rouonixon.com/4/4295058/
139.45.197.238200 OK 2.9 kB IP 139.45.197.238:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5406)
Hash 64a3cbf7c82156288064548802d4098c
996a4c50badd1f6dc8930383be29730563534384
90d99754dff692d27a2dd752e649a6493c8c61cce82e0106a91ce65f5db0d38a
Analyzer Verdict Alert fortinet Malware
GET /4/4295058/ HTTP/1.1
Host: rouonixon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 22:01:01 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: c19a6312d4f4ba9cc638db72c728befb
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=a71261a5b9494b5bbd5b94d0e2911d22; expires=Fri, 06 Oct 2023 22:01:01 GMT; path=/
oaidts=1665093661; expires=Fri, 06 Oct 2023 22:01:01 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/
54.230.111.65200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 54.230.111.65:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: WAfwsRpp1S65KG3n_-aTuBqERarmJysxs1QOaUNNISHwzIHMIlUyiA==
Age: 108823
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13096
Expires: Fri, 07 Oct 2022 01:39:17 GMT
Date: Thu, 06 Oct 2022 22:01:01 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 4ab7d8709d334de0e46dcb86aabfbff1
f221138a8ad9d0bfa3c054370dcdb363a67dc310
b91d37f606eaf448b9c7dfc05566a11de004ce44503409e1a776288ee2622805
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B91D37F606EAF448B9C7DFC05566A11DE004CE44503409E1A776288EE2622805"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8953
Expires: Fri, 07 Oct 2022 00:30:14 GMT
Date: Thu, 06 Oct 2022 22:01:01 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: liJgwb19zrPrhy7QIfGvJdpaSEn6e6CWdEW8an5P1aXDeh9L+EaPsaZ2pzStm6nCLl2obud2zI8=
x-amz-request-id: 91GXZC4T3BG1PG5E
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 21:58:54 GMT
age: 127
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:01 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
rouonixon.com/favicon.ico
139.45.197.238204 No Content 0 B URL HTTP/1.1 rouonixon.com/favicon.ico
IP 139.45.197.238:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: rouonixon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rouonixon.com/4/4295058/
Cookie: OAID=a71261a5b9494b5bbd5b94d0e2911d22; oaidts=1665093661
HTTP/1.1 204 No Content
Server: nginx
Date: Thu, 06 Oct 2022 22:01:01 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 5690c00c386c753af6de22646db06434
aa5b0574bf8aa58bc5608d593e7dcba23100b454
741af8ab8cb30aac3a08fe0ae823577cb602c717416f9bcd52cef5b830b5fb0e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 22:01:01 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 06 Oct 2022 18:25:20 GMT
Expires: Thu, 13 Oct 2022 18:25:19 GMT
Etag: "aa5b0574bf8aa58bc5608d593e7dcba23100b454"
Cache-Control: max-age=591257,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7561ac591bc1b4eb-OSL
my.rtmark.net/img.gif?f=merge&userId=a71261a5b9494b5bbd5b94d0e2911d22
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=a71261a5b9494b5bbd5b94d0e2911d22
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=a71261a5b9494b5bbd5b94d0e2911d22 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://rouonixon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:01 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=a71261a5b9494b5bbd5b94d0e2911d22; expires=Fri, 06 Oct 2023 22:01:01 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
rouonixon.com/?z=4295058&syncedCookie=true&rhd=false
139.45.197.238302 Found 0 B URL HTTP/1.1 rouonixon.com/?z=4295058&syncedCookie=true&rhd=false
IP 139.45.197.238:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /?z=4295058&syncedCookie=true&rhd=false HTTP/1.1
Host: rouonixon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 427
Origin: http://rouonixon.com
Connection: keep-alive
Referer: http://rouonixon.com/afu.php?zoneid=4295058&var=4295058&rid=ksX-wKK1z8yLZCaWKyzJyw%3D%3D&rhd=false
Cookie: OAID=a71261a5b9494b5bbd5b94d0e2911d22; oaidts=1665093661
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 06 Oct 2022 22:01:01 GMT
Content-Length: 0
Connection: keep-alive
X-Trace-Id: 574e675aa7329c40225d17ebd3ae16e3
Link: <https://toapodazoay.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Referrer-Policy: no-referrer
Location: https://toapodazoay.com/?l=qCqekRDLtEBTXwP&s=602009051597115555&z=4295058&g=NO&svar=1665093661&ba=0&dm=0&ep=0&vi=0&vo=0&i18db=0&tr=default&svar=1665093661&ssk=efa3edada1e890b2948f154ff0862475&svarok=1&b=79056&oaid=a71261a5b9494b5bbd5b94d0e2911d22&rdk=rk3
Access-Control-Allow-Origin: http://rouonixon.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=a71261a5b9494b5bbd5b94d0e2911d22; expires=Fri, 06 Oct 2023 22:01:01 GMT; path=/
oaidts=1665093661; expires=Fri, 06 Oct 2023 22:01:01 GMT; path=/
syncedCookie=true; expires=Thu, 13 Oct 2022 22:01:01 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a11e3f0e4371609f69ddd8a94792c68e
b9bd9fd4e403416998fc7f0c99894d8f56e69113
6a28f8535acf9e9a2c8648c874030c11f4ef447b709bf007ee4af2c4632f0fc4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A28F8535ACF9E9A2C8648C874030C11F4EF447B709BF007EE4AF2C4632F0FC4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6780
Expires: Thu, 06 Oct 2022 23:54:01 GMT
Date: Thu, 06 Oct 2022 22:01:01 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
54.230.111.65200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 54.230.111.65:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 06 Oct 2022 21:01:58 GMT
Expires: Thu, 06 Oct 2022 21:07:51 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yIjaLBXPDJ3Bc7IVU73kzZyw6--luoHqULQovgg3Z4Cm6ONPldDpcQ==
Age: 3543
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 671e371ca656241a058e39f941f52b91
e2f8c597830dbf6798c6e67563b25f8f2c5b9761
c8cf9147235e2f68fb2a2aa6aaab3d8934bb8e1a2a19e94e8c9ef6310ffdf88a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8CF9147235E2F68FB2A2AA6AAAB3D8934BB8E1A2A19E94E8C9EF6310FFDF88A"
Last-Modified: Wed, 05 Oct 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10484
Expires: Fri, 07 Oct 2022 00:55:46 GMT
Date: Thu, 06 Oct 2022 22:01:02 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8be5570b9a5ca76c580da007a824b029
38840f2ac6476bdd5608121c5653e338c7ad9715
0b94e05080ef85432b1815eb3c6c7594c9613cfde1b51eeabee46d0d9fde64b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3332
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:02 GMT
Last-Modified: Thu, 06 Oct 2022 21:05:30 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 141c734e41a9beeced4a1791230670a1
5fd9aa956b14fb5b9412543d67bfb0866a675275
73897e3afce421211ccb3071a087bfc2ff24d12e41f3ab6306a9914e1a0c46c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "73897E3AFCE421211CCB3071A087BFC2FF24D12E41F3AB6306A9914E1A0C46C3"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14842
Expires: Fri, 07 Oct 2022 02:08:24 GMT
Date: Thu, 06 Oct 2022 22:01:02 GMT
Connection: keep-alive
unphionetor.com/vctx?t=56193
139.45.197.236200 OK 72 B URL HTTP/2 unphionetor.com/vctx?t=56193
IP 139.45.197.236:0
File type JSON data\012- , ASCII text
Hash 8a070ce695b592b64acb1098d3a2794d
f3034aeacd957675c00e4620dea40d6c957c0180
376170fd29d7bf0decdc9685c8710811e5370083644ff1fb7ac5b0ba72f747ce
Analyzer Verdict Alert quad9 Sinkholed
GET /vctx?t=56193 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://toapodazoay.com
Connection: keep-alive
Referer: https://toapodazoay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:02 GMT
content-type: text/plain; charset=utf-8
content-length: 72
access-control-allow-origin: https://toapodazoay.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: f361c294b9e67af15665ad4f8daaf25b
set-cookie: PRIT[56193]=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
toapodazoay.com/favicon.ico
139.45.197.155204 No Content 0 B URL HTTP/2 toapodazoay.com/favicon.ico
IP 139.45.197.155:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: toapodazoay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://toapodazoay.com/?rzi=4295058&rsz=4295058&rid=
