want.wrengostic.com/
200 OK 475 B IP
ASN #43350 NForce Entertainment B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (475), with no line terminators
Hash 77da0269522cd514407e922ae8922a7e
1eba82cf69fea480b8f5b9922e4ded2f8b412ba0
cbf2850f24c1dbdd570bd46c52d3ff564220c98cc4225c96b902bb5bc0cc87fa
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET / HTTP/1.1
Host: want.wrengostic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 475
content-type: text/html; charset=utf-8
date: Tue, 27 Sep 2022 17:24:43 GMT
server: nginx
set-cookie: sid=471ac964-3e89-11ed-a68f-e481016c878e; path=/; domain=.wrengostic.com; expires=Sun, 15 Oct 2090 20:38:51 GMT; max-age=2147483647; HttpOnly
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 17:15:30 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Mqmj8J2hD4pqB_XxwWMrC3xkgj9WdbSBZWdzZo6cRzG9scG8Wa4QZg==
Age: 554
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10090
Expires: Tue, 27 Sep 2022 20:12:54 GMT
Date: Tue, 27 Sep 2022 17:24:44 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4siqkDn4HfHJrAgEA8EIL8aaPS6G19oIBMW12zR0CIj0aTLd79T7KQ==
age: 28831
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 17:24:44 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
want.wrengostic.com/favicon.ico
404 Not Found 9 B URL HTTP/1.1 want.wrengostic.com/favicon.ico
IP
ASN #43350 NForce Entertainment B.V.
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: want.wrengostic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://want.wrengostic.com/
Cookie: sid=471ac964-3e89-11ed-a68f-e481016c878e
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Tue, 27 Sep 2022 17:24:44 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 17:10:46 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 27 Sep 2022 17:50:23 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: u5SOSG8N1lPMROzGufhqIK9ZG9Pw-K7qZsgoVuC12YQTBo70YL2M2A==
Age: 838
ocsp.digicert.com/
200 OK 471 B IP
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5165
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 17:24:45 GMT
Last-Modified: Tue, 27 Sep 2022 15:58:40 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
want.wrengostic.com/?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NDMwNjY4NCwiaWF0IjoxNjY0Mjk5NDg0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2NjZjQxOGEwbXAyYWxodTgyMTZsb2EiLCJuYmYiOjE2NjQyOTk0ODQsInRzIjoxNjY0Mjk5NDg0Mjc4ODYyfQ.Xzqo5gRdC1o9m2WDlvdSWt1M7_MlAzMlbRUw40pzjP4&sid=471ac964-3e89-11ed-a68f-e481016c878e
302 Found 11 B URL HTTP/1.1 want.wrengostic.com/?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NDMwNjY4NCwiaWF0IjoxNjY0Mjk5NDg0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2NjZjQxOGEwbXAyYWxodTgyMTZsb2EiLCJuYmYiOjE2NjQyOTk0ODQsInRzIjoxNjY0Mjk5NDg0Mjc4ODYyfQ.Xzqo5gRdC1o9m2WDlvdSWt1M7_MlAzMlbRUw40pzjP4&sid=471ac964-3e89-11ed-a68f-e481016c878e
IP
ASN #43350 NForce Entertainment B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
Analyzer Verdict Alert quad9 Sinkholed
GET /?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NDMwNjY4NCwiaWF0IjoxNjY0Mjk5NDg0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2NjZjQxOGEwbXAyYWxodTgyMTZsb2EiLCJuYmYiOjE2NjQyOTk0ODQsInRzIjoxNjY0Mjk5NDg0Mjc4ODYyfQ.Xzqo5gRdC1o9m2WDlvdSWt1M7_MlAzMlbRUw40pzjP4&sid=471ac964-3e89-11ed-a68f-e481016c878e HTTP/1.1
Host: want.wrengostic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://want.wrengostic.com/
Cookie: sid=471ac964-3e89-11ed-a68f-e481016c878e
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Tue, 27 Sep 2022 17:24:44 GMT
location: http://btpnav.com/click?data=a2wzRXdFUnh1ZXBwVHBnN2JBUUd6dHhySm5ybjM1Z2t5M1M5OXNEVl95aGxucWJwdDBUUEJIZTdkSDZBMnZ4dUsxeFRWLTBleEV2QXA4Y1ZpZk9LbWFQSm1JdlFXYXl3cVRNd3ZXbWtkQXh4VnZOTmxnLThLZkVudHNNcHY4MnFaTHpQMi1oaDYzTTY4MkRXY2tNU1RRMg2&id=03ea8372-b717-45e3-bf44-57f2e8bde6ec
server: nginx
set-cookie: sid=471ac964-3e89-11ed-a68f-e481016c878e; path=/; domain=.wrengostic.com; expires=Sun, 15 Oct 2090 20:38:52 GMT; max-age=2147483647; HttpOnly
btpnav.com/click?data=a2wzRXdFUnh1ZXBwVHBnN2JBUUd6dHhySm5ybjM1Z2t5M1M5OXNEVl95aGxucWJwdDBUUEJIZTdkSDZBMnZ4dUsxeFRWLTBleEV2QXA4Y1ZpZk9LbWFQSm1JdlFXYXl3cVRNd3ZXbWtkQXh4VnZOTmxnLThLZkVudHNNcHY4MnFaTHpQMi1oaDYzTTY4MkRXY2tNU1RRMg2&id=03ea8372-b717-45e3-bf44-57f2e8bde6ec
200 OK 2.2 kB URL HTTP/1.1 btpnav.com/click?data=a2wzRXdFUnh1ZXBwVHBnN2JBUUd6dHhySm5ybjM1Z2t5M1M5OXNEVl95aGxucWJwdDBUUEJIZTdkSDZBMnZ4dUsxeFRWLTBleEV2QXA4Y1ZpZk9LbWFQSm1JdlFXYXl3cVRNd3ZXbWtkQXh4VnZOTmxnLThLZkVudHNNcHY4MnFaTHpQMi1oaDYzTTY4MkRXY2tNU1RRMg2&id=03ea8372-b717-45e3-bf44-57f2e8bde6ec
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (349), with CRLF line terminators
Hash dd5abddf83cd2b7525cdacb6eb3b1022
344fbfa75ea66158c7ef594358bbeaa19a316d75
7570c4eccbdb5b86d863139fe9d101b9766b959c9da2af01964ee014565f2942
GET /click?data=a2wzRXdFUnh1ZXBwVHBnN2JBUUd6dHhySm5ybjM1Z2t5M1M5OXNEVl95aGxucWJwdDBUUEJIZTdkSDZBMnZ4dUsxeFRWLTBleEV2QXA4Y1ZpZk9LbWFQSm1JdlFXYXl3cVRNd3ZXbWtkQXh4VnZOTmxnLThLZkVudHNNcHY4MnFaTHpQMi1oaDYzTTY4MkRXY2tNU1RRMg2&id=03ea8372-b717-45e3-bf44-57f2e8bde6ec HTTP/1.1
Host: btpnav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://want.wrengostic.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: AAkFjLtVmOUkcVm=AAkFjLtVmOUkcVm; path=/
X-Server: web02
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Tue, 27 Sep 2022 17:24:45 GMT
Content-Length: 2180
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: S6jSuoxQuMephytznzDhYg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MX9g1DAYHqs3IK9dqLiMa3yOfOo=
btpnav.com/Redirect/
302 Found 269 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 01fc3f2883e06afee173487ce827e506
e01fdb39a39e190b745c0f4c8f390b31551823ed
32fb1421dc78a1f03dc6ecc283b35b2e4e4203b81b3eb9ebc33b9293e15e673c
POST /Redirect/ HTTP/1.1
Host: btpnav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 358
Origin: http://btpnav.com
Connection: keep-alive
Referer: http://btpnav.com/click?data=a2wzRXdFUnh1ZXBwVHBnN2JBUUd6dHhySm5ybjM1Z2t5M1M5OXNEVl95aGxucWJwdDBUUEJIZTdkSDZBMnZ4dUsxeFRWLTBleEV2QXA4Y1ZpZk9LbWFQSm1JdlFXYXl3cVRNd3ZXbWtkQXh4VnZOTmxnLThLZkVudHNNcHY4MnFaTHpQMi1oaDYzTTY4MkRXY2tNU1RRMg2&id=03ea8372-b717-45e3-bf44-57f2e8bde6ec
Cookie: AAkFjLtVmOUkcVm=AAkFjLtVmOUkcVm
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: http://irene-eux.com/zcvisitor/475f1a18-3e89-11ed-8abc-122da573f77f/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
Server: Microsoft-IIS/8.5
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Server: web02
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Tue, 27 Sep 2022 17:24:45 GMT
Content-Length: 269
irene-eux.com/zcvisitor/475f1a18-3e89-11ed-8abc-122da573f77f/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
200 996 B URL HTTP/1.1 irene-eux.com/zcvisitor/475f1a18-3e89-11ed-8abc-122da573f77f/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bbdf680439db25789f5827cfc108f412
6622bc9ee266eec1dc498c8c2dc41821f651ac73
3ac76f4011cb3ba981aee02298acfd98dcc39ba18a4886907b6ca6067b4b9e04
GET /zcvisitor/475f1a18-3e89-11ed-8abc-122da573f77f/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51 HTTP/1.1
Host: irene-eux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://btpnav.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 27 Sep 2022 17:24:45 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: xdooPevm
irene-eux.com/zcredirect?visitid=475f1a18-3e89-11ed-8abc-122da573f77f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
200 354 B URL HTTP/1.1 irene-eux.com/zcredirect?visitid=475f1a18-3e89-11ed-8abc-122da573f77f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d6b844626b69886b85be4f4aaf091a21
afe954991991a50ab39896e0af3acf4d340fa8ea
716f0d9d775fdb1242cbda932308aa1c058d94b912099a0a915488edd1d3d71d
GET /zcredirect?visitid=475f1a18-3e89-11ed-8abc-122da573f77f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: irene-eux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://irene-eux.com/zcvisitor/475f1a18-3e89-11ed-8abc-122da573f77f/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 27 Sep 2022 17:24:46 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: xdooPevm
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a7a72f12002d4eecc2bca2a6dee7598
291ec355b4f2f7a72843be5569140395aaafe9e4
f79225eae72df9ae9c9a7ecb904739a0fc053eb1860d60fbc45b0c441e4ae350
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F79225EAE72DF9AE9C9A7ECB904739A0FC053EB1860D60FBC45B0C441E4AE350"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5323
Expires: Tue, 27 Sep 2022 18:53:29 GMT
Date: Tue, 27 Sep 2022 17:24:46 GMT
Connection: keep-alive
clever-redirect.com/s/r6?s=623619497&s2=gamboge-moose&s3=foxtrot-mat-6r4wkoout
200 OK 351 B URL HTTP/2 clever-redirect.com/s/r6?s=623619497&s2=gamboge-moose&s3=foxtrot-mat-6r4wkoout
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (351), with no line terminators
Hash 5053067a2099e2e0666d449ac665bda7
a2241055fec4b64da08f90db25cd50561d746a3e
04b34c5bedb96d5ecd5cd0b2bf714dc326865608fdf1714af3dadd6047d1444b
GET /s/r6?s=623619497&s2=gamboge-moose&s3=foxtrot-mat-6r4wkoout HTTP/1.1
Host: clever-redirect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://irene-eux.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
referrer-policy: no-referrer
x-powered-by: PHP/7.4.27
set-cookie: 63337e9a23f723da845cca9da2d66005=cba802aa3281636259052a2a75da643fc2bc19b361aa03b99437134798e500f9a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2263337e9a23f723da845cca9da2d66005%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Wed, 28-Sep-2022 17:24:46 GMT; Max-Age=86400; path=/; HttpOnly
content-length: 351
content-type: text/html; charset=UTF-8
date: Tue, 27 Sep 2022 17:24:46 GMT
server: Apache/2.4.52 (codeit) OpenSSL/1.1.1m PHP/7.4.27
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5c8c8ed9fb8b3a1c0c6f5999ea07ece6
2ff9b5b998d7d2f517c9fce2311f1d834a09d5cb
25100935afecd5d93138b64375e945b39021724b5b6df10437b3754e733d6697
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25100935AFECD5D93138B64375E945B39021724B5B6DF10437B3754E733D6697"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14265
Expires: Tue, 27 Sep 2022 21:22:31 GMT
Date: Tue, 27 Sep 2022 17:24:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5852
Expires: Tue, 27 Sep 2022 19:02:18 GMT
Date: Tue, 27 Sep 2022 17:24:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5852
Expires: Tue, 27 Sep 2022 19:02:18 GMT
Date: Tue, 27 Sep 2022 17:24:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5852
Expires: Tue, 27 Sep 2022 19:02:18 GMT
Date: Tue, 27 Sep 2022 17:24:46 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5852
