f265b518de7730
d2c25dc83537d6c1555ef3144dfddb5c462232a3fe6487202f5bbff7df0fbdbe
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3092
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Fri, 01 Dec 2023 22:39:30 GMT
Last-Modified: Fri, 01 Dec 2023 21:47:58 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471
dd.kelkoogroup.net/tags.js
27 kB URL dd.kelkoogroup.net/tags.js
IP
File type ASCII text, with very long lines (65431)
Hash 6f4a2f64abe0ab106f95e0b360a85e44
67c915c3ac11571834a806b99cf3f511eef2049f
c54140eac6df64b97abf9bf21e88910bac89ddc973d871fcd33dca119b8b4c24
GET /tags.js HTTP/1.1
Host: dd.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/
DNT: 1
Connection: keep-alive
Cookie: kelkooID=a4c629a-18c278978fb-c7eca3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
content-length: 27331
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Wed, 29 Nov 2023 13:37:06 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
date: Fri, 01 Dec 2023 21:44:46 GMT
cache-control: max-age=3600, public
expires: Fri, 01 Dec 2023 22:44:44 GMT
etag: "24cd6-60b4aa18fa3ca-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tgtl3MkoH1c2kavCOAmYJ14AoVrxD51rvGCeqsD-8r0t8ChHqyybJw==
age: 3286
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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
68 B URL no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=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 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/
DNT: 1
Connection: keep-alive
Cookie: kelkooID=a4c629a-18c278978fb-c7eca3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
leadId: 62AE01HGKRJY8D2PX2PMMET8D24SJD
clickId: 107698154_1701470370042_88009308
country: no
Request-Time: PT0.001814S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Fri, 01 Dec 2023 22:39:30 GMT
Content-Type: image/png
Content-Length: 68
api.kelkoogroup.net/favicon.ico
40 B URL api.kelkoogroup.net/favicon.ico
IP
File type ASCII text, with no line terminators
Hash 93eb2a33fca1bed122be55e52dbcb18b
f75a657d84bec6cc3f180ac194af3d21da9fe7bf
d08874f7931c8d35c1ca54fcc0de50c9a267a0036c61626bc420610186bbacfa
GET /favicon.ico HTTP/1.1
Host: api.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Ffarmasiet.no&custom1=8bfeba9cc4a7dd43c7dc86bb65d40f94c385155bda5f773443f2f99303544a99&publisherSubId=YvCa90x5LHFq&publisherTrafficType=publishernetwork&originReferer=https%253A%252F%252Flookandfind.me%252F
DNT: 1
Connection: keep-alive
Cookie: kelkooID=a4c629a-18c278978fb-c7eca3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/plain
content-length: 40
date: Fri, 01 Dec 2023 22:39:30 GMT
x-cnection: close
x-cache: Error from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BGX10ONtrbQHRi0tt3GwvFpPDoJHJXH0tO70W4D3Cw7pUx-dExSDZg==
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D62AE01HGKRJY8D2PX2PMMET8D24SJD%26url%3Dhttps%253A%252F%252Ffarmasiet.no
303 See Other 0 B URL User Request GET HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D62AE01HGKRJY8D2PX2PMMET8D24SJD%26url%3Dhttps%253A%252F%252Ffarmasiet.no
IP
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerDigiCert Inc
Subject*.kelkoogroup.net
Fingerprint92:CE:2F:80:FF:8A:8D:05:3F:58:B8:E3:0D:81:B0:D9:A0:56:9C:2A
ValidityThu, 14 Sep 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af22386da4d81187b9331ec31861560dc97f06f4d3ae83db726d2eaed54afaf8d236ee776c3133bedf83627359d9829ffbd2a7b419f01005160f373f79f6c244ff84b5c3f3be330e63bc41941cb74c96935be389a2f2fbaf9b49486c7a0ebc7d4b855ea48a3a950c7b4347de6970bcbc750f71493ea5a27118364debd8fc8db2e0f106d7aac12a3a8f38fa3854b4042efd644cc0ae01407cace4c027bdb3e84505c0344ad6bfdabb1e5f22790db923eadcc6b1cf7f15d4438ff3e47e190f4479f0b327084a40cfc1cc9a6c8e2ad3b5679089803daaacf374628ff20001313cfe279422f8929132e3aaffbab68c36db6310d328d3a713152002f4693d3147cf7e26e3daba0c8b6f58086ec6e4f7b4865e5fbde188e65f049acedb6001461954aab56356a27d29f5b46c52649f047badb9d36b&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D62AE01HGKRJY8D2PX2PMMET8D24SJD%26url%3Dhttps%253A%252F%252Ffarmasiet.no HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/
DNT: 1
Connection: keep-alive
Cookie: kelkooID=a4c629a-18c278978fb-c7eca3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 303 See Other
leadId: 62AE01HGKRJY8D2PX2PMMET8D24SJD
clickId: 107698154_1701470370042_88009308
country: no
Location: https://pdt.tradedoubler.com/click?a=332280&p=302669&epi=62AE01HGKRJY8D2PX2PMMET8D24SJD&url=https%3A%2F%2Ffarmasiet.no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=2McFylbA0bmjkljVMvBLMpmJl1qDqv9OGQyhTxFXfanHsOmRPfTA60VBojZE_mhRGjci92SRc3YzYHvk01aRLizrZFCKU5DGa8Gg4JJ5cud2kvjC2P452LiOfnzKEu68; Max-Age=31536000; Expires=Sat, 30 Nov 2024 22:39:30 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
X-DataDome: protected
Request-Time: PT0.015165S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Fri, 01 Dec 2023 22:39:30 GMT
Content-Length: 0
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 36b1511e9bd89f2bcaee29a59f4d4504
c99270dc6b94548edc0bbfe0c6eaaa45087cfe10
3bfebc03b1a3b5f5a1444ea020400d0fdc3e19382faba38e8db0a66d9ac5f258
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 01 Dec 2023 22:39:30 GMT
Last-Modified: Fri, 01 Dec 2023 21:41:40 GMT
Server: ECAcc (ska/F791)
X-Cache: Miss from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: TIQY0-Ps6YDn-23-F5QqDJ9eIPxKnaRu278W3FskCPNZubNgGozf9Q==
Age: 3470
pdt.tradedoubler.com/click?a=332280&p=302669&epi=62AE01HGKRJY8D2PX2PMMET8D24SJD&url=https%3A%2F%2Ffarmasiet.no
302 Found 3.8 kB URL User Request POST HTTP/2 pdt.tradedoubler.com/click?a=332280&p=302669&epi=62AE01HGKRJY8D2PX2PMMET8D24SJD&url=https%3A%2F%2Ffarmasiet.no
IP
Certificate IssuerAmazon
Subject*.tradedoubler.com
FingerprintE6:E6:D1:02:6C:9A:BE:00:C1:0E:B5:BC:61:D1:C1:FD:74:73:C4:9E
ValidityWed, 06 Sep 2023 00:00:00 GMT - Sat, 05 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (422)
Hash d03372dde6ece8193883b192d68f8019
268ccd9a77dfbc9ee067d38cb02baa90468cd309
81d803179d316e1d7143b6ea6c315f5b9cfc1dd4955746e3ec0d5398bfea0d42
GET /click?a=332280&p=302669&epi=62AE01HGKRJY8D2PX2PMMET8D24SJD&url=https%3A%2F%2Ffarmasiet.no HTTP/1.1
Host: pdt.tradedoubler.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:30 GMT
content-type: text/html; charset=ISO-8859-1
content-length: 3769
server: TXServerHttp
access-control-allow-origin: *
cache-control: private, max-age=0
pragma: no-cache
referrer-policy: origin
X-Firefox-Spdy: h2
vht.tradedoubler.com/fp/fpjs.js
200 OK 7.7 kB URL GET HTTP/1.1 vht.tradedoubler.com/fp/fpjs.js
IP
Requested by https://pdt.tradedoubler.com/click?a=332280&p=302669&epi=62AE01HGKRJY8D2PX2PMMET8D24SJD&url=https%3A%2F%2Ffarmasiet.no
Certificate IssuerAmazon
Subject*.tradedoubler.com
Fingerprint41:40:2C:03:9D:93:3B:A8:63:57:07:D9:2D:88:98:4F:16:EE:A9:EE
ValidityTue, 14 Nov 2023 00:00:00 GMT - Thu, 12 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (19960)
Hash e967d9e86ec8ff44db0e24766ced642f
bd488430b8b4283eb82afda802a075cf841c29d3
040dff2a9b3d08a4654dec367d93f2b994a8ea0e573950d5561c0022af4a3c3a
GET /fp/fpjs.js HTTP/1.1
Host: vht.tradedoubler.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 7718
Connection: keep-alive
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 09 Oct 2023 08:54:59 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Date: Thu, 30 Nov 2023 14:27:06 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0alg80O2MSvqQp7sxjPyNLakrTTE9MrTr4VnL-TVfvO7a84_R5fX2w==
Age: 115945
X-XSS-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
pdt.tradedoubler.com/favicon.ico
404 Not Found 193 B URL GET HTTP/2 pdt.tradedoubler.com/favicon.ico
IP
Requested by https://pdt.tradedoubler.com/click?a=332280&p=302669&epi=62AE01HGKRJY8D2PX2PMMET8D24SJD&url=https%3A%2F%2Ffarmasiet.no
Certificate IssuerAmazon
Subject*.tradedoubler.com
FingerprintE6:E6:D1:02:6C:9A:BE:00:C1:0E:B5:BC:61:D1:C1:FD:74:73:C4:9E
ValidityWed, 06 Sep 2023 00:00:00 GMT - Sat, 05 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 523cbcb278f348bbe64563fe4cc9f435
5a436481b66ccb6dff53c5e1a14c08ef0b4a8e4b
37b6ca25983f4126bd10c135684bc8f421c8b48a5bdb75b5ad69c849035a84f4
GET /favicon.ico HTTP/1.1
Host: pdt.tradedoubler.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Fri, 01 Dec 2023 22:39:31 GMT
content-type: text/html; charset=ISO-8859-1
content-length: 193
X-Firefox-Spdy: h2
pdt.tradedoubler.com/click?a=332280&p=302669&epi=62AE01HGKRJY8D2PX2PMMET8D24SJD&url=https%3A%2F%2Ffarmasiet.no
302 Found 370 B URL User Request POST HTTP/2 pdt.tradedoubler.com/click?a=332280&p=302669&epi=62AE01HGKRJY8D2PX2PMMET8D24SJD&url=https%3A%2F%2Ffarmasiet.no
IP
Certificate IssuerAmazon
Subject*.tradedoubler.com
FingerprintE6:E6:D1:02:6C:9A:BE:00:C1:0E:B5:BC:61:D1:C1:FD:74:73:C4:9E
ValidityWed, 06 Sep 2023 00:00:00 GMT - Sat, 05 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (370), with no line terminators
Hash aa405cd84dca70a5185857e99bca1043
e510094c492181fe6c7eef46352a6215dbd69a3b
affd412d7012b7d42a1193761bab8c773023833be7fde4eaee5ee6f0c16278d7
POST /click?a=332280&p=302669&epi=62AE01HGKRJY8D2PX2PMMET8D24SJD&url=https%3A%2F%2Ffarmasiet.no HTTP/1.1
Host: pdt.tradedoubler.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
Content-Type: application/x-www-form-urlencoded
Content-Length: 87