Cookie: reverse=OCjvx1xYTF92y2nN1-P7ychg00ocBaUosWwE-Wvw5Xk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 22:01:02 GMT
strict-transport-security: max-age=60
x-content-type-options: nosniff
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=56193&bid=79056&aid=602009051597115555
139.45.197.236204 No Content 0 B URL HTTP/2 unphionetor.com/vbl?t=56193&bid=79056&aid=602009051597115555
IP 139.45.197.236:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbl?t=56193&bid=79056&aid=602009051597115555 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://toapodazoay.com
Connection: keep-alive
Referer: https://toapodazoay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 22:01:02 GMT
access-control-allow-origin: https://toapodazoay.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 5eac455c5a0ef7da52c7b5ee86dd0583
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.189.35.180101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.189.35.180:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: g246C7MaYwDBOiJ3aYUa2w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lHZUn77ooINaaoknqDFxyvn0s+E=
go.ad2upapp.com/afu.php?id=792658&rt=1
139.45.197.237302 Moved Temporarily 138 B URL HTTP/1.1 go.ad2upapp.com/afu.php?id=792658&rt=1
IP 139.45.197.237:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /afu.php?id=792658&rt=1 HTTP/1.1
Host: go.ad2upapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 06 Oct 2022 22:01:03 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: http://go.deliverymodo.com/afu.php?id=792658&rt=1
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *
go.deliverymodo.com/afu.php?id=792658&rt=1
139.45.197.236200 OK 737 B URL HTTP/1.1 go.deliverymodo.com/afu.php?id=792658&rt=1
IP 139.45.197.236:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash eb450db1f09dd3ccb5c14a7f3431c0e0
6d30535574b84160d4cc21e1d12d3bca8b7857f6
9e9c2feca1b07b7d24c9b69b7bed231215dc699e1961a87f26c56cecfff77a9a
GET /afu.php?id=792658&rt=1 HTTP/1.1
Host: go.deliverymodo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 22:01:03 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 37c131e816b3239eaf0429e3dd8fdf1a
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://www.lyca-mobile.no>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=861715a8c1be46a6919086ff1f30854c; expires=Fri, 06 Oct 2023 22:01:03 GMT; path=/
oaidts=1665093663; expires=Fri, 06 Oct 2023 22:01:03 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
unphionetor.com/vb?t=56193&bid=79056&aid=602009051597115555&tp=2012
139.45.197.236204 No Content 0 B URL HTTP/2 unphionetor.com/vb?t=56193&bid=79056&aid=602009051597115555&tp=2012
IP 139.45.197.236:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vb?t=56193&bid=79056&aid=602009051597115555&tp=2012 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://toapodazoay.com
Connection: keep-alive
Referer: https://toapodazoay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 06 Oct 2022 22:01:03 GMT
access-control-allow-origin: https://toapodazoay.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: a62881a082357a92f1715d6cf8148dc7
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5471
Expires: Thu, 06 Oct 2022 23:32:14 GMT
Date: Thu, 06 Oct 2022 22:01:03 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5471
Expires: Thu, 06 Oct 2022 23:32:14 GMT
Date: Thu, 06 Oct 2022 22:01:03 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5471
Expires: Thu, 06 Oct 2022 23:32:14 GMT
Date: Thu, 06 Oct 2022 22:01:03 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5471
Expires: Thu, 06 Oct 2022 23:32:14 GMT
Date: Thu, 06 Oct 2022 22:01:03 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5471
Expires: Thu, 06 Oct 2022 23:32:14 GMT
Date: Thu, 06 Oct 2022 22:01:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90038edb-d110-41cd-98e0-d47715e9135b.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90038edb-d110-41cd-98e0-d47715e9135b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2ac0ed19ef64f2f765ce7adb2a8fa7c
b6ea582befd01324dd456d59d3f610101dcf910c
d324c9f67b0efc38a935195076488dd0a62f61b893706ecf40ad1f2c5550a7d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90038edb-d110-41cd-98e0-d47715e9135b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11492
x-amzn-requestid: 7ac7e364-5204-4101-87f6-89fbdf3c5cb0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi_GKSoAMFdkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-4ae692e2617657225c88e5fb;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: jddNzOBqcXe8oUyYEEC82u0w35f4lAdk7Xf4ruu40Ngj2eY-r1Qyww==
via: 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 d8d9c12d1a621129f4bc739038e7c72e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:44:18 GMT
etag: "b6ea582befd01324dd456d59d3f610101dcf910c"
content-type: image/jpeg
age: 1005
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ed3fa86bbe319c9a2f81ff625e677cb0
e3d5210207f6ff922bc28e328285059c19a523a4
5919694bd942a4f25d5b7ffc3f8aee1af6cdb8461d4ba3dba9a2e72cf19164c8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7261
x-amzn-requestid: e1bdf299-b29e-4f58-9c8a-33f5dacdb081
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmirBELYoAMFfgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4b13-1969b32c6f4f7e5749e7caa0;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: V3fTgH8URZ1iWMxWPy49--20mtdJvMK6XTG_aPKk68pvwCxPl8lULw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 583992e175976bd59a21b4416890271e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:44:18 GMT
age: 1005
etag: "e3d5210207f6ff922bc28e328285059c19a523a4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F925ee025-58b0-436d-8cda-192ec7c44c33.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F925ee025-58b0-436d-8cda-192ec7c44c33.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae567a6922213a56f35ddc5d5cc1d0f1
fc49df76e8625d8542b0634bfcf12b8d6cda445c
135f25c0350ad26235447cdfba53a45e5d0f9f4c07a6c1e66dd2ed4a4a487f86
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F925ee025-58b0-436d-8cda-192ec7c44c33.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9995
x-amzn-requestid: 46d789c8-c830-4003-a752-472ee853a14b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi-GRZIAMFzag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-5d69f864308ea18c0440203e;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: i1F72tYrdjpymITjLWOWsfF_d-uZp_aXH-TWvE491s7IOtJZArpOqA==
via: 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 27fe6f224e0cfa3f3a446471ee256e56.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:44:18 GMT
age: 1005
etag: "fc49df76e8625d8542b0634bfcf12b8d6cda445c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F773e2560-6c32-4224-8404-2794a40799cd.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F773e2560-6c32-4224-8404-2794a40799cd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39cf77bd6009d3c538455b3846680278
ad0ed304e5173bdb8f08254c2e4a5032e8fcafa5
792997f1f9a485ca57d274c7899e4f526476bf15ed564a8b74d248c4458b188f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F773e2560-6c32-4224-8404-2794a40799cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9564
x-amzn-requestid: 38d87e57-3600-4e0e-bd24-a8f857800bc6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmhkGHtZIAMFz0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f494d-21b041d97b406dea36b9f35b;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:57 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: DNBjRFbLHdYGd4-klRgAiRXPCq2_uOMh5LGi9udoD1c0eSVXJ6h4xw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ca66331b52971370c4e54619e8a952cc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:44:18 GMT
age: 1005
etag: "ad0ed304e5173bdb8f08254c2e4a5032e8fcafa5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ptauxofi.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=qCqekRDLtEBTXwP&z=3683319
139.45.197.250200 OK 47 kB URL HTTP/2 ptauxofi.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=qCqekRDLtEBTXwP&z=3683319
IP 139.45.197.250:0