Expires: Tue, 27 Sep 2022 19:02:18 GMT
Date: Tue, 27 Sep 2022 17:24:46 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14218a43c5e5bbce546735a780c8ccce
61676358cdbb2373bc644e66f8a84fbc8cc5daf6
905b1c30a2273aef69904f2eb1451c756fc1fdba02e86ea5c957629dd056aeda
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6390
x-amzn-requestid: b2681ff8-ab83-41e6-adef-3e6772c93c3f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGFJ6Gc_oAMF44g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63324f0c-3dbf9f4e2047567b5abdbe74;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 01:17:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8JXEBo_L_xKuKdeoOXEJ6FO7ZVsZVQzUmQFe7fYcxaHRQNEq1HWp6w==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:25:52 GMT
age: 57534
etag: "61676358cdbb2373bc644e66f8a84fbc8cc5daf6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5274e770cb5a704916c8965659709f4a
1a26007f761e439db575fb80fb403031260aecf4
e36e8be75c92feb9b416a46c5918356d8f9694894a799b7c10de21034d33d5ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7455
x-amzn-requestid: 0887cd56-f324-46cf-a086-709e1c66f354
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGBTdHmhoAMFvIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633248e2-42391706084f335228fe3994;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 00:50:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: vx-yM_jeJvOaa1UizK5OoDJFkvKnajg2ezLF2l2qnN_OhdTE6I4taQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:05:55 GMT
etag: "1a26007f761e439db575fb80fb403031260aecf4"
content-type: image/jpeg
age: 58731
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62e68c3cd08dd94d910507512a67e85f
3d4fa8701f17e8818c25584ef5f04bfbee8440cd
058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13213
x-amzn-requestid: 09f8fee2-6830-4bec-af40-f2fb6547bc63
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFkreH5poAMFdxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b16-0afbf5e01a013e6f0db53da1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:35:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CwkfEPDseHez7mArqwz8tmC3WHFwXAZF1OSColucaQ5vG2hvBIDWOg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:42:47 GMT
age: 70919
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash deb8d1e3b6d7fbc8c8ba478269621676
84f5a4c8b38acde814bc790e5b514347718d5bb9
ed14fa766f0708b4166e83b61f160db5671af430917b7c67184bf18d9208742b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9163
x-amzn-requestid: 8ccd9b1f-bef9-4591-be32-e6dd98f4ee78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlKpEZrIAMFS1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bdd-4a40b9c8281b64c725fec0f1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:38:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lf6qqokEw32egp3ofmJGtUTAt3RD2f9rVq5gskbhrk_VFGweeo0oCQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:49:18 GMT
age: 70528
etag: "84f5a4c8b38acde814bc790e5b514347718d5bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 46e31aa06b8e86a9a5f9ba1cc3feca08
75df3341e30281fcbf78c7074980356fdf0be8e2
d1fd4f81b7e0f43de960f0ee024d9e87bcb395f032a4ab0360e3829d1ec8a42b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5319
x-amzn-requestid: d4c13fa8-eb03-4abf-9516-b74eac712b87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFkreHL5IAMFcOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b16-487923453bd27d6a744b5a31;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:35:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gGfaq_dx7NIHH43-iNn0Ah61HRLT8H3NxPGVoDvkKgBgy8zJWYwRuw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:49:18 GMT
age: 70528
etag: "75df3341e30281fcbf78c7074980356fdf0be8e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F171029d0-40d4-47b3-8936-8ba3b16b3212.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F171029d0-40d4-47b3-8936-8ba3b16b3212.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 347dca206e13a3b13953f0ab398310b4
be60bbc96c832ae385cc9ae5828bd32703011b21
f6da888a54a0c6c73466f2c2a72dd875514a39d81b760a6b0116b4dd56ef31dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F171029d0-40d4-47b3-8936-8ba3b16b3212.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10211
x-amzn-requestid: 3ea4ac84-2465-4bd1-8ade-863de3c9576e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfSuGoQoAMF9oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632145aa-7843b82728ead9a053c689d1;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MMrek5LO9ukZjB6VV-5McuE_maDzwTOihucz0kwxuaTJMNOpTchoJA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:52:00 GMT
age: 70366
etag: "be60bbc96c832ae385cc9ae5828bd32703011b21"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lookandfind.me/s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=farmasiet.no&s1=623619497&s2=gamboge-moose&s3=foxtrot-mat-6r4wkoout&s5=cf
200 OK 939 B URL HTTP/2 lookandfind.me/s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=farmasiet.no&s1=623619497&s2=gamboge-moose&s3=foxtrot-mat-6r4wkoout&s5=cf
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document, ASCII text, with very long lines (939), with no line terminators
Hash 9bf72c38ef38be3f3597d2ceb5fab4d5
940358f566d6005729cc64c19e990a047ee50b97
a1257399b6229892fb1405ff18c1a58aae10031077588d1e288f81467322a36d
GET /s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=farmasiet.no&s1=623619497&s2=gamboge-moose&s3=foxtrot-mat-6r4wkoout&s5=cf HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
referrer-policy: strict-origin-when-cross-origin
x-powered-by: PHP/7.4.30
set-cookie: 18f9949443a3c6eb9fff038a4241ae38=3214505166b75440a59c2ffdbc1f9165ba6d1e2465deb9d62ac3ed1f9414bb9fa%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2218f9949443a3c6eb9fff038a4241ae38%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Wed, 28-Sep-2022 17:24:46 GMT; Max-Age=86400; path=/; HttpOnly
content-length: 939
content-type: text/html; charset=UTF-8
date: Tue, 27 Sep 2022 17:24:46 GMT
server: Apache/2.4.54 (codeit) OpenSSL/1.1.1q+quic PHP/7.4.30
X-Firefox-Spdy: h2
lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3D0lvu3YztahOyKOpv%26placementId%3D641e159038b2728b42b64ff6c6df04fc&h=3b68d05f779873f18e2e671944600583
200 OK 867 B URL HTTP/2 lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3D0lvu3YztahOyKOpv%26placementId%3D641e159038b2728b42b64ff6c6df04fc&h=3b68d05f779873f18e2e671944600583
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (867), with no line terminators
Hash ab3f469a2a50b90071a4d03b5ae16ca2
c4e9aeea4bf1110443549eff3c9ee762cf07ea1f
f4868864090a6f98047a94a607552d5c23c56bd06602973a86ed8f1ee4aba79e
GET /s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3D0lvu3YztahOyKOpv%26placementId%3D641e159038b2728b42b64ff6c6df04fc&h=3b68d05f779873f18e2e671944600583 HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 18f9949443a3c6eb9fff038a4241ae38=3214505166b75440a59c2ffdbc1f9165ba6d1e2465deb9d62ac3ed1f9414bb9fa%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2218f9949443a3c6eb9fff038a4241ae38%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
referrer-policy: strict-origin-when-cross-origin
x-powered-by: PHP/7.4.30
content-length: 867
content-type: text/html; charset=UTF-8
date: Tue, 27 Sep 2022 17:24:46 GMT
server: Apache/2.4.54 (codeit) OpenSSL/1.1.1q+quic PHP/7.4.30
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c04624e128d53a460f0cc9b2cc5ad7c6
725650ae95009d4547eb9335408fd10357b61721
aa5b308b3af4d5e386d7417cf99809336e0decb8c89ebf8724fc3fcf3d382732
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA5B308B3AF4D5E386D7417CF99809336E0DECB8C89EBF8724FC3FCF3D382732"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10963
Expires: Tue, 27 Sep 2022 20:27:30 GMT
Date: Tue, 27 Sep 2022 17:24:47 GMT
Connection: keep-alive
api.yadore.com/v2/r?e=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&i=0lvu3YztahOyKOpv&placementId=641e159038b2728b42b64ff6c6df04fc
302 Found 0 B URL HTTP/2 api.yadore.com/v2/r?e=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&i=0lvu3YztahOyKOpv&placementId=641e159038b2728b42b64ff6c6df04fc
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/r?e=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&i=0lvu3YztahOyKOpv&placementId=641e159038b2728b42b64ff6c6df04fc HTTP/1.1
Host: api.yadore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
date: Tue, 27 Sep 2022 17:24:47 GMT
location: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664283584259&.sig=QJ_ETpQ0MD6Jwi4iI4qJngHqmIU-&affiliationId=96965886&comId=100509360&country=no&offerId=cea81daa6a447bf3f9e7747e73de5db4&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=91428d0d16b8e0f817cf58b7923a7fd82975f120cfcbf3f2dd3835e85d12bde8&custom2=SRdytlITOR16&custom3=false
server: nginx
x-powered-by: PHP/8.0.20
content-length: 0
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash b59d1394cd85140e9594a47a61b95c28
d794c3f1fdcbad9b9491b398b5f149105677ab09
d7d1be356e702c5c2a42857125574ca922d68e481a6935facf22b7f0cb207f8f
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3883
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 17:24:47 GMT
Last-Modified: Tue, 27 Sep 2022 16:20:04 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664283584259&.sig=QJ_ETpQ0MD6Jwi4iI4qJngHqmIU-&affiliationId=96965886&comId=100509360&country=no&offerId=cea81daa6a447bf3f9e7747e73de5db4&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=91428d0d16b8e0f817cf58b7923a7fd82975f120cfcbf3f2dd3835e85d12bde8&custom2=SRdytlITOR16&custom3=false
200 OK 33 kB URL HTTP/1.1 no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664283584259&.sig=QJ_ETpQ0MD6Jwi4iI4qJngHqmIU-&affiliationId=96965886&comId=100509360&country=no&offerId=cea81daa6a447bf3f9e7747e73de5db4&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=91428d0d16b8e0f817cf58b7923a7fd82975f120cfcbf3f2dd3835e85d12bde8&custom2=SRdytlITOR16&custom3=false
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12978)
Hash fd779ec27850483316b8344516482a1a
2d1d8b7862320190e562468d7e6fd5a7f548a408
c1e07ca3e209a8e652f17ea17f8862ec9b5f5305382fe3051d0d00a553d921a6
GET /ctl/go/offersearchGo?.ts=1664283584259&.sig=QJ_ETpQ0MD6Jwi4iI4qJngHqmIU-&affiliationId=96965886&comId=100509360&country=no&offerId=cea81daa6a447bf3f9e7747e73de5db4&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=91428d0d16b8e0f817cf58b7923a7fd82975f120cfcbf3f2dd3835e85d12bde8&custom2=SRdytlITOR16&custom3=false HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 17:24:47 GMT
leadId: dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150
clickId: 107698148_1664299487225_5085329