Origin: https://pdt.tradedoubler.com
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Fri, 01 Dec 2023 22:39:31 GMT
content-type: text/html; charset=ISO-8859-1
content-length: 370
location: https://www.farmasiet.no/td_redirect?tduid=925b9dcad89158037c3acf70973c1825&url=https://farmasiet.no?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
set-cookie: EH_0=1z11z1z14Lz2NEqkvz1O4TyaYkHcfryFONKOVw6hwO_Q.ZO1QC6QMOZWCpWH%79BVA3wCYDaMWniFPaofwcOSCOnWYWtQJsjrYdp.3VV1%79srucoXcQnupOG7nYoVn3UsKG_;expires=Sat, 30-Nov-2024 22:39:31 GMT;path=/;domain=.tradedoubler.com
GUID=1z11zz14Lz1xvfjHz925b9dcad89158037c3acf70973c1825;expires=Sat, 30-Nov-2024 22:39:31 GMT;path=/;domain=.tradedoubler.com
server: TXServerHttp
access-control-allow-origin: *
cache-control: private, max-age=0
pragma: no-cache
referrer-policy: origin
X-Firefox-Spdy: h2
www.farmasiet.no/td_redirect?tduid=925b9dcad89158037c3acf70973c1825&url=https://farmasiet.no?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
302 Found 1.3 kB URL User Request GET HTTP/2 www.farmasiet.no/td_redirect?tduid=925b9dcad89158037c3acf70973c1825&url=https://farmasiet.no?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
IP
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1123), with CRLF line terminators
Hash 6bf4818860a5afe94afe24ba2d315a1a
3050f8b3fbfceb25112a816fafc3cac62688c4eb
1bfe65706c1d0286248a1562b100bb8d73727933ba1627ccc2dd38ee7521cecd
GET /td_redirect?tduid=925b9dcad89158037c3acf70973c1825&url=https://farmasiet.no?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 01 Dec 2023 22:39:31 GMT
content-type: text/html; charset=utf-8
content-length: 1281
location: https://farmasiet.no?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
access-control-expose-headers: Request-Context
cache-control: no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
set-cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; expires=Fri, 09-Feb-2024 09:19:31 GMT; path=/; HttpOnly
TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; expires=Sat, 30-Nov-2024 22:39:31 GMT; path=/
ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2;Path=/;HttpOnly;Secure;Domain=www.farmasiet.no
ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.farmasiet.no
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82eed39d8db5569f-OSL
X-Firefox-Spdy: h2
farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
301 Moved Permanently 0 B URL User Request GET HTTP/1.0 farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
IP
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo HTTP/1.1
Host: farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 301 Moved Permanently
Location: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
200 OK 44 kB URL User Request GET HTTP/2 www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
IP
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (41429), with CRLF, LF line terminators
Hash 8965fe8c8aeef4bc1bf6a1ee08b943a7
c8800cc4a8605617b0627f8f6adbc10a2966489e
f2ee63a4566a6903c49ae538c08355b8ed9834439aa22875f3489770a0d4b87c
GET /?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
DNT: 1
Connection: keep-alive
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:31 GMT
content-type: text/html; charset=utf-8
content-length: 43793
access-control-expose-headers: Request-Context
cache-control: no-cache, no-store
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82eed39e7e5a569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/runtime.js?v=1.0.35123.0
200 OK 974 B URL GET HTTP/2 www.farmasiet.no/dist/runtime.js?v=1.0.35123.0
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type ASCII text, with very long lines (1497)
Hash ec15ea201ee7f20af3637f99c6d6a3c9
3fbec55994d906f3daf249083dc85f395585a35f
67a9dda9c6a53aae81d6ae865640a58ebdf9a2c6cbbf92271e40f7de6fc9611b
GET /dist/runtime.js?v=1.0.35123.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: application/x-javascript
content-length: 974
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0922d7aa17da1:0"
last-modified: Wed, 15 Nov 2023 10:02:28 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 205621
expires: Wed, 29 May 2024 22:39:32 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 82eed3a26971569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/polyfills.js?v=1.0.35123.0
200 OK 1.7 kB URL GET HTTP/2 www.farmasiet.no/dist/polyfills.js?v=1.0.35123.0
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type ASCII text, with very long lines (3110)
Hash c20254f34844174b4b8b8d08f7cfab75
aa8476f7897da70730a4d8761883f97cf4e0e8e6
0042207efca35e3243570fffaa5f3bb8b957ebb1cfb20a6b4bf5b51f512dab64
GET /dist/polyfills.js?v=1.0.35123.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: application/x-javascript
content-length: 1660
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0922d7aa17da1:0"
last-modified: Wed, 15 Nov 2023 10:02:28 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 205621
expires: Wed, 29 May 2024 22:39:32 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 82eed3a26975569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/vendors~adminPortal~checkout~cms~filters.js?v=1.0.35123.0
200 OK 43 kB URL GET HTTP/2 www.farmasiet.no/dist/vendors~adminPortal~checkout~cms~filters.js?v=1.0.35123.0
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0b1dde35f7edc517c868c64a0efee061
00b854b318d1b686dbd69d2171247b0513137929
9463098e14b22e4a3661ab39219cdd4930297ff6290fa18f820d7e6b1a64598a
GET /dist/vendors~adminPortal~checkout~cms~filters.js?v=1.0.35123.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: application/x-javascript
content-length: 43042
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0922d7aa17da1:0"
last-modified: Wed, 15 Nov 2023 10:02:28 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 205621
expires: Wed, 29 May 2024 22:39:32 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 82eed3a2898d569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/libs.js?v=1.0.35123.0
200 OK 258 B URL GET HTTP/2 www.farmasiet.no/dist/libs.js?v=1.0.35123.0
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
Hash 47b8b62bcd7bf011092c5f5320853311
84593617429d874c058e92bc7660fdd9d79eab72
3aff20b02a98b49943e1e1b7b86db0544b8caec0dd8b1572cca133c8c633972f
GET /dist/libs.js?v=1.0.35123.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: application/x-javascript
content-length: 258
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0922d7aa17da1:0"
last-modified: Wed, 15 Nov 2023 10:02:28 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 205621
expires: Wed, 29 May 2024 22:39:32 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 82eed3a28997569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/vendors~libs.js?v=1.0.35123.0
200 OK 6.1 kB URL GET HTTP/2 www.farmasiet.no/dist/vendors~libs.js?v=1.0.35123.0
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type ASCII text, with very long lines (12518)
Hash 45fb038e3d3cba7c1217abc30bdcfc93
8865d33e84a2221f59fc582905b5d361098c3b27
1963ed9e9566af7e3fe5388ed725d4459c7361d7c284f2a2ec15400f2dc29fe5
GET /dist/vendors~libs.js?v=1.0.35123.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: application/x-javascript
content-length: 6108
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0922d7aa17da1:0"
last-modified: Wed, 15 Nov 2023 10:02:28 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 75769
expires: Wed, 29 May 2024 22:39:32 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 82eed3a2999f569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/Resources/Translations_no.js?v=1.0.35123.0
200 OK 19 kB URL GET HTTP/2 www.farmasiet.no/Resources/Translations_no.js?v=1.0.35123.0
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type Unicode text, UTF-8 text, with very long lines (331), with CRLF line terminators
Hash 415c863180e13e38c22eb030d73ddcee
b79f897d10de00e24199032a2388745bf1b49085
4e0675b2971f7f4f1940e8d1499669046ae99eeffc0fc3e1e70f37a94789f529
GET /Resources/Translations_no.js?v=1.0.35123.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: application/x-javascript
content-length: 18772
access-control-expose-headers: Request-Context
cache-control: public, max-age=86400
content-encoding: gzip
etag: "0ccb12f631dda1:0"
last-modified: Wed, 22 Nov 2023 16:44:40 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: HIT
age: 32818
expires: Sat, 02 Dec 2023 22:39:32 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 82eed3a299a3569f-OSL
X-Firefox-Spdy: h2
ocsp.int-r1.certainly.com/
523 B URL ocsp.int-r1.certainly.com/
IP
Hash 67cd2812b41f9a4e9ad5b8af188430c7
12295379728c1a54536337e45961613d71be9104
4e2825e45b75294553f615c66a956861cd5217744f31c89516a868b6ed139d37
POST / HTTP/1.1
Host: ocsp.int-r1.certainly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 523
Cache-Control: max-age=262799, public, no-transform, must-revalidate
Content-Type: application/ocsp-response
Edge-Cache-Tag: b2
Etag: "4E2825E45B75294553F615C66A956861CD5217744F31C89516A868B6ED139D37"
Expires: Mon, 04 Dec 2023 20:59:59 UTC
Last-Modified: Thu, 30 Nov 2023 21:00:00 UTC
Accept-Ranges: bytes
Date: Fri, 01 Dec 2023 22:39:32 GMT
Via: 1.1 varnish
Age: 9573
X-Served-By: cache-bma1672-BMA
X-Cache: HIT
X-Cache-Hits: 249
X-Timer: S1701470372.401533,VS0,VE0