Hash a7763b06ddadbb83926f7437534583ec
31174f8d21fa3d8031a9c98a7d37e3b3c7e9c95c
4090a775daf6ced2b4658a62936ead29a7dbc3efd0a904c8f3b6350077ce049d
GET /pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=qCqekRDLtEBTXwP&z=3683319 HTTP/1.1
Host: ptauxofi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://toapodazoay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:02 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 13:19:37 GMT
etag: W/"6332f869-1a5ed"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
toapodazoay.com/?l=qCqekRDLtEBTXwP&s=602009051597115555&z=4295058&g=NO&svar=1665093661&ba=0&dm=0&ep=0&vi=0&vo=0&i18db=0&tr=default&svar=1665093661&ssk=efa3edada1e890b2948f154ff0862475&svarok=1&b=79056&oaid=a71261a5b9494b5bbd5b94d0e2911d22&rdk=rk3&mprtr=1
139.45.197.155200 OK 9.1 kB URL HTTP/2 toapodazoay.com/?l=qCqekRDLtEBTXwP&s=602009051597115555&z=4295058&g=NO&svar=1665093661&ba=0&dm=0&ep=0&vi=0&vo=0&i18db=0&tr=default&svar=1665093661&ssk=efa3edada1e890b2948f154ff0862475&svarok=1&b=79056&oaid=a71261a5b9494b5bbd5b94d0e2911d22&rdk=rk3&mprtr=1
IP 139.45.197.155:0
Hash a2e08448d58c2b8c18ac82876264ee2b
8ec3a1b1e2f1ebc02011f76d9231353ec7bd2dec
745f286d554f1023dafd1a28c8059fab93b6b6824d1b3ee323293a9ad9a19480
POST /?l=qCqekRDLtEBTXwP&s=602009051597115555&z=4295058&g=NO&svar=1665093661&ba=0&dm=0&ep=0&vi=0&vo=0&i18db=0&tr=default&svar=1665093661&ssk=efa3edada1e890b2948f154ff0862475&svarok=1&b=79056&oaid=a71261a5b9494b5bbd5b94d0e2911d22&rdk=rk3&mprtr=1 HTTP/1.1
Host: toapodazoay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://toapodazoay.com
Connection: keep-alive
Referer: https://toapodazoay.com/?rzi=4295058&rsz=4295058&rid=
Cookie: reverse=OCjvx1xYTF92y2nN1-P7ychg00ocBaUosWwE-Wvw5Xk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:02 GMT
content-type: application/json
vary: Accept-Encoding
x-powered-by: PHP/7.4.24
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: gzip
X-Firefox-Spdy: h2
go.deliverymodo.com/favicon.ico
139.45.197.236204 No Content 0 B URL HTTP/1.1 go.deliverymodo.com/favicon.ico
IP 139.45.197.236:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: go.deliverymodo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=861715a8c1be46a6919086ff1f30854c; oaidts=1665093663
HTTP/1.1 204 No Content
Server: nginx
Date: Thu, 06 Oct 2022 22:01:03 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
ocsp.netsolssl.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash dc9d013249152999f841c57a732149e1
cde9c6dcef482077ebb31131735547c820cf6976
e139178e9420b867862da5563779bfcce5b083db0368030e5fe321a629722009
POST / HTTP/1.1
Host: ocsp.netsolssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 22:01:03 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 06 Oct 2022 13:06:08 GMT
Expires: Thu, 13 Oct 2022 13:06:07 GMT
Etag: "cde9c6dcef482077ebb31131735547c820cf6976"
Cache-Control: max-age=572103,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7561ac67ab80b4fa-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 5690c00c386c753af6de22646db06434
aa5b0574bf8aa58bc5608d593e7dcba23100b454
741af8ab8cb30aac3a08fe0ae823577cb602c717416f9bcd52cef5b830b5fb0e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 22:01:04 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 06 Oct 2022 18:25:20 GMT
Expires: Thu, 13 Oct 2022 18:25:19 GMT
Etag: "aa5b0574bf8aa58bc5608d593e7dcba23100b454"
Cache-Control: max-age=591254,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7561ac67adf7b4eb-OSL
my.rtmark.net/img.gif?f=merge&userId=861715a8c1be46a6919086ff1f30854c
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=861715a8c1be46a6919086ff1f30854c
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=861715a8c1be46a6919086ff1f30854c HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:04 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=861715a8c1be46a6919086ff1f30854c; expires=Fri, 06 Oct 2023 22:01:04 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
3.120.194.163200 OK 32 kB URL HTTP/1.1 www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
IP 3.120.194.163:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1696), with CRLF, LF line terminators
Hash 5d2b2322de676cd7685d54904d305363
fd12379149b19ad702e769ab9c2a34f29cea542e
7723fc5a4a426fbef4e279bd5216eb15de7cf2e41bccf4bfc05ebd9e7ae28524
GET /nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1 HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Thu, 06 Oct 2022 22:01:04 GMT
Link: <https://www.lyca-mobile.no/nb/?p=170723>; rel=shortlink
Server: Apache
Set-Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; path=/; domain=.lyca-mobile.no; secure; HttpOnly;HttpOnly; Secure; SameSite=None;HttpOnly; Secure; SameSite=None;SameSite=None;Secure
newsim_tab=0; expires=Thu, 06-Oct-2022 22:11:04 GMT; Max-Age=600; path=/;HttpOnly; Secure; SameSite=None;HttpOnly; Secure; SameSite=None;SameSite=None;Secure
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 32046
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/simple-sitemap/lib/assets/css/simple-sitemap.css
3.120.194.163200 OK 1.8 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/simple-sitemap/lib/assets/css/simple-sitemap.css
IP 3.120.194.163:0
Hash 999af40135d16a152caaee08d90f72d8
7462b3f3d77148eb3601c302b182ba74265def75
a67e5b0779241cd4c4d99b2b47e4ead0f0ce2cb2ab2a1fb5464d62f5a543dd3f
GET /wp-content/plugins/simple-sitemap/lib/assets/css/simple-sitemap.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1763
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/custom-search-plugin/css/style.css
3.120.194.163200 OK 251 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/custom-search-plugin/css/style.css
IP 3.120.194.163:0
Hash 90fe42aaed8e5c04b824b1ca3cf3ea34
737cfe50f07686fb94ca84b3e836ac7d85d425d9
2a50c1b8ad7b97eea3b52d13f8623eeffe389262e3eccfb676eaacd15619345b
GET /wp-content/plugins/custom-search-plugin/css/style.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 251
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css
3.120.194.163200 OK 645 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css
IP 3.120.194.163:0
Hash c98f02f1afd562a7288aa2dc828e6186
d0f42b73794b0d3ffb9e3eb2d79218d14c40dc88
9fb5a2a2bea5341dd17ec72403d66f0903278030092ae829fe6bb4e23e6af725
GET /wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 645
Connection: keep-alive
d3uayxmzbnco7f.cloudfront.net/wp-includes/css/dist/block-library/style.css
54.230.245.188200 OK 9.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/css/dist/block-library/style.css
IP 54.230.245.188:0
Hash 8bbaa2afb3052ec24f99052f7009b2fd
ed459007fea1ba5161a5c743751e8d5b8da71009
9a9f0cc7d527e51b1ab8698d3ffb9a38a4dab817bee5e6e30d99ac2cb7f42c56
GET /wp-includes/css/dist/block-library/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:13 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:22 GMT
ETag: W/"ff1e4526d778743bf4370b47ff17e7c7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: JWhmbJ2r7aRQsAbH0Pfdet6a3v96xnkNHT7Cxicte8bvNFaaAU0sjQ==
Age: 64184
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/css/student-style.css
54.230.245.188200 OK 966 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/css/student-style.css
IP 54.230.245.188:0
File type ASCII text, with CR line terminators
Hash 64eaec02b035ad1628a7890becee905c
d9a7cd1dd7d3400c09e341e4bba580b80b0a41d9
370ce3c5280f78beb793f8773f3f74b225a2e54f35449df02aa8e181a4842255
GET /wp-content/themes/Divi-child/css/student-style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 966
Connection: keep-alive
Last-Modified: Thu, 18 Nov 2021 11:11:57 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 06 Oct 2022 04:11:21 GMT
ETag: "64eaec02b035ad1628a7890becee905c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 42HrJqrWI1n75t-1rpGZQ_OOpMkmsDjZLgN_KhlHPJvr9kG_HiRVwQ==
Age: 64185
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/flat-icon/flaticon.css
54.230.245.188200 OK 417 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/flat-icon/flaticon.css
