r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16870
Expires: Fri, 02 Dec 2022 19:14:07 GMT
Date: Fri, 02 Dec 2022 14:32:57 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4867
Cache-Control: max-age=163165
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:32:57 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 11:52:22 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
mkkuei4kdsz.com/842/9.html
200 OK 329 B URL HTTP/1.1 mkkuei4kdsz.com/842/9.html
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ecbcb8bae64098de3e587487b474f8b8
e275409fb40ea27c3826af493f70faf147d0f995
2597a3f2418586d8a9fb0764743a84486ba066c6af3ff194922fb6c65a783688
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /842/9.html HTTP/1.1
Host: mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 02 Dec 2022 14:32:57 GMT
content-type: text/html
last-modified: Wed, 12 Jan 2022 17:20:45 GMT
etag: W/"61df0ded-1ad"
content-encoding: gzip
transfer-encoding: chunked
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14888
Expires: Fri, 02 Dec 2022 18:41:05 GMT
Date: Fri, 02 Dec 2022 14:32:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 14:18:12 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 886
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: D2VsjDce0YbJoL371W3ObyPzqGbTSktKyH3Zknt13Sk0w6z8VKcFb03D2IIbAgSOW7IP0qxYgJQ=
x-amz-request-id: 31S18WC0492XW9H5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 13:46:43 GMT
age: 2775
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 14:32:58 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 4b5f47439b640180cc3450f7de05d0d8
5a0dc9bcab80ddc409dd35fcb00a88fe6846fee2
1f85e8b327f42c17c025d69849914068536d9aa95412fe473ae90ffb2f4ebd82
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mkkuei4kdsz.com
Connection: keep-alive
Referer: http://mkkuei4kdsz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 14:32:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 15435282
expires: Wed, 22 Nov 2023 14:32:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6FkZt6Gxj4JIrj0uOm7DlhqJ6UrcuQaCWka3aPnrUcG5pckw5dEWRQANupth%2BGt5veP8WKJPV5fX16zodjxI9OZ9yImcKgSI7R0bv33rY6o0z72ZCiPvs1wI1Vm%2BR8KNscC3WW%2Bj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7734c6637822b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash e0d0f9b1c865a3e991332e8a7fc07bd8
cea8a7c9150c98b54fd547941bac9612c0b40151
2153b786541c89f6c2814bf1f1e70dfb7b52b2786919e67ba2de512583ae73ad
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "2153B786541C89F6C2814BF1F1E70DFB7B52B2786919E67BA2DE512583AE73AD"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1906
Expires: Fri, 02 Dec 2022 15:04:44 GMT
Date: Fri, 02 Dec 2022 14:32:58 GMT
Connection: keep-alive
mkkuei4kdsz.com/favicon.ico
200 OK 329 B URL HTTP/1.1 mkkuei4kdsz.com/favicon.ico
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ecbcb8bae64098de3e587487b474f8b8
e275409fb40ea27c3826af493f70faf147d0f995
2597a3f2418586d8a9fb0764743a84486ba066c6af3ff194922fb6c65a783688
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mkkuei4kdsz.com/842/9.html
HTTP/1.1 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Fri, 02 Dec 2022 14:32:58 GMT
content-type: text/html
last-modified: Wed, 12 Jan 2022 17:20:45 GMT
etag: W/"61df0ded-1ad"
content-encoding: gzip
transfer-encoding: chunked
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 14:11:15 GMT
cache-control: public,max-age=3600
age: 1303
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
domaincntrol.com/?orighost=http://mkkuei4kdsz.com/842/9.html
200 OK 28 B URL HTTP/2 domaincntrol.com/?orighost=http://mkkuei4kdsz.com/842/9.html
IP
File type ASCII text, with no line terminators
Hash 7aae16ed70d2e07943585bbb1cd02b55
3209123510c034e6e38ca45edf14307f1375a8f5
51bfb53a70df6adc48f0670be59a16a657ab5a2bafc176973a32d5c36a4fc5d3
GET /?orighost=http://mkkuei4kdsz.com/842/9.html HTTP/1.1
Host: domaincntrol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mkkuei4kdsz.com
Connection: keep-alive
Referer: http://mkkuei4kdsz.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 14:32:58 GMT
content-type: text/javascript;charset=UTF-8
content-length: 28
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qCt47gLFm3qrO0HkPj89%2BMY95SKQLyLjXCydkGcYoHuUtMr1P8oKfXBYWl%2B72FKMsXOeUucy19A%2F0RavRHrCahKMxcTuwYcUTH%2BSvERG71MXV%2B0YSPkwlFTpmS6h1hri%2Fic%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7734c6652babfabc-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7f1f8fc556d1f7e0aea3e1208ee2fd1c
09c341a56ff876479cfc8a0505a5fef4a5d110f1
65adcf58887bcc23f73379f74ab19a61cfbb93285c95c64b44a6716eeacc1482
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4869
Cache-Control: max-age=158105
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:32:58 GMT
Etag: "6389c02e-1d7"
Expires: Sun, 04 Dec 2022 10:28:03 GMT
Last-Modified: Fri, 02 Dec 2022 09:06:54 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: HPDxjtjtXh9+5MdB1ZriIg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3zQTA2bseRgs016UFSaH0D5JXGo=
ww2.mkkuei4kdsz.com/
200 OK 1.3 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (700)
Hash 0104fd67aeaf11e255c16649fd99d55e
0e60e5f113b8d267b5e08b39599fe06d8e18a9b8
356ffca4e34b3433801463b546b3142dd219c4f0b70666d251e9e1387880f62b
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET / HTTP/1.1
Host: ww2.mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mkkuei4kdsz.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 14:32:59 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_zfi2IAQMFhbeJz7TohoVHVtJWU2hwm7Lrp9mU2CS1tg8fh6Um4KcOzzYJ6LQkNLWAjiGBQP1WU+h5qP7TrTizQ==
last-modified: Fri, 02 Dec 2022 14:32:58 GMT
x-cache-miss-from: parking-d7dbd8c4d-565j6
server: NginX
content-encoding: gzip
ww2.mkkuei4kdsz.com/search/tsc.php?200=MzgzNDQ1ODM3&21=OTEuOTAuNDIuMTU0&681=MTY2OTk5MTU3OWViNDRiODIwNGQyNWExNmFhNjQ5YWZiZWJlNjI3Yjhh&crc=280d3804d88a0bee7e948eb5e6a9d1ed8dee0b35&cv=1
200 OK 0 B URL HTTP/1.1 ww2.mkkuei4kdsz.com/search/tsc.php?200=MzgzNDQ1ODM3&21=OTEuOTAuNDIuMTU0&681=MTY2OTk5MTU3OWViNDRiODIwNGQyNWExNmFhNjQ5YWZiZWJlNjI3Yjhh&crc=280d3804d88a0bee7e948eb5e6a9d1ed8dee0b35&cv=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /search/tsc.php?200=MzgzNDQ1ODM3&21=OTEuOTAuNDIuMTU0&681=MTY2OTk5MTU3OWViNDRiODIwNGQyNWExNmFhNjQ5YWZiZWJlNjI3Yjhh&crc=280d3804d88a0bee7e948eb5e6a9d1ed8dee0b35&cv=1 HTTP/1.1
Host: ww2.mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.mkkuei4kdsz.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 14:32:59 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/8.1.9
x-cache-miss-from: parking-d7dbd8c4d-lpd8s
server: NginX
ww2.mkkuei4kdsz.com/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DNdrl8z3aSNs_0&v=MWU5MzFiNmJjYTg1MmMyZTMyNzE4YmM0YTI3Y2YxYjkJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YTBjOWIwNzQ4ZDYuMjY1Nzc0MDcJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGEwYzliMDc0ZmMzLjAzNDQ3MTI3CTE2Njk5OTE1NzkJYWRfNjNfMA==&l=OAk4M2ZiYTQwZjQ5YzAzMTg4ODc0MDkxNGQ3YmI1YzIwOAkwCTM1CTAJZGVjNDQ3ZWU5YjU5M2Q1OTIxMDViYTFmYjVhOGQ1ZTYJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2Njk5OTE1NzkJMC4wMDA0MzcJTgkwCTEJMTUxMgkxMjA1CTE5NDA0MzE0Mgk5MS45MC40Mi4xNTQJMA%3D%3D
302 Found 0 B URL HTTP/1.1 ww2.mkkuei4kdsz.com/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DNdrl8z3aSNs_0&v=MWU5MzFiNmJjYTg1MmMyZTMyNzE4YmM0YTI3Y2YxYjkJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YTBjOWIwNzQ4ZDYuMjY1Nzc0MDcJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGEwYzliMDc0ZmMzLjAzNDQ3MTI3CTE2Njk5OTE1NzkJYWRfNjNfMA==&l=OAk4M2ZiYTQwZjQ5YzAzMTg4ODc0MDkxNGQ3YmI1YzIwOAkwCTM1CTAJZGVjNDQ3ZWU5YjU5M2Q1OTIxMDViYTFmYjVhOGQ1ZTYJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2Njk5OTE1NzkJMC4wMDA0MzcJTgkwCTEJMTUxMgkxMjA1CTE5NDA0MzE0Mgk5MS45MC40Mi4xNTQJMA%3D%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DNdrl8z3aSNs_0&v=MWU5MzFiNmJjYTg1MmMyZTMyNzE4YmM0YTI3Y2YxYjkJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YTBjOWIwNzQ4ZDYuMjY1Nzc0MDcJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGEwYzliMDc0ZmMzLjAzNDQ3MTI3CTE2Njk5OTE1NzkJYWRfNjNfMA==&l=OAk4M2ZiYTQwZjQ5YzAzMTg4ODc0MDkxNGQ3YmI1YzIwOAkwCTM1CTAJZGVjNDQ3ZWU5YjU5M2Q1OTIxMDViYTFmYjVhOGQ1ZTYJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2Njk5OTE1NzkJMC4wMDA0MzcJTgkwCTEJMTUxMgkxMjA1CTE5NDA0MzE0Mgk5MS45MC40Mi4xNTQJMA%3D%3D HTTP/1.1
Host: ww2.mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.mkkuei4kdsz.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Fri, 02 Dec 2022 14:32:59 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Fri, 02 Dec 2022 14:32:59 GMT
location: /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DNdrl8z3aSNs_0&v=MWU5MzFiNmJjYTg1MmMyZTMyNzE4YmM0YTI3Y2YxYjkJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YTBjOWIwNzQ4ZDYuMjY1Nzc0MDcJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGEwYzliMDc0ZmMzLjAzNDQ3MTI3CTE2Njk5OTE1NzkJYWRfNjNfMA==&l=OAk4M2ZiYTQwZjQ5YzAzMTg4ODc0MDkxNGQ3YmI1YzIwOAkwCTM1CTAJZGVjNDQ3ZWU5YjU5M2Q1OTIxMDViYTFmYjVhOGQ1ZTYJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2Njk5OTE1NzkJMC4wMDA0MzcJTgkwCTEJMTUxMgkxMjA1CTE5NDA0MzE0Mgk5MS45MC40Mi4xNTQJMA%3D%3D
x-cache-miss-from: parking-d7dbd8c4d-hwmjh
server: NginX
ww2.mkkuei4kdsz.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DNdrl8z3aSNs_0&v=MWU5MzFiNmJjYTg1MmMyZTMyNzE4YmM0YTI3Y2YxYjkJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YTBjOWIwNzQ4ZDYuMjY1Nzc0MDcJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGEwYzliMDc0ZmMzLjAzNDQ3MTI3CTE2Njk5OTE1NzkJYWRfNjNfMA==&l=OAk4M2ZiYTQwZjQ5YzAzMTg4ODc0MDkxNGQ3YmI1YzIwOAkwCTM1CTAJZGVjNDQ3ZWU5YjU5M2Q1OTIxMDViYTFmYjVhOGQ1ZTYJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2Njk5OTE1NzkJMC4wMDA0MzcJTgkwCTEJMTUxMgkxMjA1CTE5NDA0MzE0Mgk5MS45MC40Mi4xNTQJMA%3D%3D
302 Found 311 B URL HTTP/1.1 ww2.mkkuei4kdsz.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DNdrl8z3aSNs_0&v=MWU5MzFiNmJjYTg1MmMyZTMyNzE4YmM0YTI3Y2YxYjkJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YTBjOWIwNzQ4ZDYuMjY1Nzc0MDcJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGEwYzliMDc0ZmMzLjAzNDQ3MTI3CTE2Njk5OTE1NzkJYWRfNjNfMA==&l=OAk4M2ZiYTQwZjQ5YzAzMTg4ODc0MDkxNGQ3YmI1YzIwOAkwCTM1CTAJZGVjNDQ3ZWU5YjU5M2Q1OTIxMDViYTFmYjVhOGQ1ZTYJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2Njk5OTE1NzkJMC4wMDA0MzcJTgkwCTEJMTUxMgkxMjA1CTE5NDA0MzE0Mgk5MS45MC40Mi4xNTQJMA%3D%3D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f833d05350369e72b4763b3be2a3fcbd
15c35fd7190e2f27649bb6017b38d3694c9a22ff
02c31220c76b07128c0f834879eca41aabfc0727a3459ae979386d05d606fedd
Analyzer Verdict Alert quad9 Sinkholed
GET /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DNdrl8z3aSNs_0&v=MWU5MzFiNmJjYTg1MmMyZTMyNzE4YmM0YTI3Y2YxYjkJMQl3dzIubWtrdWVpNGtkc3ouY29tNjM4YTBjOWIwNzQ4ZDYuMjY1Nzc0MDcJd3cyLm1ra3VlaTRrZHN6LmNvbTYzOGEwYzliMDc0ZmMzLjAzNDQ3MTI3CTE2Njk5OTE1NzkJYWRfNjNfMA==&l=OAk4M2ZiYTQwZjQ5YzAzMTg4ODc0MDkxNGQ3YmI1YzIwOAkwCTM1CTAJZGVjNDQ3ZWU5YjU5M2Q1OTIxMDViYTFmYjVhOGQ1ZTYJMzgzNDQ1ODM3CW1ra3VlaTRrZHN6CTAJNjMJNgkyCTE2Njk5OTE1NzkJMC4wMDA0MzcJTgkwCTEJMTUxMgkxMjA1CTE5NDA0MzE0Mgk5MS45MC40Mi4xNTQJMA%3D%3D HTTP/1.1
Host: ww2.mkkuei4kdsz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Fri, 02 Dec 2022 14:32:59 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
x-powered-by: PHP/8.1.9
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Fri, 02 Dec 2022 14:32:59 GMT
location: http://xml.sedodna.com/click?i=Ndrl8z3aSNs_0
x-cache-miss-from: parking-d7dbd8c4d-lpd8s
server: NginX
xml.sedodna.com/click?i=Ndrl8z3aSNs_0
302 Found 0 B URL HTTP/1.1 xml.sedodna.com/click?i=Ndrl8z3aSNs_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=Ndrl8z3aSNs_0 HTTP/1.1
Host: xml.sedodna.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: http://dipaka-ead.com/zcvisitor/38118044-724e-11ed-8424-12c71117a9b3/9232f590-d991-493f-b95d-d38c0c6cdd28?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
Pragma: no-cache
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15453
Expires: Fri, 02 Dec 2022 18:50:33 GMT
Date: Fri, 02 Dec 2022 14:33:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15453
Expires: Fri, 02 Dec 2022 18:50:33 GMT
Date: Fri, 02 Dec 2022 14:33:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15453
Expires: Fri, 02 Dec 2022 18:50:33 GMT
Date: Fri, 02 Dec 2022 14:33:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15453
Expires: Fri, 02 Dec 2022 18:50:33 GMT
Date: Fri, 02 Dec 2022 14:33:00 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd78aa69439c995167f32b8a41a1f4f6
d07d6145182f312f3ed86ecf96b4ffa175416fa0
3b08cf3fad31ee0cf3ee25abc2484fb4283543865a42dfc568b14f9856fd3bb5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7722
x-amzn-requestid: 8d7c4800-6c06-43ed-afa1-94840d42f591
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGy2Gr1IAMFWeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e78-429ae3135d47e3b020c4c7a1;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Z8thSamrCRejcAcQEGAp4WpSMzMEvstuZtVpKAjiCH4dyJyf1yihBA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:50:11 GMT
age: 60169
etag: "d07d6145182f312f3ed86ecf96b4ffa175416fa0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PIC-TIeTFK_Y2AiqowYT4_8tMuzIKO23lAwx18fYepTf4PIWkmLqkQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:20:15 GMT
age: 33165
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1c80b8025242ddfcc816ec612456b99e
aa944d10fe4a44b790b01ef62edc0f85a6d558e3
a9f060bc15738a3fe257e0c81a29e4611a89c273bcbb2765ce856d4e854a5f1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11402