resept.farmasiet.no/inbox/unread-messages-badge.html
200 OK 1.0 kB URL GET HTTP/1.1 resept.farmasiet.no/inbox/unread-messages-badge.html
IP
ASN #2116 Globalconnect As
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1489), with no line terminators
Hash c6516ad67fb8ee60355cf77a2b6b42fb
fb20dedb1969499c00d7cb018cb7575cd7d7fc9e
b40edc309e55b06a488c1e2ae873396ec6e28f2feb40a35eff68491b91c2526f
GET /inbox/unread-messages-badge.html HTTP/1.1
Host: resept.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
content-type: text/html
last-modified: Mon, 11 Jul 2022 07:04:12 GMT
accept-ranges: bytes
etag: W/"07e756cf494d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Fri, 01 Dec 2023 22:39:31 GMT
strict-transport-security: max-age=16000000; preload;
transfer-encoding: chunked
vary: Accept-Encoding
content-encoding: gzip
resept.farmasiet.no/inbox/config/config.json?v=1701470377611
200 OK 67 B URL GET HTTP/1.1 resept.farmasiet.no/inbox/config/config.json?v=1701470377611
IP
ASN #2116 Globalconnect As
Requested by https://resept.farmasiet.no/inbox/unread-messages-badge.html
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type JSON data\012- , ASCII text, with CRLF line terminators
Hash 343a57f516de50451282a140170844a4
948729ba6711078ba5106997bf265838c9a08247
f62cce30b4f801b7e446a878713f8d7de05f16aa094f7fd8af10cca2b3e828e7
GET /inbox/config/config.json?v=1701470377611 HTTP/1.1
Host: resept.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://resept.farmasiet.no/inbox/unread-messages-badge.html
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
content-type: application/json
last-modified: Mon, 11 Jul 2022 06:57:44 GMT
accept-ranges: bytes
etag: W/"0643185f394d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Fri, 01 Dec 2023 22:39:31 GMT
strict-transport-security: max-age=16000000; preload;
transfer-encoding: chunked
vary: Accept-Encoding
content-encoding: gzip
az416426.vo.msecnd.net/scripts/a/ai.0.js
200 OK 22 kB URL GET HTTP/2 az416426.vo.msecnd.net/scripts/a/ai.0.js
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerDigiCert Inc
Subject*.vo.msecnd.net
Fingerprint0E:7D:A8:CD:FE:61:1E:46:97:A3:57:99:70:DA:E0:59:1D:34:04:80
ValidityFri, 05 May 2023 00:00:00 GMT - Sun, 28 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1dd63de72cf1f702324245441844be13
58a8bdcdcb398af7db424357df70df18e7b30e9d
5201c813c37a4168cc5c20c701d4391fd0a55625f97eb9f263a74fb52b52fd0e
GET /scripts/a/ai.0.js HTTP/1.1
Host: az416426.vo.msecnd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 703
cache-control: public, max-age=1800
content-md5: HdY95yzx9wIyQkVEGES+Ew==
content-type: application/x-javascript
date: Fri, 01 Dec 2023 22:39:32 GMT
etag: 0x8D8E461DA1A5889
expires: Fri, 01 Dec 2023 23:09:32 GMT
last-modified: Thu, 11 Mar 2021 07:46:59 GMT
server: ECAcc (ska/F773)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-meta-lastmodified: 2020-10-01 19:31:04
x-ms-request-id: 7a8b3fdf-c01e-00aa-02a5-2450f8000000
x-ms-version: 2009-09-19
content-length: 22495
X-Firefox-Spdy: h2
polyfill.io/v3/polyfill.min.js?features=Promise%2CPromise.prototype.finally%2CSet%2CMap%2Cfetch%2CSymbol%2CArray.prototype.find%2CArray.prototype.some%2CArray.prototype.every%2CArray.prototype.forEach%2CArray.prototype.findIndex%2CString.prototype.includes%2CString.prototype.startsWith%2CCustomEvent%2Ces7%2CURLSearchParams%2CElement.prototype.inert%2CObject.values%2CObject.entries%2Cfetch%2CString.prototype.endsWith%2CElement.prototype.closest
200 OK 3.0 kB URL GET HTTP/2 polyfill.io/v3/polyfill.min.js?features=Promise%2CPromise.prototype.finally%2CSet%2CMap%2Cfetch%2CSymbol%2CArray.prototype.find%2CArray.prototype.some%2CArray.prototype.every%2CArray.prototype.forEach%2CArray.prototype.findIndex%2CString.prototype.includes%2CString.prototype.startsWith%2CCustomEvent%2Ces7%2CURLSearchParams%2CElement.prototype.inert%2CObject.values%2CObject.entries%2Cfetch%2CString.prototype.endsWith%2CElement.prototype.closest
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerCertainly
Subjectpolyfill.io
Fingerprint7B:71:B9:09:21:CD:DE:59:EF:D8:2E:5A:FF:C4:E2:F0:94:CB:65:F0
ValiditySun, 12 Nov 2023 08:43:21 GMT - Tue, 12 Dec 2023 08:43:20 GMT
File type ASCII text, with very long lines (8469)
Hash bcbdbbd87f34809fa38ce8a09930bb07
d9ab9aa4f66a8eef9afe9b5d569321c75881c5b4
c93f1c0bb328c6fd5ad3edae26288320a3257694746b6ef25e858578d7a62f05
GET /v3/polyfill.min.js?features=Promise%2CPromise.prototype.finally%2CSet%2CMap%2Cfetch%2CSymbol%2CArray.prototype.find%2CArray.prototype.some%2CArray.prototype.every%2CArray.prototype.forEach%2CArray.prototype.findIndex%2CString.prototype.includes%2CString.prototype.startsWith%2CCustomEvent%2Ces7%2CURLSearchParams%2CElement.prototype.inert%2CObject.values%2CObject.entries%2Cfetch%2CString.prototype.endsWith%2CElement.prototype.closest HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
content-type: text/javascript; charset=UTF-8
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800, immutable
content-encoding: gzip
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubdomains; preload
referrer-policy: origin-when-cross-origin
timing-allow-origin: *
normalized-user-agent: firefox/105.0.0
detected-user-agent: Firefox/105.0.
accept-ranges: bytes
date: Fri, 01 Dec 2023 22:39:32 GMT
age: 0
vary: User-Agent, Accept-Encoding
server-timing: MISS-CLUSTER, fastly;desc="Edge time";dur=519
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3025
X-Firefox-Spdy: h2
ocsp.int-r1.certainly.com/
523 B URL ocsp.int-r1.certainly.com/
IP
Hash 67cd2812b41f9a4e9ad5b8af188430c7
12295379728c1a54536337e45961613d71be9104
4e2825e45b75294553f615c66a956861cd5217744f31c89516a868b6ed139d37
POST / HTTP/1.1
Host: ocsp.int-r1.certainly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 523
Cache-Control: max-age=262799, public, no-transform, must-revalidate
Content-Type: application/ocsp-response
Edge-Cache-Tag: b2
Etag: "4E2825E45B75294553F615C66A956861CD5217744F31C89516A868B6ED139D37"
Expires: Mon, 04 Dec 2023 20:59:59 UTC
Last-Modified: Thu, 30 Nov 2023 21:00:00 UTC
Accept-Ranges: bytes
Date: Fri, 01 Dec 2023 22:39:33 GMT
Via: 1.1 varnish
Age: 9574
X-Served-By: cache-bma1667-BMA
X-Cache: HIT
X-Cache-Hits: 245
X-Timer: S1701470373.051411,VS0,VE0
www.farmasiet.no/api/cart?v=
200 OK 540 B URL GET HTTP/2 www.farmasiet.no/api/cart?v=
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type JSON data\012- , ASCII text, with very long lines (823), with no line terminators
Hash b3610eed11b0eaf67ddd3d4717fccbbf
68de72ec66e4c59f996e2caf698c211f6915e829
0e3866b80b534961acd4f4060a9295f05cd3716f29e7ae363e8f6dfca94e7194
GET /api/cart?v= HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
X-Requested-With: XMLHttpRequest
__RequestVerificationToken:
experimentation-path: /
experimentation-userdata: {"device":"Laptop"}
DNT: 1
Connection: keep-alive
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:33 GMT
content-type: application/json; charset=utf-8
content-length: 540
access-control-expose-headers: Request-Context
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82eed3aa3fa5569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/brand-logos-_-bw/ogx.jpg?w=112&quality=100&format=png
200 OK 1.8 kB URL GET HTTP/2 www.farmasiet.no/globalassets/brand-logos-_-bw/ogx.jpg?w=112&quality=100&format=png
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash b52fbfa40cd321fa9e71bbbe7f32c8fb
34d4b3ed9a9bc3e2015c8c443324f2e39b6be2a4
f174853ecd105a408d85b1d4c718f8a2cc8e4afb0dd42bc17c2b3c1246555f8d
GET /globalassets/brand-logos-_-bw/ogx.jpg?w=112&quality=100&format=png HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30500703
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3321
content-disposition: inline; filename="ogx.webp"
expires: Mon, 18 Nov 2024 23:04:35 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Sun, 19 Nov 2023 23:04:35 GMT
cf-cache-status: HIT
age: 844559
server: cloudflare
cf-ray: 82eed3a2696f569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/assets/fonts/TTCommons-Bold.woff2
200 OK 63 kB URL GET HTTP/2 www.farmasiet.no/dist/assets/fonts/TTCommons-Bold.woff2
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type gzip compressed data, from Unix\012- data
Hash d0b2a09ff437dbf571184dd910c34f5c
2c824c57701d960c21905d773516eef203f543ed
29c89795a2854454aeca0b08d7de6b6e32f50bf90394711eecc9dee47fce2db2
GET /dist/assets/fonts/TTCommons-Bold.woff2 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
DNT: 1
Connection: keep-alive
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: application/font-woff
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
etag: W/"0c29bdc3b3da1:0"
last-modified: Fri, 20 Oct 2023 09:57:40 GMT
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 746805
expires: Wed, 29 May 2024 22:39:32 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 82eed3a218fc569f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.farmasiet.no/dist/assets/images/apple-touch-icon.png?v=1.0.35123.0
200 OK 110 B URL GET HTTP/2 www.farmasiet.no/dist/assets/images/apple-touch-icon.png?v=1.0.35123.0
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 564b7055d9ec9a5307091e5674afa005
d82569c564540f23c4e987c525e3a83bc3c4d050
26627641a815c38eed0d34102995db288c5084917ad132724c3630f7b51d8e38