IP 54.230.245.188:0
File type ASCII text, with very long lines (1000), with no line terminators
Hash 5e5c8838d3f45e076213445010a63eb8
6aedac1cb54fd087ea16c8bae11c0687bef29ce8
653364905a7234231046bf7134bfb1d2f8f957e10463e74d636e4465bf1b8139
GET /wp-content/themes/Divi-child/vendor/flat-icon/flaticon.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:43 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:19 GMT
Cache-Control: 2592000
ETag: W/"944296da525e8552632efd1dc0fd0480"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -60h0_fukwpEblLCio-zaVnXXfOYDBkTuu52BKX0uRbrsAloEEy6uQ==
Age: 64187
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/linear-icons/style.css
54.230.245.188200 OK 1.6 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/linear-icons/style.css
IP 54.230.245.188:0
File type ASCII text, with very long lines (7000), with no line terminators
Hash 9323c0847dc4d989d57dbfe4c8371c3d
84f560b9af809f58981d007d7f271035ca8c48f9
2e0d3bb03444560b02b5861b771809a3cec18831828e7ad92e6577b500dbc33a
GET /wp-content/themes/Divi-child/vendor/linear-icons/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:44 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:20 GMT
Cache-Control: 2592000
ETag: W/"e93b8e4cf5dc750d2d02a5b9d19f9706"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mhHUNL6hWA7enw7ICaX0BwPwUm55j79nxlcCIq1x0zSNwWJcku89uw==
Age: 64186
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/my-account.css
54.230.245.188200 OK 2.7 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/my-account.css
IP 54.230.245.188:0
File type ASCII text, with very long lines (12687)
Hash f5718d25c71dbb5f7cd9470deab0bdad
6134bb92065444f3f000c72f7f1018e073c84805
5059b4193791ac7738471d686f8877a6033ad23a0c683e356dacec4231a93c32
GET /wp-content/themes/Divi-child/my-account.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 18 Nov 2021 11:11:57 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:22 GMT
ETag: W/"5e2d79452ec87ed86924ea2519c341ef"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: aUepgNryr40rKYnJafdWWJ9imKkeJB4yxzGtFv2UJCDeFV60NcFafw==
Age: 64184
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/bootstrap/css/bootstrap.min.css
54.230.245.188200 OK 20 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/bootstrap/css/bootstrap.min.css
IP 54.230.245.188:0
File type ASCII text, with very long lines (65371)
Hash 7c030d3b2d27d89f1b538d519eaaf9e1
584e9ccd28461153840a165bfc96ad906e36855e
5dfcc470bb4e7fa19578c475a2c503f1e6f3fd0d389f0b1c7d392dd5a3512912
GET /wp-content/themes/Divi-child/vendor/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:42 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:20 GMT
Cache-Control: 2592000
ETag: W/"ac9de5b47373547a27390517f13fe21a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: H_J0PnQi8qKHa2Qw4CVz1lPRl0lvsw_zgZ0B8HHXmpmYv5xq4zEWNg==
Age: 64186
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/font-awesome/css/font-awesome.min.css
54.230.245.188200 OK 6.5 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/font-awesome/css/font-awesome.min.css
IP 54.230.245.188:0
File type ASCII text, with very long lines (28877), with no line terminators
Hash 77f7f7947689a7ecead6effeb51d2197
83aae18dc769b3c96e5f5a3582cd47f03f45eb3f
ef94a863d632373b1dd60314d07b503cbf5f4cafd604ba5b47123e04358c86a1
GET /wp-content/themes/Divi-child/vendor/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:43 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:20 GMT
Cache-Control: 2592000
ETag: W/"4f0c935c3631f777ea790a05a44c1744"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dz6YqJEOvpCeCw9I68tNaRgD6jr93hE0MVpTCBoltjd4WiwxmIN3kA==
Age: 64186
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/css/countries.css
54.230.245.188200 OK 1.6 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/css/countries.css
IP 54.230.245.188:0
File type ASCII text, with very long lines (15687), with no line terminators
Hash db832a6b114420c60de5afe00d73abdd
2c6aca377d38fbd6fb82bed0ac76fdd84a49ae0b
29c85b03ccb2acf4909bd7ac9a06f61f80def71d3f69371f74dcea5e08961e89
GET /wp-content/themes/Divi-child/css/countries.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:32 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:20 GMT
Cache-Control: 2592000
ETag: W/"31ec7a36deac6eda43f22dd60a421a40"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Sn68tZnmyjusfZU_kWpA6aTWeGPInlogQbxgn00yUISc7x-NFTv8tg==
Age: 64186
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/line-awesome/css/line-awesome.min.css
54.230.245.188200 OK 6.1 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/line-awesome/css/line-awesome.min.css
IP 54.230.245.188:0
File type ASCII text, with very long lines (27557)
Hash 91206de6ee8a367dca0862c7e4e09a67
0b6f1c9ab817389b4ba8ac98de022d65eb45103d
6a6c641a4c6fa5b558948c478591ab5bc02fb7f228bcef08048f8901708ffdef
GET /wp-content/themes/Divi-child/vendor/line-awesome/css/line-awesome.min.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:44 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:20 GMT
Cache-Control: 2592000
ETag: W/"4334c8c70998d81bde3e6765828811a6"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HVJkv6N6WKVgPKmO1sOs28q_3Xf7R1UeExbRM294qO4JHTX0MAaWww==
Age: 64186
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/style.css
54.230.245.188200 OK 44 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/style.css
IP 54.230.245.188:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 396e84f717c7c513d8dc10e72e77b825
8dee04a92e289eea3c3fd1ea03c96cf651f36faf
b1bcbf50f73abe849dafc4001f736d697c6afe528692a138e1a1ed086101936d
GET /wp-content/themes/Divi/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:55 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:22 GMT
Cache-Control: 2592000
ETag: W/"817303872fd1f4d16b34fcd79ab7d2d3"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wNckTCrg_KoGORIyjO6aMMedGvyH3_oDwkoWInWpM06oFcpEulehmQ==
Age: 64184
www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.css
3.120.194.163200 OK 8.4 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.css
IP 3.120.194.163:0
File type ASCII text, with very long lines (2363)
Hash 211e9acb7b08468bf462f3cc35d58dba
30b16e5f18fb53e5536e1dff154a4288dea94c41
a31c685f9330266e5b4a2fb4c7c6439f0550fefcdadebd2548f746387820359c
GET /wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 8384
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget.css
3.120.194.163200 OK 150 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget.css
IP 3.120.194.163:0
File type ASCII text, with no line terminators
Hash 641533dacb82a11aa947513a4892de5a
b77427d8626d847a80a762456f98beb3e64764b1
a9316286d70257c135d2a0aacf0bf2bc6acba8c1b5e487c97086459c04849155
GET /wp-content/plugins/email-subscribers/widget/es-widget.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:16 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 150
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/wp-store-locator/css/styles.css
3.120.194.163200 OK 4.4 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/wp-store-locator/css/styles.css
IP 3.120.194.163:0
Hash 29d83f16ddcd51bb2d8e29cfa6f0d970
d8aa3982c0c288b37f78f81c34eabfd24bd6bf84
5d585c7bba79f48f5ceaca987c6b08fde3da899d8512e1bf13f81a747d8db56d
GET /wp-content/plugins/wp-store-locator/css/styles.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:57 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 4432
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.css
3.120.194.163200 OK 552 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.css
IP 3.120.194.163:0
File type ASCII text, with very long lines (1756)
Hash cf85cdcf046f700267df1aaf104a2b39
852c3e9da0e745e68109819957b9ca45f4e55886
6f64c08cd674c507292ff081be79f54bb5bde34b90a25e2a619f4c7c0e1c421c
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 552
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/wpml-translation-management/res/css/admin-bar-style.css