x-amzn-requestid: 20c2c359-1e43-40c0-885d-1c90e76ea12b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGzJHu-IAMFbYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e7a-1d89722e767daa014b174a39;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OJBnbjJB_kvPuJcePGnno3zI0CTWAzV-Osb2L1hPZZhlNYhFHWmLsA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:51:33 GMT
age: 60087
etag: "aa944d10fe4a44b790b01ef62edc0f85a6d558e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F40b76495-d9ea-430e-9b62-92b639b122e0.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F40b76495-d9ea-430e-9b62-92b639b122e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 58a28fc1cbcacdb07b3ca175281982b5
9bc47ee49fc070d0997e49a719bd9758685ad583
d3bfcf749c4652cb29f7c82a5d7ba940bd607f9060e49c1c40a112eb3e625bd9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F40b76495-d9ea-430e-9b62-92b639b122e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6564
x-amzn-requestid: e2875cf3-3915-43a5-a724-4de2ca03de56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGepHOiIAMFTFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-5f7e2a3f609d54a609a12670;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mwGAEu-gPXY5Opwd972VbBA6l33dNk7bPFSyZmciaplQKj2ZuTkQSg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:47 GMT
age: 61093
etag: "9bc47ee49fc070d0997e49a719bd9758685ad583"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:00:48 GMT
age: 30732
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 156e9ea97b774cbd8361072e4041b6c8
fc71ae3cae92ed6011904bb2367f23bf4e69fab4
58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdG14HBNIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: r_0F64VpyutAOJ9IcTWrs3Sv--fhKiwKsV1FW0fOMSRt1QLLPxvJzg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 10:51:17 GMT
age: 13303
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dipaka-ead.com/zcvisitor/38118044-724e-11ed-8424-12c71117a9b3/9232f590-d991-493f-b95d-d38c0c6cdd28?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
200 1.1 kB URL HTTP/1.1 dipaka-ead.com/zcvisitor/38118044-724e-11ed-8424-12c71117a9b3/9232f590-d991-493f-b95d-d38c0c6cdd28?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 424bc17ed217a19819ce4151515e0feb
6fabdcf02f95df8b7afb146a2a87fdeb59a369de
7922a02e28a9a0be79e74c902e14193e875726dc379db59f61b3546236c0441c
GET /zcvisitor/38118044-724e-11ed-8424-12c71117a9b3/9232f590-d991-493f-b95d-d38c0c6cdd28?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51 HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.mkkuei4kdsz.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Fri, 02 Dec 2022 14:33:00 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: oHZLAHuM
dipaka-ead.com/zcredirect?visitid=38118044-724e-11ed-8424-12c71117a9b3&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
200 356 B URL HTTP/1.1 dipaka-ead.com/zcredirect?visitid=38118044-724e-11ed-8424-12c71117a9b3&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0ee7eaf7e2d7e9f41b410f3669530380
2a4a7a4f210869acd649406b498ca009d0004ebf
3dea6845d5f7003097823f07b70da6e7eea07b7116f09870213b90eb5404017d
GET /zcredirect?visitid=38118044-724e-11ed-8424-12c71117a9b3&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dipaka-ead.com/zcvisitor/38118044-724e-11ed-8424-12c71117a9b3/9232f590-d991-493f-b95d-d38c0c6cdd28?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Fri, 02 Dec 2022 14:33:00 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: zbuwjZjp
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash efd9727d9e65133c148f6e4e0598befc
48e7807cf33b11f7bd08c4e8da1820e5b4641ff3
aa718dbea6684a5396157129708e99a558e12fd8ef9db044ee8c82a1370963fe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA718DBEA6684A5396157129708E99A558E12FD8EF9DB044EE8C82A1370963FE"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18168
Expires: Fri, 02 Dec 2022 19:35:48 GMT
Date: Fri, 02 Dec 2022 14:33:00 GMT
Connection: keep-alive
dipaka-ead.com/favicon.ico
404 653 B URL HTTP/1.1 dipaka-ead.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dipaka-ead.com/zcredirect?visitid=38118044-724e-11ed-8424-12c71117a9b3&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
HTTP/1.1 404
Date: Fri, 02 Dec 2022 14:33:00 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: AtAQujpt
clever-redirect.com/s/r6?s=623619497&s2=porraceous-llama&s3=xray-het-k8eyddjp0l
200 OK 346 B URL HTTP/2 clever-redirect.com/s/r6?s=623619497&s2=porraceous-llama&s3=xray-het-k8eyddjp0l
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (346), with no line terminators
Hash a68b7edd92bda715775bdc5a4913aaa8
3ea8e9b82900ef85698bfe32dbe8edc3ff137b9c
46ca713f221f744c477dc78aad0ee266a90dc270e35984c6a3573eaeb25b81c9
GET /s/r6?s=623619497&s2=porraceous-llama&s3=xray-het-k8eyddjp0l HTTP/1.1
Host: clever-redirect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dipaka-ead.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
referrer-policy: no-referrer
x-powered-by: PHP/7.4.27
set-cookie: 0399d87f8ea0a1978f81843903d3752e=e6e3e619926cedafc1ce4248d318bb786f1fed4ae1d27766828f28ef1d4a3a89a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%220399d87f8ea0a1978f81843903d3752e%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Sat, 03-Dec-2022 14:33:00 GMT; Max-Age=86400; path=/; HttpOnly
content-length: 346
content-type: text/html; charset=UTF-8
date: Fri, 02 Dec 2022 14:33:00 GMT
server: Apache/2.4.52 (codeit) OpenSSL/1.1.1m PHP/7.4.27
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03f7aea584425038714d5fde73c2482d
2336abb19338f539ecb8b63c64a305bc106cc95a
14a9c26272140e57b205b7b6fd3bc447ff7b09af2c7b4c2bab77f9182f5aff15
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "14A9C26272140E57B205B7B6FD3BC447FF7B09AF2C7B4C2BAB77F9182F5AFF15"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2621
Expires: Fri, 02 Dec 2022 15:16:42 GMT
Date: Fri, 02 Dec 2022 14:33:01 GMT
Connection: keep-alive
lookandfind.me/s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=ark.no&s1=623619497&s2=porraceous-llama&s3=xray-het-k8eyddjp0l&s5=cf
200 OK 939 B URL HTTP/1.1 lookandfind.me/s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=ark.no&s1=623619497&s2=porraceous-llama&s3=xray-het-k8eyddjp0l&s5=cf
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document, ASCII text, with very long lines (939), with no line terminators
Hash caf4c690e5e45d959fea1dfd0b4e2b2b
b2fcf5aa3a2831320e21a7bc5da913a9c6227bd3
ae8c544a68d3ce0492a4e8a50658304be8b740efeaa20d8cd91d489aa4ebd113
GET /s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=ark.no&s1=623619497&s2=porraceous-llama&s3=xray-het-k8eyddjp0l&s5=cf HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 14:33:01 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.10
Set-Cookie: 84988a81ac1c1cfdf0fad4dbe85d3c30=d74cabf948c7866ed55fc2a66e7b724a78bc666694b327c5c48655d18d3d479aa%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2284988a81ac1c1cfdf0fad4dbe85d3c30%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Sat, 03-Dec-2022 14:33:01 GMT; Max-Age=86400; path=/; HttpOnly
Referrer-Policy: strict-origin-when-cross-origin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3DdsXN3U_ARnSQuRuU%26placementId%3D0f1e6bbb273e6c3a7eaa3bdd289e88fc&h=040f24f4299ebe6863fd1a2ca31faffc
200 OK 867 B URL HTTP/1.1 lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3DdsXN3U_ARnSQuRuU%26placementId%3D0f1e6bbb273e6c3a7eaa3bdd289e88fc&h=040f24f4299ebe6863fd1a2ca31faffc
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (867), with no line terminators
Hash bbb679d5db26c00ad8bbb795f72ebd63
dc66a7ed9e6a741d9c1054726d394935a98232cd
0b9c1c0721eb6b738fe7a9f4fc0ff09ecb1a51f30698d9e1f9df42e921729db7
GET /s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3DdsXN3U_ARnSQuRuU%26placementId%3D0f1e6bbb273e6c3a7eaa3bdd289e88fc&h=040f24f4299ebe6863fd1a2ca31faffc HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 84988a81ac1c1cfdf0fad4dbe85d3c30=d74cabf948c7866ed55fc2a66e7b724a78bc666694b327c5c48655d18d3d479aa%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2284988a81ac1c1cfdf0fad4dbe85d3c30%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 14:33:01 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.10
Referrer-Policy: strict-origin-when-cross-origin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2431a1fcfa70947ff15d163ce1c5f617
a0029616e26a08defa66dbfaa1c3d043186058f6
5b7b05cfbb500a81eb829388e93e651cdadb3d93fee73b57c5ce2ded8f936e5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5B7B05CFBB500A81EB829388E93E651CDADB3D93FEE73B57C5CE2DED8F936E5D"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15029
Expires: Fri, 02 Dec 2022 18:43:30 GMT
Date: Fri, 02 Dec 2022 14:33:01 GMT
Connection: keep-alive
api.yadore.com/v2/r?e=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&i=dsXN3U_ARnSQuRuU&placementId=0f1e6bbb273e6c3a7eaa3bdd289e88fc
302 Found 0 B URL HTTP/2 api.yadore.com/v2/r?e=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&i=dsXN3U_ARnSQuRuU&placementId=0f1e6bbb273e6c3a7eaa3bdd289e88fc
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/r?e=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&i=dsXN3U_ARnSQuRuU&placementId=0f1e6bbb273e6c3a7eaa3bdd289e88fc HTTP/1.1
Host: api.yadore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
date: Fri, 02 Dec 2022 14:33:01 GMT
location: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669967661515&.sig=M4UQX6Twp4b0b9vWvK5yfb5eGgo-&affiliationId=96965886&comId=100505999&country=no&offerId=970786c7129ec2b2470c63360e8294bc&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=1711e55066182c0caa3804e87b2dd4a76384edcad778a9094ca11fc976f5d58f&custom2=SRdytlITOR16&custom3=false
server: nginx
x-powered-by: PHP/8.0.25
content-length: 0
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash b724627637f19b376d35861695f3888d
d830a786496f1c2009bb71c71e89518f9dea021c
decd593c36121fb2509470c4ab8b515f6e55750030c8025a96209d1ff5ed35ed
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5018
Cache-Control: max-age=102080
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:01 GMT
Etag: "6388e4c3-1d7"
Expires: Sat, 03 Dec 2022 18:54:21 GMT
Last-Modified: Thu, 01 Dec 2022 17:30:43 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669967661515&.sig=M4UQX6Twp4b0b9vWvK5yfb5eGgo-&affiliationId=96965886&comId=100505999&country=no&offerId=970786c7129ec2b2470c63360e8294bc&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=1711e55066182c0caa3804e87b2dd4a76384edcad778a9094ca11fc976f5d58f&custom2=SRdytlITOR16&custom3=false
200 OK 33 kB URL HTTP/1.1 no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669967661515&.sig=M4UQX6Twp4b0b9vWvK5yfb5eGgo-&affiliationId=96965886&comId=100505999&country=no&offerId=970786c7129ec2b2470c63360e8294bc&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=1711e55066182c0caa3804e87b2dd4a76384edcad778a9094ca11fc976f5d58f&custom2=SRdytlITOR16&custom3=false
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13002)
Hash b7e7eea4e0e17f258732650f9828e0df
12c52f366e3b2f9786abcbc47d34aac24242abfd
34e8c25d81fa14c971d106036f1eb82cb4a92f6fae18948cb7c367895ca3b2f5
GET /ctl/go/offersearchGo?.ts=1669967661515&.sig=M4UQX6Twp4b0b9vWvK5yfb5eGgo-&affiliationId=96965886&comId=100505999&country=no&offerId=970786c7129ec2b2470c63360e8294bc&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=1711e55066182c0caa3804e87b2dd4a76384edcad778a9094ca11fc976f5d58f&custom2=SRdytlITOR16&custom3=false HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 14:33:01 GMT
leadId: dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912
clickId: 107698147_1669991581958_10349745
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.01874S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/html; charset=UTF-8
Content-Length: 32633
Set-Cookie: datadome=62qwx0ykbIgl7VaqLu9FaPs_hfpJX5rquPy3DW-YTIqIcCDA2MMz5qrwAzI5JncC~TU4Zhops7bheDIOte8rheRvM3rdACgjA-USmF9vZK3-2gH7OazKMtfSWuTjAU_l; Max-Age=31536000; Expires=Sat, 02 Dec 2023 14:33:01 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
kelkooID=a4c6293-184d3414906-31754b; Max-Age=31536000; Expires=Sat, 02 Dec 2023 14:33:01 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=92
Connection: Keep-Alive
no-go.kelkoogroup.net/fp?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a707dc4bf57eb987e73527454c5caed978e6d17654ccd36b1cc94f2a69db215ed9500d53b9269eae71dd0c39aadd90e59d042edb07bf3f2995851cef0f31fec35fbd14c9987b7fde07e877a52f31bd5d634c08789781486f1c9a27fb5a3727cce862d936ffd929a97a2493d16aa331d67f2df4ea6945d90322321bcd1a3c5d8190214ed49d1a535143b8a9fe6b011ec35c95e4b537f1fbdac4912c329096b02d7b07e416e0c0ac03ed99e92c68e88ede76763ea03ec999077cbbf27dd9ec2dcf4499d4b01e3d0dfd26456bf8fdef3a1fe7d46fe7d99947409f8777921445e54a6ae3892d210c06aa5647cb520673b68ce7e776fcfdc3a8a9715a6be56004c84e56&leadId=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&clickId=107698147_1669991581958_10349745
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&clickId=107698147_1669991581958_10349745
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=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&leadId=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&clickId=107698147_1669991581958_10349745 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669967661515&.sig=M4UQX6Twp4b0b9vWvK5yfb5eGgo-&affiliationId=96965886&comId=100505999&country=no&offerId=970786c7129ec2b2470c63360e8294bc&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=1711e55066182c0caa3804e87b2dd4a76384edcad778a9094ca11fc976f5d58f&custom2=SRdytlITOR16&custom3=false
Content-Type: text/plain;charset=utf-8
Content-Length: 536