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.016213S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/html; charset=UTF-8
Content-Length: 33042
Set-Cookie: datadome=RYb3VN4AOyCHwevrREllK_we~-84u8qMVmT06qz66o~J7-9_.p3VfK6qkh4f.ONMUS9yyD--h.PqibxpUlsEjxD8VpREyec6VeXilmphrYtTG.Gq9xx~I2bKdZAKkhe; Max-Age=31536000; Expires=Wed, 27 Sep 2023 17:24:47 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
kelkooID=a4c6294-1837ffacff9-1497a8; Max-Age=31536000; Expires=Wed, 27 Sep 2023 17:24:47 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=100
Connection: Keep-Alive
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150&clickId=107698148_1664299487225_5085329
200 OK 68 B URL HTTP/1.1 no-go.kelkoogroup.net/assets/images/p.png?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a7d73ad4ec25b3b986da702748dade525d6e0faca6a6a3fe953ddba0a4b9a516e158c377b78da9e7d78fba6c231ee00752a4a8a83e3d104e2e2743d3c5c7a5b0cbeedd128bac6254f5062050b386c4ae045e19d8874ac570ea305a216cec6c185b9905dcd74282391891033ffb1e617e44b24dc0171166be9aa8dfeb8fb201537c53612cb987bf6b1a2972f074fbc57209689c9f16ef4f08f07245f8fe3ea0f883186237e5ccf6cdba81851a3f3334ff8c8fe287d0e17d406f3fad6a454f4ba3eb58fa19493bf1c6f214ea3e0d355afaa7fc563028c84243fbfaf51e787bc164cb8a1cdcd0852d6b5f99597b2ddaad7846d76a44b8162399a5e51a3a802715e4b8&leadId=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150&clickId=107698148_1664299487225_5085329
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150&clickId=107698148_1664299487225_5085329 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664283584259&.sig=QJ_ETpQ0MD6Jwi4iI4qJngHqmIU-&affiliationId=96965886&comId=100509360&country=no&offerId=cea81daa6a447bf3f9e7747e73de5db4&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=91428d0d16b8e0f817cf58b7923a7fd82975f120cfcbf3f2dd3835e85d12bde8&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=RYb3VN4AOyCHwevrREllK_we~-84u8qMVmT06qz66o~J7-9_.p3VfK6qkh4f.ONMUS9yyD--h.PqibxpUlsEjxD8VpREyec6VeXilmphrYtTG.Gq9xx~I2bKdZAKkhe; kelkooID=a4c6294-1837ffacff9-1497a8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 17:24:47 GMT
Request-Time: PT0.002078S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: image/png
Content-Length: 68
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=62
Connection: Keep-Alive
dd.kelkoogroup.net/tags.js
200 OK 43 kB URL HTTP/2 dd.kelkoogroup.net/tags.js
IP
File type ASCII text, with very long lines (65432)
Hash fbe95e048d875d7afcc3559643637879
a14dceea986b7cdcfd99b9c1780ffd0671eb474c
3a073213b1dc128dcc32cb454889f53f66488d540f71ab8b668f633ed0251865
GET /tags.js HTTP/1.1
Host: dd.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=RYb3VN4AOyCHwevrREllK_we~-84u8qMVmT06qz66o~J7-9_.p3VfK6qkh4f.ONMUS9yyD--h.PqibxpUlsEjxD8VpREyec6VeXilmphrYtTG.Gq9xx~I2bKdZAKkhe; kelkooID=a4c6294-1837ffacff9-1497a8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 42896
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Fri, 23 Sep 2022 08:38:37 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 d63ea68c8b7458d49fe25f66ef7f0a5e.cloudfront.net (CloudFront), 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
date: Tue, 27 Sep 2022 16:39:15 GMT
cache-control: max-age=3600, public
expires: Tue, 27 Sep 2022 17:39:08 GMT
etag: "337cb-5e9541aaa9c3a-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P3, OSL50-P1
x-amz-cf-id: CajkkZ24WMaxRT8CKXML_j2by9Wywu7QDhkcrzYsNhL2vNHqeDnyhw==
age: 2739
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/favicon.ico
403 Forbidden 0 B URL HTTP/1.0 no-go.kelkoogroup.net/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664283584259&.sig=QJ_ETpQ0MD6Jwi4iI4qJngHqmIU-&affiliationId=96965886&comId=100509360&country=no&offerId=cea81daa6a447bf3f9e7747e73de5db4&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=91428d0d16b8e0f817cf58b7923a7fd82975f120cfcbf3f2dd3835e85d12bde8&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=RYb3VN4AOyCHwevrREllK_we~-84u8qMVmT06qz66o~J7-9_.p3VfK6qkh4f.ONMUS9yyD--h.PqibxpUlsEjxD8VpREyec6VeXilmphrYtTG.Gq9xx~I2bKdZAKkhe; kelkooID=a4c6294-1837ffacff9-1497a8; _ga=GA1.2.758378021.1664299485; _gid=GA1.2.863855627.1664299485
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.0 403 Forbidden
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150&clickId=107698148_1664299487225_5085329
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150&clickId=107698148_1664299487225_5085329
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=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&leadId=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150&clickId=107698148_1664299487225_5085329 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664283584259&.sig=QJ_ETpQ0MD6Jwi4iI4qJngHqmIU-&affiliationId=96965886&comId=100509360&country=no&offerId=cea81daa6a447bf3f9e7747e73de5db4&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=91428d0d16b8e0f817cf58b7923a7fd82975f120cfcbf3f2dd3835e85d12bde8&custom2=SRdytlITOR16&custom3=false
Content-Type: text/plain;charset=utf-8
Content-Length: 520
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=RYb3VN4AOyCHwevrREllK_we~-84u8qMVmT06qz66o~J7-9_.p3VfK6qkh4f.ONMUS9yyD--h.PqibxpUlsEjxD8VpREyec6VeXilmphrYtTG.Gq9xx~I2bKdZAKkhe; kelkooID=a4c6294-1837ffacff9-1497a8; _ga=GA1.2.758378021.1664299485; _gid=GA1.2.863855627.1664299485
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 17:24:47 GMT
Request-Time: PT0.002707S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=99
Connection: Keep-Alive
no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150&clickId=107698148_1664299487225_5085329&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%28332280%29p%28302669%29product%2837331-1156207%29ttid%283%29url%28https%253A%252F%252Ffarmasiet.no%252Fcatalog%252Fhud-og-har%252Fsolpleie%252Fpiz-buin-tan--protect-lot-f30-1501%252C5006830%29epi%28dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150%29
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150&clickId=107698148_1664299487225_5085329&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%28332280%29p%28302669%29product%2837331-1156207%29ttid%283%29url%28https%253A%252F%252Ffarmasiet.no%252Fcatalog%252Fhud-og-har%252Fsolpleie%252Fpiz-buin-tan--protect-lot-f30-1501%252C5006830%29epi%28dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150%29
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=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&leadId=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150&clickId=107698148_1664299487225_5085329&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%28332280%29p%28302669%29product%2837331-1156207%29ttid%283%29url%28https%253A%252F%252Ffarmasiet.no%252Fcatalog%252Fhud-og-har%252Fsolpleie%252Fpiz-buin-tan--protect-lot-f30-1501%252C5006830%29epi%28dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150%29 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664283584259&.sig=QJ_ETpQ0MD6Jwi4iI4qJngHqmIU-&affiliationId=96965886&comId=100509360&country=no&offerId=cea81daa6a447bf3f9e7747e73de5db4&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=91428d0d16b8e0f817cf58b7923a7fd82975f120cfcbf3f2dd3835e85d12bde8&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=RYb3VN4AOyCHwevrREllK_we~-84u8qMVmT06qz66o~J7-9_.p3VfK6qkh4f.ONMUS9yyD--h.PqibxpUlsEjxD8VpREyec6VeXilmphrYtTG.Gq9xx~I2bKdZAKkhe; kelkooID=a4c6294-1837ffacff9-1497a8; _ga=GA1.2.758378021.1664299485; _gid=GA1.2.863855627.1664299485
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
Date: Tue, 27 Sep 2022 17:24:47 GMT
leadId: dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150
clickId: 107698148_1664299487225_5085329
country: no
Location: https://pdt.tradedoubler.com/click?a(332280)p(302669)product(37331-1156207)ttid(3)url(https%3A%2F%2Ffarmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830)epi(dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150)
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.012191S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=j2mZ5P~oP_qYX3i~Vkfyac4EAGVnCuJSS~MKihcYprKRwdQvF76zHEXsJqZcqkpzEHAsvwyF2m28d95QSqyuuQy_ZoX4Kng4TmOtNrHDZgVvGvbUY2FF-yWk_cKWEj.; Max-Age=31536000; Expires=Wed, 27 Sep 2023 17:24:47 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=61
Connection: Keep-Alive
Content-Type: text/plain
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c451dc876a8ede86b0237ffa19173df6
a61c3100333dcecc336c16b4acfa07a1177ad515
526456a03961b44022cdae6c0c7e22112c690aabce57b10423192c6b47ddb6f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "526456A03961B44022CDAE6C0C7E22112C690AABCE57B10423192C6B47DDB6F0"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8400
Expires: Tue, 27 Sep 2022 19:44:47 GMT
Date: Tue, 27 Sep 2022 17:24:47 GMT
Connection: keep-alive
pdt.tradedoubler.com/click?a(332280)p(302669)product(37331-1156207)ttid(3)url(https%3A%2F%2Ffarmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830)epi(dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150)
200 OK 1.4 kB URL HTTP/2 pdt.tradedoubler.com/click?a(332280)p(302669)product(37331-1156207)ttid(3)url(https%3A%2F%2Ffarmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830)epi(dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150)
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (681)
Hash 8bbf3b64bfd3fc4aede12f111845c0bf
eaf150c98a050bac901c7d22dbd1566b47619e92
9a910f420e153a50c63a994cbf07eb8f46c3cdb30ad5060fd27c01d70d3e01b4
GET /click?a(332280)p(302669)product(37331-1156207)ttid(3)url(https%3A%2F%2Ffarmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830)epi(dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150) HTTP/1.1
Host: pdt.tradedoubler.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=ISO-8859-1
server: TXServerHttp
access-control-allow-origin: *
cache-control: private, max-age=0
pragma: no-cache
p3p: policyref="http://tracker.tradedoubler.com/w3c/p3p.xml",CP="NOI DSP COR NID CUR OUR NOR"
referrer-policy: origin
date: Tue, 27 Sep 2022 17:24:46 GMT
content-length: 1439
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c451dc876a8ede86b0237ffa19173df6
a61c3100333dcecc336c16b4acfa07a1177ad515
526456a03961b44022cdae6c0c7e22112c690aabce57b10423192c6b47ddb6f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "526456A03961B44022CDAE6C0C7E22112C690AABCE57B10423192C6B47DDB6F0"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8400
Expires: Tue, 27 Sep 2022 19:44:47 GMT
Date: Tue, 27 Sep 2022 17:24:47 GMT
Connection: keep-alive
vht.tradedoubler.com/fp/prefs.js
200 OK 3.7 kB URL HTTP/1.1 vht.tradedoubler.com/fp/prefs.js
IP
File type ASCII text, with very long lines (764)