3.120.194.163200 OK 113 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/wpml-translation-management/res/css/admin-bar-style.css
IP 3.120.194.163:0
Hash 8bd858d224c135ea74666d7f05df248e
5ef009ed8087ce73a4912d9749d7f041bc16961b
77e5f04f2f5d3a83c50b55652151182633e799d0daf2280c85e4650a0b06d8ab
GET /wp-content/plugins/wpml-translation-management/res/css/admin-bar-style.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:57 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 113
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css
3.120.194.163200 OK 933 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css
IP 3.120.194.163:0
Hash cb13db3c09d0076dc19a1dbf520c7827
c01159a4163902f3dc824ffade25949d3a9a4097
039804219c46536ac7cdc83d30e672a0467df803c5348a5733e18a687dc828b1
GET /wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 933
Connection: keep-alive
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes.css
54.230.245.188200 OK 5.8 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes.css
IP 54.230.245.188:0
File type ASCII text, with very long lines (859)
Hash 24b4f408c5c9536d13423c6caac18d98
cce1d06c1c713ccaa5a153a09a11f783426bfa87
b790b886f30e258b1d00250a08d46dfb238ee9279a86f973b72b88b47cb2c4e8
GET /wp-content/themes/Divi/epanel/shortcodes/css/shortcodes.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:49 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:24 GMT
Cache-Control: 2592000
ETag: W/"ea1a16f72cd2c8d66fdf5e8924f78eee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: GOy3LeOEF1KMwjq_0UKhuSc3-9sOZ8HYw27W3NNyLnTvHknNFOnhxA==
Age: 64182
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes_responsive.css
54.230.245.188200 OK 850 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes_responsive.css
IP 54.230.245.188:0
Hash fbb62c29d6e4d7b17fa04d46fac139b5
5c08f5b2f6fedcbd8a78088d593433690d4e1393
065866e03105a8f268a0c37dcc6214e0f00cf507eb3727136a158199a06a6fc1
GET /wp-content/themes/Divi/epanel/shortcodes/css/shortcodes_responsive.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:49 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:21 GMT
Cache-Control: 2592000
ETag: W/"58f7be607923d9296d5628a2d7469422"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: H6XcHe-6ultQ1VMwSn9h8F742GHr-OU8FXOb7hToCGUg0YJCm0Pe5w==
Age: 64185
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/styles/magnific_popup.css
54.230.245.188200 OK 2.0 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/styles/magnific_popup.css
IP 54.230.245.188:0
File type ASCII text, with very long lines (311)
Hash b8acebfb1dd95571e01287660eef0654
9797d73e3694a68722898012c86a5a086534254b
e539036c72ac35283cea7d16d53c4d15c630878e1b2f71862abd9e6ac7f1d672
GET /wp-content/themes/Divi/includes/builder/styles/magnific_popup.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:54 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:21 GMT
Cache-Control: 2592000
ETag: W/"6e30bbc36a055e4e39e3b1fe966ba0b2"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: J8lvjmt7Vcylx0Qtswrsnki1u_ZHZXVypmytONcyIVGE2Ff6rNRzkA==
Age: 64185
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/jquery.js
54.230.245.188200 OK 34 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/jquery.js
IP 54.230.245.188:0
File type ASCII text, with very long lines (31997)
Hash fa580727ea41c32e8215d66bafd4bf21
85a8ee9a64947370e4ffefee78e50ad3572e9bb4
4f33b7a89520525fbf481a7105ffaead71b777834c998275df5fbcdabfb16ddf
GET /wp-includes/js/jquery/jquery.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:44 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:21 GMT
ETag: W/"49edccea2e7ba985cadc9ba0531cbed1"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1Ydx6NtlPn6GaYh08eHL-m3oN6qc6bRQsrP8EgbL72hEW_U5BR3fpw==
Age: 64185
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/jquery-migrate.js
54.230.245.188200 OK 7.8 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/jquery-migrate.js
IP 54.230.245.188:0
Hash 3093432186c8bcc37faf3b55555e3bea
69eb16e23bc27dd122a996236f34a7a059e915b7
ab21f15ae1bc851a0e0aa9e40e3abd8e2622388eae5fc9c796dbc1a3b49a98b8
GET /wp-includes/js/jquery/jquery-migrate.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:44 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:21 GMT
ETag: W/"6c57b762589f13ea5b3579ca5e6c369b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ii3ZUf7OPbG_nn10upf66AJW6cl-N35jt0zu7efatbvhMAhwa_GA0g==
Age: 64185
www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/public/css/registration_portin_facility-public.css
3.120.194.163200 OK 5.3 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/public/css/registration_portin_facility-public.css
IP 3.120.194.163:0
File type ASCII text, with very long lines (1963)
Hash 724d0ef3e346ba677dd5987ce62cb5dc
e73088909d38fc9a932e679f3a4545297899f26e
0021049ab8e09b826fbef1cc74d8ce9794a2a9baa88a793e0773ac3e67f43073
GET /wp-content/plugins/registration-portin-facility/public/css/registration_portin_facility-public.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Mon, 18 Oct 2021 05:15:42 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 5306
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/testimonialslider/css/jquery.bxslider.css
3.120.194.163200 OK 885 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/testimonialslider/css/jquery.bxslider.css
IP 3.120.194.163:0
File type Unicode text, UTF-8 text, with very long lines (3002), with no line terminators
Hash 3a8400b070b74650e9c7927466b226cf
7669a8def8bca883fbbceed367b8037f35fd1968
0d23aabe78d874edcef092bcc9611dd3c3e8656a03c58ad6e01d6d98ad9165ed
GET /wp-content/plugins/testimonialslider/css/jquery.bxslider.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 885
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/res/js/jquery.cookie.js
3.120.194.163200 OK 1.1 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/res/js/jquery.cookie.js
IP 3.120.194.163:0
Hash d2c9e62ba741c5dc1cd388f4cb4322c1
57ad65e2ffdb51d2751763b8bee9ad67f372e2a7
0ad3c73c3eaf52b9deb1941a12db921002dbfb2326ca007c6838d9a936a31b02
GET /wp-content/plugins/sitepress-multilingual-cms/res/js/jquery.cookie.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1109
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js
3.120.194.163200 OK 155 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js
IP 3.120.194.163:0
Hash d3453f9d25d07fae0b6919f644988971
dba21fa483385a873ca38d99bf2433b77dd17fb0
f0fa5140f70a19702bdf6bbf7d495857cadc158e12975983212a36068cab241d
GET /wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 155
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/custom-search-plugin/js/script.js
3.120.194.163200 OK 506 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/custom-search-plugin/js/script.js
IP 3.120.194.163:0
Hash 99ad164c48c30d4ea72bdb15d6efe582
f5186aa17398f4034199e9f58308fcf753dfe467
9fb201a9702f44e2d06fd910dc024bb0707badce77b09613754e3ff07038cee1
GET /wp-content/plugins/custom-search-plugin/js/script.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 506
Connection: keep-alive
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/core.min.js
54.230.245.188200 OK 1.8 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/core.min.js
IP 54.230.245.188:0
File type ASCII text, with very long lines (3706)
Hash 2dfc75d1bde5694c9a7251be387dfb68
de175436809efa25c5ca31d9a4a17bb3bd971fe8
5d37554226ae12cf5949303b5eeee39fb55374c2c3b1a6c42231a520203ae22f
GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:47 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:22 GMT
ETag: W/"96ff65c925bbaf3e4e7891a7ca1f2b1f"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oFXlxqgxf0ZfELTogwh-6yi90htWQjBVMG5WchFh_LEfNDtdu6mksg==
Age: 64184
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/widget.min.js
54.230.245.188200 OK 2.6 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/widget.min.js
IP 54.230.245.188:0
File type ASCII text, with very long lines (6614)
Hash 5037f1411a7f3ad64087e583c6a16f75
9a912c67adf0275f11fce68fab075b2f9bbcb6d0
535696b88e931f34bcd3b8c13845888d13ec0a164fd15732160130d11697dd78