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=62qwx0ykbIgl7VaqLu9FaPs_hfpJX5rquPy3DW-YTIqIcCDA2MMz5qrwAzI5JncC~TU4Zhops7bheDIOte8rheRvM3rdACgjA-USmF9vZK3-2gH7OazKMtfSWuTjAU_l; kelkooID=a4c6293-184d3414906-31754b; _ga=GA1.2.2062328229.1669991580; _gid=GA1.2.493705389.1669991580
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 14:33:02 GMT
Request-Time: PT0.002934S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=96
Connection: Keep-Alive
dd.kelkoogroup.net/tags.js
200 OK 43 kB URL HTTP/2 dd.kelkoogroup.net/tags.js
IP
File type ASCII text, with very long lines (65432)
Hash 1e9601b9f2fcd0d1d742e87fd046749c
88431bfdad7d8be4cf62396a57aebcec0de09827
4bcdd319b49ac3e4683e774aefe69157100f9ebee3bc428e425cfc93a7da9feb
GET /tags.js HTTP/1.1
Host: dd.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=62qwx0ykbIgl7VaqLu9FaPs_hfpJX5rquPy3DW-YTIqIcCDA2MMz5qrwAzI5JncC~TU4Zhops7bheDIOte8rheRvM3rdACgjA-USmF9vZK3-2gH7OazKMtfSWuTjAU_l; kelkooID=a4c6293-184d3414906-31754b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 43164
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Thu, 17 Nov 2022 15:19:16 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 615f944336054ae07b8e7c415ddbad44.cloudfront.net (CloudFront), 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
date: Fri, 02 Dec 2022 14:20:01 GMT
cache-control: max-age=3600, public
expires: Fri, 02 Dec 2022 15:19:58 GMT
etag: "33bf8-5edac1cc94a7f-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P2, OSL50-P1
x-amz-cf-id: 5s1tyjE8G89kD_FAgCSdrJqukeWWNzBRi1_ND62syeT8j_lH7e_nYQ==
age: 784
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&clickId=107698147_1669991581958_10349745
200 OK 68 B URL HTTP/1.1 no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&clickId=107698147_1669991581958_10349745
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&clickId=107698147_1669991581958_10349745 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669967661515&.sig=M4UQX6Twp4b0b9vWvK5yfb5eGgo-&affiliationId=96965886&comId=100505999&country=no&offerId=970786c7129ec2b2470c63360e8294bc&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=1711e55066182c0caa3804e87b2dd4a76384edcad778a9094ca11fc976f5d58f&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=62qwx0ykbIgl7VaqLu9FaPs_hfpJX5rquPy3DW-YTIqIcCDA2MMz5qrwAzI5JncC~TU4Zhops7bheDIOte8rheRvM3rdACgjA-USmF9vZK3-2gH7OazKMtfSWuTjAU_l; kelkooID=a4c6293-184d3414906-31754b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 14:33:02 GMT
Request-Time: PT0.001624S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: image/png
Content-Length: 68
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=86
Connection: Keep-Alive
no-go.kelkoogroup.net/favicon.ico
403 Forbidden 0 B URL HTTP/1.0 no-go.kelkoogroup.net/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669967661515&.sig=M4UQX6Twp4b0b9vWvK5yfb5eGgo-&affiliationId=96965886&comId=100505999&country=no&offerId=970786c7129ec2b2470c63360e8294bc&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=1711e55066182c0caa3804e87b2dd4a76384edcad778a9094ca11fc976f5d58f&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=62qwx0ykbIgl7VaqLu9FaPs_hfpJX5rquPy3DW-YTIqIcCDA2MMz5qrwAzI5JncC~TU4Zhops7bheDIOte8rheRvM3rdACgjA-USmF9vZK3-2gH7OazKMtfSWuTjAU_l; kelkooID=a4c6293-184d3414906-31754b; _ga=GA1.2.2062328229.1669991580; _gid=GA1.2.493705389.1669991580
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.0 403 Forbidden
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&clickId=107698147_1669991581958_10349745&url=https%3A%2F%2Ftrack.adtraction.com%2Ft%2Ft%3Fa%3D1487386349%26as%3D1090656293%26t%3D2%26tk%3D1%26epi%3Ddc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912%26url%3Dhttps%3A%2F%2Fwww.ark.no%2Fboker%2FBryan-Ferry-Lyrics-9781784744830
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&clickId=107698147_1669991581958_10349745&url=https%3A%2F%2Ftrack.adtraction.com%2Ft%2Ft%3Fa%3D1487386349%26as%3D1090656293%26t%3D2%26tk%3D1%26epi%3Ddc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912%26url%3Dhttps%3A%2F%2Fwww.ark.no%2Fboker%2FBryan-Ferry-Lyrics-9781784744830
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a707dc4bf57eb987e73527454c5caed978e6d17654ccd36b1cc94f2a69db215ed9500d53b9269eae71dd0c39aadd90e59d042edb07bf3f2995851cef0f31fec35fbd14c9987b7fde07e877a52f31bd5d634c08789781486f1c9a27fb5a3727cce862d936ffd929a97a2493d16aa331d67f2df4ea6945d90322321bcd1a3c5d8190214ed49d1a535143b8a9fe6b011ec35c95e4b537f1fbdac4912c329096b02d7b07e416e0c0ac03ed99e92c68e88ede76763ea03ec999077cbbf27dd9ec2dcf4499d4b01e3d0dfd26456bf8fdef3a1fe7d46fe7d99947409f8777921445e54a6ae3892d210c06aa5647cb520673b68ce7e776fcfdc3a8a9715a6be56004c84e56&leadId=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&clickId=107698147_1669991581958_10349745&url=https%3A%2F%2Ftrack.adtraction.com%2Ft%2Ft%3Fa%3D1487386349%26as%3D1090656293%26t%3D2%26tk%3D1%26epi%3Ddc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912%26url%3Dhttps%3A%2F%2Fwww.ark.no%2Fboker%2FBryan-Ferry-Lyrics-9781784744830 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669967661515&.sig=M4UQX6Twp4b0b9vWvK5yfb5eGgo-&affiliationId=96965886&comId=100505999&country=no&offerId=970786c7129ec2b2470c63360e8294bc&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=1711e55066182c0caa3804e87b2dd4a76384edcad778a9094ca11fc976f5d58f&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=62qwx0ykbIgl7VaqLu9FaPs_hfpJX5rquPy3DW-YTIqIcCDA2MMz5qrwAzI5JncC~TU4Zhops7bheDIOte8rheRvM3rdACgjA-USmF9vZK3-2gH7OazKMtfSWuTjAU_l; kelkooID=a4c6293-184d3414906-31754b; _ga=GA1.2.2062328229.1669991580; _gid=GA1.2.493705389.1669991580
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
Date: Fri, 02 Dec 2022 14:33:02 GMT
leadId: dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912
clickId: 107698147_1669991581958_10349745
country: no
Location: https://track.adtraction.com/t/t?a=1487386349&as=1090656293&t=2&tk=1&epi=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&url=https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.015874S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=6xpn8vnfls0MJ9Idc3xvqSAJbZiPMZX5Ixdzh-IyuIy8F5o0DYFW25lBOMzbr3K_6UVKjzRzRFTeaSqJE5Cz14Hmn-RGaoT0yuevSbfds1uwwxAlofUsi4Y1DE8raNvT; Max-Age=31536000; Expires=Sat, 02 Dec 2023 14:33:02 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=63
Connection: Keep-Alive
Content-Type: text/plain
status.geotrust.com/
200 OK 471 B IP
Hash a07760a58a7936516f9a5ea9e875db11
aa72af9251fd85d702834e584118b38073cb9e4f
d26628d0659303b91a1c547884a3db58a939b8cdda3e1ac40ec3f6d8a4041dc2
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6222
Cache-Control: max-age=123797
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:02 GMT
Etag: "638934e5-1d7"
Expires: Sun, 04 Dec 2022 00:56:19 GMT
Last-Modified: Thu, 01 Dec 2022 23:12:37 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
track.adtraction.com/t/t?a=1487386349&as=1090656293&t=2&tk=1&epi=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&url=https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830
302 0 B URL HTTP/1.1 track.adtraction.com/t/t?a=1487386349&as=1090656293&t=2&tk=1&epi=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&url=https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/t?a=1487386349&as=1090656293&t=2&tk=1&epi=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&url=https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830 HTTP/1.1
Host: track.adtraction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Cache-Control: no-cache
Access-Control-Allow-Origin: *
X-TraceId: 8023e8a8-20b2-4620-8847-11c168be0aa8
Set-Cookie: at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29; Max-Age=94608000; Path=/; Domain=track.adtraction.com; SameSite=None; Secure
Location: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Transfer-Encoding: chunked
Date: Fri, 02 Dec 2022 14:33:01 GMT
Connection: close
ocsp.digicert.com/
200 OK 471 B IP
Hash 3f79099776b04adf61418c6c1f3b48fe
9ac9e67113fb4bf5a357937fecae59710e837a79
ff7837f14bfa9b2f696a9140359feb1914ecd63cc18cfaf3bc3a552107981780
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2987
Cache-Control: max-age=127799
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:02 GMT
Etag: "6389512a-1d7"
Expires: Sun, 04 Dec 2022 02:03:01 GMT
Last-Modified: Fri, 02 Dec 2022 01:13:14 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ocsp.usertrust.com/
200 OK 471 B IP
Hash f0362fe129566971bc33096a695239f9
7a7636c312030713f423f96629a9024892748326
a8c5b15b6d324ad4629d0280631f3d663829ed386da52b3a5cb99aca4ef65a2e
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 14:33:02 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 13:51:16 GMT
Expires: Tue, 06 Dec 2022 13:51:15 GMT
Etag: "7a7636c312030713f423f96629a9024892748326"
Cache-Control: max-age=603350,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1494
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7734c67e0f67b52d-OSL
api-js.datadome.co/js/
200 OK 236 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a97573b8531408af1e07ef3d26f5403a
c88879c6f3c38c581dabf87b2d7b012704c281ac
71ced9147ae1d9e48b997fe85ae52c6bd1385fb934dc41d01e0551fda1b36033
POST /js/ HTTP/1.1
Host: api-js.datadome.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4137
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 14:33:02 GMT
content-type: application/json;charset=utf-8
content-length: 236
server: DataDome
access-control-allow-origin: *
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1669967661515%26.sig%3DM4UQX6Twp4b0b9vWvK5yfb5eGgo-%26affiliationId%3D96965886%26comId%3D100505999%26country%3Dno%26offerId%3D970786c7129ec2b2470c63360e8294bc%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D1711e55066182c0caa3804e87b2dd4a76384edcad778a9094ca11fc976f5d58f%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100505999%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Ark.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=2062328229.1669991580&tid=UA-168544891-6&_gid=493705389.1669991580&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&cd3=100505999&cd4=a4c6293-184d3414906-31754b&cd5=&cd6=96965886%7C100505999%7C&z=1957055971
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1669967661515%26.sig%3DM4UQX6Twp4b0b9vWvK5yfb5eGgo-%26affiliationId%3D96965886%26comId%3D100505999%26country%3Dno%26offerId%3D970786c7129ec2b2470c63360e8294bc%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D1711e55066182c0caa3804e87b2dd4a76384edcad778a9094ca11fc976f5d58f%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100505999%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Ark.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=2062328229.1669991580&tid=UA-168544891-6&_gid=493705389.1669991580&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&cd3=100505999&cd4=a4c6293-184d3414906-31754b&cd5=&cd6=96965886%7C100505999%7C&z=1957055971
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1669967661515%26.sig%3DM4UQX6Twp4b0b9vWvK5yfb5eGgo-%26affiliationId%3D96965886%26comId%3D100505999%26country%3Dno%26offerId%3D970786c7129ec2b2470c63360e8294bc%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D1711e55066182c0caa3804e87b2dd4a76384edcad778a9094ca11fc976f5d58f%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100505999%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Ark.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=2062328229.1669991580&tid=UA-168544891-6&_gid=493705389.1669991580&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-silo.prod.dc1.kelkoo.net_1669991581965_507912&cd3=100505999&cd4=a4c6293-184d3414906-31754b&cd5=&cd6=96965886%7C100505999%7C&z=1957055971 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Fri, 02 Dec 2022 14:33:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
200 35 kB URL HTTP/1.1 www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (338), with CRLF, LF line terminators
Hash 1fb9d418b55ed4314d684415a250a767
dcc2bb91c2bbf0e695dbed099c304025e65fdfef
a431263980f195abaeb4beaaa3a3354e6427b23196b3e47cdc575cb5ef0edc74
GET /boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29 HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:02 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Frame-Options: ALLOWALL
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Language: no
Cache-Control: public,max-age=10800, private
X-Cache-Status: MISS
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:02 GMT;path=/;secure;httponly
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ark.no/_ui/responsive/common/js/before-dom-ready.js?_=1669848036006
200 960 B URL HTTP/1.1 www.ark.no/_ui/responsive/common/js/before-dom-ready.js?_=1669848036006
IP
Hash 07cec007e266c0dde7d13b1ea4f12ee5
f36ebc5c3d6fc6b63f0855e354387b91d376b586
7f80dce27a7e5eeb3be2fd88e807c6a6fe7ca8df4f14d2304e80cd130d50653f
GET /_ui/responsive/common/js/before-dom-ready.js?_=1669848036006 HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:02 GMT
Content-Type: application/javascript;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Frame-Options: ALLOWALL
Cache-Control: max-age=21600
ETag: W/"4185-1669847165437"
Last-Modified: Wed, 30 Nov 2022 22:26:05 GMT
Expires: Fri, 02 Dec 2022 20:33:02 GMT
X-Cache-Status: HIT
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:02 GMT;path=/;secure;httponly
www.ark.no/_ui/shared/js/generatedVariables.js
200 272 B URL HTTP/1.1 www.ark.no/_ui/shared/js/generatedVariables.js
IP
Hash 2509fe5a4bc5022a5f08b29a8dc7bf56
ae1575c0593c35fa10ef1f38d7fc3ca87bc87326
ee5705a27fcabf1a7d2f4391315fcb3be207c1c4f4e10bff29291644a3a18840
GET /_ui/shared/js/generatedVariables.js HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:02 GMT
Content-Type: application/javascript;charset=UTF-8