GET /dist/assets/images/apple-touch-icon.png?v=1.0.35123.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:33 GMT
content-type: image/webp
content-length: 110
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=474
content-disposition: inline; filename="apple-touch-icon.webp"
etag: "0922d7aa17da1:0"
last-modified: Wed, 15 Nov 2023 10:02:28 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
cf-cache-status: HIT
age: 205619
expires: Wed, 29 May 2024 22:39:33 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 82eed3ab88b6569f-OSL
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/engine.js
200 OK 41 kB URL GET HTTP/2 ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/engine.js
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerAmazon
Subject*.powerreviews.com
FingerprintF7:EF:6E:D1:41:8D:9A:B0:A0:3B:E8:31:31:B9:3A:56:28:B5:45:AB
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 94336c8e901a832a3c7b63361378b39b
c13cab9eb04cfdcf4d50af14cc9dfdd8797c2171
4fbbd3b1de9b03476746bcd37c770c45169a6449e25abc7da4b0b3d340d26db8
GET /tag-builds/10446/4.1/js/chunks/engine.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 09 Nov 2023 17:04:36 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Thu, 09 Nov 2023 17:04:02 GMT
etag: W/"da17f8785083d222a583c97e79eb45d7"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: PowerReviews
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aK7RcjkOfNQmWToRw7zSQslJQxUk33Fr33WuViqIfOTmBAKKb9fn2w==
age: 1920898
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10446/4.1/css/styles.css
200 OK 58 kB URL GET HTTP/2 ui.powerreviews.com/tag-builds/10446/4.1/css/styles.css
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerAmazon
Subject*.powerreviews.com
FingerprintF7:EF:6E:D1:41:8D:9A:B0:A0:3B:E8:31:31:B9:3A:56:28:B5:45:AB
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65444)
Hash 18567d15985f57a350b5d3890caaa1dc
eaf22e3bad5e612b7aabef12f73f078d78d81f34
d2ef0ac2e5c442b7b265c7c24a502603cff85d664577a1d243346e1733a1af66
GET /tag-builds/10446/4.1/css/styles.css HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Thu, 09 Nov 2023 17:04:36 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Thu, 09 Nov 2023 17:04:01 GMT
etag: W/"15e97ca1a1a2fe412607271287bcd257"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: PowerReviews
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5KXw7PaO-kZKjgRvzIfFp03QsF96yh3oVFfQpIzeWfRfqBotjtJamw==
age: 1920898
X-Firefox-Spdy: h2
www.farmasiet.no/api/products/recommendations
200 OK 6.1 kB URL POST HTTP/2 www.farmasiet.no/api/products/recommendations
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (36318), with no line terminators
Hash 15b0f5080b69da846e46f2eb288a5f4f
4567afa3eac2f2c85355f6720154e6cd35720769
9e97f67e692525dd4b2a85c874723ae275fa7ff5ae07dc6927a5db126149d709
POST /api/products/recommendations HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
X-Requested-With: XMLHttpRequest
__RequestVerificationToken:
Content-Type: application/json
experimentation-path: /
experimentation-userdata: {"device":"Laptop"}
Content-Length: 1119
Origin: https://www.farmasiet.no
DNT: 1
Connection: keep-alive
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:33 GMT
content-type: application/json; charset=utf-8
content-length: 6128
access-control-expose-headers: Request-Context
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
set-cookie: EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; Max-Age=1800; Path=/
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82eed3ac393b569f-OSL
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
200 OK 0 B URL OPTIONS HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerMicrosoft Corporation
Subjectin.applicationinsights.azure.com
FingerprintCE:85:30:B5:89:C6:BD:92:4B:D1:ED:5E:FD:90:B1:8C:21:1E:75:73
ValiditySat, 02 Sep 2023 07:33:18 GMT - Tue, 27 Aug 2024 07:33:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,sdk-context
Referer: https://www.farmasiet.no/
Origin: https://www.farmasiet.no
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-methods: POST
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 22:39:34 GMT
content-length: 0
X-Firefox-Spdy: h2
dc.services.visualstudio.com/v2/track
200 OK 96 B URL OPTIONS HTTP/2 dc.services.visualstudio.com/v2/track
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerMicrosoft Corporation
Subjectin.applicationinsights.azure.com
FingerprintCE:85:30:B5:89:C6:BD:92:4B:D1:ED:5E:FD:90:B1:8C:21:1E:75:73
ValiditySat, 02 Sep 2023 07:33:18 GMT - Tue, 27 Aug 2024 07:33:18 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 2a18b6c7490747147548b78364f2d626
baf50351585d1f86abcefaa65ee313e36277abf1
ad31fa45ae8f4ff683956673cd2f028c8da7b7aeec5721f9ef631b3488f2b6f0
POST /v2/track HTTP/1.1
Host: dc.services.visualstudio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Sdk-Context: appId
Content-Length: 2213
Origin: https://www.farmasiet.no
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-ms-session-id: 731CC8A8-22AA-4E9C-B663-F14E0D730778
strict-transport-security: max-age=31536000
access-control-allow-headers: Origin, X-Requested-With, Content-Name, Content-Type, Accept, Cache-Control, Sdk-Context
access-control-allow-origin: *
access-control-max-age: 3600
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 22:39:34 GMT
content-length: 96
X-Firefox-Spdy: h2
consent.cookiebot.com/uc.js
200 OK 34 kB URL GET HTTP/2 consent.cookiebot.com/uc.js
IP
ASN #20940 Akamai International B.V.
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerDigiCert Inc
Subjectconsent.cookiebot.com
Fingerprint56:33:CA:77:EA:BC:73:51:03:77:3B:70:7C:00:AF:45:02:85:85:98
ValidityThu, 06 Apr 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Hash aac56c7f29e16e1e97e0130f5e2fa1ab
1b2c81da14aac3caf2ce108ed24a4f73a5255c55
e670474d3ff2eb57099f8590c87e2fef7478ba7971bc2d36c2b156ce3fd22c47
GET /uc.js HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 29 Nov 2023 14:10:00 GMT
accept-ranges: bytes
etag: "5c27a8bdcd22da1:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 33865
cache-control: public, max-age=157
expires: Fri, 01 Dec 2023 22:42:15 GMT
date: Fri, 01 Dec 2023 22:39:38 GMT
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NGZC2LS
200 OK 97 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NGZC2LS
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (20827)
Hash 876097dd31a21b35e2f9c55cd92d639f
96c2b76ac7384f2d288d235c619ba195bc515765
61dd62ef76faec965dfc83e15f9d83632847311515df92801b6bc26fc6e0c6f9
GET /gtm.js?id=GTM-NGZC2LS HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 01 Dec 2023 22:39:38 GMT
expires: Fri, 01 Dec 2023 22:39:38 GMT
cache-control: private, max-age=900
last-modified: Fri, 01 Dec 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 97362
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
consentcdn.cookiebot.com/consentconfig/4a7a6781-d980-495f-b657-4733ab69c189/farmasiet.no/configuration.js
200 OK 368 B URL GET HTTP/2 consentcdn.cookiebot.com/consentconfig/4a7a6781-d980-495f-b657-4733ab69c189/farmasiet.no/configuration.js
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerDigiCert Inc
Subject*.cookiebot.com
Fingerprint88:F1:D8:EB:8E:DD:6F:53:9A:31:C3:FE:59:0E:68:FE:24:2F:84:EB
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (1612), with no line terminators
Hash 507a5b9d8da2813f935b7d3e04decca2
abe4f41d810cc6470edc68ad4b2449b54d31eb5f
e3e65b93788f5efa6bc1981b78554e67f7f4d63904d2f13d7bf9c3aa8b1ce294
GET /consentconfig/4a7a6781-d980-495f-b657-4733ab69c189/farmasiet.no/configuration.js HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "507a5b9d8da2813f935b7d3e04decca2:1700280764.893378"
last-modified: Sat, 18 Nov 2023 04:12:44 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=23485
expires: Sat, 02 Dec 2023 05:11:03 GMT
date: Fri, 01 Dec 2023 22:39:38 GMT
content-length: 368
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1701470378895_388255644_282052779_26_888_1_11_21";dur=1
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
invitejs.trustpilot.com/tp.min.js
200 OK 4.1 kB URL GET HTTP/2 invitejs.trustpilot.com/tp.min.js
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerAmazon
Subject*.trustpilot.com
FingerprintED:01:2E:50:4C:98:9B:F1:34:D7:8C:1E:93:45:E6:05:00:3C:47:86
ValidityThu, 02 Feb 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (10478), with no line terminators
Hash 563898f211eec7d81540f8ea50cc7048
454665fc74edcf169efb3719e05d698c0437e940
0ce82ec420dcd4ee39d70a677f039bd2eb2e5e19aa48c4afcd357ab1cfc04a9f
GET /tp.min.js HTTP/1.1
Host: invitejs.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
last-modified: Mon, 28 Nov 2022 07:41:17 GMT
content-encoding: gzip
cache-control: public, max-age=86400
date: Fri, 01 Dec 2023 08:24:46 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kZlZtY2fXg0_X8UCvTqFpABoQMb7kLSTuxMuUst7aJNuxGpuIlDX1g==
age: 51292
X-Firefox-Spdy: h2
consent.cookiebot.com/4a7a6781-d980-495f-b657-4733ab69c189/cc.js?renew=false&referer=www.farmasiet.no&dnt=true&init=false
200 OK 90 kB URL GET HTTP/2 consent.cookiebot.com/4a7a6781-d980-495f-b657-4733ab69c189/cc.js?renew=false&referer=www.farmasiet.no&dnt=true&init=false
IP
ASN #20940 Akamai International B.V.