Hash 9042aeefa6b50fd89dafd065aee87148
0903b60da6faa7a16b30fe42a0974ae20c0e09bf
dcde81d721f2b5f9e932b434eff9f39b07ce0803a772c991296ddd4e9e8e0b30
GET /fp/prefs.js HTTP/1.1
Host: vht.tradedoubler.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 3705
Connection: keep-alive
Server: Apache
Strict-Transport-Security: max-age=15552000; includeSubDomains
Last-Modified: Mon, 15 Oct 2018 09:28:46 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Date: Mon, 26 Sep 2022 23:20:53 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bTGdbzCrKVn3HQwfbVcdSkJ7qzswXg80cmF7tZThStScUL0e9E55JA==
Age: 65047
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d78c80af4b8b5eee8f0fb6b854a373dd
22f73bb73cf5026314115ca832f38115993b9fd3
1c12f52d8dad2992fb913dc2cbfc55aa6dace6434b7d39a2fe3c7db603ab294a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 17:24:47 GMT
Last-Modified: Tue, 27 Sep 2022 16:59:55 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RLpg-x6YH2LuNEvLQq-hV0abAyeQm2WPEMtcnXjseR5-a0K7LKh-WQ==
Age: 1492
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f76d47ed4f3c90f557522303bb760bc
f34542cabea7a4517debf64c298b59fc009ea56c
5ce5c216b7cb6a4425f12453e447ad364bcc1cd7d23a9d2468a8a40adfc2cb10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 17:24:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1664283584259%26.sig%3DQJ_ETpQ0MD6Jwi4iI4qJngHqmIU-%26affiliationId%3D96965886%26comId%3D100509360%26country%3Dno%26offerId%3Dcea81daa6a447bf3f9e7747e73de5db4%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D91428d0d16b8e0f817cf58b7923a7fd82975f120cfcbf3f2dd3835e85d12bde8%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100509360%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Farmasiet.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=758378021.1664299485&tid=UA-168544891-6&_gid=863855627.1664299485&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150&cd3=100509360&cd4=a4c6294-1837ffacff9-1497a8&cd5=&cd6=96965886%7C100509360%7C&z=431713514
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1664283584259%26.sig%3DQJ_ETpQ0MD6Jwi4iI4qJngHqmIU-%26affiliationId%3D96965886%26comId%3D100509360%26country%3Dno%26offerId%3Dcea81daa6a447bf3f9e7747e73de5db4%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D91428d0d16b8e0f817cf58b7923a7fd82975f120cfcbf3f2dd3835e85d12bde8%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100509360%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Farmasiet.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=758378021.1664299485&tid=UA-168544891-6&_gid=863855627.1664299485&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150&cd3=100509360&cd4=a4c6294-1837ffacff9-1497a8&cd5=&cd6=96965886%7C100509360%7C&z=431713514
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1664283584259%26.sig%3DQJ_ETpQ0MD6Jwi4iI4qJngHqmIU-%26affiliationId%3D96965886%26comId%3D100509360%26country%3Dno%26offerId%3Dcea81daa6a447bf3f9e7747e73de5db4%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D91428d0d16b8e0f817cf58b7923a7fd82975f120cfcbf3f2dd3835e85d12bde8%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100509360%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Farmasiet.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=758378021.1664299485&tid=UA-168544891-6&_gid=863855627.1664299485&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-04.prod.dc1.kelkoo.net_1664299487232_2410150&cd3=100509360&cd4=a4c6294-1837ffacff9-1497a8&cd5=&cd6=96965886%7C100509360%7C&z=431713514 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Tue, 27 Sep 2022 17:24:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
redirects.tradedoubler.com/projectr/?utm_source=Tradedoubler*_td_*KEEP_NEWEST&utm_medium=Affiliate*_td_*KEEP_NEWEST&utm_campaign=Kelkoo_td_ifelse=preprod.*td_string*https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830*td_true*&_td_url=https://preprod.farmasiet.no/td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&_td_deeplink=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830*td_false*_td_ifelse=int.farmasiet*td_string*https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830*td_true*&_td_url=https://int.farmasiet.no/td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&_td_deeplink=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830*td_false*&_td_url=https://www.farmasiet.no/td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&_td_deeplink=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830
302 Found 1 B URL HTTP/1.1 redirects.tradedoubler.com/projectr/?utm_source=Tradedoubler*_td_*KEEP_NEWEST&utm_medium=Affiliate*_td_*KEEP_NEWEST&utm_campaign=Kelkoo_td_ifelse=preprod.*td_string*https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830*td_true*&_td_url=https://preprod.farmasiet.no/td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&_td_deeplink=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830*td_false*_td_ifelse=int.farmasiet*td_string*https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830*td_true*&_td_url=https://int.farmasiet.no/td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&_td_deeplink=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830*td_false*&_td_url=https://www.farmasiet.no/td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&_td_deeplink=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830
IP
File type very short file (no magic)
Hash 7215ee9c7d9dc229d2921a40e899ec5f
b858cb282617fb0956d960215c8e84d1ccf909c6
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
GET /projectr/?utm_source=Tradedoubler*_td_*KEEP_NEWEST&utm_medium=Affiliate*_td_*KEEP_NEWEST&utm_campaign=Kelkoo_td_ifelse=preprod.*td_string*https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830*td_true*&_td_url=https://preprod.farmasiet.no/td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&_td_deeplink=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830*td_false*_td_ifelse=int.farmasiet*td_string*https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830*td_true*&_td_url=https://int.farmasiet.no/td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&_td_deeplink=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830*td_false*&_td_url=https://www.farmasiet.no/td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&_td_deeplink=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830 HTTP/1.1
Host: redirects.tradedoubler.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
Connection: keep-alive
Cookie: EH_0=1z11z1zwIz2DCHBXz1O4TyZkwADFuyESDtdZ0ZBYuDDgrfLDqtdx7OXc8gD_s_lxNonwiA9oSpQESpxZm500uK.47bo2XvXCue9ZDgsmOA7%7aGE844istYCR8Xapn0Z58FsZsg2SX9C_QCUEHRY2_pTWOIskkcj2nJqjeUAVmJK_; GUID=1z11zzwIz1rpxVgz6ca79b2298fd03be9c0030f8626cd142; TradeDoublerGUID=6ca79b2298fd03be9c0030f8626cd142
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/1.1 302 Found
Cache-control: no-cache="set-cookie"
Content-Type: text/html; charset=UTF-8
Date: Tue, 27 Sep 2022 17:24:47 GMT
Location: https://www.farmasiet.no/td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&url=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Server: Apache/2.4.53 () OpenSSL/1.0.2k-fips
Set-Cookie: AWSELB=FF1BFB8F1C42D3E6A4BF4A0B044EDED4042A192C92448B5DC41B6DF8F1BB665B74D1DBC44C6D7EBC787BD0F6BE79D5AC5A5888F948C1BA03E231E71D15DBA2CF9A7C59ACA2;PATH=/;MAX-AGE=30
AWSELBCORS=FF1BFB8F1C42D3E6A4BF4A0B044EDED4042A192C92448B5DC41B6DF8F1BB665B74D1DBC44C6D7EBC787BD0F6BE79D5AC5A5888F948C1BA03E231E71D15DBA2CF9A7C59ACA2;PATH=/;MAX-AGE=30;SECURE;SAMESITE=None
X-Powered-By: PHP/7.3.33
Content-Length: 1
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f76d47ed4f3c90f557522303bb760bc
f34542cabea7a4517debf64c298b59fc009ea56c
5ce5c216b7cb6a4425f12453e447ad364bcc1cd7d23a9d2468a8a40adfc2cb10
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 17:24:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.farmasiet.no/td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&url=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
302 Found 1.4 kB URL HTTP/2 www.farmasiet.no/td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&url=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1123), with CRLF line terminators
Hash 193220ba9ed2ce2e22fd6f7fd264e9bc
96e2ab7b11192b910210d8034a67cc7b03a821c1
ca4a1b3e5e433f72eaa6f890a081c082763a68f848d6c3628467e20bec7a41bc
GET /td_redirect?tduid=6ca79b2298fd03be9c0030f8626cd142&url=https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 27 Sep 2022 17:24:48 GMT
content-type: text/html; charset=utf-8
content-length: 1352
location: https://farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
access-control-expose-headers: Request-Context
cache-control: no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
set-cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; expires=Tue, 06-Dec-2022 04:04:48 GMT; path=/; HttpOnly
TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; expires=Wed, 27-Sep-2023 17:24:48 GMT; path=/
ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4;Path=/;HttpOnly;Secure;Domain=www.farmasiet.no
ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.farmasiet.no
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7515ef586fe4b512-OSL
X-Firefox-Spdy: h2
farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
301 Moved Permanently 0 B URL HTTP/1.0 farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo HTTP/1.1
Host: farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.0 301 Moved Permanently
Location: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
200 OK 63 kB URL HTTP/2 www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (39229), with CRLF, LF line terminators
Hash 8a5162d8dca6164e35cb47454c9173d3
cf87e0654f2dd912c9f3dac3227e9b147d68b8b8
37d43c61fe2847bd3630ef59ee55b11d2878bc06563bbd68dcc0afccf9ee0230
GET /catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
Connection: keep-alive
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: text/html; charset=utf-8
content-length: 63120
access-control-expose-headers: Request-Context
cache-control: no-cache, no-store
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7515ef592905b512-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/vendors~adminPortal~checkout~cms~filters.js?v=1.0.21359.0
200 OK 42 kB URL HTTP/2 www.farmasiet.no/dist/vendors~adminPortal~checkout~cms~filters.js?v=1.0.21359.0
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 52fdc2c838a1c8295e6570a8e42ec597
3cace456731eb20a4993ec1852859ec5763d1436
64f4bd26ecc56f9bcb18e9eccd499e629b1be3be2b991cbfc55b5497fb4e3733
GET /dist/vendors~adminPortal~checkout~cms~filters.js?v=1.0.21359.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/x-javascript