Content-Length: 272
X-Frame-Options: ALLOWALL
Cache-Control: max-age=21600
ETag: W/"272-1669845978018"
Last-Modified: Wed, 30 Nov 2022 22:06:18 GMT
Expires: Fri, 02 Dec 2022 20:33:02 GMT
X-Cache-Status: HIT
Accept-Ranges: bytes
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:02 GMT;path=/;secure;httponly
www.ark.no/user-data/javascript-variables.js
200 679 B URL HTTP/1.1 www.ark.no/user-data/javascript-variables.js
IP
Hash 620dfe83ec2c047894b01ad5b875d645
0babf60bb7fbf0e2d7f19d96727d1e73d799fc95
f31749f6a4d1bcdfa6af2f9e32c5b5d504229adfc0d291304b6168d8c51b1670
GET /user-data/javascript-variables.js HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
X-Frame-Options: ALLOWALL
Set-Cookie: JSESSIONID=22031867C2E1A3593AB2D6521AC241F3; Path=/; Secure; HttpOnly
anonymous-consents=%5B%5D; Max-Age=31536000; Expires=Sat, 02-Dec-2023 14:33:02 GMT; Path=/; Secure; HttpOnly
cookie-notification=NOT_ACCEPTED; Max-Age=360000000; Expires=Sun, 30-Apr-2034 06:33:02 GMT; Path=/; Secure
SRVID=P0; path=/; HttpOnly; Secure
NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Type: application/javascript;charset=UTF-8
Content-Language: no
Content-Length: 679
Date: Fri, 02 Dec 2022 14:33:02 GMT
www.ark.no/wro/addons_responsive.css?_=1669848036006
200 12 kB URL HTTP/1.1 www.ark.no/wro/addons_responsive.css?_=1669848036006
IP
File type Unicode text, UTF-8 text, with very long lines (11140)
Hash 216f08b4ee6d77be2b4c3a56c2ee5451
c1ec92884e985e9557d3f031e34618fd0c6c354e
8d161b1a9434d6c394ff7e15c7534f651c0e0ae75738655c9bf4eac076397512
GET /wro/addons_responsive.css?_=1669848036006 HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: text/css;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
cache-control: public, max-age=315360000
expires: Thu, 30 Nov 2023 22:17:29 GMT
last-modified: Wed, 30 Nov 2022 22:17:29 GMT
ETag: W/"1ac4f62a4e595c7683f2f4fa6d13255372a39192"
X-Cache-Status: HIT
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
www.ark.no/wro/ark_responsive.css?_=1669848036006
200 352 kB URL HTTP/1.1 www.ark.no/wro/ark_responsive.css?_=1669848036006
IP
File type ASCII text, with very long lines (11679)
Size 352 kB (351503 bytes)
Hash f0afbbb4d6e93b760006379694d7da13
122ea0da8b680eed0896699238a0307efe347bef
8ca68813ddfdba5be43a7357cbbe1b5a0bd66ade327a0bff6126273b174b1771
GET /wro/ark_responsive.css?_=1669848036006 HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:02 GMT
Content-Type: text/css;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
cache-control: public, max-age=315360000
expires: Thu, 30 Nov 2023 22:17:29 GMT
last-modified: Wed, 30 Nov 2022 22:17:29 GMT
ETag: W/"1dfaaa8129ec8bbbd3deb8cf9c689a583683470"
X-Cache-Status: HIT
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:02 GMT;path=/;secure;httponly
www.ark.no/static/header-search.min.css
200 OK 11 kB URL HTTP/1.1 www.ark.no/static/header-search.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (59370)
Hash b374aa6d5ab506a81b333b6a1ac5c959
5a53ec11595b533e6e6a4cf511d1d242042032f5
b574fd83f0380206cffb01cad4beed9591d3daa178c58e3df2eb6fc64062c760
GET /static/header-search.min.css HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
Date: Fri, 02 Dec 2022 14:33:02 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Content-Encoding: gzip
ETag: W/"e7ec-184cb8916f0"
Last-Modified: Thu, 01 Dec 2022 02:34:30 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
www.ark.no/_ui/shared/js/analyticsmediator.js
200 406 B URL HTTP/1.1 www.ark.no/_ui/shared/js/analyticsmediator.js
IP
Hash e9e6515b6d0a979b3cbf1585f5ea8593
019dc45c7d9a25f12a0fd2e55e971f9d91d6923a
dce57ddbe6ab1cfbdefd5958949d3a18011279c9819651401327c26cf353884b
GET /_ui/shared/js/analyticsmediator.js HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: application/javascript;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Frame-Options: ALLOWALL
Cache-Control: max-age=21600
ETag: W/"1099-1669847959038"
Last-Modified: Wed, 30 Nov 2022 22:39:19 GMT
Expires: Fri, 02 Dec 2022 20:33:03 GMT
X-Cache-Status: HIT
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
www.ark.no/wro/addons_responsive.js?_=1669848036006
200 55 kB URL HTTP/1.1 www.ark.no/wro/addons_responsive.js?_=1669848036006
IP
File type Unicode text, UTF-8 text, with very long lines (11839)
Hash 2db791df263b17f02f3f8fc8f06f4337
ada8a25364bcc1b1599ab300210b4aa47eca4f0b
9da5304bd17271e262e1035f642e811db52dedf663ca9350cf221afe1ff368b5
GET /wro/addons_responsive.js?_=1669848036006 HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:02 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
cache-control: public, max-age=315360000
expires: Thu, 30 Nov 2023 22:17:29 GMT
last-modified: Wed, 30 Nov 2022 22:17:29 GMT
ETag: W/"a38ffc581f14c7c21274979251d7750c976f8bc3"
X-Cache-Status: HIT
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
use.typekit.net/vgu7prb.css
200 OK 748 B URL HTTP/2 use.typekit.net/vgu7prb.css
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (516)
Hash 3453162d92bf8b997d346882fde33714
20cc0e9deece4903bf48252409be7f8e37efd3a3
d057627e92229d3b57763859da0b6d3f6f8457b7db60d223279d228ff7b83a6c
GET /vgu7prb.css HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 748
date: Fri, 02 Dec 2022 14:33:03 GMT
X-Firefox-Spdy: h2
cdn.evgnet.com/beacon/gyldendal/ark_production/scripts/evergage.min.js
200 OK 50 kB URL HTTP/2 cdn.evgnet.com/beacon/gyldendal/ark_production/scripts/evergage.min.js
IP
File type ASCII text, with very long lines (594)
Hash 39bc0ec486db4097b88063bbf18a0a65
14fb3dd0ff72962bb028dcbc83f22c1acc9f77be
7fd56328f62e0516c09fe7691225f80baa44fbd46019224172d9a932bc6bcbc5
GET /beacon/gyldendal/ark_production/scripts/evergage.min.js HTTP/1.1
Host: cdn.evgnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: j6XNsJRal8+M9+FKgO/h8Rn1eodrlINo/HbbS93dpMtrUOza/aD2psLRVwrOwBKD6nHJdOSXtts=
x-amz-request-id: VJWVS5Z73R6E2CPN
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Dec 2022 11:00:21 GMT
etag: "39bc0ec486db4097b88063bbf18a0a65"
cache-control: max-age=120
content-encoding: gzip
x-amz-meta-evergage-beacon-ver: 16
x-amz-meta-evergage-sum: 96f2de31f3cfc41ead0a6c913ccf85ed130d951a
x-amz-version-id: 04Y3cMW1Mja7kvVxw87hWBdIRELvZ_r8
content-type: application/javascript; charset=utf-8
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 14:33:03 GMT
age: 20
x-served-by: cache-iad-kiad7000038-IAD, cache-bma1625-BMA
x-cache: HIT, HIT
x-cache-hits: 34, 1
x-timer: S1669991583.058644,VS0,VE1
vary: Accept-Encoding
timing-allow-origin: *
content-length: 50013
X-Firefox-Spdy: h2
www.ark.no/medias/icon-lydbok.svg?context=bWFzdGVyfHJvb3R8MjQxNHxpbWFnZS9zdmcreG1sfGhkYi9oNTUvMTE4MDgxOTgyOTU1ODIuc3ZnfDY4MWVhN2Y5YmExOGM4MjY0MmNhYTBhZjA4ZjFlMWRjYjg0YWU5ZDhkM2U3Yzg5Yzg1NzUxNjczNDI0ZmNhYTE
200 1.1 kB URL HTTP/1.1 www.ark.no/medias/icon-lydbok.svg?context=bWFzdGVyfHJvb3R8MjQxNHxpbWFnZS9zdmcreG1sfGhkYi9oNTUvMTE4MDgxOTgyOTU1ODIuc3ZnfDY4MWVhN2Y5YmExOGM4MjY0MmNhYTBhZjA4ZjFlMWRjYjg0YWU5ZDhkM2U3Yzg5Yzg1NzUxNjczNDI0ZmNhYTE
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1213)
Hash 0a85c6a1e5c3ffbc071617fbd9ac913a
2de167bf33e1c83bcc6a2d3d4edd56db38edc7a0
63d0ff4f0676641152de7bf3b26d17331570e705a592d1baa207becfb0db8287
GET /medias/icon-lydbok.svg?context=bWFzdGVyfHJvb3R8MjQxNHxpbWFnZS9zdmcreG1sfGhkYi9oNTUvMTE4MDgxOTgyOTU1ODIuc3ZnfDY4MWVhN2Y5YmExOGM4MjY0MmNhYTBhZjA4ZjFlMWRjYjg0YWU5ZDhkM2U3Yzg5Yzg1NzUxNjczNDI0ZmNhYTE HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Frame-Options: ALLOWALL
Cache-Control: public,max-age=31536000
Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT
X-Content-Type-Options: nosniff
content-security-policy: sandbox
X-Cache-Status: HIT
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
www.ark.no/medias/icon-innbundet.svg?context=bWFzdGVyfHJvb3R8MTY1NXxpbWFnZS9zdmcreG1sfGhmZi9oN2MvMTE4MDgyMDA4NTE0ODYuc3ZnfDdlMGU4NzdiODNmODJhMjQ4ZGM1ZjRiNTUyZTc3ODQwM2MwZWI2ZmNiMzgyMGU4OWYwYmVjZDEwYWVmNzM2OTQ
200 833 B URL HTTP/1.1 www.ark.no/medias/icon-innbundet.svg?context=bWFzdGVyfHJvb3R8MTY1NXxpbWFnZS9zdmcreG1sfGhmZi9oN2MvMTE4MDgyMDA4NTE0ODYuc3ZnfDdlMGU4NzdiODNmODJhMjQ4ZGM1ZjRiNTUyZTc3ODQwM2MwZWI2ZmNiMzgyMGU4OWYwYmVjZDEwYWVmNzM2OTQ
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (505)
Hash a65a28e2ad19b9e91ca93072bfbe63b8
6da5492a8ef70f757684e6d8c7fdf5465f8e8ef5
651edc2a0abc01a83a06cc633c50f8513fd2c6f89bf3f48f1dc141dfb3bd1bde
GET /medias/icon-innbundet.svg?context=bWFzdGVyfHJvb3R8MTY1NXxpbWFnZS9zdmcreG1sfGhmZi9oN2MvMTE4MDgyMDA4NTE0ODYuc3ZnfDdlMGU4NzdiODNmODJhMjQ4ZGM1ZjRiNTUyZTc3ODQwM2MwZWI2ZmNiMzgyMGU4OWYwYmVjZDEwYWVmNzM2OTQ HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Frame-Options: ALLOWALL
Cache-Control: public,max-age=31536000
Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT
X-Content-Type-Options: nosniff
content-security-policy: sandbox
X-Cache-Status: HIT
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
www.ark.no/medias/icon-cd.svg?context=bWFzdGVyfHJvb3R8MTg1M3xpbWFnZS9zdmcreG1sfGhhNi9oY2MvMTE4MDgxOTgxOTcyNzguc3ZnfGY3ODI3OWJlOTJhOGIxNGRlZDU2ZTI3ODE0OWJiM2EyN2QyN2IwMzc4OWNhMDZjZWNhOTgzNDRhMjJkNDFhNzM
200 713 B URL HTTP/1.1 www.ark.no/medias/icon-cd.svg?context=bWFzdGVyfHJvb3R8MTg1M3xpbWFnZS9zdmcreG1sfGhhNi9oY2MvMTE4MDgxOTgxOTcyNzguc3ZnfGY3ODI3OWJlOTJhOGIxNGRlZDU2ZTI3ODE0OWJiM2EyN2QyN2IwMzc4OWNhMDZjZWNhOTgzNDRhMjJkNDFhNzM
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (607)
Hash 59bea278cf46189e717d7c8d24532688
c322abc6e6291e5ce89103324935099ed4d22659
2bf262cf6bd9b866c2c7a363ca13d02b50c1c5ef10f90e945794b41cf68a0311
GET /medias/icon-cd.svg?context=bWFzdGVyfHJvb3R8MTg1M3xpbWFnZS9zdmcreG1sfGhhNi9oY2MvMTE4MDgxOTgxOTcyNzguc3ZnfGY3ODI3OWJlOTJhOGIxNGRlZDU2ZTI3ODE0OWJiM2EyN2QyN2IwMzc4OWNhMDZjZWNhOTgzNDRhMjJkNDFhNzM HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Frame-Options: ALLOWALL
Cache-Control: public,max-age=31536000
Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT
X-Content-Type-Options: nosniff
content-security-policy: sandbox
X-Cache-Status: HIT
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
www.ark.no/medias/ARK-logo-rgb.png?context=bWFzdGVyfHJvb3R8NTM3NXxpbWFnZS9wbmd8aDYxL2hiOS8xMjQxNjA1NTQxMDcxOC5wbmd8NzE0NjBhYzkyMTk3YjY3MDViNmY3NWJiODUxMGM1MTE1MzEzNDgxMDMwMWJkY2JhNzAyZWM1OTM0NWY5MjYxNw
200 5.4 kB URL HTTP/1.1 www.ark.no/medias/ARK-logo-rgb.png?context=bWFzdGVyfHJvb3R8NTM3NXxpbWFnZS9wbmd8aDYxL2hiOS8xMjQxNjA1NTQxMDcxOC5wbmd8NzE0NjBhYzkyMTk3YjY3MDViNmY3NWJiODUxMGM1MTE1MzEzNDgxMDMwMWJkY2JhNzAyZWM1OTM0NWY5MjYxNw
IP
File type PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash 694117356cff0567f422a7151b0bef89
cff747b3405329e61434661350b787eb78974bc5
5b4539a78df44e55a07e737bcbb2b3c4f0e991c1e94eb5eba68cd039a9ad73ab
GET /medias/ARK-logo-rgb.png?context=bWFzdGVyfHJvb3R8NTM3NXxpbWFnZS9wbmd8aDYxL2hiOS8xMjQxNjA1NTQxMDcxOC5wbmd8NzE0NjBhYzkyMTk3YjY3MDViNmY3NWJiODUxMGM1MTE1MzEzNDgxMDMwMWJkY2JhNzAyZWM1OTM0NWY5MjYxNw HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: image/png
Content-Length: 5375
X-Frame-Options: ALLOWALL
ETag: c9090923bba9332b51b1e7fd3123786a
Cache-Control: public,max-age=31536000
Last-Modified: Thu, 01 Jan 1970 00:00:01 GMT
X-Content-Type-Options: nosniff
content-security-policy: sandbox
X-Cache-Status: HIT
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
www.ark.no/_ui/responsive/common/images/novicell/exchange.svg
200 821 B URL HTTP/1.1 www.ark.no/_ui/responsive/common/images/novicell/exchange.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (637)
Hash cfa6637ae45a37a2696c599217b51100
8e40845ea27fac927c1a0ffebee688b07a0511db
5ffc92b06847b5911df0f94bfd3dde0a6ec7adc1f46226e679e5f3d78ca0fe40
GET /_ui/responsive/common/images/novicell/exchange.svg HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: image/svg+xml;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Frame-Options: ALLOWALL
Cache-Control: max-age=21600
ETag: W/"2002-1669845996028"
Last-Modified: Wed, 30 Nov 2022 22:06:36 GMT
Expires: Fri, 02 Dec 2022 20:33:03 GMT
X-Cache-Status: HIT
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash cb3ee8612558c6760bfc2b45bcf8180d
256caa4933ce93912269f8edc5dbd4705554c449
d611d13eb12ea1392f414e4e545ecdd5ffcfad18bd4a9106f2d6e0338d7da33c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=157399
Date: Fri, 02 Dec 2022 14:33:03 GMT
Etag: "6389bd59-1d7"
Expires: Sun, 04 Dec 2022 10:16:22 GMT
Last-Modified: Fri, 02 Dec 2022 08:54:49 GMT
Server: ECS (nyb/1D16)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jLQHuPFS-NY3yNNkURqQyr4LHWMGWkQOspm2fUzfJyaeth8UIssJBg==
Age: 4893
arkcms.s3-eu-west-1.amazonaws.com/2020/click_and_collect_icon_pdp.png
200 OK 579 B URL HTTP/1.1 arkcms.s3-eu-west-1.amazonaws.com/2020/click_and_collect_icon_pdp.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash ae12c3709e57f42d625e8c0e5bbd65ff
4da0f6b488bce010ef84fb38a488814ba8b41cc2
6aaec1fe9381c3deb009111c81a4e4c599b1b3fdbb346ab0412c850d00b82603
GET /2020/click_and_collect_icon_pdp.png HTTP/1.1
Host: arkcms.s3-eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: GnXoEPN/g840TdXpxRaqCEHhTfTGnditcPhOsUDPFVWEc/pc6Coa5JoYSUX5DjhcgMqrIEOX7EA=
x-amz-request-id: B5Z4GGGAMW0WS02T
Date: Fri, 02 Dec 2022 14:33:04 GMT
Last-Modified: Wed, 09 Dec 2020 10:28:47 GMT
ETag: "ae12c3709e57f42d625e8c0e5bbd65ff"
x-amz-meta-cb-modifiedtime: Wed, 09 Dec 2020 10:28:18 GMT
x-amz-version-id: rcTJgyMvadfkuGRJwZxwntujgFgIeUke
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 579
p.typekit.net/p.css?s=1&k=vgu7prb&ht=tk&f=39496.39498.39504.39506&a=92739817&app=typekit&e=css
200 OK 5 B URL HTTP/2 p.typekit.net/p.css?s=1&k=vgu7prb&ht=tk&f=39496.39498.39504.39506&a=92739817&app=typekit&e=css
IP
ASN #20940 Akamai International B.V.