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerDigiCert Inc
Subjectconsent.cookiebot.com
Fingerprint56:33:CA:77:EA:BC:73:51:03:77:3B:70:7C:00:AF:45:02:85:85:98
ValidityThu, 06 Apr 2023 00:00:00 GMT - Sat, 06 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65499)
Hash 83fa1a3960a3d342e63ee785578f8433
629294cd20fbdbda5d7ad4aaa6291c733d2cd649
3a316464e8894b088f87eb20d308260ac9e8b981baaaca7d7ab2847d402685ca
GET /4a7a6781-d980-495f-b657-4733ab69c189/cc.js?renew=false&referer=www.farmasiet.no&dnt=true&init=false HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=1200
content-type: application/x-javascript; charset=utf-8
content-encoding: gzip
last-modified: Fri, 01 Dec 2023 22:39:38 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 89783
date: Fri, 01 Dec 2023 22:39:38 GMT
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
www.farmasiet.no/images/paracet-tab--500mg-20,35851_860321.png?w=202&h=202&mode=Max&quality=100&crop=124,560,3896,2497&format=jpg
200 OK 106 kB URL GET HTTP/2 www.farmasiet.no/images/paracet-tab--500mg-20,35851_860321.png?w=202&h=202&mode=Max&quality=100&crop=124,560,3896,2497&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 202x104, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 106 kB (105957 bytes)
Hash 7fecab9fc94efa5a497bf2b495074cf0
20a7b266dd097283930ba7fdd17580e865bcd7a3
ec05478f6ad92911a72bd35b3e5a83454bae5f87e4d88d1d9f90712e3f531e7d
GET /images/paracet-tab--500mg-20,35851_860321.png?w=202&h=202&mode=Max&quality=100&crop=124,560,3896,2497&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:34 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=29922422
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=18708
content-disposition: inline; filename="paracet-tab--500mg-20,35851_860321.webp"
expires: Tue, 12 Nov 2024 06:26:36 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Mon, 13 Nov 2023 06:26:36 GMT
cf-cache-status: HIT
age: 581671
server: cloudflare
cf-ray: 82eed3b29e1d569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/assets/fonts/TTCommons-Medium.woff2
200 OK 62 kB URL GET HTTP/2 www.farmasiet.no/dist/assets/fonts/TTCommons-Medium.woff2
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type Web Open Font Format (Version 2), TrueType, length 62404, version 0.0\012- data
Hash e9a2ea77d189d00c4f14067d9204db6e
6105e5d9ec50b5005f4e6b2347b59408b1b835db
57733c2a54e5adb8568ccd4e14eae5010625db61020645a3a977b143ae1fc45c
GET /dist/assets/fonts/TTCommons-Medium.woff2 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
DNT: 1
Connection: keep-alive
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: application/font-woff
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
etag: W/"0c29bdc3b3da1:0"
last-modified: Fri, 20 Oct 2023 09:57:40 GMT
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 661509
expires: Wed, 29 May 2024 22:39:32 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 82eed3a23920569f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.farmasiet.no/images/ibux-tab-400mg-20,35833_860029.png?w=202&h=202&mode=Max&quality=100&crop=112,542,3890,2488&format=jpg
200 OK 5.2 kB URL GET HTTP/2 www.farmasiet.no/images/ibux-tab-400mg-20,35833_860029.png?w=202&h=202&mode=Max&quality=100&crop=112,542,3890,2488&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 202x104, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b265b0ee22099f017e3323c0b748b190
71554ea9d0b8a9a8173d0d9c21bd47b10aac6d0f
fb3ecb90d06126101ab2863c233d79c4492563d3e830341030f0646b6c29b917
GET /images/ibux-tab-400mg-20,35833_860029.png?w=202&h=202&mode=Max&quality=100&crop=112,542,3890,2488&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:34 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=29672642
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=18920
content-disposition: inline; filename="ibux-tab-400mg-20,35833_860029.webp"
expires: Sat, 09 Nov 2024 09:03:36 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Fri, 10 Nov 2023 09:03:36 GMT
cf-cache-status: HIT
age: 752943
server: cloudflare
cf-ray: 82eed3b29e20569f-OSL
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=a5e46e07-fec9-4183-9c9d-b98972d79d05
200 OK 10 kB URL GET HTTP/2 static.zdassets.com/ekr/snippet.js?key=a5e46e07-fec9-4183-9c9d-b98972d79d05
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerLet's Encrypt
Subjectzdassets.com
Fingerprint5F:75:10:F4:97:EA:C8:48:F9:4F:E6:19:19:A3:13:24:44:C1:E7:3C
ValidityMon, 23 Oct 2023 13:35:25 GMT - Sun, 21 Jan 2024 13:35:24 GMT
File type ASCII text, with very long lines (10187), with no line terminators
Hash 42d94c325a0b012e41f9c3907853625a
567dbe8e0b61115deb7c33947f706d4e51c3ab49
9f22f6e9d4852f8be0706b62fbd0eba20f6cb56171def5e387b2d95fcd07df01
GET /ekr/snippet.js?key=a5e46e07-fec9-4183-9c9d-b98972d79d05 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:38 GMT
content-type: application/javascript
x-amz-id-2: OdnBjVcC5xsQvyjtpPVBe21NpgZXl51NRJfLydbGvh5Gu9AdfuYJ4+/g1Hhtqo28e16NzYJZ+wk=
x-amz-request-id: SJN8N1JDMTD43WG0
x-amz-replication-status: COMPLETED
last-modified: Wed, 09 Aug 2023 01:01:02 GMT
etag: W/"42d94c325a0b012e41f9c3907853625a"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: hKEbdq289Xo7bHrM.yPFOdJ37r5nFwfe
cf-cache-status: HIT
age: 12
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rdhqJOUQ%2Fn5M%2BlK%2FttIISzyx0XRY2DDYUmWDwOC3ag%2B7sP1tsRUWuktfpAxxH5olTBPS7QDnn3nC%2BTPVuKzCJmh1Y9K60G%2FspLBkguWnmKNf4EbEEpJhONDLDzRpgpjtjBq0HT8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 82eed3ca7c6756c6-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/homepage/simple-image-banners/2023/y23_w47-48_weleda_1470x1060_image_banner.png?w=282&h=204&mode=Crop&quality=90&crop=2,0,1467,1060&format=jpg
200 OK 7.5 kB URL GET HTTP/2 www.farmasiet.no/globalassets/homepage/simple-image-banners/2023/y23_w47-48_weleda_1470x1060_image_banner.png?w=282&h=204&mode=Crop&quality=90&crop=2,0,1467,1060&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 282x204, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 51bc023adfc3010ab81883203658220d
84a5a0512c11d0eeaba16b88d6079f4f58615b4a
d00b7fc25d89276da63ef78757b68706daa03e0564e21e3f9d3f2d2e6105b4ff
GET /globalassets/homepage/simple-image-banners/2023/y23_w47-48_weleda_1470x1060_image_banner.png?w=282&h=204&mode=Crop&quality=90&crop=2,0,1467,1060&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:34 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30697888
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=11587
content-disposition: inline; filename="y23_w47-48_weleda_1470x1060_image_banner.webp"
expires: Thu, 21 Nov 2024 05:51:02 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Wed, 22 Nov 2023 05:51:02 GMT
cf-cache-status: HIT
age: 668583
server: cloudflare
cf-ray: 82eed3ae7b16569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/assets/fonts/TTCommons-Regular.woff2
200 OK 62 kB URL GET HTTP/2 www.farmasiet.no/dist/assets/fonts/TTCommons-Regular.woff2
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type Web Open Font Format (Version 2), TrueType, length 62464, version 0.0\012- data
Hash 1017e3e64949bf3d9c1de82c2829b431
4a9ae031b75785040ea8942d0d01fb1d70953fd9
ec3576c0d824e00a419d5983217a7198d848c98bddf139baed861b3a2f813d36
GET /dist/assets/fonts/TTCommons-Regular.woff2 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
DNT: 1
Connection: keep-alive
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: application/font-woff
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
etag: W/"0c29bdc3b3da1:0"
last-modified: Fri, 20 Oct 2023 09:57:40 GMT
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 328653
expires: Wed, 29 May 2024 22:39:32 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 82eed3a23921569f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/brands/p/physiomer/physiomer-logo.jpg?w=112&quality=100&format=png
200 OK 1.3 kB URL GET HTTP/2 www.farmasiet.no/globalassets/brands/p/physiomer/physiomer-logo.jpg?w=112&quality=100&format=png
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1f380eef4b74e55f2b71c085d59ba286
3e2ce70e1ad1fe946964bfb3007db66e80e4ae28
24e18cd82e2bd269819b8d8dbae072cd4a636607816845d58c41beddfedab384
GET /globalassets/brands/p/physiomer/physiomer-logo.jpg?w=112&quality=100&format=png HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30681508
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3038
content-disposition: inline; filename="physiomer-logo.webp"
expires: Thu, 21 Nov 2024 01:18:00 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Wed, 22 Nov 2023 01:18:00 GMT
cf-cache-status: HIT
age: 492074
server: cloudflare
cf-ray: 82eed3a2696e569f-OSL
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-HWHJP6SP9F&l=dataLayer&cx=c
200 OK 238 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-HWHJP6SP9F&l=dataLayer&cx=c
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3034)
Size 238 kB (237700 bytes)
Hash a56b5c8a23e57c7d096db687110c120b
17e8a905d513df615cefdb0ea46ec27770d408fa
67693c8cee8abd5289b55fbc4567242e62c7aa71297e9c90579a3bbec58abde5
GET /gtag/js?id=G-HWHJP6SP9F&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 01 Dec 2023 22:39:39 GMT
expires: Fri, 01 Dec 2023 22:39:39 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 83207
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.farmasiet.no/dist/assets/fonts/TTCommons-DemiBold.woff2
200 OK 62 kB URL GET HTTP/2 www.farmasiet.no/dist/assets/fonts/TTCommons-DemiBold.woff2
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type Web Open Font Format (Version 2), TrueType, length 61804, version 0.0\012- data
Hash 4eef8e04161c3d41608244fd28db0d45
49d7b0cb86f23f5293907cb7f8d7bfc6ef44d99f
1bf3e0a3b117298281e6ad18c3e3b5f64693151fe2735d43a46335fb90320dae
GET /dist/assets/fonts/TTCommons-DemiBold.woff2 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
DNT: 1
Connection: keep-alive
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: application/font-woff
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
etag: W/"0c29bdc3b3da1:0"
last-modified: Fri, 20 Oct 2023 09:57:40 GMT
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 740897