content-length: 41586
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "02de4ac4ccd81:0"
last-modified: Mon, 19 Sep 2022 08:49:06 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 709388
expires: Sun, 26 Mar 2023 17:24:49 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7515ef5f49e1b512-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/libs.js?v=1.0.21359.0
200 OK 258 B URL HTTP/2 www.farmasiet.no/dist/libs.js?v=1.0.21359.0
IP
Hash de008653bb352759c96ead179fb81529
e6f41b96bb4d5a24061200761dc97426485360fc
aa2e7757cf2b36218dac28084b5c8d29b313d676f84807ab67c8309a26a475e4
GET /dist/libs.js?v=1.0.21359.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/x-javascript
content-length: 258
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0dfa83535c4d81:0"
last-modified: Fri, 09 Sep 2022 10:16:22 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 709388
expires: Sun, 26 Mar 2023 17:24:49 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7515ef5f49e4b512-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/runtime.js?v=1.0.21359.0
200 OK 974 B URL HTTP/2 www.farmasiet.no/dist/runtime.js?v=1.0.21359.0
IP
File type ASCII text, with very long lines (1497)
Hash 67a89f1729c2ad37b65a0dcd5e319ff6
5789ec1ffac94aca16937961ce038796a46b330c
abfc10871e9671b192b07286479427ebee8a28ae77308069a5fed1f6146c3445
GET /dist/runtime.js?v=1.0.21359.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/x-javascript
content-length: 974
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0dfa83535c4d81:0"
last-modified: Fri, 09 Sep 2022 10:16:22 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 709388
expires: Sun, 26 Mar 2023 17:24:49 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7515ef5f49d6b512-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/Resources/Translations_no.js?v=1.0.21359.0
200 OK 18 kB URL HTTP/2 www.farmasiet.no/Resources/Translations_no.js?v=1.0.21359.0
IP
File type Unicode text, UTF-8 text, with very long lines (352), with CRLF line terminators
Hash c905d7064dca602bc6fc8bc81947eb02
8ac936c416ec696f33cddc098a19cd0a620740f6
cadd050404a925b2a274fdeb2530a54cad16c6fc6a34b98d0fa81bc22f13ec57
GET /Resources/Translations_no.js?v=1.0.21359.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/x-javascript
content-length: 18334
access-control-expose-headers: Request-Context
cache-control: public, max-age=86400
content-encoding: gzip
etag: "093dcfb1ccd81:0"
last-modified: Mon, 19 Sep 2022 08:29:50 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 18177
expires: Wed, 28 Sep 2022 17:24:49 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7515ef5f49e6b512-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/polyfills.js?v=1.0.21359.0
200 OK 1.7 kB URL HTTP/2 www.farmasiet.no/dist/polyfills.js?v=1.0.21359.0
IP
File type ASCII text, with very long lines (3110)
Hash 955491cb46d3627f4befa78546c4bc97
d04af3ce5719e77ce715e32cb5791a09772745f2
363229a23208da7485412afd5cb73639a4c3d3007efe777c4b39dd86b8d63702
GET /dist/polyfills.js?v=1.0.21359.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/x-javascript
content-length: 1660
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0dfa83535c4d81:0"
last-modified: Fri, 09 Sep 2022 10:16:22 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 709388
expires: Sun, 26 Mar 2023 17:24:49 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7515ef5f49dbb512-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/vendors~libs.js?v=1.0.21359.0
200 OK 6.1 kB URL HTTP/2 www.farmasiet.no/dist/vendors~libs.js?v=1.0.21359.0
IP
File type ASCII text, with very long lines (12518)
Hash 24ac85c035bda1e2e415a6bebe0c12c0
99c8f98beba1679fbb0d94c67f775ea45c9ba63d
b62b25b5371ee6fb8a9624ac11cf54522d9ace90693e147f5284cbec3115d559
GET /dist/vendors~libs.js?v=1.0.21359.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/x-javascript
content-length: 6108
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0dfa83535c4d81:0"
last-modified: Fri, 09 Sep 2022 10:16:22 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 709388
expires: Sun, 26 Mar 2023 17:24:49 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7515ef5f49e5b512-OSL
X-Firefox-Spdy: h2
dl.episerver.net/13.4.8/epi-util/find.js
200 OK 2.3 kB URL HTTP/2 dl.episerver.net/13.4.8/epi-util/find.js
IP
File type ASCII text, with very long lines (6083), with no line terminators
Hash 8584010bbead95c01323d28ed9fa4f36
0d1855394e454510ce533e9cfef63128ac22a30b
506fbdcbd9e478e9f026f69abb8f42905a5bf3f31032b3b9ad6b701dcc6c6d20
GET /13.4.8/epi-util/find.js HTTP/1.1
Host: dl.episerver.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/javascript
content-length: 2254
content-encoding: gzip
etag: W/"6083-1647272010000"
last-modified: Mon, 14 Mar 2022 15:33:30 GMT
vary: accept-encoding
x-powered-by: ASP.NET
x-content-type-options: nosniff
cf-cache-status: HIT
age: 6064
expires: Wed, 28 Sep 2022 17:24:49 GMT
cache-control: public, max-age=86400
accept-ranges: bytes
server: cloudflare
cf-ray: 7515ef5fac3eb51e-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/images/piz-buin-tan--protect-lot-f30-1501,67334_1156207.jpg?w=528&h=528&mode=Pad&quality=100&crop=1320,97,2702,2899&format=jpg
200 OK 17 kB URL HTTP/2 www.farmasiet.no/images/piz-buin-tan--protect-lot-f30-1501,67334_1156207.jpg?w=528&h=528&mode=Pad&quality=100&crop=1320,97,2702,2899&format=jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 528x528, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 87dc36d539b81dff9e4dd3f318d8f511
48c20d9a8df26cf112860069d18b0bd4af26b70b
7e14be73912746a741707b2c557f4a4b80e9f6f49bb8b395be956dcca5fc0df3
GET /images/piz-buin-tan--protect-lot-f30-1501,67334_1156207.jpg?w=528&h=528&mode=Pad&quality=100&crop=1320,97,2702,2899&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=31337691
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=88727
content-disposition: inline; filename="piz-buin-tan--protect-lot-f30-1501,67334_1156207.webp"
expires: Mon, 25 Sep 2023 10:19:40 GMT
last-modified: Sun, 25 Sep 2022 10:19:40 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
cf-cache-status: HIT
age: 198309
server: cloudflare
cf-ray: 7515ef5f39d4b512-OSL
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/576.js
200 OK 168 B URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/576.js
IP
Hash 08e429937c28f15fe2314fb8ea0c8579
ace889d6468c09ceb52cc4f7028249f4ce33189f
564b40dfe61c85974a2faf68ef174558b0aa0b0842b25ccc51a15e89797167ae
GET /tag-builds/10377/4.1/js/chunks/576.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 168
date: Wed, 07 Sep 2022 15:44:43 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: "08e429937c28f15fe2314fb8ea0c8579"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
accept-ranges: bytes
server: AmazonS3
vary: Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b_F0RfmSA_INTIFfaohWqJREjIsllvWnpSp-DACmtvjyfNiM_SCT1A==
age: 1734007
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/css/styles.css
200 OK 56 kB URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/css/styles.css
IP
Hash 778175c646441f776736f947ab7c36c3
ef0176a8ccc3e2c69846796ce3914bb2ee71521a
d7d60edba768490c000cbb295f24aba274f5155559daafca762914b4bc80b559
GET /tag-builds/10377/4.1/css/styles.css HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Wed, 07 Sep 2022 15:44:43 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:15 GMT
etag: W/"403562bcc2b6cc77f1384004b49ed962"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: K6HIuM1fRYTz4mD0TV578Supg0GwkpeLxuNSLgHVhYXVgH0oVIMzPQ==
age: 1734007
X-Firefox-Spdy: h2
ui.powerreviews.com/stable/4.1/ui.js
200 OK 15 kB URL HTTP/2 ui.powerreviews.com/stable/4.1/ui.js
IP
File type Unicode text, UTF-8 text, with very long lines (41903)
Hash 5f6136a961fe064e41a42fb357c6a3e0
8b49fd5906c5e6d4b14e42871015f123c33b2b96
e09bcf2534acf17da892eec37113261a1394797d48578ad0f5e9363e0426b1a7
GET /stable/4.1/ui.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:23 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 22 Sep 2022 01:32:12 GMT
cache-control: max-age=1800,s-maxage=1209600
etag: W/"83c0b82cf655b49d797b1906b0ffdef6"
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mK_NItfFcqX-HP81HHRijhWaxDgUDEBJjxs-Gpsl0VV-9qFPkfFeww==
age: 489170
X-Firefox-Spdy: h2
resept.farmasiet.no/inbox/config/config.json?v=1664299487592
200 OK 47 B URL HTTP/1.1 resept.farmasiet.no/inbox/config/config.json?v=1664299487592
IP
File type JSON data\012- , ASCII text, with CRLF line terminators
Hash 343a57f516de50451282a140170844a4
948729ba6711078ba5106997bf265838c9a08247
f62cce30b4f801b7e446a878713f8d7de05f16aa094f7fd8af10cca2b3e828e7
GET /inbox/config/config.json?v=1664299487592 HTTP/1.1
Host: resept.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://resept.farmasiet.no/inbox/unread-messages-badge.html
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/json
Last-Modified: Mon, 11 Jul 2022 06:57:44 GMT
Accept-Ranges: bytes
ETag: "0643185f394d81:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 17:24:49 GMT
Content-Length: 47
www.farmasiet.no/dist/assets/images/apple-touch-icon.png?v=1.0.21359.0
200 OK 110 B URL HTTP/2 www.farmasiet.no/dist/assets/images/apple-touch-icon.png?v=1.0.21359.0
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 564b7055d9ec9a5307091e5674afa005
d82569c564540f23c4e987c525e3a83bc3c4d050
26627641a815c38eed0d34102995db288c5084917ad132724c3630f7b51d8e38
GET /dist/assets/images/apple-touch-icon.png?v=1.0.21359.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: image/webp
content-length: 110
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=474
content-disposition: inline; filename="apple-touch-icon.webp"
etag: "0dfa83535c4d81:0"
last-modified: Fri, 09 Sep 2022 10:16:22 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
cf-cache-status: HIT
age: 709388
expires: Sun, 26 Mar 2023 17:24:49 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7515ef63a81eb512-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/assets/images/favicon-16x16.png?v=1.0.21359.0
200 OK 78 B URL HTTP/2 www.farmasiet.no/dist/assets/images/favicon-16x16.png?v=1.0.21359.0
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0d9fa6e5a904f16ebc68380ee66860f2
6d443467dc5feb79b96c1d3dd6298e4d266142a5
f5298cd21c467d2b074d1a496985c8073ed7788da7d3fead70b07af08d6508df
GET /dist/assets/images/favicon-16x16.png?v=1.0.21359.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: image/webp
content-length: 78
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=430
content-disposition: inline; filename="favicon-16x16.webp"
etag: "0dfa83535c4d81:0"