Hash 83d24d4b43cc7eef2b61e66c95f3d158
f0cafc285ee23bb6c28c5166f305493c4331c84d
1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
GET /p.css?s=1&k=vgu7prb&ht=tk&f=39496.39498.39504.39506&a=92739817&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
content-type: text/css
cross-origin-resource-policy: cross-origin
etag: "613bee4d-5"
last-modified: Fri, 10 Sep 2021 23:46:21 GMT
server: nginx
content-length: 5
date: Fri, 02 Dec 2022 14:33:03 GMT
X-Firefox-Spdy: h2
www.ark.no/_ui/responsive/common/images/novicell/icons2.svg
200 4.9 kB URL HTTP/1.1 www.ark.no/_ui/responsive/common/images/novicell/icons2.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, Unicode text, UTF-8 text, with very long lines (1330)
Hash 70c1bf2e0f79bc0aa4d4db691f9bc7a3
495e5325437a26f559639c130907738b814636b6
748803c439e7801084d8c6e89068513dcd62c1fa40b7efa6d2f638d2a61d2ff3
GET /_ui/responsive/common/images/novicell/icons2.svg HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660; JSESSIONID=22031867C2E1A3593AB2D6521AC241F3; anonymous-consents=%5B%5D; cookie-notification=NOT_ACCEPTED; SRVID=P0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: image/svg+xml;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Frame-Options: ALLOWALL
Cache-Control: max-age=21600
ETag: W/"13291-1669847959027"
Last-Modified: Wed, 30 Nov 2022 22:39:19 GMT
Expires: Fri, 02 Dec 2022 20:33:03 GMT
X-Cache-Status: HIT
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8cd876589951719c94a6d49d1494bdbd
01600c8bb95fac543696e509b3e452b90d844572
e03942321526a2303220b1abd51f82f1d4cf80e0dd22a2582cf809b8bd729521
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ark.no/_ui/responsive/common/images/heart.svg
200 485 B URL HTTP/1.1 www.ark.no/_ui/responsive/common/images/heart.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (810), with no line terminators
Hash bf6c87810144048478a4af1e7036172e
1df92e763e945e02c10a65ab7ff4dd2d2a8326b8
3db00c85a23dc9c933ba41c66ea40b54a117378940f2f50ed07e4c1e8e85e358
GET /_ui/responsive/common/images/heart.svg HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/wro/ark_responsive.css?_=1669848036006
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660; JSESSIONID=22031867C2E1A3593AB2D6521AC241F3; anonymous-consents=%5B%5D; cookie-notification=NOT_ACCEPTED; SRVID=P0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: image/svg+xml;charset=UTF-8
ntCoent-Length: 810
X-Frame-Options: ALLOWALL
Cache-Control: max-age=21600
ETag: W/"810-1669845996023"
Last-Modified: Wed, 30 Nov 2022 22:06:36 GMT
Expires: Fri, 02 Dec 2022 20:33:03 GMT
X-Cache-Status: HIT
Accept-Ranges: bytes
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
Content-Encoding: gzip
Content-Length: 485
www.ark.no/_ui/responsive/common/images/basket.svg
200 594 B URL HTTP/1.1 www.ark.no/_ui/responsive/common/images/basket.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1585)
Hash 9138a81597c7a7be51c2c04a23f55d48
e38874fa64494f77be7bedfafd07ec8e6a597cd4
797706ae7c9eaf6990b12849249aa0315b75183818d7a5f0a7b5e1b9a18c8ce8
GET /_ui/responsive/common/images/basket.svg HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/wro/ark_responsive.css?_=1669848036006
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660; JSESSIONID=22031867C2E1A3593AB2D6521AC241F3; anonymous-consents=%5B%5D; cookie-notification=NOT_ACCEPTED; SRVID=P0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: image/svg+xml;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Frame-Options: ALLOWALL
Cache-Control: max-age=21600
ETag: W/"1586-1669847165453"
Last-Modified: Wed, 30 Nov 2022 22:26:05 GMT
Expires: Fri, 02 Dec 2022 20:33:03 GMT
X-Cache-Status: HIT
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
www.ark.no/_ui/responsive/common/images/login.svg
200 248 B URL HTTP/1.1 www.ark.no/_ui/responsive/common/images/login.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (315), with no line terminators
Hash e65002a0979088d966fe62fa04ad8546
4944836607208694e22e687730313c8b7c581575
bef4b9504593faecec695ea3116301541c0dc1eb6b416c2975efae0db63bc525
GET /_ui/responsive/common/images/login.svg HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/wro/ark_responsive.css?_=1669848036006
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660; JSESSIONID=22031867C2E1A3593AB2D6521AC241F3; anonymous-consents=%5B%5D; cookie-notification=NOT_ACCEPTED; SRVID=P0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: image/svg+xml;charset=UTF-8
ntCoent-Length: 315
X-Frame-Options: ALLOWALL
Cache-Control: max-age=21600
ETag: W/"315-1669847165460"
Last-Modified: Wed, 30 Nov 2022 22:26:05 GMT
Expires: Fri, 02 Dec 2022 20:33:03 GMT
X-Cache-Status: HIT
Accept-Ranges: bytes
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
Content-Encoding: gzip
Content-Length: 248
www.googletagmanager.com/gtm.js?id=GTM-P3ZPLL
200 OK 90 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-P3ZPLL
IP
File type ASCII text, with very long lines (39252)
Hash 9a974c6dc7ca035cc9e14e55cffe8af1
a60a10e8e43ed55461e153d61656a6cac2f6b889
5e0639ba77d75ed2d34a7648adbe4c8a83ccc67eee87c63bf608c11f9f236e94
GET /gtm.js?id=GTM-P3ZPLL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Dec 2022 14:33:03 GMT
expires: Fri, 02 Dec 2022 14:33:03 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89525
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.lipscore.com/assets/no/lipscore-v1.js
200 OK 69 kB URL HTTP/1.1 static.lipscore.com/assets/no/lipscore-v1.js
IP
File type ASCII text, with very long lines (589)
Hash 97e709db0efc7e4edcf01c2a116c6e10
7509e2a1739bb8bf0d1b43942128a760f4c7e918
9736aad14a6b6460b71f0cbdc9d1f0035cd4c8947029b788450afcf35376a92e
GET /assets/no/lipscore-v1.js HTTP/1.1
Host: static.lipscore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 69216
Connection: keep-alive
Date: Fri, 02 Dec 2022 11:14:30 GMT
Last-Modified: Fri, 02 Dec 2022 11:09:32 GMT
ETag: "97e709db0efc7e4edcf01c2a116c6e10"
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 7JTTnC9BgJ8bQuv5Vf7kZMJ7JWsRcdw2iYco4jUVQC1WA7Jtq8TvsA==
Age: 11914
www.ark.no/_ui/responsive/common/images/spinner.gif
200 1.1 kB URL HTTP/1.1 www.ark.no/_ui/responsive/common/images/spinner.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 5ce7976b7df2fc004edd0514e74c912f
8e274e6894bfa048d740598ad9dc347c843b53e8
cc059971515e77a7ff8e6771b1bfdf11c39370ad399c85ae151e620f79ff6ea1
GET /_ui/responsive/common/images/spinner.gif HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660; JSESSIONID=22031867C2E1A3593AB2D6521AC241F3; anonymous-consents=%5B%5D; cookie-notification=NOT_ACCEPTED; SRVID=P0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: image/gif;charset=UTF-8
Content-Length: 1101
X-Frame-Options: ALLOWALL
Cache-Control: max-age=21600
ETag: W/"1101-1669847959031"
Last-Modified: Wed, 30 Nov 2022 22:39:19 GMT
Expires: Fri, 02 Dec 2022 20:33:03 GMT
X-Cache-Status: HIT
Accept-Ranges: bytes
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
use.typekit.net/af/0230dd/00000000000000007735bb33/30/l?primer=529fae943ba84bb0c97aa2fb04f947ddb3dbe491d966d03bcc808e25eefee0ce&fvd=n4&v=3
200 OK 24 kB URL HTTP/2 use.typekit.net/af/0230dd/00000000000000007735bb33/30/l?primer=529fae943ba84bb0c97aa2fb04f947ddb3dbe491d966d03bcc808e25eefee0ce&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 24224, version 1.0\012- data
Hash f005bbf156a8b3f0d2a3f617decb7504
22df422ea62af0cbe56d87697fa73ed43753c2ba
ef02debd597b2a650c8e3657bf87d2d0ac2c6cdd10cf5c074eaff5eae53fafb2
GET /af/0230dd/00000000000000007735bb33/30/l?primer=529fae943ba84bb0c97aa2fb04f947ddb3dbe491d966d03bcc808e25eefee0ce&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 24224
etag: "e8db8b219fe0e512ab6df6bb665cccbe9558a4d8"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 02 Dec 2022 14:33:03 GMT
X-Firefox-Spdy: h2
static.lipscore.com/assets/lipscore-v1.css
200 OK 12 kB URL HTTP/1.1 static.lipscore.com/assets/lipscore-v1.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash ad324c13384f3748c4d121fab666b608
de2833b8d80bd2ca7b1a077086e803fa9f947cc5
7597379ecb627246ef4309081cce9d17780443654ffe9270a33448189e4dfdfb
GET /assets/lipscore-v1.css HTTP/1.1
Host: static.lipscore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 11566
Connection: keep-alive
Date: Fri, 02 Dec 2022 11:14:32 GMT
Last-Modified: Fri, 02 Dec 2022 11:12:28 GMT
ETag: "ad324c13384f3748c4d121fab666b608"
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HCdWyugUJ_5mjrJSKe9x3JaFhjbXGC3-MjyouWOeZibfu4ePzAfXTQ==
Age: 11912
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6b83378d68be87eb5cd1e294e9b766f2
34c519d509038a8faf98cff6aebf04b41e9c4ce3
6c9adec6bd071a171ab5c52f30797d17eb36ade96f5b12f9c408b4e1e06fec00
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=109803
Date: Fri, 02 Dec 2022 14:33:03 GMT
Etag: "63890965-1d7"
Expires: Sat, 03 Dec 2022 21:03:06 GMT
Last-Modified: Thu, 01 Dec 2022 20:07:01 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kfruQmFdk_bcBuqOW-EAryomnfq0NHwemSZC4Cq2524oz2-QenUJ8g==
Age: 3365
www.ark.no/_ui/responsive/common/images/favicon.ico
200 1.2 kB URL HTTP/1.1 www.ark.no/_ui/responsive/common/images/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 8c15182399f28f44d76075b23e582c46
8ec7eb62b2595cb2e4b4f1cfac6049044f1cd2d8
e9bc6adb5fab7d9d5d4b04aa901ae6f10ab0d38ff2fc068206ee6a99b15577b2
GET /_ui/responsive/common/images/favicon.ico HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660; JSESSIONID=22031867C2E1A3593AB2D6521AC241F3; anonymous-consents=%5B%5D; cookie-notification=NOT_ACCEPTED; SRVID=P0; _sfid_5b1e={%22anonymousId%22:%229637bb118186518a%22%2C%22consents%22:[]}; _evga_4241={%22uuid%22:%229637bb118186518a%22}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: image/x-icon;charset=UTF-8
Content-Length: 1150
X-Frame-Options: ALLOWALL
Cache-Control: max-age=21600
ETag: W/"1150-1669847959021"
Last-Modified: Wed, 30 Nov 2022 22:39:19 GMT
Expires: Fri, 02 Dec 2022 20:33:03 GMT
X-Cache-Status: HIT
Accept-Ranges: bytes
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
gyldendal.germany-2.evergage.com/api2/event/ark_production
200 OK 6.2 kB URL HTTP/2 gyldendal.germany-2.evergage.com/api2/event/ark_production
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (32958), with no line terminators
Hash 45603e7e360cfc238bc998abf526c46f
0e29cec4bc0ac0db8b5ede916ec763d486e7e691
f0db454875e5d6b9c0ad4ab998d1f55c7a703a2459c163d3df2ecf2d53bf0268
POST /api2/event/ark_production HTTP/1.1
Host: gyldendal.germany-2.evergage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1764
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 14:33:03 GMT
content-type: application/json;charset=UTF-8
set-cookie: AWSALB=24u815x7Zvpq4CUinJEAfU5R9UqxwgpQlyuBy8/vpJ+sIclIAiWbAgxzDzBPHPVQFy/VbfiBv8xlEg3bQUOzHvEKe7sLFuAVKys7dAHj3df4LxihRHdB2Cr1+wFy; Expires=Fri, 09 Dec 2022 14:33:03 GMT; Path=/
AWSALBCORS=24u815x7Zvpq4CUinJEAfU5R9UqxwgpQlyuBy8/vpJ+sIclIAiWbAgxzDzBPHPVQFy/VbfiBv8xlEg3bQUOzHvEKe7sLFuAVKys7dAHj3df4LxihRHdB2Cr1+wFy; Expires=Fri, 09 Dec 2022 14:33:03 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: https://www.ark.no
timing-allow-origin: *
access-control-allow-credentials: true
x-content-type-options: nosniff
vary: accept-encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 32ce0f38fae1b1af1c9a7b1920f7691a
3ba8859e57fccec52648465bbd6d59cee6ae2f60
5621e401988686f703aa189c04defb81c41c1542f52cc14245509624cdeb10f6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=118420
Date: Fri, 02 Dec 2022 14:33:03 GMT
Etag: "6389258e-1d7"
Expires: Sat, 03 Dec 2022 23:26:43 GMT
Last-Modified: Thu, 01 Dec 2022 22:07:10 GMT
Server: ECS (nyb/1D2B)
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 94M5uQJuDXkSPJRE-BTEnlUacDoQFBcy7mnFw3ErY11WVb5Vnh5sSw==
Age: 4773
dj4fsg3e1je59.cloudfront.net/9781784744830/img/0-S
200 OK 12 kB URL HTTP/1.1 dj4fsg3e1je59.cloudfront.net/9781784744830/img/0-S
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 122x180, components 3\012- data
Hash 6b05c7c5abbc7404cc10bc9813c9c49a
bab7b30a9f4c1556bfbad6811e06ba16eac80283
60bcb7606571133e1c151d41c5d925a633f7fc49a0674aacfb5f3cf87dcf25b8
GET /9781784744830/img/0-S HTTP/1.1
Host: dj4fsg3e1je59.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 11591
Connection: keep-alive
Date: Fri, 02 Dec 2022 14:33:04 GMT
Last-Modified: Sat, 02 Apr 2022 11:51:56 GMT
ETag: "6b05c7c5abbc7404cc10bc9813c9c49a"
Cache-Control: max-age=604800
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SyzG3TrO-6m-vASacFxYlfHWjGZhEDvW0vAKUtM9CxZEWuiouW7lhw==
ocsp.sectigo.com/
200 OK 472 B IP
Hash c5c834f607cb97130455786d0b27ebb2
97e384a3e05f190d831ced01162a87c683b1492e
37fd7a011fc284aaede85327a08fac79c91f2e8112e13b50642cbfbcb82c8deb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 14:33:03 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 00:28:31 GMT
Expires: Wed, 07 Dec 2022 00:28:30 GMT
Etag: "97e384a3e05f190d831ced01162a87c683b1492e"
Cache-Control: max-age=380726,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7734c6879dea1c06-OSL
dj4fsg3e1je59.cloudfront.net/9781784744830/img/0
200 OK 84 kB URL HTTP/1.1 dj4fsg3e1je59.cloudfront.net/9781784744830/img/0
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 432x640, components 3\012- data
Hash 20d3076addaefcc736d712746f2bb8bb
8fcd135d68dc87c83a1f123056082dfc520b7634
560b02781ab156e56a7ebceb34240c5aae380e9441ed05a914207699c4ee4e76
GET /9781784744830/img/0 HTTP/1.1
Host: dj4fsg3e1je59.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 84534
Connection: keep-alive
Date: Fri, 02 Dec 2022 14:33:04 GMT
Last-Modified: Sat, 02 Apr 2022 11:51:55 GMT
ETag: "20d3076addaefcc736d712746f2bb8bb"
Cache-Control: max-age=604800
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1zVYdnPOFJ4_tM5OyF0K3Ll_HyUKaDAScHeJpelfiiv0GdFRtJreAA==
d2df291ti5v5sq.cloudfront.net/rc/35408/scripts/s.js
200 OK 17 B URL HTTP/2 d2df291ti5v5sq.cloudfront.net/rc/35408/scripts/s.js
IP
File type ASCII text, with no line terminators
Hash a33a21825ee0bbfbd37c7f17465ee58b
0a1cea8a83e1df552650c210cc03ec629839dc1a
0df9a681956d3517ba546fb467fb16450db50fbe22a87f318e12789161f3b78f
GET /rc/35408/scripts/s.js HTTP/1.1
Host: d2df291ti5v5sq.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 17
last-modified: Tue, 04 Oct 2022 12:17:09 GMT
x-amz-meta-version: -1
x-amz-meta-previous: rc/35408/scripts/s-1664885824.js
x-amz-meta-blankedout: true
x-amz-meta-deployeddate: 2022-10-04 12:17:04
x-amz-meta-invalidationid: I32KDJXI400N4D
accept-ranges: bytes
server: AmazonS3
date: Fri, 02 Dec 2022 02:44:34 GMT
etag: "a33a21825ee0bbfbd37c7f17465ee58b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OrXGXORMfax8zQmPIKYCvUChdbUDW-oWqcqC5ueyUhyM0UhU-GQOmQ==
age: 42511
X-Firefox-Spdy: h2
consent.cookiebot.com/uc.js
200 OK 32 kB URL HTTP/2 consent.cookiebot.com/uc.js