GET /wp-includes/js/jquery/ui/widget.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:47 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:21 GMT
ETag: W/"00dedd56324da186973a3b2cc5e8023c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rrZZKA6zTEEBVP6LUiGyXzff8HoLVry5A9bbXMiQG4RHzlwKD65EoQ==
Age: 64185
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/mouse.min.js
54.230.245.188200 OK 1.0 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/mouse.min.js
IP 54.230.245.188:0
File type ASCII text, with very long lines (2927)
Hash 74ef4f5701d84662f65216914e4c46d5
781536f44fa7912d1c8efc854b35b5401643d614
9d7bf170212eb66ef5d8d7e49daa593e2b9c08fc0ce3476581195ac9e9fc59e4
GET /wp-includes/js/jquery/ui/mouse.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:45 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:22 GMT
ETag: W/"b317c4ccc9aa140339ad72fa27c77266"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Cf0EhPbMVimegrKMTpPfHixkC3s0E3T0ZNka8F06tRVxoHy1a78w0Q==
Age: 64184
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/sortable.min.js
54.230.245.188200 OK 6.5 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/sortable.min.js
IP 54.230.245.188:0
File type HTML document, ASCII text, with very long lines (24670)
Hash 6c9392c280cf2930c34d56c75c64ef42
5035cd48977bc48ae9adedd8d0bf0f6245d394bb
add9147d9712f88b638257998bedc3076c806d341a24070629ae9c375ec4e35b
GET /wp-includes/js/jquery/ui/sortable.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:47 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:22 GMT
ETag: W/"efa8171f2226a422003417095d8549dd"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: C-jbFkWpWadZgkTY7U-kQAcjPTedFTm2Iz-B9KuZdldzbEG79T1LXw==
Age: 64184
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/theme.js
54.230.245.188200 OK 12 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/theme.js
IP 54.230.245.188:0
File type ASCII text, with very long lines (348)
Hash 6b4f6db9a35719e173346e2a0e1edd9e
8fd55f444d9a96100cf9744f34d77206c1bb631b
cc493836c7e8a941f90db68bf5acb3174c402a863b75f47836ab87bca396c021
GET /wp-content/themes/Divi-child/js/theme.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 15 Feb 2022 04:49:45 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:22 GMT
ETag: W/"d056838fef7522c86d80206e3384d0d3"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: reTVA5XyIgGqGuUieZE5Gzv57qj8PFhKZqpLhVhUtLgaIEJ8Hlno3A==
Age: 64184
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/countries.js
54.230.245.188200 OK 3.4 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/countries.js
IP 54.230.245.188:0
File type ASCII text, with very long lines (7323), with no line terminators
Hash ce631c866acebac167ce4bf1f7fded2d
e899df3bc3cbac21a1803fcde3e386c79d75197f
dea4c86d9f7a084c6d1bf25a8b472d1ce2e4119d57fdd405175952e6f9a31f35
GET /wp-content/themes/Divi-child/js/countries.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:22 GMT
Cache-Control: 2592000
ETag: W/"41a7f1d63de5dc564de5d2e96ba33db8"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dL710gljrleXaPs_dLMwwFB5dVZol020oL1p92uovWPA3Fdntb7kLg==
Age: 64185
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/jquery.validate.js
54.230.245.188200 OK 7.4 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/jquery.validate.js
IP 54.230.245.188:0
File type Unicode text, UTF-8 text, with very long lines (22821)
Hash 9401e10d65ca64d56e2f51acd923f1df
cdf2f89c1c4465c510fe3a1efac742a63f5c88cb
bfadd1add5cdf172f2f886a242c4cf052966578bc23853a457d26c4be781f07b
GET /wp-content/themes/Divi-child/js/jquery.validate.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:22 GMT
Cache-Control: 2592000
ETag: W/"50d37feba6afb8e8ee322a7b7871550e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AsOLEM9dDnOPWbzxpiChskayEU99wDtaV3Mz9d8gYtn2ZXy_sOV3Kw==
Age: 64185
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/jquery.marquee.js
54.230.245.188200 OK 2.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/jquery.marquee.js
IP 54.230.245.188:0
File type ASCII text, with very long lines (1219)
Hash 951037766e2281b8091afae4d43094dc
71d0680da431135f4b61f7e4ce6600480b632fba
0be16d4ec106cf60c6e5dad835eaf4e94b8467916f132f57c6d9014ce5f32d40
GET /wp-content/themes/Divi-child/js/jquery.marquee.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:23 GMT
Cache-Control: 2592000
ETag: W/"a2ac3fef53d651ac8562f1412b28b359"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PpWjikYTe6AEj4bflSGYxMgvpgURH2nPYae4peg-W52W9bdos5dxZg==
Age: 64184
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/additional-methods.js
54.230.245.188200 OK 5.9 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/additional-methods.js
IP 54.230.245.188:0
File type Non-ISO extended-ASCII text, with very long lines (2940)
Hash 08f2ea9635d6597491e21ddb047ae7bb
de9abc8812c6e2cad88f1ad2b3925eedcd020646
2bb9b564f374ea0b3c5e91c757ed20f887336e8667a08df4c1a6b6b090d40887
GET /wp-content/themes/Divi-child/js/additional-methods.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:40 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:22 GMT
Cache-Control: 2592000
ETag: W/"074966e2db7e1caa07fd7d0bac25e844"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9eKn6rzVPVB45GSM_rmpXn7kNO0yvC6Eip17uYFD6cRs-ulANUZMig==
Age: 64185
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/selectize.js
54.230.245.188200 OK 18 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/selectize.js
IP 54.230.245.188:0
File type Unicode text, UTF-8 text, with very long lines (3172)
Hash 6a5747703a9024d56eeb73b205e0e9a2
9abc974cf91ff7d22a4abd751b8c578bac913371
2f3dd92f28ce05de0b0324d7654b6203d6236499cae0a9e15bdd6f3fba4705a7
GET /wp-content/themes/Divi-child/js/selectize.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:23 GMT
Cache-Control: 2592000
ETag: W/"0941c2f6d545a74b27f2ccdbe7bdc931"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: H0oHv6j1Zo9GH2e72Gm4L5-POXc8EqikeeMnahF4YG1EUOaERz3JfQ==
Age: 64184
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/roaming_rates.js
54.230.245.188200 OK 8.4 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/roaming_rates.js
IP 54.230.245.188:0
Hash 3585c236554af2ca05eb640f3ce827c4
048929cb9ab3496701f43338798669792e6292c7
9c1119017039ec09af1d58643b955b1d02a2764ab34c6e41677055171c3e1659
GET /wp-content/themes/Divi-child/js/roaming_rates.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 15 Feb 2022 04:49:50 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:22 GMT
ETag: W/"456f0e734f90e7e3ccc2835bf708306d"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Jh9Xn0EEUxw6F6RyfSl7TwyjhzTGh5Pj0oD_Bm52wnDanao-SVWZkw==
Age: 64185
www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/vendor/moment.min.js
3.120.194.163200 OK 17 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/vendor/moment.min.js
IP 3.120.194.163:0
File type ASCII text, with very long lines (51679), with no line terminators
Hash 174f71b5e532bbee86b7e51ed2d11a82
abbec602df1ebf647b88d18cbd1dd162d7f1f6ad
34084291d4c3f11af71b71f00c969a81380daa917e3e90ad1a08e836ced4e5f9
GET /wp-content/plugins/registration-portin-facility/vendor/moment.min.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 16804
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/public/js/registration_portin_facility-public.js
3.120.194.163200 OK 3.8 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/public/js/registration_portin_facility-public.js
IP 3.120.194.163:0
Hash 01179df43b1213ab1106977745e9b906
9e3ea134dd317bc273af92dc88c44d52a3e73e64
1afad8260106e543ae55da914750a910dcf8bcf16327589f1d9d9ef21713ef2d
GET /wp-content/plugins/registration-portin-facility/public/js/registration_portin_facility-public.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 3837
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.js
3.120.194.163200 OK 383 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.js
IP 3.120.194.163:0
Hash 6c0ff919dd37f978ea0c1511f47c132c