expires: Wed, 29 May 2024 22:39:32 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 82eed3a2290c569f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/homepage/simple-image-banners/2023/y23_w9-10_koreanske-favoritter2_1470x1060_image_banner.png?w=282&h=204&mode=Crop&quality=90&crop=2,0,1467,1060&format=jpg
200 OK 6.4 kB URL GET HTTP/2 www.farmasiet.no/globalassets/homepage/simple-image-banners/2023/y23_w9-10_koreanske-favoritter2_1470x1060_image_banner.png?w=282&h=204&mode=Crop&quality=90&crop=2,0,1467,1060&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 282x204, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b510971eaa8d294dcd8c52b177601ed9
b4da2e9abd98a6b92fd420503f06011e039fbfb7
08d85d8f94a48dde1331a56dabb8a955d764931d34a35a30977b5fcf420be2d0
GET /globalassets/homepage/simple-image-banners/2023/y23_w9-10_koreanske-favoritter2_1470x1060_image_banner.png?w=282&h=204&mode=Crop&quality=90&crop=2,0,1467,1060&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:34 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30837640
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=10791
content-disposition: inline; filename="y23_w9-10_koreanske-favoritter2_1470x1060_image_banner.webp"
expires: Fri, 22 Nov 2024 20:40:14 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Thu, 23 Nov 2023 20:40:14 GMT
cf-cache-status: HIT
age: 573832
server: cloudflare
cf-ray: 82eed3ae7b1c569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/homepage/simple-image-banners/2023/y23_w47-48_kosthold-og-helse_1470x1060_2.png?w=282&h=204&mode=Crop&quality=90&crop=2,0,1467,1060&format=jpg
200 OK 11 kB URL GET HTTP/2 www.farmasiet.no/globalassets/homepage/simple-image-banners/2023/y23_w47-48_kosthold-og-helse_1470x1060_2.png?w=282&h=204&mode=Crop&quality=90&crop=2,0,1467,1060&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 282x204, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7c5f57f2cdf53030319b667275b7f791
e39d64156dad9a9c55fbc3d4b1460e489cbf64d9
7f13e4ddfacdc4a4d9d8eb2ed2b2464066684ab70bab3dca1c7fd5f4381ee1bb
GET /globalassets/homepage/simple-image-banners/2023/y23_w47-48_kosthold-og-helse_1470x1060_2.png?w=282&h=204&mode=Crop&quality=90&crop=2,0,1467,1060&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:34 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30551950
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=15599
content-disposition: inline; filename="y23_w47-48_kosthold-og-helse_1470x1060_2.webp"
expires: Tue, 19 Nov 2024 13:18:44 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Mon, 20 Nov 2023 13:18:44 GMT
cf-cache-status: HIT
age: 836521
server: cloudflare
cf-ray: 82eed3ae6b0c569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/images/zymelin-nesespr-1mgml-ukons-10,32022_859933.jpg?w=202&h=202&mode=Max&quality=100&crop=639,128,1831,3403&format=jpg
200 OK 3.2 kB URL GET HTTP/2 www.farmasiet.no/images/zymelin-nesespr-1mgml-ukons-10,32022_859933.jpg?w=202&h=202&mode=Max&quality=100&crop=639,128,1831,3403&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 74x202, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 95d8836c22e8196b745efb0200fa164f
e3aafed9e81edaac7cc0fb2171a33b36aef93701
271a404a4c23f5081342deb1fe61d5caf239344dc67c3b721d727529d5af9840
GET /images/zymelin-nesespr-1mgml-ukons-10,32022_859933.jpg?w=202&h=202&mode=Max&quality=100&crop=639,128,1831,3403&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:34 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30536685
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=14168
content-disposition: inline; filename="zymelin-nesespr-1mgml-ukons-10,32022_859933.webp"
expires: Tue, 19 Nov 2024 09:04:19 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Mon, 20 Nov 2023 09:04:19 GMT
cf-cache-status: HIT
age: 835996
server: cloudflare
cf-ray: 82eed3b29e23569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/brands/s/sebamed/sebamed.jpg?w=112&quality=100&format=png
200 OK 906 B URL GET HTTP/2 www.farmasiet.no/globalassets/brands/s/sebamed/sebamed.jpg?w=112&quality=100&format=png
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9b97e910db468ec060d95033813c4d19
6003588ca9b62b8ae4b62dc4e31dcd784b684dbf
19da530b8cf16ae57304174666e0c8f6b46a3c5771a3b334734792e2a5076727
GET /globalassets/brands/s/sebamed/sebamed.jpg?w=112&quality=100&format=png HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30753160
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2003
content-disposition: inline; filename="sebamed.webp"
expires: Thu, 21 Nov 2024 21:12:12 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Wed, 22 Nov 2023 21:12:12 GMT
cf-cache-status: HIT
age: 764495
server: cloudflare
cf-ray: 82eed3a24933569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/brand-logos-_-bw/fiks.jpg?w=112&quality=100&format=png
200 OK 1.6 kB URL GET HTTP/2 www.farmasiet.no/globalassets/brand-logos-_-bw/fiks.jpg?w=112&quality=100&format=png
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0880e0265faa752b51b823fa2547654d
83e7e4aae6b13b4cd3cc91a533e7349dc3fb429f
50eae6232a91007c4c4198606971819737cf2f176e26691f9337fa9d927edc9c
GET /globalassets/brand-logos-_-bw/fiks.jpg?w=112&quality=100&format=png HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30681508
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3171
content-disposition: inline; filename="fiks.webp"
expires: Thu, 21 Nov 2024 01:18:00 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Wed, 22 Nov 2023 01:18:00 GMT
cf-cache-status: HIT
age: 831338
server: cloudflare
cf-ray: 82eed3a24931569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/vendors~adminPortal~checkout~cms~filters~user-profile.js?v=1.0.35123.0
200 OK 176 kB URL GET HTTP/2 www.farmasiet.no/dist/vendors~adminPortal~checkout~cms~filters~user-profile.js?v=1.0.35123.0
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
Size 176 kB (176065 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dist/vendors~adminPortal~checkout~cms~filters~user-profile.js?v=1.0.35123.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: application/x-javascript
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0922d7aa17da1:0"
last-modified: Wed, 15 Nov 2023 10:02:28 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 205621
expires: Wed, 29 May 2024 22:39:32 GMT
server: cloudflare
cf-ray: 82eed3a27988569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/homepage/simple-image-banners/2023/y23_w47-48_vichy_1470x1060_image_banner.png?w=282&h=204&mode=Crop&quality=90&crop=2,0,1467,1060&format=jpg
200 OK 7.6 kB URL GET HTTP/2 www.farmasiet.no/globalassets/homepage/simple-image-banners/2023/y23_w47-48_vichy_1470x1060_image_banner.png?w=282&h=204&mode=Crop&quality=90&crop=2,0,1467,1060&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 282x204, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5813b406f69548b6f1d8e6b30874e2d4
ede400be4d3283ec9bfa5d7bb9948f3bbcf292c7
b011774cb1434ca5e90e5bc13219d50f261384a29f01e665476cb14d1d346289
GET /globalassets/homepage/simple-image-banners/2023/y23_w47-48_vichy_1470x1060_image_banner.png?w=282&h=204&mode=Crop&quality=90&crop=2,0,1467,1060&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:34 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30697888
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=11882
content-disposition: inline; filename="y23_w47-48_vichy_1470x1060_image_banner.webp"
expires: Thu, 21 Nov 2024 05:51:02 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Wed, 22 Nov 2023 05:51:02 GMT
cf-cache-status: HIT
age: 757400
server: cloudflare
cf-ray: 82eed3ae5b04569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/brand-logos-_-bw/aco.jpg?w=112&quality=100&format=png
200 OK 1.5 kB URL GET HTTP/2 www.farmasiet.no/globalassets/brand-logos-_-bw/aco.jpg?w=112&quality=100&format=png
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 694a3bca9e00616c271e18a17253788c
3576c25c62db17f65733d218552b4dc38845c5da
94ff3bea9d2e63bb878da74376377e6d4f475ae590cd44b3b2198b313ee8249d
GET /globalassets/brand-logos-_-bw/aco.jpg?w=112&quality=100&format=png HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30500703
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3388
content-disposition: inline; filename="aco.webp"
expires: Mon, 18 Nov 2024 23:04:35 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Sun, 19 Nov 2023 23:04:35 GMT
cf-cache-status: HIT
age: 768276
server: cloudflare
cf-ray: 82eed3a25968569f-OSL
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/953.js
200 OK 241 kB URL GET HTTP/2 ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/953.js
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerAmazon
Subject*.powerreviews.com
FingerprintF7:EF:6E:D1:41:8D:9A:B0:A0:3B:E8:31:31:B9:3A:56:28:B5:45:AB
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Size 241 kB (240628 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag-builds/10446/4.1/js/chunks/953.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 09 Nov 2023 17:04:36 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Thu, 09 Nov 2023 17:04:01 GMT
etag: W/"e54a7d4c1a7e11ce61d0411b2b8d9083"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: PowerReviews
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LYi5bMTrRKnHuYgV3S0AtH5hqgvQhMmCXxJ5x3hzueH3FR9-hH2YJA==
age: 1920898
X-Firefox-Spdy: h2
www.farmasiet.no/dist/5.css?v=1.0.35123.0
200 OK 501 kB URL GET HTTP/2 www.farmasiet.no/dist/5.css?v=1.0.35123.0
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 501 kB (500940 bytes)
Hash 25fe5fb08d83f6e51afbd42a81f1c5a8
69fa58425678a573ea08ab54702f10aecf0a9e91
42a7a229cc854797bc77716eeee5c0a305bc7b1162637056df91b13c27574486
GET /dist/5.css?v=1.0.35123.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: text/css
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0922d7aa17da1:0"
last-modified: Wed, 15 Nov 2023 10:02:28 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 205621
expires: Wed, 29 May 2024 22:39:32 GMT
server: cloudflare
cf-ray: 82eed3a23925569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/brands/k/kokoso/kokoso-baby.jpg?w=112&quality=100&format=png