last-modified: Fri, 09 Sep 2022 10:16:22 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
cf-cache-status: HIT
age: 709378
expires: Sun, 26 Mar 2023 17:24:49 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7515ef63a81fb512-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/api/visitorIntelligence/track/custom
200 OK 670 B URL HTTP/2 www.farmasiet.no/api/visitorIntelligence/track/custom
IP
File type JSON data\012- , ASCII text, with very long lines (1856), with no line terminators
Hash 6296996ad196a231f56190199b97c14d
01cb4a47a46e517ec34cf044c1fb052213f50b42
c832fd205bffcdad5d694d6378d0804826e0092f68978fdc805aa6359d0a57b0
POST /api/visitorIntelligence/track/custom HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 444
Origin: https://www.farmasiet.no
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/json; charset=utf-8
content-length: 670
access-control-expose-headers: Request-Context
cache-control: no-cache
content-encoding: gzip
expires: -1
pragma: no-cache
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
set-cookie: EPiSessionId=75f5073d-43e6-49c6-8446-9b5a36916940; Max-Age=1800; Path=/
_madid=eaffa291-4ef8-4f6d-b0ce-4bad0907a580; expires=Wed, 27-Sep-2023 17:24:49 GMT; path=/
epi_RecommendationsTrackingUserId=cuid=94286332911|ERwIWQVxIC-MmT2rfFqMFzrAygxIXdtBmD8ZvcPbD3o&h=; expires=Wed, 27-Sep-2023 17:24:49 GMT; path=/
epi_RecommendationsTrackingSessionId=118746192911|_c2LRBJMUfjuBrp33VwuogCKue5FBRyvMf_givu6QU8; expires=Tue, 27-Sep-2022 21:24:49 GMT; path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7515ef630f44b512-OSL
X-Firefox-Spdy: h2
az416426.vo.msecnd.net/scripts/a/ai.0.js
200 OK 22 kB URL HTTP/2 az416426.vo.msecnd.net/scripts/a/ai.0.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash affc2b93a9fc23bbba65931b19b1e12c
a175097d2aa7ffb4b54193f197f296ab57967308
1c383d5958a56ed0858150b049c83da4d4b31a4ac05314ae9a4f623933a3df25
GET /scripts/a/ai.0.js HTTP/1.1
Host: az416426.vo.msecnd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 843
cache-control: public, max-age=1800
content-md5: HdY95yzx9wIyQkVEGES+Ew==
content-type: application/x-javascript
date: Tue, 27 Sep 2022 17:24:49 GMT
etag: 0x8D8E461DA1A5889
expires: Tue, 27 Sep 2022 17:54:49 GMT
last-modified: Thu, 11 Mar 2021 07:46:59 GMT
server: ECAcc (ska/F773)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-meta-lastmodified: 2020-10-01 19:31:04
x-ms-request-id: 45e404ab-901e-0035-4894-d28461000000
x-ms-version: 2009-09-19
content-length: 22495
X-Firefox-Spdy: h2
www.farmasiet.no/power-reviews/style.css
200 OK 6.0 kB URL HTTP/2 www.farmasiet.no/power-reviews/style.css
IP
File type ASCII text, with CRLF line terminators
Hash abd4ccef4930a2b23c7ac651fa9198ab
57a0973f9a29ea61ff39cdae82632a4cf6f8908c
ccf6bb632ecc1038e89edb55c70785ceb5ce8a4eb9c78982e8872a28c4a6dd67
GET /power-reviews/style.css HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: text/css; charset=utf-8
content-length: 6018
access-control-expose-headers: Request-Context
cache-control: public, max-age=14400
content-encoding: gzip
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
last-modified: Tue, 27 Sep 2022 17:24:49 GMT
cf-cache-status: MISS
expires: Tue, 27 Sep 2022 21:24:49 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7515ef63e88ab512-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/api/products/recommendations
200 OK 5.2 kB URL HTTP/2 www.farmasiet.no/api/products/recommendations
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (31478), with no line terminators
Hash 95902f06e9ecaf39434ec670af1eea67
f62e9e17b5d0a029087e20a01367291e41d794e5
ccf56b473cb4ee61a556ab0c1db8690aa5bc9b4fde59ebb4c7494e8c70029b2b
POST /api/products/recommendations HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
X-Requested-With: XMLHttpRequest
__RequestVerificationToken:
Content-Type: application/json
experimentation-path: /catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830
experimentation-userdata: {"device":"Laptop"}
Origin: https://www.farmasiet.no
Content-Length: 934
Connection: keep-alive
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; EPiSessionId=75f5073d-43e6-49c6-8446-9b5a36916940; _madid=eaffa291-4ef8-4f6d-b0ce-4bad0907a580; epi_RecommendationsTrackingUserId=cuid=94286332911|ERwIWQVxIC-MmT2rfFqMFzrAygxIXdtBmD8ZvcPbD3o&h=; epi_RecommendationsTrackingSessionId=118746192911|_c2LRBJMUfjuBrp33VwuogCKue5FBRyvMf_givu6QU8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:50 GMT
content-type: application/json; charset=utf-8
content-length: 5177
access-control-expose-headers: Request-Context
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: -1
pragma: no-cache
set-cookie: EPiSessionId=75f5073d-43e6-49c6-8446-9b5a36916940; Max-Age=1800; Path=/
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7515ef64893db512-OSL
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/586.js
200 OK 13 kB URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/586.js
IP
Hash 9fbcbeebc2b44c82e89e74dadbec96da
c2cbebfaf6c763d2b7ee5be70884ecbf4e9af7f3
8677c696d9e7a0ae18e883bff61899de674a2793ae983f2cdfba1038d156da75
GET /tag-builds/10377/4.1/js/chunks/586.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"af558e35891a6ba5c85d84014d160578"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9eKT37x3FQSb6uw7EjJpnLe31EI-6C2vWZMji-whUjFHr5JfZEBQTQ==
age: 1734007
X-Firefox-Spdy: h2
t.powerreviews.com/t/v1.gif?e=fp&id=2rgADy5laS&uid=6MBKeAv0pM&t=l8kgxzma&l=no_NO&mgid=1527479865&mid=978316140&pid=5006830&pidv=1156207&p=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830%3Futm_source%3DTradedoubler%26utm_medium%3DAffiliate%26utm_campaign%3DKelkoo&r=https%3A%2F%2Fpdt.tradedoubler.com%2F&v=4.1&vv=10377&bn=Piz%20Buin&n=Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20SPF30%2C%20150%20ml&d=Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20er%20en%20solkrem%20til%20kroppen%20med%20solfaktor%2030%2C%20som%20gir%20h%C3%B8y%20solbeskyttelse%20mot%20UVA-%20og%20UVB-str%C3%A5ler.%20Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20har%20en%20teknologi%20som%20hjelper%20til%20%C3%A5%20%C3%B8ke%20hudens%20naturlige%20bruningsprosess.%20Solkremen%20inneholder%20avanserte%20UVA-%2FUVB-filtre%20som%20gir%20deg%20h%C3%B8y...&pu=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830&iu=https%3A%2F%2Fwww.farmasiet.no%2Fimages%2Fpiz-buin-tan--protect-lot-f30-1501%2C67334_1156207.jpg&pri=141.75&cn=Hud%20og%20h%C3%A5r%20%3E%20Solpleie&is=y&upc=3574661184272
200 OK 43 B URL HTTP/1.1 t.powerreviews.com/t/v1.gif?e=fp&id=2rgADy5laS&uid=6MBKeAv0pM&t=l8kgxzma&l=no_NO&mgid=1527479865&mid=978316140&pid=5006830&pidv=1156207&p=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830%3Futm_source%3DTradedoubler%26utm_medium%3DAffiliate%26utm_campaign%3DKelkoo&r=https%3A%2F%2Fpdt.tradedoubler.com%2F&v=4.1&vv=10377&bn=Piz%20Buin&n=Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20SPF30%2C%20150%20ml&d=Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20er%20en%20solkrem%20til%20kroppen%20med%20solfaktor%2030%2C%20som%20gir%20h%C3%B8y%20solbeskyttelse%20mot%20UVA-%20og%20UVB-str%C3%A5ler.%20Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20har%20en%20teknologi%20som%20hjelper%20til%20%C3%A5%20%C3%B8ke%20hudens%20naturlige%20bruningsprosess.%20Solkremen%20inneholder%20avanserte%20UVA-%2FUVB-filtre%20som%20gir%20deg%20h%C3%B8y...&pu=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830&iu=https%3A%2F%2Fwww.farmasiet.no%2Fimages%2Fpiz-buin-tan--protect-lot-f30-1501%2C67334_1156207.jpg&pri=141.75&cn=Hud%20og%20h%C3%A5r%20%3E%20Solpleie&is=y&upc=3574661184272
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /t/v1.gif?e=fp&id=2rgADy5laS&uid=6MBKeAv0pM&t=l8kgxzma&l=no_NO&mgid=1527479865&mid=978316140&pid=5006830&pidv=1156207&p=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830%3Futm_source%3DTradedoubler%26utm_medium%3DAffiliate%26utm_campaign%3DKelkoo&r=https%3A%2F%2Fpdt.tradedoubler.com%2F&v=4.1&vv=10377&bn=Piz%20Buin&n=Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20SPF30%2C%20150%20ml&d=Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20er%20en%20solkrem%20til%20kroppen%20med%20solfaktor%2030%2C%20som%20gir%20h%C3%B8y%20solbeskyttelse%20mot%20UVA-%20og%20UVB-str%C3%A5ler.%20Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20har%20en%20teknologi%20som%20hjelper%20til%20%C3%A5%20%C3%B8ke%20hudens%20naturlige%20bruningsprosess.%20Solkremen%20inneholder%20avanserte%20UVA-%2FUVB-filtre%20som%20gir%20deg%20h%C3%B8y...&pu=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830&iu=https%3A%2F%2Fwww.farmasiet.no%2Fimages%2Fpiz-buin-tan--protect-lot-f30-1501%2C67334_1156207.jpg&pri=141.75&cn=Hud%20og%20h%C3%A5r%20%3E%20Solpleie&is=y&upc=3574661184272 HTTP/1.1
Host: t.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Wed, 14 Aug 2019 18:30:09 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 27 Sep 2022 17:24:51 GMT
ETag: "fc94fb0c3ed8a8f909dbc7630a0987ff"
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6Yu7v3oUsCwcG1WIxZTmMBk8IDZSfkUDUJXW1ItipI2vB6jatwEebQ==
t.powerreviews.com/t/v1.gif?e=fp&id=MBuPk4x9pu&uid=6MBKeAv0pM&t=l8kgxzm9&l=no_NO&mgid=1527479865&mid=978316140&pid=5006830&p=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830%3Futm_source%3DTradedoubler%26utm_medium%3DAffiliate%26utm_campaign%3DKelkoo&r=https%3A%2F%2Fpdt.tradedoubler.com%2F&v=4.1&vv=10377&bn=Piz%20Buin&n=Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20SPF30%2C%20150%20ml&d=Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20er%20en%20solkrem%20til%20kroppen%20med%20solfaktor%2030%2C%20som%20gir%20h%C3%B8y%20solbeskyttelse%20mot%20UVA-%20og%20UVB-str%C3%A5ler.%20Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20har%20en%20teknologi%20som%20hjelper%20til%20%C3%A5%20%C3%B8ke%20hudens%20naturlige%20bruningsprosess.%20Solkremen%20inneholder%20avanserte%20UVA-%2FUVB-filtre%20som%20gir%20deg%20h%C3%B8y...&pu=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830&iu=https%3A%2F%2Fwww.farmasiet.no%2Fimages%2Fpiz-buin-tan--protect-lot-f30-1501%2C67334_1156207.jpg&pri=141.75&cn=Hud%20og%20h%C3%A5r%20%3E%20Solpleie&is=y