86c6f73c7f81b5121d666d6968d7debd26c7ab17
790c5d96a9a9be889b5b7113a7b22868d8803355f7e215f8c7481945850b6de5
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 383
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi-child/js/lyca_login.js
3.120.194.163200 OK 2.9 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi-child/js/lyca_login.js
IP 3.120.194.163:0
Hash 139463c6855f901b3896c4958ef4392c
b0fb2a97f006267aae2924021731fe5527d8e2c7
2801af8987984312d4009ff3f665af9da6ad50faa59367fd9cb0405a03ab9fae
GET /wp-content/themes/Divi-child/js/lyca_login.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:57 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2926
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/testimonialslider/js/jquery.bxslider.min.js
3.120.194.163200 OK 5.0 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/testimonialslider/js/jquery.bxslider.min.js
IP 3.120.194.163:0
File type ASCII text, with very long lines (19040), with no line terminators
Hash e85a20dd54c74b8868f84e0a6bba50ea
bada9d0db6d46c9ec2d9b8c62fbcab76abe79aa8
127606d08299d86a42cff2be53731e7f2b437d64331bb2ed94b974bafac0fab0
GET /wp-content/plugins/testimonialslider/js/jquery.bxslider.min.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 4966
Connection: keep-alive
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/register.js
54.230.245.188200 OK 2.8 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/register.js
IP 54.230.245.188:0
Hash c4809eeda8892858cd67813a34bd7245
d8f9e216700e599aefce656c5f650f1d7ba00d3f
0fb5d551ada0f209a9779911320d5e896ffcc467ab871353e95832f00cbae781
GET /wp-content/themes/Divi-child/js/register.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 20 Feb 2020 06:59:06 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:22 GMT
ETag: W/"a4c47e49f1b792925db5d2ee23d17942"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MgVyBhH6LsvyURCgZ7sZhGNrExsx-BoSSN-FBaZ9aEwAFT9a_HBRYg==
Age: 64185
cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.37/js/bootstrap-datetimepicker.min.js
104.17.25.14200 OK 8.3 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.37/js/bootstrap-datetimepicker.min.js
IP 104.17.25.14:0
File type HTML document, ASCII text, with very long lines (32010)
Hash 52b30dc893d14995df58d34ecc5a9f7f
e360fd76bd734011484ed559fd1780e31949353f
eab9dfacfbbb59d341c72a7fe6dd9c12ea4e87f20ccf78bf13bd98ffeab243d4
GET /ajax/libs/bootstrap-datetimepicker/4.17.37/js/bootstrap-datetimepicker.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 22:01:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 8256
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d8e-9443"
last-modified: Mon, 04 May 2020 16:06:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1211902
expires: Tue, 26 Sep 2023 22:01:06 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=38JFOncwcFCQKtaFkD15RJvtFRzLx%2F%2BdaLPpU3CUeFzMRQLEyAMYdMFgRgzX%2FYQLImhJKuukznNY0dEQG4qaFat8UPjZnwIDfHq3MFhLM%2FWPY1Uub6slv1UnETWh9vdpCcrnLcT6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7561ac74d8b1b4fa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/bootstrap-datepicker.js
54.230.245.188200 OK 8.0 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/bootstrap-datepicker.js
IP 54.230.245.188:0
File type ASCII text, with very long lines (1634)
Hash fdedcc7fd2fb469bfa1df8a06e7e09ab
a2b3ac5b70a679d311edfb1da0fbaa8cd47174bd
721a4a0358dba4e85a344e2446df3bee4b319b425c3ff14ef62f1ed3e981efe0
GET /wp-content/themes/Divi-child/js/bootstrap-datepicker.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:40 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:23 GMT
Cache-Control: 2592000
ETag: W/"8260533cc46428d9b49e3f137ef2efe7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xLT6-hyFCouJb8NlMejpwulEbB7PNGN18Saf5SjBDE45ZIWRfC1paQ==
Age: 64184
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/bootstrap.min.js
54.230.245.188200 OK 9.9 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/bootstrap.min.js
IP 54.230.245.188:0
File type ASCII text, with very long lines (32033)
Hash 746ff4703657ce801984eabf217e2da7
a901e84fbeb4dc5855fb822d98d348725ff3dd3a
1ff1432b808e8d9263b2e87f84d444d25d902033176df5adbce349d4cbc13d1a
GET /wp-content/themes/Divi-child/js/bootstrap.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:40 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:24 GMT
Cache-Control: 2592000
ETag: W/"5869c96cc8f19086aee625d670d741f9"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: x_32PApQw9OCpa989HdwvimVgZfiMWEdXZUW2FNeIYz90GTpM4GMlw==
Age: 64183
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/custom_validate.js
54.230.245.188200 OK 391 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/custom_validate.js
IP 54.230.245.188:0
File type ASCII text, with very long lines (391), with no line terminators
Hash 9f4e4bb98cbc4c5fe6ddfc05c7c48095
e87b52374a265e471462e297fad51a39763f2d3b
d48f2166d51e343d4d91b80bf04c970d3d10603d8a6fc5060a53b73c2a8b70cf
GET /wp-content/themes/Divi-child/js/custom_validate.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 391
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 06 Oct 2022 04:11:24 GMT
Cache-Control: 2592000
ETag: "9f4e4bb98cbc4c5fe6ddfc05c7c48095"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PnaxRsD-EiYQP45sDauiZbKq__kczJuZHCVN_sFRtGWKhASo0CMasw==
Age: 64183
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/tab_custome_function.js
54.230.245.188200 OK 497 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/tab_custome_function.js
IP 54.230.245.188:0
File type ASCII text, with very long lines (1045)
Hash 0d9940739863c08755bd6f02069459af
4026b8e0dfc4678de7cee25bfc7a72477e53ce70
1dfff59a8db555caf80801642c545695c90f8471c520559d3841d38e54f7c5b5
GET /wp-content/themes/Divi-child/js/tab_custome_function.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:23 GMT
Cache-Control: 2592000
ETag: W/"5ad0eb623e462948f1ac5a7f6174f22a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UAELbZuUQoLiRiq51b8EIQbHbxJtkAdB5uRuEHCuIZpszXKAK4P1vw==
Age: 64184
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/custom-ajax-script.js
54.230.245.188200 OK 6.5 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/custom-ajax-script.js
IP 54.230.245.188:0
File type ASCII text, with very long lines (507)
Hash 733c71fde7a49792bc47701477611ae6
767c996c0903b01faf3634d633b213b31336b691
05e83320625d8851d3aefbdb6479b8285fabb05b4834bf6eb204e97a1ef9e08f
GET /wp-content/themes/Divi-child/js/custom-ajax-script.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 07:45:53 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:23 GMT
ETag: W/"2348f035e1ba7ad6b8df58dbbbd5818e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ZNnakGkJS0B_ziORsC-z27v3KSvY_XnYEQ4ewPlF2lij8co7nh0JXA==
Age: 64184
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/nc_ajax_script.js
54.230.245.188200 OK 7.1 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/nc_ajax_script.js
IP 54.230.245.188:0
Hash 72863e8f3aaafad05134917aff9732d1
4f07aa78d425ece28cc9d011d5dce6fa9a36427d
21d47b27a2b5439a6e80dbcff9d5d531080a992fa52c0493a82786c03829807d
GET /wp-content/themes/Divi-child/js/nc_ajax_script.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 05 May 2022 06:47:46 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:24 GMT
ETag: W/"9353377fb1b76e466a7ac26634defc75"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bslRlmwXjXzAEKcZPMRVSPoRn0hZOQD_DdOEdw7_auiIHt_qzrqmvQ==
Age: 64183
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/wp-embed.js
54.230.245.188200 OK 1.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/wp-embed.js
IP 54.230.245.188:0
Hash a3cacf7987efe841394ab0c091d18aca
bfff11917aa7b1fb6729f2b9911ac55df2d076c6
da9848b6b2d331952a400655c534955a9245565503996fbdfe4a1c6f4d6ca200
GET /wp-includes/js/wp-embed.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:49 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:23 GMT
ETag: W/"23e24e824f384c5eb11e73576b4ac93c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SRdmQMVy78S1uUu_zfZfqiQrczk15zx8dyDl4OZZs2v28TWf30valw==