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Hash c8f7ad4768a16672f57131490149c3d0
c943c68aaa059f06744868bb239f06d900d41464
b5a1e40fab60b20e8b25517f6a7e6d27f21af0788959cdf3d52f5b94164cba0c
GET /uc.js HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 22 Nov 2022 07:34:39 GMT
accept-ranges: bytes
etag: "db2e3fe144fed81:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 31718
cache-control: public, max-age=579
expires: Fri, 02 Dec 2022 14:42:43 GMT
date: Fri, 02 Dec 2022 14:33:04 GMT
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash c5c834f607cb97130455786d0b27ebb2
97e384a3e05f190d831ced01162a87c683b1492e
37fd7a011fc284aaede85327a08fac79c91f2e8112e13b50642cbfbcb82c8deb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 14:33:04 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 00:28:31 GMT
Expires: Wed, 07 Dec 2022 00:28:30 GMT
Etag: "97e384a3e05f190d831ced01162a87c683b1492e"
Cache-Control: max-age=380725,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7734c6879b82b4f1-OSL
consentcdn.cookiebot.com/sdk/bc-v4.min.html
200 OK 392 B URL HTTP/2 consentcdn.cookiebot.com/sdk/bc-v4.min.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (627), with no line terminators
Hash e7268eccad39bd651697fa793a52cc5c
47299cefa2397b0c1d0c5bf232390a5cf1bcc4d3
907e16c84d35556e4ed841a3511915e6d4bb4e9d68cfca178a740e90b4d80e35
GET /sdk/bc-v4.min.html HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163"
last-modified: Mon, 04 Apr 2022 07:23:49 GMT
server: AkamaiNetStorage
x-akamai-transformed: 9 - 0 pmb=mRUM,1
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=29771517
expires: Sun, 12 Nov 2023 04:25:01 GMT
date: Fri, 02 Dec 2022 14:33:04 GMT
content-length: 392
server-timing: cdn-cache; desc=HIT, edge; dur=1
X-Firefox-Spdy: h2
www.ark.no/availability/pdp?productCode=9781784744830
200 890 B URL HTTP/1.1 www.ark.no/availability/pdp?productCode=9781784744830
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (2239)
Hash 3a89f11563f8e30d6f6627b274ba6228
9905ce5d0e6418a7c434b6308fbf583f30a10868
214b08f288813a258bbbd24de12309c640f333844594394a9b275be406637d69
GET /availability/pdp?productCode=9781784744830 HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660; JSESSIONID=22031867C2E1A3593AB2D6521AC241F3; anonymous-consents=%5B%5D; cookie-notification=NOT_ACCEPTED; SRVID=P0; _sfid_5b1e={%22anonymousId%22:%229637bb118186518a%22%2C%22consents%22:[]}; _evga_4241={%22uuid%22:%229637bb118186518a%22}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:04 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Frame-Options: ALLOWALL
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Language: no
Expires: Fri, 02 Dec 2022 14:43:04 GMT
Cache-Control: max-age=600
X-Cache-Status: MISS
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:04 GMT;path=/;secure;httponly
consent.cookiebot.com/8c9951dd-c473-46c7-8264-2482c33544b1/cc.js?renew=false&referer=www.ark.no&dnt=false&init=false
200 OK 60 kB URL HTTP/2 consent.cookiebot.com/8c9951dd-c473-46c7-8264-2482c33544b1/cc.js?renew=false&referer=www.ark.no&dnt=false&init=false
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65499)
Hash 260a9b057c5ab8652696a919a15bc82a
2742d88c4f0ae1390b60e1289bc29d6d5510bb93
416155dacc8d99db47ae01fdd8ce88e089362fed3fff4cd1d096c5999ce72a23
GET /8c9951dd-c473-46c7-8264-2482c33544b1/cc.js?renew=false&referer=www.ark.no&dnt=false&init=false HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=1200
content-type: application/x-javascript; charset=utf-8
content-encoding: gzip
last-modified: Fri, 02 Dec 2022 14:33:04 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 59856
date: Fri, 02 Dec 2022 14:33:04 GMT
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 02 Dec 2022 12:41:08 GMT
expires: Fri, 02 Dec 2022 14:41:08 GMT
cache-control: public, max-age=7200
age: 6716
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gyldendal.germany-2.evergage.com/pr?.top=850&item=%7B%22type%22%3A%22Product%22%2C%22_id%22%3A%229781784744830%22%2C%22categories%22%3A%5B%7B%22type%22%3A%22c%22%2C%22_id%22%3A%22B%C3%98KER_DOKUMENTAR%20OG%20FAKTA_DOKUMENTAR_HISTORIE%22%7D%5D%2C%22dimensions%22%3A%7B%22Author%22%3A%5B%22Bryan%20Ferry%22%5D%2C%22Format%22%3A%5B%22Innbundet%22%5D%2C%22Language%22%3A%5B%22Engelsk%22%5D%2C%22ReleaseYear%22%3A%5B%222022%22%5D%2C%22Genre%22%3A%5B%5D%2C%22Topic%22%3A%5B%5D%2C%22Brand%22%3A%5B%5D%2C%22Series%22%3A%5B%5D%2C%22Location%22%3A%5B%5D%2C%22TimePeriod%22%3A%5B%5D%7D%7D&action=Viewed%20product%20page&.tt=263&.ttdns=45&.dt=1461&.lt=2162&.btdns=13&.bv=16&_ak=gyldendal&_ds=ark_production&.scv=106&channel=Web&_r=752872&.anonId=9637bb118186518a&_anon=true
204 No Content 0 B URL HTTP/2 gyldendal.germany-2.evergage.com/pr?.top=850&item=%7B%22type%22%3A%22Product%22%2C%22_id%22%3A%229781784744830%22%2C%22categories%22%3A%5B%7B%22type%22%3A%22c%22%2C%22_id%22%3A%22B%C3%98KER_DOKUMENTAR%20OG%20FAKTA_DOKUMENTAR_HISTORIE%22%7D%5D%2C%22dimensions%22%3A%7B%22Author%22%3A%5B%22Bryan%20Ferry%22%5D%2C%22Format%22%3A%5B%22Innbundet%22%5D%2C%22Language%22%3A%5B%22Engelsk%22%5D%2C%22ReleaseYear%22%3A%5B%222022%22%5D%2C%22Genre%22%3A%5B%5D%2C%22Topic%22%3A%5B%5D%2C%22Brand%22%3A%5B%5D%2C%22Series%22%3A%5B%5D%2C%22Location%22%3A%5B%5D%2C%22TimePeriod%22%3A%5B%5D%7D%7D&action=Viewed%20product%20page&.tt=263&.ttdns=45&.dt=1461&.lt=2162&.btdns=13&.bv=16&_ak=gyldendal&_ds=ark_production&.scv=106&channel=Web&_r=752872&.anonId=9637bb118186518a&_anon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pr?.top=850&item=%7B%22type%22%3A%22Product%22%2C%22_id%22%3A%229781784744830%22%2C%22categories%22%3A%5B%7B%22type%22%3A%22c%22%2C%22_id%22%3A%22B%C3%98KER_DOKUMENTAR%20OG%20FAKTA_DOKUMENTAR_HISTORIE%22%7D%5D%2C%22dimensions%22%3A%7B%22Author%22%3A%5B%22Bryan%20Ferry%22%5D%2C%22Format%22%3A%5B%22Innbundet%22%5D%2C%22Language%22%3A%5B%22Engelsk%22%5D%2C%22ReleaseYear%22%3A%5B%222022%22%5D%2C%22Genre%22%3A%5B%5D%2C%22Topic%22%3A%5B%5D%2C%22Brand%22%3A%5B%5D%2C%22Series%22%3A%5B%5D%2C%22Location%22%3A%5B%5D%2C%22TimePeriod%22%3A%5B%5D%7D%7D&action=Viewed%20product%20page&.tt=263&.ttdns=45&.dt=1461&.lt=2162&.btdns=13&.bv=16&_ak=gyldendal&_ds=ark_production&.scv=106&channel=Web&_r=752872&.anonId=9637bb118186518a&_anon=true HTTP/1.1
Host: gyldendal.germany-2.evergage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Cookie: AWSALBCORS=24u815x7Zvpq4CUinJEAfU5R9UqxwgpQlyuBy8/vpJ+sIclIAiWbAgxzDzBPHPVQFy/VbfiBv8xlEg3bQUOzHvEKe7sLFuAVKys7dAHj3df4LxihRHdB2Cr1+wFy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 02 Dec 2022 14:33:04 GMT
set-cookie: AWSALB=xaF2RjQkS1r7//eTe9f0PhRm0E9zkaw0fZTTsbwwZMtj0LDw81Pq03SkHMCWXdm7PTvIfaiSGqnJEoChcLw9Fi0pQQWfoxbhOpYQdKQl/BlwVOWc+TbJK8VI1az8; Expires=Fri, 09 Dec 2022 14:33:04 GMT; Path=/
AWSALBCORS=xaF2RjQkS1r7//eTe9f0PhRm0E9zkaw0fZTTsbwwZMtj0LDw81Pq03SkHMCWXdm7PTvIfaiSGqnJEoChcLw9Fi0pQQWfoxbhOpYQdKQl/BlwVOWc+TbJK8VI1az8; Expires=Fri, 09 Dec 2022 14:33:04 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: https://www.ark.no
timing-allow-origin: *
x-content-type-options: nosniff
X-Firefox-Spdy: h2
gyldendal.germany-2.evergage.com/msreceiver?.cStat=%5B%7B%22type%22%3A%22e%22%2C%22id%22%3A%22og8cf%22%2C%22stat%22%3A%22i%22%2C%22ug%22%3A%22Control%22%7D%5D&.bv=16&_ak=gyldendal&_ds=ark_production&.scv=106&channel=Web&_r=160825&.anonId=9637bb118186518a&_anon=true
204 No Content 0 B URL HTTP/2 gyldendal.germany-2.evergage.com/msreceiver?.cStat=%5B%7B%22type%22%3A%22e%22%2C%22id%22%3A%22og8cf%22%2C%22stat%22%3A%22i%22%2C%22ug%22%3A%22Control%22%7D%5D&.bv=16&_ak=gyldendal&_ds=ark_production&.scv=106&channel=Web&_r=160825&.anonId=9637bb118186518a&_anon=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /msreceiver?.cStat=%5B%7B%22type%22%3A%22e%22%2C%22id%22%3A%22og8cf%22%2C%22stat%22%3A%22i%22%2C%22ug%22%3A%22Control%22%7D%5D&.bv=16&_ak=gyldendal&_ds=ark_production&.scv=106&channel=Web&_r=160825&.anonId=9637bb118186518a&_anon=true HTTP/1.1
Host: gyldendal.germany-2.evergage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 0
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Cookie: AWSALBCORS=24u815x7Zvpq4CUinJEAfU5R9UqxwgpQlyuBy8/vpJ+sIclIAiWbAgxzDzBPHPVQFy/VbfiBv8xlEg3bQUOzHvEKe7sLFuAVKys7dAHj3df4LxihRHdB2Cr1+wFy
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Fri, 02 Dec 2022 14:33:04 GMT
set-cookie: AWSALB=oJSYGv38yiOM/AUpFnSJ1bKNE7mM02vJISGzn5XWvvqKv4X3Ir+BkMAtPI9+Tnnq+IH+O3CBcmVtaRlXMmpT1fCBLrXCe9ssSY4+COEWeHKGFc8bRIx6IWDSLsXo; Expires=Fri, 09 Dec 2022 14:33:04 GMT; Path=/
AWSALBCORS=oJSYGv38yiOM/AUpFnSJ1bKNE7mM02vJISGzn5XWvvqKv4X3Ir+BkMAtPI9+Tnnq+IH+O3CBcmVtaRlXMmpT1fCBLrXCe9ssSY4+COEWeHKGFc8bRIx6IWDSLsXo; Expires=Fri, 09 Dec 2022 14:33:04 GMT; Path=/; SameSite=None; Secure
access-control-allow-origin: https://www.ark.no
timing-allow-origin: *
x-content-type-options: nosniff
X-Firefox-Spdy: h2
arkanbefaler.sannsyn.com/ajaxrecapi/1.0/compoundrecommend/ark/ItemPageAssembly
200 OK 0 B URL HTTP/1.1 arkanbefaler.sannsyn.com/ajaxrecapi/1.0/compoundrecommend/ark/ItemPageAssembly
IP
ASN #50304 Blix Solutions AS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /ajaxrecapi/1.0/compoundrecommend/ark/ItemPageAssembly HTTP/1.1
Host: arkanbefaler.sannsyn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: PUT
Access-Control-Request-Headers: x-ssasid
Referer: https://www.ark.no/
Origin: https://www.ark.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 02 Dec 2022 14:33:04 GMT
Content-Length: 0
Connection: keep-alive
Vary: Origin
Access-Control-Max-Age: 2678400
Access-Control-Allow-Origin: https://www.ark.no
Access-Control-Allow-Headers: x-ssasid
Access-Control-Allow-Methods: PUT
Access-Control-Allow-Credentials: true
arkanbefaler.sannsyn.com/jsrecapi/1.0/update/ark/anonymous/9781784744830/webread
200 OK 0 B URL HTTP/1.1 arkanbefaler.sannsyn.com/jsrecapi/1.0/update/ark/anonymous/9781784744830/webread
IP
ASN #50304 Blix Solutions AS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /jsrecapi/1.0/update/ark/anonymous/9781784744830/webread HTTP/1.1
Host: arkanbefaler.sannsyn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-ssasid
Referer: https://www.ark.no/
Origin: https://www.ark.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 02 Dec 2022 14:33:04 GMT
Content-Length: 0
Connection: keep-alive
Vary: Origin
Access-Control-Max-Age: 2678400
Access-Control-Allow-Origin: https://www.ark.no
Access-Control-Allow-Headers: x-ssasid
Access-Control-Allow-Methods: GET
Access-Control-Allow-Credentials: true
www.ark.no/_ui/responsive/common/images/vipps-hurtigkasse.png
200 28 kB URL HTTP/1.1 www.ark.no/_ui/responsive/common/images/vipps-hurtigkasse.png
IP
File type PNG image data, 1507 x 200, 8-bit/color RGBA, interlaced\012- data
Hash 20763c896b5e9d795b71ab8282e5060f
335fa1f43ef3427bbf77eb8ae6730d8f647c8e03
c9c6c68525f916981a25c4b1b58625d5c56e62a3c16f038f85a8cff9cbec0a32
GET /_ui/responsive/common/images/vipps-hurtigkasse.png HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660; JSESSIONID=22031867C2E1A3593AB2D6521AC241F3; anonymous-consents=%5B%5D; cookie-notification=NOT_ACCEPTED; SRVID=P0; _sfid_5b1e={%22anonymousId%22:%229637bb118186518a%22%2C%22consents%22:[]}; _evga_4241={%22uuid%22:%229637bb118186518a%22}; _gcl_au=1.1.2080338249.1669991582; _ga_7BNLJ6Y01L=GS1.1.1669991582.1.0.1669991582.0.0.0; _ga=GA1.2.800098396.1669991582; _gid=GA1.2.68386139.1669991583; _gat_UA-21555284-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:04 GMT
Content-Type: image/png;charset=UTF-8
Content-Length: 28119
X-Frame-Options: ALLOWALL
Cache-Control: max-age=21600
ETag: W/"28119-1669847165468"
Last-Modified: Wed, 30 Nov 2022 22:26:05 GMT
Expires: Fri, 02 Dec 2022 20:33:04 GMT
X-Cache-Status: HIT
Accept-Ranges: bytes
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:04 GMT;path=/;secure;httponly
wapi.lipscore.com/hit?api_key=6a2538253ca1d39fa2a02b28
200 OK 0 B URL HTTP/2 wapi.lipscore.com/hit?api_key=6a2538253ca1d39fa2a02b28
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hit?api_key=6a2538253ca1d39fa2a02b28 HTTP/1.1
Host: wapi.lipscore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-allow-credentials: true
accept-ranges: bytes
date: Fri, 02 Dec 2022 14:33:04 GMT
via: 1.1 varnish
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 0
x-timer: S1669991584.416648,VS0,VE0
access-control-allow-origin: https://www.ark.no
content-length: 0
X-Firefox-Spdy: h2
wapi.lipscore.com/initial_data/settings/show?api_key=6a2538253ca1d39fa2a02b28&invitation_template_id=&lang=
200 OK 8.4 kB URL HTTP/2 wapi.lipscore.com/initial_data/settings/show?api_key=6a2538253ca1d39fa2a02b28&invitation_template_id=&lang=
IP
File type JSON data\012- , ASCII text, with very long lines (8414), with no line terminators
Hash e8d8b9129babd714cca17d25abf71ad4
7f16913bb726daa1e041311b8a59afde1afeeb53
70e0e3a804747f031436d4ad1bb537da968c397af8fbb2b44fc24cfe5c99050d
GET /initial_data/settings/show?api_key=6a2538253ca1d39fa2a02b28&invitation_template_id=&lang= HTTP/1.1
Host: wapi.lipscore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Cowboy
access-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE
access-control-expose-headers: X-Pagination
access-control-max-age: 86400
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-credentials: true
access-control-allow-headers: X-Http-Method-Override
cache-control: public, no-cache
content-type: application/json; charset=utf-8
x-request-id: ef47666c-2168-4866-b9f4-3133ffab9f71
x-runtime: 0.020584
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 14:33:04 GMT
age: 109892
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 85
x-timer: S1669991584.420606,VS0,VE0
vary: Origin
access-control-allow-origin: https://www.ark.no
content-length: 8414
X-Firefox-Spdy: h2
www.ark.no/boker/productCacheSensitiveDetails?productCode=9781784744830
200 629 B URL HTTP/1.1 www.ark.no/boker/productCacheSensitiveDetails?productCode=9781784744830
IP
File type JSON data\012- , ASCII text, with very long lines (1324), with no line terminators
Hash 6918481b77a2d1bae9b0a5baeeb80253
eaf842ab3856e6615f8d88c815ab8c7377e11bde
f4b3b308cd132a491207029d93cb74e43f28a5fba157e8ab1d393636e79dd34e
GET /boker/productCacheSensitiveDetails?productCode=9781784744830 HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660; JSESSIONID=22031867C2E1A3593AB2D6521AC241F3; anonymous-consents=%5B%5D; cookie-notification=NOT_ACCEPTED; SRVID=P0; _sfid_5b1e={%22anonymousId%22:%229637bb118186518a%22%2C%22consents%22:[]}; _evga_4241={%22uuid%22:%229637bb118186518a%22}; _gcl_au=1.1.2080338249.1669991582; _ga_7BNLJ6Y01L=GS1.1.1669991582.1.0.1669991582.0.0.0; _ga=GA1.2.800098396.1669991582; _gid=GA1.2.68386139.1669991583; _gat_UA-21555284-1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:04 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Frame-Options: ALLOWALL