200 OK 1.5 kB URL GET HTTP/2 www.farmasiet.no/globalassets/brands/k/kokoso/kokoso-baby.jpg?w=112&quality=100&format=png
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash b446feafd0274031d406c6112ed7b926
415419383c76381eb0a325725669732e4b79cfaa
963faa1d8e324c1e70b1405649bd25787ad3e8bd577301ba8cc382647f5ff944
GET /globalassets/brands/k/kokoso/kokoso-baby.jpg?w=112&quality=100&format=png HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30894625
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3512
content-disposition: inline; filename="kokoso-baby.webp"
expires: Sat, 23 Nov 2024 12:29:57 GMT
last-modified: Fri, 24 Nov 2023 12:29:57 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
cf-cache-status: HIT
age: 641375
server: cloudflare
cf-ray: 82eed3a2596c569f-OSL
X-Firefox-Spdy: h2
ui.powerreviews.com/stable/4.1/ui.js
200 OK 42 kB URL GET HTTP/2 ui.powerreviews.com/stable/4.1/ui.js
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerAmazon
Subject*.powerreviews.com
FingerprintF7:EF:6E:D1:41:8D:9A:B0:A0:3B:E8:31:31:B9:3A:56:28:B5:45:AB
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stable/4.1/ui.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Thu, 09 Nov 2023 17:04:19 GMT
x-amz-server-side-encryption: AES256
server: PowerReviews
content-encoding: gzip
date: Thu, 23 Nov 2023 17:04:35 GMT
cache-control: max-age=1800,s-maxage=1209600
etag: W/"10a366f0f8508711e1d6fa3a8a1d5831"
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zQHC0tu95EaaJLZaRunoPVCuJsK5t-GiU9MT1jYouiLNbMj-bdiO1A==
age: 711298
X-Firefox-Spdy: h2
www.farmasiet.no/dist/assets/images/logo.svg?v=1.0.35123.0
200 OK 5.1 kB URL GET HTTP/2 www.farmasiet.no/dist/assets/images/logo.svg?v=1.0.35123.0
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (5303), with no line terminators
Hash 93be10c28e78d88644988a0ba51f045f
a0ff2ff94b5c3fb8bbf35d62dad9b15ee5640dc2
bfb77421dee4d7edc94d8361ed86581e2971b10e66b53d206c8fbb159577b9bc
GET /dist/assets/images/logo.svg?v=1.0.35123.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: image/svg+xml
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
etag: W/"0c57de651dda1:0"
last-modified: Wed, 22 Nov 2023 17:03:52 GMT
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 205621
expires: Wed, 29 May 2024 22:39:32 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 82eed3a23926569f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.farmasiet.no/dist/cms.js?v=1.0.35123.0
200 OK 894 kB URL GET HTTP/2 www.farmasiet.no/dist/cms.js?v=1.0.35123.0
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
Size 894 kB (893925 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dist/cms.js?v=1.0.35123.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: application/x-javascript
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0c57de651dda1:0"
last-modified: Wed, 22 Nov 2023 17:03:52 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-content-type-options: nosniff
cf-cache-status: HIT
age: 205620
expires: Wed, 29 May 2024 22:39:32 GMT
server: cloudflare
cf-ray: 82eed3a28994569f-OSL
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/575.js
200 OK 169 B URL GET HTTP/2 ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/575.js
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerAmazon
Subject*.powerreviews.com
FingerprintF7:EF:6E:D1:41:8D:9A:B0:A0:3B:E8:31:31:B9:3A:56:28:B5:45:AB
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 93a6760f6e55ecf77d1ef8506582085b
bf075e360e3bb0607ce89110ed80cbd48a013c0c
c0b03338a3dd5a0d5fd1c00b8fcccd74b52d84274e3cfad0ddccbf6980579490
GET /tag-builds/10446/4.1/js/chunks/575.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 169
date: Thu, 09 Nov 2023 17:04:36 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Thu, 09 Nov 2023 17:04:01 GMT
etag: "569ab611b182c1a5bff0cf1a1c827a18"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
accept-ranges: bytes
server: PowerReviews
vary: Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SowIC-Ouv8D--r3n_o4OUoyqEJ1NGI0b-kXNY_x-7wv54K02aEGZkw==
age: 1920898
X-Firefox-Spdy: h2
www.farmasiet.no/images/otrivin-nesespr-1mgml-10,38275_860311.png?w=202&h=202&mode=Max&quality=100&crop=884,333,2124,3696&format=jpg
200 OK 4.4 kB URL GET HTTP/2 www.farmasiet.no/images/otrivin-nesespr-1mgml-10,38275_860311.png?w=202&h=202&mode=Max&quality=100&crop=884,333,2124,3696&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 74x202, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0abacb5ebd44c5dd2dfde2dc6cd1d4ba
24d493536f12f1cf153ed0a57bfddf9e62ef6966
cde09c1c265f885fb6db39c84ff44dc943a517de9701d48a08a6319e46618cf9
GET /images/otrivin-nesespr-1mgml-10,38275_860311.png?w=202&h=202&mode=Max&quality=100&crop=884,333,2124,3696&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:34 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=31103913
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=17723
content-disposition: inline; filename="otrivin-nesespr-1mgml-10,38275_860311.webp"
expires: Mon, 25 Nov 2024 22:38:07 GMT
last-modified: Sun, 26 Nov 2023 22:38:07 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
cf-cache-status: HIT
age: 432087
server: cloudflare
cf-ray: 82eed3b29e21569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/homepage/carousel_main-banners/2023/y23_w47-48_superhelg_vitayummy-og-team-minimates_1600x900_main_banner.png?w=800&h=450&mode=Crop&quality=90&crop=0,0,1600,900&format=jpg
200 OK 37 kB URL GET HTTP/2 www.farmasiet.no/globalassets/homepage/carousel_main-banners/2023/y23_w47-48_superhelg_vitayummy-og-team-minimates_1600x900_main_banner.png?w=800&h=450&mode=Crop&quality=90&crop=0,0,1600,900&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 726940bfda041e72148b009d6529750a
609718431d70f58a4f2584b6a79910da24e76cb3
e353f61f2027705756f881defffe06ebe20e2df33666a25022e1e3239ca1e795
GET /globalassets/homepage/carousel_main-banners/2023/y23_w47-48_superhelg_vitayummy-og-team-minimates_1600x900_main_banner.png?w=800&h=450&mode=Crop&quality=90&crop=0,0,1600,900&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:38 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=31365324
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=58802
content-disposition: inline; filename="y23_w47-48_superhelg_vitayummy-og-team-minimates_1600x900_main_banner.webp"
expires: Thu, 28 Nov 2024 23:15:02 GMT
last-modified: Wed, 29 Nov 2023 23:15:02 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
cf-cache-status: HIT
age: 170676
server: cloudflare
cf-ray: 82eed3ca28b3569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/images/otrivin-nesespr-1mgml-mentol-10,38292_860312.png?w=202&h=202&mode=Max&quality=100&crop=890,357,2135,3729&format=jpg
200 OK 4.4 kB URL GET HTTP/2 www.farmasiet.no/images/otrivin-nesespr-1mgml-mentol-10,38292_860312.png?w=202&h=202&mode=Max&quality=100&crop=890,357,2135,3729&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 75x202, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ece8d7ec855f304af7ce1f494ddeac3e
519badccd72096b389d67c09d0dd858c517aa2a7
39f132ffb405696446ef58d8a247c9ddcc1013147480812843362fad8fd6f431
GET /images/otrivin-nesespr-1mgml-mentol-10,38292_860312.png?w=202&h=202&mode=Max&quality=100&crop=890,357,2135,3729&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:34 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=29672642
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=17879
content-disposition: inline; filename="otrivin-nesespr-1mgml-mentol-10,38292_860312.webp"
expires: Sat, 09 Nov 2024 09:03:36 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Fri, 10 Nov 2023 09:03:36 GMT
cf-cache-status: HIT
age: 659222
server: cloudflare
cf-ray: 82eed3b2ae28569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/assets/images/favicon-16x16.png?v=1.0.35123.0
200 OK 78 B URL GET HTTP/2 www.farmasiet.no/dist/assets/images/favicon-16x16.png?v=1.0.35123.0
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0d9fa6e5a904f16ebc68380ee66860f2
6d443467dc5feb79b96c1d3dd6298e4d266142a5
f5298cd21c467d2b074d1a496985c8073ed7788da7d3fead70b07af08d6508df
GET /dist/assets/images/favicon-16x16.png?v=1.0.35123.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:33 GMT
content-type: image/webp
content-length: 78
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=430
content-disposition: inline; filename="favicon-16x16.webp"
etag: "0922d7aa17da1:0"
last-modified: Wed, 15 Nov 2023 10:02:28 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
cf-cache-status: HIT
age: 205617
expires: Wed, 29 May 2024 22:39:33 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 82eed3ab98b7569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/homepage/carousel_main-banners/2023/y23_w47-48_vichy_1600x900_main_banner.png?w=800&h=450&mode=Crop&quality=90&crop=0,0,1600,900&format=jpg
200 OK 30 kB URL GET HTTP/2 www.farmasiet.no/globalassets/homepage/carousel_main-banners/2023/y23_w47-48_vichy_1600x900_main_banner.png?w=800&h=450&mode=Crop&quality=90&crop=0,0,1600,900&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0cb12200161131917b7e1c83913e35e2
9c9c2f1078c80912170ea1bbb891ed3569ee02e6
9d25467d6dc90b622e9a11385a6275ef0c2d569e39e88c69dd0abc44a52c8125
GET /globalassets/homepage/carousel_main-banners/2023/y23_w47-48_vichy_1600x900_main_banner.png?w=800&h=450&mode=Crop&quality=90&crop=0,0,1600,900&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30500707
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=49240
content-disposition: inline; filename="y23_w47-48_vichy_1600x900_main_banner.webp"
expires: Mon, 18 Nov 2024 23:04:39 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Sun, 19 Nov 2023 23:04:39 GMT
cf-cache-status: HIT
age: 149489
server: cloudflare
cf-ray: 82eed3a2492c569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/api/visitorIntelligence/track/custom
200 OK 1.0 kB URL POST HTTP/2 www.farmasiet.no/api/visitorIntelligence/track/custom
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1179), with no line terminators
Hash 5e9c175ee429c0b6fb54466fd1af14df
544ed821c292fcbabef455ef8651aceaa46dae20
9c1a852c436b391cdff0263a2a641a95b46ba654cbdebf61f30b3cf3d3befec9