200 OK 43 B URL HTTP/1.1 t.powerreviews.com/t/v1.gif?e=fp&id=MBuPk4x9pu&uid=6MBKeAv0pM&t=l8kgxzm9&l=no_NO&mgid=1527479865&mid=978316140&pid=5006830&p=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830%3Futm_source%3DTradedoubler%26utm_medium%3DAffiliate%26utm_campaign%3DKelkoo&r=https%3A%2F%2Fpdt.tradedoubler.com%2F&v=4.1&vv=10377&bn=Piz%20Buin&n=Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20SPF30%2C%20150%20ml&d=Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20er%20en%20solkrem%20til%20kroppen%20med%20solfaktor%2030%2C%20som%20gir%20h%C3%B8y%20solbeskyttelse%20mot%20UVA-%20og%20UVB-str%C3%A5ler.%20Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20har%20en%20teknologi%20som%20hjelper%20til%20%C3%A5%20%C3%B8ke%20hudens%20naturlige%20bruningsprosess.%20Solkremen%20inneholder%20avanserte%20UVA-%2FUVB-filtre%20som%20gir%20deg%20h%C3%B8y...&pu=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830&iu=https%3A%2F%2Fwww.farmasiet.no%2Fimages%2Fpiz-buin-tan--protect-lot-f30-1501%2C67334_1156207.jpg&pri=141.75&cn=Hud%20og%20h%C3%A5r%20%3E%20Solpleie&is=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /t/v1.gif?e=fp&id=MBuPk4x9pu&uid=6MBKeAv0pM&t=l8kgxzm9&l=no_NO&mgid=1527479865&mid=978316140&pid=5006830&p=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830%3Futm_source%3DTradedoubler%26utm_medium%3DAffiliate%26utm_campaign%3DKelkoo&r=https%3A%2F%2Fpdt.tradedoubler.com%2F&v=4.1&vv=10377&bn=Piz%20Buin&n=Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20SPF30%2C%20150%20ml&d=Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20er%20en%20solkrem%20til%20kroppen%20med%20solfaktor%2030%2C%20som%20gir%20h%C3%B8y%20solbeskyttelse%20mot%20UVA-%20og%20UVB-str%C3%A5ler.%20Piz%20Buin%20Tan%20%26%20Protect%20Lotion%20har%20en%20teknologi%20som%20hjelper%20til%20%C3%A5%20%C3%B8ke%20hudens%20naturlige%20bruningsprosess.%20Solkremen%20inneholder%20avanserte%20UVA-%2FUVB-filtre%20som%20gir%20deg%20h%C3%B8y...&pu=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830&iu=https%3A%2F%2Fwww.farmasiet.no%2Fimages%2Fpiz-buin-tan--protect-lot-f30-1501%2C67334_1156207.jpg&pri=141.75&cn=Hud%20og%20h%C3%A5r%20%3E%20Solpleie&is=y HTTP/1.1
Host: t.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Wed, 14 Aug 2019 18:30:09 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 27 Sep 2022 17:24:51 GMT
ETag: "fc94fb0c3ed8a8f909dbc7630a0987ff"
X-Cache: RefreshHit from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: eDfvgLonsLDr96jGvaa3JY35ZFKnyJOdsKJzW2myrF4g2PQBsUU6gw==
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/215.js
200 OK 15 kB URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/215.js
IP
Hash 260332ceb994d36db948cbe0952ee6d5
3ff79ac7f66e252fcd96567e57910183768b8b2c
dfb1acd346cffc387a624d9933797caabbe1186af78f3e21aa1d730ebb2ef363
GET /tag-builds/10377/4.1/js/chunks/215.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"f283a17d4c6f909df9227bf44166de06"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BXWktiN1dFvKnuJluK2JLYAd-i8TkGWmoy0eDPBv4Gny6qMwzdAM8A==
age: 1734007
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/review-display.js
200 OK 3.3 kB URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/review-display.js
IP
Hash 0c41d7d4c256d5ed93c3e408cbc754a2
2f7f9397ba039b879d0a3a47c3e217d4ebea3c97
16e928dcd1ec9ba177506b78e38cd1052691d01b83ed557dfdcf2fa98335978f
GET /tag-builds/10377/4.1/js/chunks/review-display.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"e442999230c1d39da04dcd859d4fd328"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qzr4-dHZq-QZbyrmc26xCF9KqQLq5IvtU1Kd8N0nm_wxpLhVAqdTQA==
age: 1734007
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/953.js
200 OK 10 kB URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/953.js
IP
Hash fd7f91a70a35fba18cdbeb93ff1304c0
34754642654ed9a8eb8025993bdbdf1a1649c932
d14fc357a01a5407fe16898a7a3d567ed9d591170ee57b5f1de718ce3c1b2d9e
GET /tag-builds/10377/4.1/js/chunks/953.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"7310ff8ec05be792b8979a0b750e4aa1"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iKlJ8MvZqpPhKNvEk1DdzBlRTMzCCDNIRISKXROwndiNi6tuNdpjOA==
age: 1734007
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/927.js
200 OK 29 kB URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/927.js
IP
Hash 6f915a26561230d78a76c4c390ec8f09
d154bf1fb421694e2baccc33506e555d4b64dd2e
57db242dcd75c66eff7619916e8703ac2391dbd30c0996646c7c48111d3d4fe7
GET /tag-builds/10377/4.1/js/chunks/927.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"a5607f68f64c12e3c99391ef2ef7c571"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pPhS1pmPNSKz3yn0yi-HwfgXt5HO13pyXpu12I9YjhGp2wc7jJYhKQ==
age: 1734007
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/108.js
200 OK 3.7 kB URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/108.js
IP
Hash 09020308558693a8ca48a28984ce07ca
4fe5b830ed0d87903737b2009c0789b037365a7e
7712c38f2b7031f172630a945d08949bf6b025301b75e44df8dff48a2f6606c6
GET /tag-builds/10377/4.1/js/chunks/108.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"e7fb89896d107d2c21e89ff20677c4b2"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wEsprjhwXGfiY9Sx8Eozu-Q7-OQ0duG5meGn7gmmIDqpDQwMjjq0xg==
age: 1734007
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/363.js
200 OK 19 kB URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/363.js
IP
Hash f1cd95060ee6aa03da24176577eed1b0
f4d4fac3523eea56457cd4da1be97a0bbcb945f7
9f83e01310a1019e60c361613ee4dcbafc1687e5a6b477a4b40e7ba9fce26579
GET /tag-builds/10377/4.1/js/chunks/363.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"2a45c5532a0c5b10d6233cefde4fd603"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2hw08WMpMPFnCKYH6J-a1nap0iWv0Rk5tMCKjNX38qHQnHq7AvbKgw==
age: 1734007
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/647.js
200 OK 3.4 kB URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/647.js
IP
File type ASCII text, with very long lines (10630)
Hash cba044452136e5ec6fe375cd1ca32fa0
796ba5e5c6ca79ae2b200cfb867c29eaac052dc3
456ce3560c35e6d990f3e6416333743f04e1485dc87c2e21b76492986ef8a72a
GET /tag-builds/10377/4.1/js/chunks/647.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"cca9194ff71a4891a6df16fb3580038a"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CNij3DSxkkMmaM0JDNBaXO4z0cBcFS7xXQIWc-2Id3CW-S77-B9zsw==
age: 1734007
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/737.js
200 OK 4.1 kB URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/737.js
IP
Hash 44eafb5f9ae61c442494abf24fb70a67
0af4005760e0efcfcd49bfc51a30b8f03e0da0ca
d2ac07f8d5c9bc6b4241728ca9672b9c9a3d8f09e59e0141d78202c2a7111a51
GET /tag-builds/10377/4.1/js/chunks/737.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"d3f5d49923b57098b6f0a17f411693ca"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Qsf9CdlOTRRD3HblV4DU-P5zekeK-tLqpwUDryA7-MdwCEx85E3ObQ==
age: 1734007
X-Firefox-Spdy: h2
t.powerreviews.com/t/v1.gif?e=rd&et=snippet-visible&id=d_XSDu0ROa&uid=6MBKeAv0pM&t=l8kgxzzw&l=no_NO&mgid=1527479865&mid=978316140&pid=5006830&p=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830%3Futm_source%3DTradedoubler%26utm_medium%3DAffiliate%26utm_campaign%3DKelkoo&r=https%3A%2F%2Fpdt.tradedoubler.com%2F&v=4.1&vv=10377
200 OK 43 B URL HTTP/1.1 t.powerreviews.com/t/v1.gif?e=rd&et=snippet-visible&id=d_XSDu0ROa&uid=6MBKeAv0pM&t=l8kgxzzw&l=no_NO&mgid=1527479865&mid=978316140&pid=5006830&p=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830%3Futm_source%3DTradedoubler%26utm_medium%3DAffiliate%26utm_campaign%3DKelkoo&r=https%3A%2F%2Fpdt.tradedoubler.com%2F&v=4.1&vv=10377
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /t/v1.gif?e=rd&et=snippet-visible&id=d_XSDu0ROa&uid=6MBKeAv0pM&t=l8kgxzzw&l=no_NO&mgid=1527479865&mid=978316140&pid=5006830&p=https%3A%2F%2Fwww.farmasiet.no%2Fcatalog%2Fhud-og-har%2Fsolpleie%2Fpiz-buin-tan--protect-lot-f30-1501%2C5006830%3Futm_source%3DTradedoubler%26utm_medium%3DAffiliate%26utm_campaign%3DKelkoo&r=https%3A%2F%2Fpdt.tradedoubler.com%2F&v=4.1&vv=10377 HTTP/1.1
Host: t.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Wed, 14 Aug 2019 18:30:09 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 27 Sep 2022 17:24:52 GMT
ETag: "fc94fb0c3ed8a8f909dbc7630a0987ff"
X-Cache: RefreshHit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3vut_1D_yw8a7CZ_AM8LwDGc-ZP8EsxfN0GEWpXCvIts0-bnrUcyVw==
ui.powerreviews.com/api/m/978316140/l/no_NO/configuration?apikey=e59eb26f-69da-4cc0-bd35-448debc7a95f
200 OK 0 B URL HTTP/2 ui.powerreviews.com/api/m/978316140/l/no_NO/configuration?apikey=e59eb26f-69da-4cc0-bd35-448debc7a95f
IP
GET /api/m/978316140/l/no_NO/configuration?apikey=e59eb26f-69da-4cc0-bd35-448debc7a95f HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.farmasiet.no/
Origin: https://www.farmasiet.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Tue, 27 Sep 2022 04:02:09 GMT
access-control-allow-origin: https://www.farmasiet.no
access-control-allow-credentials: true
cache-control: max-age=86400, public
etag: W/"0aeebc5755e6de6336b2c6c3d1b7ec2a0"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-encoding: gzip
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YisJlHElujb-VXr3m9BSjBPkvsqshhrumdJfaIb5W3yUcEcxWav0MQ==
age: 48160
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/review-snippet.js
200 OK 0 B URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/review-snippet.js
IP
GET /tag-builds/10377/4.1/js/chunks/review-snippet.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"9ccd8289fbc106717152f8c59fe30858"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qHgrfAxWkDlViGnvEsfAAFlssMe7lLeTCt3kW3_7kkZZrfQm23_zHA==
age: 1734007
X-Firefox-Spdy: h2
www.farmasiet.no/dist/assets/images/logo.svg?v=1.0.21359.0
200 OK 0 B URL HTTP/2 www.farmasiet.no/dist/assets/images/logo.svg?v=1.0.21359.0
IP
GET /dist/assets/images/logo.svg?v=1.0.21359.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: image/svg+xml
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
etag: W/"0dfa83535c4d81:0"
last-modified: Fri, 09 Sep 2022 10:16:22 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 709388
expires: Sun, 26 Mar 2023 17:24:49 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7515ef5f39d1b512-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.farmasiet.no/dist/5.css?v=1.0.21359.0
200 OK 0 B URL HTTP/2 www.farmasiet.no/dist/5.css?v=1.0.21359.0
IP
GET /dist/5.css?v=1.0.21359.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: text/css
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0dfa83535c4d81:0"
last-modified: Fri, 09 Sep 2022 10:16:22 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 709388
expires: Sun, 26 Mar 2023 17:24:49 GMT
server: cloudflare
cf-ray: 7515ef5f39cfb512-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/vendors~adminPortal~checkout~cms~filters~user-profile.js?v=1.0.21359.0
200 OK 0 B URL HTTP/2 www.farmasiet.no/dist/vendors~adminPortal~checkout~cms~filters~user-profile.js?v=1.0.21359.0
IP
GET /dist/vendors~adminPortal~checkout~cms~filters~user-profile.js?v=1.0.21359.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/x-javascript