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Language: no
X-Cache-Status: MISS
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:04 GMT;path=/;secure;httponly
arkanbefaler.sannsyn.com/ajaxrecapi/1.0/compoundrecommend/ark/ItemPageAssembly
200 OK 727 B URL HTTP/1.1 arkanbefaler.sannsyn.com/ajaxrecapi/1.0/compoundrecommend/ark/ItemPageAssembly
IP
ASN #50304 Blix Solutions AS
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (2273), with no line terminators
Hash eece2f09571500ab643a56d424703aba
8b2976c020f6b5dc03285c5ed49e07ab96bd3dcf
6d8d2069cae907b61895c884ad8f2c7fae350986184ca0f1d824e0a4705e444f
PUT /ajaxrecapi/1.0/compoundrecommend/ark/ItemPageAssembly HTTP/1.1
Host: arkanbefaler.sannsyn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-ssasid: ssas_c38a0462-38f1-4e18-adb5-0bbcb406f178
Content-Type: text/plain;charset=UTF-8
Content-Length: 31
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Cookie: ssas_session=eyJhbGciOiJIUzI1NiJ9.eyJkYXRhIjp7InNzYXNpZCI6InNzYXNfYzM4YTA0NjItMzhmMS00ZTE4LWFkYjUtMGJiY2I0MDZmMTc4Iiwic3Nhc2lkX2NpdHMiOiJ5ZXMifSwibmJmIjoxNjY5OTkxNTg0LCJpYXQiOjE2Njk5OTE1ODR9.aY2Rsaecw1QrSV4jP7RH63z7rLfHuPfBtvUcY-wkMPg; ssasid=ssas_c38a0462-38f1-4e18-adb5-0bbcb406f178; ssasid2=ssas_c38a0462-38f1-4e18-adb5-0bbcb406f178
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 14:33:04 GMT
Content-Type: application/json
Content-Length: 727
Connection: keep-alive
Vary: Origin,Accept-Encoding
X-Roll: https://bit.ly/IqT6zt
Set-Cookie: ssas_session=eyJhbGciOiJIUzI1NiJ9.eyJkYXRhIjp7InNzYXNpZCI6InNzYXNfYzM4YTA0NjItMzhmMS00ZTE4LWFkYjUtMGJiY2I0MDZmMTc4In0sIm5iZiI6MTY2OTk5MTU4NCwiaWF0IjoxNjY5OTkxNTg0fQ.LAbSy30ZRyFJZoOxIFTdqNiCkfcYSW93vAQVA3oqMhk; SameSite=None; Path=/; Domain=.sannsyn.com; Secure
ssasid=ssas_c38a0462-38f1-4e18-adb5-0bbcb406f178; Max-Age=31536000; Expires=Sat, 02 Dec 2023 14:33:04 GMT; SameSite=None; Path=/; Domain=sannsyn.com; Secure
ssasid2=ssas_c38a0462-38f1-4e18-adb5-0bbcb406f178; Max-Age=31536000; Expires=Sat, 02 Dec 2023 14:33:04 GMT; SameSite=None; Path=/; Domain=sannsyn.com; Secure; HTTPOnly
X-Robots-Tag: none
Cache-Control: no-cache
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: https://www.ark.no
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
arkanbefaler.sannsyn.com/jsrecapi/1.0/update/ark/anonymous/9781784744830/webread
200 OK 112 B URL HTTP/1.1 arkanbefaler.sannsyn.com/jsrecapi/1.0/update/ark/anonymous/9781784744830/webread
IP
ASN #50304 Blix Solutions AS
File type ASCII text, with no line terminators
Hash bfecd897f0d45955aacbf3871470a55c
afe50e942444b4afd7f02ec661e2a57d8d1bfbd0
6daceca4f48edfe3ad59017d91d992780701c48ecd8ced756786dbe43672756c
GET /jsrecapi/1.0/update/ark/anonymous/9781784744830/webread HTTP/1.1
Host: arkanbefaler.sannsyn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-ssasid: ssas_c38a0462-38f1-4e18-adb5-0bbcb406f178
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Cookie: ssas_session=eyJhbGciOiJIUzI1NiJ9.eyJkYXRhIjp7InNzYXNpZCI6InNzYXNfYzM4YTA0NjItMzhmMS00ZTE4LWFkYjUtMGJiY2I0MDZmMTc4Iiwic3Nhc2lkX2NpdHMiOiJ5ZXMifSwibmJmIjoxNjY5OTkxNTg0LCJpYXQiOjE2Njk5OTE1ODR9.aY2Rsaecw1QrSV4jP7RH63z7rLfHuPfBtvUcY-wkMPg; ssasid=ssas_c38a0462-38f1-4e18-adb5-0bbcb406f178; ssasid2=ssas_c38a0462-38f1-4e18-adb5-0bbcb406f178
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 14:33:04 GMT
Content-Type: application/javascript
Content-Length: 112
Connection: keep-alive
Vary: Origin,Accept-Encoding
X-Roll: https://bit.ly/IqT6zt
Set-Cookie: ssas_session=eyJhbGciOiJIUzI1NiJ9.eyJkYXRhIjp7InNzYXNpZCI6InNzYXNfYzM4YTA0NjItMzhmMS00ZTE4LWFkYjUtMGJiY2I0MDZmMTc4In0sIm5iZiI6MTY2OTk5MTU4NCwiaWF0IjoxNjY5OTkxNTg0fQ.LAbSy30ZRyFJZoOxIFTdqNiCkfcYSW93vAQVA3oqMhk; SameSite=None; Path=/; Domain=.sannsyn.com; Secure
ssasid=ssas_c38a0462-38f1-4e18-adb5-0bbcb406f178; Max-Age=31536000; Expires=Sat, 02 Dec 2023 14:33:04 GMT; SameSite=None; Path=/; Domain=sannsyn.com; Secure
ssasid2=ssas_c38a0462-38f1-4e18-adb5-0bbcb406f178; Max-Age=31536000; Expires=Sat, 02 Dec 2023 14:33:04 GMT; SameSite=None; Path=/; Domain=sannsyn.com; Secure; HTTPOnly
X-Robots-Tag: none
Cache-Control: no-cache
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Access-Control-Allow-Origin: https://www.ark.no
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9781784744830&widgets=r%2Cr_sl%2Cr_sm%2Crw_l%2Crw_p&translate_to_lang=no
200 OK 101 B URL HTTP/2 wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9781784744830&widgets=r%2Cr_sl%2Cr_sm%2Crw_l%2Crw_p&translate_to_lang=no
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 20cd7cd03dc319ba9370cfefe551d8b7
b0c584bd4555ae18f8fbce1db555944b6e4e1595
009e17cc912b9566e1a48813a97bb78f2febd529c086367ca58c777cb1b77654
GET /initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9781784744830&widgets=r%2Cr_sl%2Cr_sm%2Crw_l%2Crw_p&translate_to_lang=no HTTP/1.1
Host: wapi.lipscore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Cowboy
access-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE
access-control-expose-headers: X-Pagination
access-control-max-age: 86400
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-credentials: true
access-control-allow-headers: X-Http-Method-Override
cache-control: public, no-cache
x-pagination: {"reviews":{"total_pages":0,"page":1}}
content-type: application/json; charset=utf-8
x-request-id: 7f2a423f-de55-48a5-89b2-4cde99cba58a
x-runtime: 0.079377
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 14:33:04 GMT
age: 361778
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669991584.491509,VS0,VE1
vary: Origin
access-control-allow-origin: https://www.ark.no
content-length: 101
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49a9684674e0f1b3974c6427c5354fe4
c201e61bcda9cc91369f0c57f8236fcdd3db26c6
27b8d50242836a45aca1fcd0cb58e7f685011c1f93b57d0e3ea9a02400f8d801
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-21555284-1&cid=800098396.1669991582&jid=848560021&gjid=1459490941&_gid=68386139.1669991583&_u=YADAAEAAAAAAACAEK~&z=1787872849
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-21555284-1&cid=800098396.1669991582&jid=848560021&gjid=1459490941&_gid=68386139.1669991583&_u=YADAAEAAAAAAACAEK~&z=1787872849
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-21555284-1&cid=800098396.1669991582&jid=848560021&gjid=1459490941&_gid=68386139.1669991583&_u=YADAAEAAAAAAACAEK~&z=1787872849 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.ark.no
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 02 Dec 2022 14:33:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 49a9684674e0f1b3974c6427c5354fe4
c201e61bcda9cc91369f0c57f8236fcdd3db26c6
27b8d50242836a45aca1fcd0cb58e7f685011c1f93b57d0e3ea9a02400f8d801
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 315873c315af2be891e63f8b421bae65
5277bb0c4fea2b036c6faf28d66395c96166ffd2
3f6657d352a42f8257409f2ed365a3fb928ac3eb74a34a2c74a433290182cc92
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 59ccaf5f1bf1101f3d43ae777be4f6a9
2740c2403e005eac512a829e64de6a03a65fcbb6
1c6da1c071531cd11b32e943b42798202de1a80882e067773ed4d6147094587f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-21555284-1&cid=800098396.1669991582&jid=848560021&_u=YADAAEAAAAAAACAEK~&z=1018565483
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-21555284-1&cid=800098396.1669991582&jid=848560021&_u=YADAAEAAAAAAACAEK~&z=1018565483
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-21555284-1&cid=800098396.1669991582&jid=848560021&_u=YADAAEAAAAAAACAEK~&z=1018565483 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 14:33:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-21555284-1&cid=800098396.1669991582&jid=848560021&_u=YADAAEAAAAAAACAEK~&z=1018565483
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-21555284-1&cid=800098396.1669991582&jid=848560021&_u=YADAAEAAAAAAACAEK~&z=1018565483
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-21555284-1&cid=800098396.1669991582&jid=848560021&_u=YADAAEAAAAAAACAEK~&z=1018565483 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 02 Dec 2022 14:33:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a6ad57d839c4b452d7118cf2052f9d35
50afdbe46f04c7611c1a0111bce3a76775e50272
4c5c20573601bde0f5c3567e02d02d74ab22d4ffe12f632e1def1b87dc86ad3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 59ccaf5f1bf1101f3d43ae777be4f6a9
2740c2403e005eac512a829e64de6a03a65fcbb6
1c6da1c071531cd11b32e943b42798202de1a80882e067773ed4d6147094587f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 14:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-7BNLJ6Y01L>m=2oebu0&_p=659170655&cid=800098396.1669991582&ul=en-us&sr=1280x1024&_s=1&sid=1669991582&sct=1&seg=0&dl=https%3A%2F%2Fwww.ark.no%2Fboker%2FBryan-Ferry-Lyrics-9781784744830%3Futm_source%3Dadtraction%26utm_medium%3DKelkoo%2BNO%26utm_campaign%3DPrice%2520comparison%26at_gd%3D9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29&dr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&dt=Lyrics%20%7C%20Bryan%20Ferry%20%7C%20ARK%20Bokhandel&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-7BNLJ6Y01L>m=2oebu0&_p=659170655&cid=800098396.1669991582&ul=en-us&sr=1280x1024&_s=1&sid=1669991582&sct=1&seg=0&dl=https%3A%2F%2Fwww.ark.no%2Fboker%2FBryan-Ferry-Lyrics-9781784744830%3Futm_source%3Dadtraction%26utm_medium%3DKelkoo%2BNO%26utm_campaign%3DPrice%2520comparison%26at_gd%3D9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29&dr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&dt=Lyrics%20%7C%20Bryan%20Ferry%20%7C%20ARK%20Bokhandel&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7BNLJ6Y01L>m=2oebu0&_p=659170655&cid=800098396.1669991582&ul=en-us&sr=1280x1024&_s=1&sid=1669991582&sct=1&seg=0&dl=https%3A%2F%2Fwww.ark.no%2Fboker%2FBryan-Ferry-Lyrics-9781784744830%3Futm_source%3Dadtraction%26utm_medium%3DKelkoo%2BNO%26utm_campaign%3DPrice%2520comparison%26at_gd%3D9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29&dr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&dt=Lyrics%20%7C%20Bryan%20Ferry%20%7C%20ARK%20Bokhandel&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.ark.no
date: Fri, 02 Dec 2022 14:33:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.ark.no/recommend/details?productCodes%5B%5D=9788205573062&productCodes%5B%5D=9788202620158&productCodes%5B%5D=9788278227084&productCodes%5B%5D=9788232804016&productCodes%5B%5D=9788282116664&productCodes%5B%5D=9788252192506
200 OK 1.6 kB URL HTTP/1.1 www.ark.no/recommend/details?productCodes%5B%5D=9788205573062&productCodes%5B%5D=9788202620158&productCodes%5B%5D=9788278227084&productCodes%5B%5D=9788232804016&productCodes%5B%5D=9788282116664&productCodes%5B%5D=9788252192506
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1756)
Hash 90b4971a2ed1a8e7be44548fba580a1e
170a10d97b001f76bd805e9cc3ba61d511a0e84d
825197974d612cfa1692ef3edf3e97e28f06655072b6941b8b666e92af50babe
GET /recommend/details?productCodes%5B%5D=9788205573062&productCodes%5B%5D=9788202620158&productCodes%5B%5D=9788278227084&productCodes%5B%5D=9788232804016&productCodes%5B%5D=9788282116664&productCodes%5B%5D=9788252192506 HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660; JSESSIONID=22031867C2E1A3593AB2D6521AC241F3; anonymous-consents=%5B%5D; cookie-notification=NOT_ACCEPTED; SRVID=P0; _sfid_5b1e={%22anonymousId%22:%229637bb118186518a%22%2C%22consents%22:[]}; _evga_4241={%22uuid%22:%229637bb118186518a%22}; _gcl_au=1.1.2080338249.1669991582; _ga_7BNLJ6Y01L=GS1.1.1669991582.1.0.1669991582.0.0.0; _ga=GA1.2.800098396.1669991582; _gid=GA1.2.68386139.1669991583; _gat_UA-21555284-1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Encoding: gzip
Cache-Control: public, max-age=660
Transfer-Encoding: chunked
Content-Type: application/json;charset=UTF-8
Date: Fri, 02 Dec 2022 14:33:04 GMT
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:04 GMT;path=/;secure;httponly
dj4fsg3e1je59.cloudfront.net/9788205573062/img/0-M
200 OK 14 kB URL HTTP/1.1 dj4fsg3e1je59.cloudfront.net/9788205573062/img/0-M
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 195x300, components 3\012- data
Hash a8069a5cd37d2b30ca104e989fc95611
d0db1841a90abe1f7de0573a9ae6fd8ad1adab83
e43b8a235be74de45a6ca80ae6e9010ee6600835aee7da378136dcd2af4c80b2
GET /9788205573062/img/0-M HTTP/1.1
Host: dj4fsg3e1je59.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 13981
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 15:44:48 GMT
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 01 Dec 2022 20:42:03 GMT
Cache-Control: max-age=null
ETag: "a8069a5cd37d2b30ca104e989fc95611"
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dAKThsUSnIJpygd9yxV7DqkwWmRTpSBwMuuthXAhIr_SgI3zymq8uw==
Age: 64262
dj4fsg3e1je59.cloudfront.net/9788202620158/img/0-M
200 OK 9.4 kB URL HTTP/1.1 dj4fsg3e1je59.cloudfront.net/9788202620158/img/0-M
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 187x300, components 3\012- data
Hash 1de9de7d276b0de016024e33f02a0884
74c89f18ec7b4b9c050a0146f49da044db6a923e
9f203bdce14d322991b9a92190abb783756ff5526982786bd808eeafd8563813
GET /9788202620158/img/0-M HTTP/1.1
Host: dj4fsg3e1je59.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 9386
Connection: keep-alive
Last-Modified: Sat, 22 Dec 2018 05:06:55 GMT
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 30 Nov 2022 19:08:28 GMT
Cache-Control: max-age=604800
ETag: "1de9de7d276b0de016024e33f02a0884"
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: izjzI6kK8CnyYMtG2nE13wWy9pBUHHhxyXtp_OWblvZ-78BmuiMFZA==
Age: 156277
dj4fsg3e1je59.cloudfront.net/9788278227084/img/0-M
200 OK 13 kB URL HTTP/1.1 dj4fsg3e1je59.cloudfront.net/9788278227084/img/0-M
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, orientation=upper-left, width=0], baseline, precision 8, 200x255, components 3\012- data
Hash 5531a2589f11b9f0e05adfc9d0c55407
26e34550ba24a44f6783bf0f01b83ab1d5ccac83
c0ae468d49c804f9e79b121c80b0221dcedabb301f2318197d579cee5ce98922
GET /9788278227084/img/0-M HTTP/1.1
Host: dj4fsg3e1je59.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image
Content-Length: 13357
Connection: keep-alive
Date: Wed, 30 Nov 2022 20:45:35 GMT
Last-Modified: Sun, 20 Aug 2017 23:36:59 GMT
ETag: "5531a2589f11b9f0e05adfc9d0c55407"
Cache-Control: max-age=604800
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Gl7vOvETEGX8L56bhb96G4p43l2oHzRIQ69NmBJP4MFWjdSxfLHxIQ==
Age: 150450
dj4fsg3e1je59.cloudfront.net/9788232804016/img/0-M
200 OK 14 kB URL HTTP/1.1 dj4fsg3e1je59.cloudfront.net/9788232804016/img/0-M
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x296, components 3\012- data
Hash 872ff1b5f3a63b79f85b6bcbefb7bee5
91d1b3ddc9ed77a997ef1d500c31ec80814f0f8e
aa3e07391d5bc5ca1cdc9f2b24ff59b1396917c177f50b835ac6c24e694ab5a9
GET /9788232804016/img/0-M HTTP/1.1