POST /api/visitorIntelligence/track/custom HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Request-Id: |1H1Dd.fYfKn
Content-Length: 263
Origin: https://www.farmasiet.no
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:33 GMT
content-type: application/json; charset=utf-8
content-length: 542
access-control-expose-headers: Request-Context
cache-control: no-cache
content-encoding: gzip
expires: -1
pragma: no-cache
set-cookie: EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; Max-Age=1800; Path=/
_madid=15732f35-c9a2-49e0-8d46-d748067f765b; expires=Sat, 30-Nov-2024 22:39:33 GMT; path=/
epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; expires=Sat, 30-Nov-2024 22:39:33 GMT; path=/
epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; expires=Sat, 02-Dec-2023 02:39:33 GMT; path=/
vary: Accept-Encoding
strict-transport-security: max-age=31536000; preload
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 82eed3aaf845569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/homepage/carousel_main-banners/2023/y23_w47-48_k-beauty_1600x900_main_banner.png?w=800&h=450&mode=Crop&quality=90&crop=0,0,1600,900&format=jpg
200 OK 18 kB URL GET HTTP/2 www.farmasiet.no/globalassets/homepage/carousel_main-banners/2023/y23_w47-48_k-beauty_1600x900_main_banner.png?w=800&h=450&mode=Crop&quality=90&crop=0,0,1600,900&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ae40af4f478abb8b21696002ed54d068
6cb5b9062f8270f3545b24d85d9d882eae8475b5
134826c81b0728b3f8a369d265c9f23a9a65112bf2acb52c30b71c7a4f5ff9f4
GET /globalassets/homepage/carousel_main-banners/2023/y23_w47-48_k-beauty_1600x900_main_banner.png?w=800&h=450&mode=Crop&quality=90&crop=0,0,1600,900&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:34 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30500717
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=33863
content-disposition: inline; filename="y23_w47-48_k-beauty_1600x900_main_banner.webp"
expires: Mon, 18 Nov 2024 23:04:51 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Sun, 19 Nov 2023 23:04:52 GMT
cf-cache-status: HIT
age: 492068
server: cloudflare
cf-ray: 82eed3b36eb7569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/brand-logos-_-bw/voltarol_block-logo.jpg?w=112&quality=100&format=png
200 OK 1.5 kB URL GET HTTP/2 www.farmasiet.no/globalassets/brand-logos-_-bw/voltarol_block-logo.jpg?w=112&quality=100&format=png
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 80c4ddccfbbaf4378e086482f60ab708
30316838002718cb7aac424c910d0ecacc0889e4
cb15216e64d5f86e81c9ac0b4bceba9c3c883043cfce320d38f298be6d8801f5
GET /globalassets/brand-logos-_-bw/voltarol_block-logo.jpg?w=112&quality=100&format=png HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30837641
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=3256
content-disposition: inline; filename="voltarol_block-logo.webp"
expires: Fri, 22 Nov 2024 20:40:13 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Thu, 23 Nov 2023 20:40:13 GMT
cf-cache-status: HIT
age: 406660
server: cloudflare
cf-ray: 82eed3a2596a569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/homepage/carousel_main-banners/2023/y23_w47-48_superhelg_apobase-og-locobase_1600x900_main_banner.png?w=800&h=450&mode=Crop&quality=90&crop=0,0,1600,900&format=jpg
200 OK 27 kB URL GET HTTP/2 www.farmasiet.no/globalassets/homepage/carousel_main-banners/2023/y23_w47-48_superhelg_apobase-og-locobase_1600x900_main_banner.png?w=800&h=450&mode=Crop&quality=90&crop=0,0,1600,900&format=jpg
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 854a2d796a721f7d446df96d3d5a753a
1937162d502daa8006f55569114ce211ecb37d42
73cca2b782ad18495114d9173360916c0fd254e442c2ceeee7af95ac9c5dbcb2
GET /globalassets/homepage/carousel_main-banners/2023/y23_w47-48_superhelg_apobase-og-locobase_1600x900_main_banner.png?w=800&h=450&mode=Crop&quality=90&crop=0,0,1600,900&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ai_user=vpL91|2023-12-01T22:39:37.898Z; EPiSessionId=a50f6bb2-b9ef-4369-9676-7d126a7d405f; _madid=15732f35-c9a2-49e0-8d46-d748067f765b; epi_RecommendationsTrackingUserId=cuid=110279665311|T-Pzyj0iADZwY-aBRAMdVx8-Dc8HZkqgskzkKSaz_oY&h=; epi_RecommendationsTrackingSessionId=140100464511|04Z9rbqA9dU7AvSRWssIbgsyzq61lnOtIr5nTGLYDcg; ai_session=knFc1|1701470378664|1701470378664
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:34 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=31364673
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=45663
content-disposition: inline; filename="y23_w47-48_superhelg_apobase-og-locobase_1600x900_main_banner.webp"
expires: Thu, 28 Nov 2024 23:04:07 GMT
last-modified: Wed, 29 Nov 2023 23:04:07 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
cf-cache-status: HIT
age: 171327
server: cloudflare
cf-ray: 82eed3ae5b02569f-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/globalassets/brands/b/beplain/beplain.jpg?w=112&quality=100&format=png
200 OK 1.2 kB URL GET HTTP/2 www.farmasiet.no/globalassets/brands/b/beplain/beplain.jpg?w=112&quality=100&format=png
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerGlobalSign nv-sa
Subject*.farmasiet.no
Fingerprint5D:66:38:CD:52:49:E0:83:38:12:39:16:09:DF:A0:7D:07:8A:8A:14
ValidityMon, 09 Jan 2023 09:29:27 GMT - Sat, 10 Feb 2024 09:29:26 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 39ec85e6a4ae42c2d52176414453aa5d
069a8a808d163848736db81ed55bbe63649e5a5e
47a0a6fb3dad2fa600ca839ba05c02b09ed2049fa393031b18117167e8c9473f
GET /globalassets/brands/b/beplain/beplain.jpg?w=112&quality=100&format=png HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=uFY2tMbhukdHT4JjwD5euuhw3q_oEgbn_9PkkMniGeEnDt2PePbceEjkCYLFGnYd5R7mFQWZ3yDp_f8reSc3lvR4Ck0-6jOnmUzf8MmqW-drmt3gckZKt3q45nueZDygzWP1uA2; TRADEDOUBLER=925b9dcad89158037c3acf70973c1825; ARRAffinity=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2; ARRAffinitySameSite=ad5b124b233a0c1fad9e7f4683a3c8c797598d455baf47abca61f5d585b929a2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:32 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=30500703
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=2849
content-disposition: inline; filename="beplain.webp"
expires: Mon, 18 Nov 2024 23:04:35 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
last-modified: Sun, 19 Nov 2023 23:04:35 GMT
cf-cache-status: HIT
age: 748752
server: cloudflare
cf-ray: 82eed3a2492f569f-OSL
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/576.js
200 OK 169 B URL GET HTTP/2 ui.powerreviews.com/tag-builds/10446/4.1/js/chunks/576.js
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerAmazon
Subject*.powerreviews.com
FingerprintF7:EF:6E:D1:41:8D:9A:B0:A0:3B:E8:31:31:B9:3A:56:28:B5:45:AB
ValiditySun, 26 Nov 2023 00:00:00 GMT - Tue, 24 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 1135900b736af8372833eb303446be64
d130fbd55420b2d8a87d9f2711705513f266b657
4777f1c3444ce9e5cd0b61489f410f475ef22d62ca3e3ec83ed4f4a927351a6c
GET /tag-builds/10446/4.1/js/chunks/576.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 169
date: Thu, 09 Nov 2023 17:04:36 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Thu, 09 Nov 2023 17:04:01 GMT
etag: "e4b6c241c0df6a368bb13aebdb2308ab"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
accept-ranges: bytes
server: PowerReviews
vary: Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: X7jpe6owv4tYUkpzN6iKud1GxfwSZaZcDqTRm3RayeCc3betv7tcGg==
age: 1920898
X-Firefox-Spdy: h2
consentcdn.cookiebot.com/sdk/bc-v4.min.html
200 OK 627 B URL GET HTTP/2 consentcdn.cookiebot.com/sdk/bc-v4.min.html
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerDigiCert Inc
Subject*.cookiebot.com
Fingerprint88:F1:D8:EB:8E:DD:6F:53:9A:31:C3:FE:59:0E:68:FE:24:2F:84:EB
ValidityMon, 17 Apr 2023 00:00:00 GMT - Wed, 17 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (643), with no line terminators
Hash bf55a8762133f6732494737cb1167c29
581b6f9a76ded2bf1d5d6c347cd3abd0a92b1bce
288b48aea2d122141e10f310f8c9f59c5b75bd2be7619bfc5d7fb18ab3c026da
GET /sdk/bc-v4.min.html HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.farmasiet.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163"
last-modified: Mon, 04 Apr 2022 07:23:49 GMT
server: AkamaiNetStorage
x-akamai-transformed: 9 - 0 pmb=mRUM,1
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=30266053
expires: Sat, 16 Nov 2024 05:53:51 GMT
date: Fri, 01 Dec 2023 22:39:38 GMT
content-length: 392
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1701470378911_388255644_282052781_17_792_1_0_21";dur=1
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/a5e46e07-fec9-4183-9c9d-b98972d79d05
200 OK 1.0 kB URL GET HTTP/2 ekr.zdassets.com/compose/a5e46e07-fec9-4183-9c9d-b98972d79d05
IP
Requested by https://www.farmasiet.no/?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Certificate IssuerLet's Encrypt
Subjectzdassets.com
Fingerprint5F:75:10:F4:97:EA:C8:48:F9:4F:E6:19:19:A3:13:24:44:C1:E7:3C
ValidityMon, 23 Oct 2023 13:35:25 GMT - Sun, 21 Jan 2024 13:35:24 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1136), with no line terminators
Hash 06fd3d1ca961630acf3bc62983c12795
ad6f665f29e5f05bf5ac17c375e7a336d885dece
ac67de01d6fcd526f887d1182cf7d8f91d71223c99ba1f00786004bf1ac02259
GET /compose/a5e46e07-fec9-4183-9c9d-b98972d79d05 HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.farmasiet.no/
Origin: https://www.farmasiet.no
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 22:39:38 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cdn-cache-control: max-age=60
vary: Accept, Origin, Accept-Encoding
cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600
etag: W/"a3557df38b379c79d99fb68bf05c7365"
x-request-id: 8253a8185fe6569d-SEA, 8253a8185fe6569d-SEA
x-runtime: 0.012602
x-zendesk-zorg: yes
cf-cache-status: HIT
age: 40
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QGsqrCXL%2FMXiEyzk4zteCdA339A09DeNJHyXwoZjG6tzUsrg3LNsZOIk5oJKcW19JwP34ivy8iHSEbU4kbSsyNB52g1wbW%2FPGd5R%2FkAaBpltqnFAhLd9YMqTgYlF8dcTWD8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 82eed3cb9c5756a5-OSL
content-encoding: br
X-Firefox-Spdy: h2
185.53.177.53
193.32.110.63
52.236.186.218
104.18.70.113
34.206.73.7
217.114.85.70
0.0.0.0