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0dfa83535c4d81:0"
last-modified: Fri, 09 Sep 2022 10:16:22 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 709388
expires: Sun, 26 Mar 2023 17:24:49 GMT
server: cloudflare
cf-ray: 7515ef5f49e0b512-OSL
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/485.js
200 OK 0 B URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/485.js
IP
GET /tag-builds/10377/4.1/js/chunks/485.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:43 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"91272f32d71d766e269f1372b210081b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HJnwkEp7v80kYm1bBi15VQ7DrsIT-CJ8gy9XtozizKSlsoB4IHUf_Q==
age: 1734007
X-Firefox-Spdy: h2
www.farmasiet.no/images/piz-buin-tanprotect-lot-f15-1501,67333_1156119.jpg?w=202&h=202&mode=Max&quality=100&crop=1312,93,2696,2897&format=jpg
200 OK 0 B URL HTTP/2 www.farmasiet.no/images/piz-buin-tanprotect-lot-f15-1501,67333_1156119.jpg?w=202&h=202&mode=Max&quality=100&crop=1312,93,2696,2897&format=jpg
IP
GET /images/piz-buin-tanprotect-lot-f15-1501,67333_1156119.jpg?w=202&h=202&mode=Max&quality=100&crop=1312,93,2696,2897&format=jpg HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; EPiSessionId=75f5073d-43e6-49c6-8446-9b5a36916940; _madid=eaffa291-4ef8-4f6d-b0ce-4bad0907a580; epi_RecommendationsTrackingUserId=cuid=94286332911|ERwIWQVxIC-MmT2rfFqMFzrAygxIXdtBmD8ZvcPbD3o&h=; epi_RecommendationsTrackingSessionId=118746192911|_c2LRBJMUfjuBrp33VwuogCKue5FBRyvMf_givu6QU8; ai_user=OuZPS|2022-09-27T17:24:47.805Z; __pr.p9f709=6MBKeAv0pM; ai_session=qkNe8|1664299487908|1664299487908
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:50 GMT
content-type: image/webp
access-control-expose-headers: Request-Context
cache-control: public, max-age=29897299
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=16011
content-disposition: inline; filename="piz-buin-tanprotect-lot-f15-1501,67333_1156119.webp"
expires: Fri, 08 Sep 2023 18:13:09 GMT
last-modified: Thu, 08 Sep 2022 18:13:09 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
vary: Accept
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1638701
server: cloudflare
cf-ray: 7515ef675c9bb512-OSL
X-Firefox-Spdy: h2
polyfill.io/v3/polyfill.min.js?features=Promise%2CPromise.prototype.finally%2CSet%2CMap%2Cfetch%2CSymbol%2CArray.prototype.find%2CArray.prototype.some%2CArray.prototype.every%2CArray.prototype.forEach%2CArray.prototype.findIndex%2CString.prototype.includes%2CString.prototype.startsWith%2CCustomEvent%2Ces7%2CURLSearchParams%2CElement.prototype.inert%2CObject.values%2CObject.entries%2Cfetch%2CString.prototype.endsWith%2CElement.prototype.closest
200 OK 0 B URL HTTP/2 polyfill.io/v3/polyfill.min.js?features=Promise%2CPromise.prototype.finally%2CSet%2CMap%2Cfetch%2CSymbol%2CArray.prototype.find%2CArray.prototype.some%2CArray.prototype.every%2CArray.prototype.forEach%2CArray.prototype.findIndex%2CString.prototype.includes%2CString.prototype.startsWith%2CCustomEvent%2Ces7%2CURLSearchParams%2CElement.prototype.inert%2CObject.values%2CObject.entries%2Cfetch%2CString.prototype.endsWith%2CElement.prototype.closest
IP
GET /v3/polyfill.min.js?features=Promise%2CPromise.prototype.finally%2CSet%2CMap%2Cfetch%2CSymbol%2CArray.prototype.find%2CArray.prototype.some%2CArray.prototype.every%2CArray.prototype.forEach%2CArray.prototype.findIndex%2CString.prototype.includes%2CString.prototype.startsWith%2CCustomEvent%2Ces7%2CURLSearchParams%2CElement.prototype.inert%2CObject.values%2CObject.entries%2Cfetch%2CString.prototype.endsWith%2CElement.prototype.closest HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
content-type: text/javascript; charset=utf-8
accept-ranges: bytes
last-modified: Mon, 26 Sep 2022 21:05:15 GMT
content-encoding: br
useragent_normaliser: firefox/96.0.0
age: 0
date: Tue, 27 Sep 2022 17:24:49 GMT
vary: User-Agent, Accept-Encoding
server-timing: cache-bma1681, PASS, fastly;desc="Edge time";dur=76
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/894.js
200 OK 0 B URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/894.js
IP
GET /tag-builds/10377/4.1/js/chunks/894.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"45e1cb1dc173b6f4f4999eb042ce0ed5"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: n5bq8dqZ39W2PcVeOjW56X1GDM2z01p1TtqoH6pmKu3G3IdMfMzgyQ==
age: 1734007
X-Firefox-Spdy: h2
www.farmasiet.no/dist/assets/fonts/TTCommons-Medium.woff2
200 OK 0 B URL HTTP/2 www.farmasiet.no/dist/assets/fonts/TTCommons-Medium.woff2
IP
GET /dist/assets/fonts/TTCommons-Medium.woff2 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/font-woff
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
etag: W/"0e96846988bd81:0"
last-modified: Wed, 29 Jun 2022 09:11:54 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 7782371
expires: Sun, 26 Mar 2023 17:24:49 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7515ef5f39cab512-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
display.powerreviews.com/m/978316140/l/no_NO/product/5006830/reviews?apikey=e59eb26f-69da-4cc0-bd35-448debc7a95f&_noconfig=true
200 OK 0 B URL HTTP/2 display.powerreviews.com/m/978316140/l/no_NO/product/5006830/reviews?apikey=e59eb26f-69da-4cc0-bd35-448debc7a95f&_noconfig=true
IP
GET /m/978316140/l/no_NO/product/5006830/reviews?apikey=e59eb26f-69da-4cc0-bd35-448debc7a95f&_noconfig=true HTTP/1.1
Host: display.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.farmasiet.no/
Origin: https://www.farmasiet.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Tue, 27 Sep 2022 16:07:43 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.farmasiet.no
cache-control: max-age=21600, s-max-age=21600
etag: W/"0ee0b1870e6b2b7e3398a8669c611714e"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: N4yG15C_uP55poVwxGsce3GR5fou7vdbCHIZpi412l3kp9YDFkgAeA==
age: 4627
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/891.js
200 OK 0 B URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/891.js
IP
GET /tag-builds/10377/4.1/js/chunks/891.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"6a8751940c3ce16104cedeed05e727ca"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jsoFzRjgn3uD8VSKtJ1pLZ6o83AS17Lr04HPGUAhxPg2d_kH6666FQ==
age: 1734007
X-Firefox-Spdy: h2
www.farmasiet.no/dist/assets/fonts/TTCommons-DemiBold.woff2
200 OK 0 B URL HTTP/2 www.farmasiet.no/dist/assets/fonts/TTCommons-DemiBold.woff2
IP
GET /dist/assets/fonts/TTCommons-DemiBold.woff2 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/font-woff
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
etag: W/"0e96846988bd81:0"
last-modified: Wed, 29 Jun 2022 09:11:54 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 7782370
expires: Sun, 26 Mar 2023 17:24:49 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7515ef5f39c8b512-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.farmasiet.no/dist/cms.js?v=1.0.21359.0
200 OK 0 B URL HTTP/2 www.farmasiet.no/dist/cms.js?v=1.0.21359.0
IP
GET /dist/cms.js?v=1.0.21359.0 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/x-javascript
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
content-encoding: gzip
etag: "0dfa83535c4d81:0"
last-modified: Fri, 09 Sep 2022 10:16:22 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 709388
expires: Sun, 26 Mar 2023 17:24:49 GMT
server: cloudflare
cf-ray: 7515ef5f49e2b512-OSL
X-Firefox-Spdy: h2
www.farmasiet.no/dist/assets/fonts/TTCommons-Regular.woff2
200 OK 0 B URL HTTP/2 www.farmasiet.no/dist/assets/fonts/TTCommons-Regular.woff2
IP
GET /dist/assets/fonts/TTCommons-Regular.woff2 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/font-woff
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
etag: W/"0e96846988bd81:0"
last-modified: Wed, 29 Jun 2022 09:11:54 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 7782370
expires: Sun, 26 Mar 2023 17:24:49 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7515ef5f39ccb512-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/204.js
200 OK 0 B URL HTTP/2 ui.powerreviews.com/tag-builds/10377/4.1/js/chunks/204.js
IP
GET /tag-builds/10377/4.1/js/chunks/204.js HTTP/1.1
Host: ui.powerreviews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 07 Sep 2022 15:44:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, HEAD
access-control-expose-headers: x-amz-meta-unpublished-reviews
last-modified: Wed, 07 Sep 2022 15:44:16 GMT
etag: W/"1ba6a06417dca6caa0324d2fc8f2c120"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BtumA9bMZ5Iz9W1ZWVt9hwjDfsX40aLvPVrxfg6xgR_5ffnPinb26w==
age: 1734007
X-Firefox-Spdy: h2
analytics.tradedoubler.com/
200 OK 0 B URL HTTP/2 analytics.tradedoubler.com/
IP
POST / HTTP/1.1
Host: analytics.tradedoubler.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pdt.tradedoubler.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 342
Origin: https://pdt.tradedoubler.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 17:24:47 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-via-popn: primary
content-encoding: gzip
x-via-poph: primary
X-Firefox-Spdy: h2
www.farmasiet.no/dist/assets/fonts/TTCommons-Bold.woff2
200 OK 0 B URL HTTP/2 www.farmasiet.no/dist/assets/fonts/TTCommons-Bold.woff2
IP
GET /dist/assets/fonts/TTCommons-Bold.woff2 HTTP/1.1
Host: www.farmasiet.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.farmasiet.no/catalog/hud-og-har/solpleie/piz-buin-tan--protect-lot-f30-1501,5006830?utm_source=Tradedoubler&utm_medium=Affiliate&utm_campaign=Kelkoo
Cookie: .ASPXANONYMOUS=mkUXkM7FJ6GcG8TNrs2LBfk6afvBpxRNUJjeTQbo_IVyp41IsPDvPWjmRkQGSXurwls2ERXjsNpHHMXmUHlKtjj8dOfCdJSIJaUfCuaI8w8exruuGl-zfq50SZLNjR1oCpGHGw2; TRADEDOUBLER=6ca79b2298fd03be9c0030f8626cd142; ARRAffinity=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4; ARRAffinitySameSite=98371a44a23828d09d4a604a613e6b75886beecadd34eeb72a2c3c8d9e408ad4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 17:24:49 GMT
content-type: application/font-woff
access-control-expose-headers: Request-Context
cache-control: public, max-age=15552000
etag: W/"0e96846988bd81:0"
last-modified: Wed, 29 Jun 2022 09:11:54 GMT
request-context: appId=cid-v1:8bace5e3-7b1f-424a-b5b6-51a220a090c2
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
cf-cache-status: HIT
age: 7782370
expires: Sun, 26 Mar 2023 17:24:49 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 7515ef5f39c6b512-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
185.107.56.60
143.204.55.115
93.184.220.29
217.114.85.70
88.99.112.2
23.36.76.226
34.250.213.40
188.165.150.177
209.15.13.136
104.18.30.49