Host: dj4fsg3e1je59.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 13985
Connection: keep-alive
Date: Thu, 01 Dec 2022 19:37:32 GMT
Last-Modified: Thu, 27 May 2021 07:01:41 GMT
ETag: "872ff1b5f3a63b79f85b6bcbefb7bee5"
Cache-Control: max-age=null
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: V_TJhl35AJpmAZumwtXuvLudQXRwNUapOZRthXvuwGj5fOXJxh6pIg==
Age: 68134
dj4fsg3e1je59.cloudfront.net/9788252192506/img/0-M
200 OK 15 kB URL HTTP/1.1 dj4fsg3e1je59.cloudfront.net/9788252192506/img/0-M
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x280, components 3\012- data
Hash 32ff220bb4a099297992818f2fbb5a36
a10a382426ac80d705bcf106d8c18c006b17e8ea
688e2c7f02179e3f757b9d9301eed00e74a6086e63fdf52b892aebc1be861f7e
GET /9788252192506/img/0-M HTTP/1.1
Host: dj4fsg3e1je59.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 14884
Connection: keep-alive
Last-Modified: Wed, 12 Jan 2022 05:43:24 GMT
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 02 Dec 2022 13:27:04 GMT
Cache-Control: max-age=null
ETag: "32ff220bb4a099297992818f2fbb5a36"
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZPn6ixifRhzKpuIfmHE8PG_-Ml9lAxVKMWOwMvJkddoETZEGgCbwqw==
Age: 3962
dj4fsg3e1je59.cloudfront.net/9788282116664/img/0-M
200 OK 16 kB URL HTTP/1.1 dj4fsg3e1je59.cloudfront.net/9788282116664/img/0-M
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 200x298, components 3\012- data
Hash 77050f0167fea6379e7bdf6a30ad1fc4
0b21459a83f8dc187663ff29d7c61827c2a1f22d
70a86f18c518153d6d9b5a2a4d692dda7f1b3b9a1eaaa65bf0dcb62c70124dfc
GET /9788282116664/img/0-M HTTP/1.1
Host: dj4fsg3e1je59.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 15716
Connection: keep-alive
Date: Mon, 28 Nov 2022 19:44:46 GMT
Last-Modified: Mon, 24 Feb 2020 05:16:04 GMT
ETag: "77050f0167fea6379e7bdf6a30ad1fc4"
Cache-Control: max-age=604800
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yN9wAT-MzGTAX6CHBILYg-Z-NggJOpsB44sdRqKAjJh495HrepMa2g==
Age: 326900
wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788205573062&widgets=r_sm&translate_to_lang=no
200 OK 71 B URL HTTP/2 wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788205573062&widgets=r_sm&translate_to_lang=no
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash abb5b42035a8b86b3af2c5e1fa706142
eb1bb8da3990fb165e3148cc1f9421f19abd1e59
e49605b84a40fc43cfccf31476aa6b5bc7eda3614ebe102ba724a9cee02f8d97
GET /initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788205573062&widgets=r_sm&translate_to_lang=no HTTP/1.1
Host: wapi.lipscore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Cowboy
access-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE
access-control-expose-headers: X-Pagination
access-control-max-age: 86400
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-credentials: true
access-control-allow-headers: X-Http-Method-Override
cache-control: public, no-cache
content-type: application/json; charset=utf-8
x-request-id: 555d2d71-2798-40b0-9d03-0eeb6247c292
x-runtime: 0.015323
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 14:33:05 GMT
age: 102150
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669991585.030289,VS0,VE1
vary: Origin
access-control-allow-origin: https://www.ark.no
content-length: 71
X-Firefox-Spdy: h2
wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788202620158&widgets=r_sm&translate_to_lang=no
200 OK 70 B URL HTTP/2 wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788202620158&widgets=r_sm&translate_to_lang=no
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 22b8a9df9ec692dd4ad01938f9d5ae3a
31cf920e1d504377423a87b79ad3f0585b6548a4
561361d99cd141034fd1b7ae30d12cdc88f39962934370b275c8e3544c6d8905
GET /initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788202620158&widgets=r_sm&translate_to_lang=no HTTP/1.1
Host: wapi.lipscore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Cowboy
access-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE
access-control-expose-headers: X-Pagination
access-control-max-age: 86400
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-credentials: true
access-control-allow-headers: X-Http-Method-Override
cache-control: public, no-cache
content-type: application/json; charset=utf-8
x-request-id: 5cefffb3-1321-41fe-8850-69beb3df7768
x-runtime: 0.024189
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 14:33:05 GMT
age: 314439
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669991585.037422,VS0,VE1
vary: Origin
access-control-allow-origin: https://www.ark.no
content-length: 70
X-Firefox-Spdy: h2
wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788278227084&widgets=r_sm&translate_to_lang=no
200 OK 70 B URL HTTP/2 wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788278227084&widgets=r_sm&translate_to_lang=no
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 37fe676c92e6c8dfc05d4267ce1bb16c
3e73fab57f4a0056893b5d0e231ffbdbba22801c
906367981d4905290268bc545951303b506e8dd66ac911802efd1b7e63a2b33d
GET /initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788278227084&widgets=r_sm&translate_to_lang=no HTTP/1.1
Host: wapi.lipscore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Cowboy
access-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE
access-control-expose-headers: X-Pagination
access-control-max-age: 86400
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-credentials: true
access-control-allow-headers: X-Http-Method-Override
cache-control: public, no-cache
content-type: application/json; charset=utf-8
x-request-id: f4dfe3bf-5c1c-4e08-8370-e4002c5ca202
x-runtime: 0.024798
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 14:33:05 GMT
age: 22742
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669991585.040424,VS0,VE1
vary: Origin
access-control-allow-origin: https://www.ark.no
content-length: 70
X-Firefox-Spdy: h2
wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788232804016&widgets=r_sm&translate_to_lang=no
200 OK 71 B URL HTTP/2 wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788232804016&widgets=r_sm&translate_to_lang=no
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 74c4bda7a00767b7dc966d268701f6c2
df9599ced9faf4ad7dfee9900a50b02e7d491a32
f43981a26e74a014182a8d4ce316e767ee9c4e9ede43d2373ef8e9593fddff1e
GET /initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788232804016&widgets=r_sm&translate_to_lang=no HTTP/1.1
Host: wapi.lipscore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Cowboy
access-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE
access-control-expose-headers: X-Pagination
access-control-max-age: 86400
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-credentials: true
access-control-allow-headers: X-Http-Method-Override
cache-control: public, no-cache
content-type: application/json; charset=utf-8
x-request-id: eab5e7cb-744f-4a0c-b1d1-261fdf4fc5c8
x-runtime: 0.037409
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 14:33:05 GMT
age: 676687
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669991585.044328,VS0,VE1
vary: Origin
access-control-allow-origin: https://www.ark.no
content-length: 71
X-Firefox-Spdy: h2
wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788282116664&widgets=r_sm&translate_to_lang=no
200 OK 70 B URL HTTP/2 wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788282116664&widgets=r_sm&translate_to_lang=no
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash b88743027601f32dac43b3d024ea0f65
7ac9b02a284019b8fdf8ac8f4ee90d0ce2b77b99
4cc8ba5b7846d2769eb3091bcfa68c81c5fe3e0405bdb4a92cbc6dbefaa790a2
GET /initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788282116664&widgets=r_sm&translate_to_lang=no HTTP/1.1
Host: wapi.lipscore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Cowboy
access-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE
access-control-expose-headers: X-Pagination
access-control-max-age: 86400
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-credentials: true
access-control-allow-headers: X-Http-Method-Override
cache-control: public, no-cache
content-type: application/json; charset=utf-8
x-request-id: fae2ba74-6e8d-41b4-ab1b-978e4f555c8f
x-runtime: 0.030708
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 14:33:05 GMT
age: 873486
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669991585.044873,VS0,VE1
vary: Origin
access-control-allow-origin: https://www.ark.no
content-length: 70
X-Firefox-Spdy: h2
wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788252192506&widgets=r_sm&translate_to_lang=no
200 OK 71 B URL HTTP/2 wapi.lipscore.com/initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788252192506&widgets=r_sm&translate_to_lang=no
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7e88585de7034a97dc593eb45b58b375
6536cdccdade8835c6135c2ec0e82db98e9a4537
dc56bcf8054095a33b5b299f3f16981979a60a8b3acf19a1f329859373c8a4a8
GET /initial_data/products/show?api_key=6a2538253ca1d39fa2a02b28&internal_id=9788252192506&widgets=r_sm&translate_to_lang=no HTTP/1.1
Host: wapi.lipscore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: Cowboy
access-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE
access-control-expose-headers: X-Pagination
access-control-max-age: 86400
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-credentials: true
access-control-allow-headers: X-Http-Method-Override
cache-control: public, no-cache
content-type: application/json; charset=utf-8
x-request-id: 18ef8440-1691-40f0-b348-2b3b3a1ee89b
x-runtime: 0.015960
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Fri, 02 Dec 2022 14:33:05 GMT
age: 1013070
x-served-by: cache-bma1666-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669991585.045945,VS0,VE1
vary: Origin
access-control-allow-origin: https://www.ark.no
content-length: 71
X-Firefox-Spdy: h2
d305a42qfbmejg.cloudfront.net/0050569134731ED2B5E99E68572E993B
200 OK 95 B URL HTTP/1.1 d305a42qfbmejg.cloudfront.net/0050569134731ED2B5E99E68572E993B
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /0050569134731ED2B5E99E68572E993B HTTP/1.1
Host: d305a42qfbmejg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 95
Connection: keep-alive
Last-Modified: Tue, 22 Aug 2017 10:27:26 GMT
x-amz-meta-cb-modifiedtime: Tue, 08 Oct 2013 10:01:11 GMT
x-amz-version-id: FuCADyrwI6besNtevM079eZAcVYgsdsw
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 02 Dec 2022 08:22:22 GMT
Cache-Control: max-age=604800
ETag: "9591c410148e6883727c5339fd1c02cd"
X-Cache: Error from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kWpmyr_UAaZKCmtlnWWip8snnHkZT0jFDdaLTZyKLnywSSZdyrW-Gg==
Age: 22265
www.ark.no/availability/multi?hash=OTc4ODIwNTU3MzA2Miw5Nzg4MjAyNjIwMTU4LDk3ODgyNzgyMjcwODQsOTc4ODIzMjgwNDAxNiw5Nzg4MjgyMTE2NjY0LDk3ODgyNTIxOTI1MDY%3D
200 18 kB URL HTTP/1.1 www.ark.no/availability/multi?hash=OTc4ODIwNTU3MzA2Miw5Nzg4MjAyNjIwMTU4LDk3ODgyNzgyMjcwODQsOTc4ODIzMjgwNDAxNiw5Nzg4MjgyMTE2NjY0LDk3ODgyNTIxOTI1MDY%3D
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65206), with no line terminators
Hash 908d70cdc1f459383cf66d12afaa0515
498b4724765b6c7de6fb4b9d80458c64f31d33d7
b606d6eaedd8b1cd5d6d9d4aee746252a5dc664dba21b530abf8c95380436e77
POST /availability/multi?hash=OTc4ODIwNTU3MzA2Miw5Nzg4MjAyNjIwMTU4LDk3ODgyNzgyMjcwODQsOTc4ODIzMjgwNDAxNiw5Nzg4MjgyMTE2NjY0LDk3ODgyNTIxOTI1MDY%3D HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
CSRFToken:
Content-Type: application/json; charset=utf-8
X-Requested-With: XMLHttpRequest
Content-Length: 623
Origin: https://www.ark.no
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660; JSESSIONID=22031867C2E1A3593AB2D6521AC241F3; anonymous-consents=%5B%5D; cookie-notification=NOT_ACCEPTED; SRVID=P0; _sfid_5b1e={%22anonymousId%22:%229637bb118186518a%22%2C%22consents%22:[]}; _evga_4241={%22uuid%22:%229637bb118186518a%22}; _gcl_au=1.1.2080338249.1669991582; _ga_7BNLJ6Y01L=GS1.1.1669991582.1.0.1669991582.0.0.0; _ga=GA1.2.800098396.1669991582; _gid=GA1.2.68386139.1669991583; _gat_UA-21555284-1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:05 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
X-Frame-Options: ALLOWALL
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Expires: Fri, 02 Dec 2022 14:43:05 GMT
Cache-Control: max-age=600
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:05 GMT;path=/;secure;httponly
fonts.googleapis.com/css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic
IP
GET /css?family=Open+Sans:400,300,300italic,400italic,600,600italic,700,700italic,800,800italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 14:33:02 GMT
date: Fri, 02 Dec 2022 14:33:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.ark.no/static/header-search.min.js
200 OK 0 B URL HTTP/1.1 www.ark.no/static/header-search.min.js
IP
GET /static/header-search.min.js HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Date: Fri, 02 Dec 2022 14:33:03 GMT
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Content-Encoding: gzip
ETag: W/"622bb-184cb8916f0"
Last-Modified: Thu, 01 Dec 2022 02:34:30 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:03 GMT;path=/;secure;httponly
x.klarnacdn.net/kp/lib/v1/api.js
200 OK 0 B URL HTTP/2 x.klarnacdn.net/kp/lib/v1/api.js
IP
GET /kp/lib/v1/api.js HTTP/1.1
Host: x.klarnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Thu, 01 Dec 2022 15:18:50 GMT
x-amz-meta-lib-version: v1.10.0-1312-ga2cdf282
x-amz-meta-app-version: v1.0.0-23021-gb130872028
x-amz-version-id: 9U9cSNVpVr6YUI9Ni3D4sv0hEjOjryV6
server: AmazonS3
content-encoding: gzip
date: Fri, 02 Dec 2022 14:31:07 GMT
cache-control: public, max-age=600
etag: W/"887dcb5c7eeebbbe7a4dfc30e9d9af25"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uXkOm6nB4QN6eeKjyzyOk8IIf_QwkyFUbjsQOfwpGAU0fMGYyDGAGw==
age: 116
X-Firefox-Spdy: h2
www.ark.no/wro/ark_responsive.js?_=1669848036006
200 0 B URL HTTP/1.1 www.ark.no/wro/ark_responsive.js?_=1669848036006
IP
GET /wro/ark_responsive.js?_=1669848036006 HTTP/1.1
Host: www.ark.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ark.no/boker/Bryan-Ferry-Lyrics-9781784744830?utm_source=adtraction&utm_medium=Kelkoo+NO&utm_campaign=Price%20comparison&at_gd=9B65CC2C9A0D8A926EB5E4F1611B04EE30C44D29
Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200
Server: nginx
Date: Fri, 02 Dec 2022 14:33:02 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
cache-control: public, max-age=315360000
expires: Thu, 30 Nov 2023 22:17:29 GMT
last-modified: Wed, 30 Nov 2022 22:17:29 GMT
ETag: W/"2e0c6775a011b33b6c684f176933cc6b57d3e4b7"
X-Cache-Status: HIT
Content-Encoding: gzip
Set-Cookie: NSC_D18_MCWT_bsl_izcsjt_qspe=ffffffff09c6e4d645525d5f4f58455e445a4a423660;expires=Fri, 02-Dec-2022 15:03:02 GMT;path=/;secure;httponly
64.225.91.73
104.17.24.14
93.184.220.29
13.51.39.45
95.101.10.177
52.218.58.0
18.185.1.70
95.211.116.27