Age: 64184
www.lyca-mobile.no/wp-content/themes/Divi-child/js/personal-details.js
3.120.194.163200 OK 1.1 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi-child/js/personal-details.js
IP 3.120.194.163:0
Hash 1be41f82152e3a9f3dfb3765d314e9a1
50f7c3ad307d0cedf238b0e373116943dd0e0d30
8c4b153673568490f76767839493b7011d1fc1befc88025df6c1a9f6b58dc747
GET /wp-content/themes/Divi-child/js/personal-details.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:57 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1052
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi-child/css/datepicker.min.css
3.120.194.163200 OK 1.9 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi-child/css/datepicker.min.css
IP 3.120.194.163:0
File type ASCII text, with very long lines (15319), with no line terminators
Hash 0cd6045269849e0f5ef595828d512ae4
35fa424ca6bfb09fa6b66d99edc3a22a7bda8f05
5b007aa8be84adf6a8a09166efcb085efdf4e252a834b13908a0d58708fa290b
GET /wp-content/themes/Divi-child/css/datepicker.min.css HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: text/css
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1895
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/frontend-builder-global-functions.js
3.120.194.163200 OK 2.5 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/frontend-builder-global-functions.js
IP 3.120.194.163:0
Hash 9d72b69bced27d34ea9ed566ecd17462
3649a5d95346ab4c1a5d5da15ecf8e05ab8ba9ed
4ac3bc0988ec7ebf426c9e152daf84e76eea339bc79a92981695bdaca5ed809e
GET /wp-content/themes/Divi/includes/builder/scripts/frontend-builder-global-functions.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2477
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget.js
3.120.194.163200 OK 1.2 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget.js
IP 3.120.194.163:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (1311)
Hash 59066978220b7f1b7b925b47ff5e46ab
bab1c3c14f4b9649864cb46c1c96250ccdc95024
5fcbd0de5e51104006331763dcf23084505ea9d876e0904815e603e5e0230e90
GET /wp-content/plugins/email-subscribers/widget/es-widget.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:16 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1182
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget-page.js
3.120.194.163200 OK 1.2 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget-page.js
IP 3.120.194.163:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (1362)
Hash 6bccf039385dadace241e9d47cdc2a0b
5cd85d67c6422cedfb4f5ac10df547928d37f7fb
c27abc361c9a25a87199ebfd36119491c278a33c46bbf06aff3c15d2a9560e0e
GET /wp-content/plugins/email-subscribers/widget/es-widget-page.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:16 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1229
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/lyca-marketing/assets/js/marketing-script.js
3.120.194.163200 OK 893 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/lyca-marketing/assets/js/marketing-script.js
IP 3.120.194.163:0
File type ASCII text, with CRLF line terminators
Hash 81ac1712537559cdec808b954a7490d8
33f1f5ea6a334887020b71577c72953afda05148
30aabbaab74bd6f87cefb998ef1d09a36cb7f36d5c7ddd4bf519ba1059494e8f
GET /wp-content/plugins/lyca-marketing/assets/js/marketing-script.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Wed, 05 Jan 2022 02:41:28 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 893
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/jquery.mobile.custom.min.js
3.120.194.163200 OK 2.9 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/jquery.mobile.custom.min.js
IP 3.120.194.163:0
File type ASCII text, with very long lines (7687)
Hash a7bc9bd6d7a143a13d7072ee406c8692
42a46eca1ae6c1b50602917cc52b4b61e13f24f7
63b52e7a859b8943c2d1255b30e1d3b8fa262285797a69098def3967d112ad5b
GET /wp-content/themes/Divi/includes/builder/scripts/jquery.mobile.custom.min.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2872
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/js/custom.js
3.120.194.163200 OK 12 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/js/custom.js
IP 3.120.194.163:0
File type ASCII text, with very long lines (372)
Hash fc1ad29248d5c0b974cca2d3687eadd1
854c8b173575abe5b2da21b079276788c31149ae
cef043ceda82b48795b26c0873caaeebbc5bbe7c3aa3d1bfd9339dd7010a208f
GET /wp-content/themes/Divi/js/custom.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 11702
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/jquery.fitvids.js
3.120.194.163200 OK 1.3 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/jquery.fitvids.js
IP 3.120.194.163:0
File type HTML document, ASCII text
Hash 31bd6f103266422712d7f21fd221259c
478fe2a563f8edd20468c878ad0c8dabcc506159
4f7cd006453252967505df8f72f72333de4ba5b2734773aaeca3f250fcf0b5e1
GET /wp-content/themes/Divi/includes/builder/scripts/jquery.fitvids.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1298
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/waypoints.min.js
3.120.194.163200 OK 2.7 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/waypoints.min.js
IP 3.120.194.163:0
File type Unicode text, UTF-8 text, with very long lines (8668)
Hash f7d4b6ef09365ba331dda4e3648c05fc
f852f915b87c84eb1c3590829e8d9f5c97fbe620
61e3dba589d367496e409a346677b89db66ee134e7370f06a8629ce0492eb6c6
GET /wp-content/themes/Divi/includes/builder/scripts/waypoints.min.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2698
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/jquery.magnific-popup.js
3.120.194.163200 OK 8.4 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/jquery.magnific-popup.js
IP 3.120.194.163:0
File type ASCII text, with very long lines (21123)
Hash dc28e6a88fd9930fed07d0de45b3a0ea
6181203be9d6e425d138533edaf3121c1a1968b1
497c6f92880fe8e1e12aff1c833910958d7b46379980da1ded707c39a2ca33ee
GET /wp-content/themes/Divi/includes/builder/scripts/jquery.magnific-popup.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 8382
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget-customize.js
3.120.194.163200 OK 1.7 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/email-subscribers/widget/es-widget-customize.js
IP 3.120.194.163:0
Hash e5c46c336e35e9bd8dbf55e4d0fc96c4
e4c2bc6c99aade340b1c1484096c79a970b3f019
544db6899780bebc6a30b6e86f3c89023f2b67b9ad9509258739b5005d16c000
GET /wp-content/plugins/email-subscribers/widget/es-widget-customize.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1657
Connection: keep-alive
www.lyca-mobile.no/wp-content/themes/Divi-child/js/forget-password.js
3.120.194.163200 OK 1.3 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi-child/js/forget-password.js
IP 3.120.194.163:0
File type ASCII text, with very long lines (359)
Hash d9496518c9ca0e9e5de95991baffb89f
175543365d682ab41f7ec04640a5bd7a49312998
d224f7efdd43321dbd29ab5d128a5ab30e8eaca50879978ddbdb68a85647dafa
GET /wp-content/themes/Divi-child/js/forget-password.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 05 May 2022 06:42:29 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1287
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/lyca_cart/resources/functions.js
3.120.194.163200 OK 5.7 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/lyca_cart/resources/functions.js
IP 3.120.194.163:0
Hash b9ac12921009f1f1dbfedd0490977909
185eccf2caf963e90a9c38ed91631dfbc01f10c4
7cbef667cc2558cdf293a423c6e37d899ef8710e599d6abc8f660fb8bbc9e710
GET /wp-content/plugins/lyca_cart/resources/functions.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 29 Sep 2022 10:37:11 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 5698
Connection: keep-alive
www.lyca-mobile.no/wp-content/plugins/rocket-lazy-load/assets/js/12.0/lazyload.js
3.120.194.163200 OK 3.6 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/rocket-lazy-load/assets/js/12.0/lazyload.js
IP 3.120.194.163:0
File type ASCII text, with very long lines (351)
Hash b53e31a064849939c6a41bb35108dbbe
6153863799c6e67ee3b6340ffca9574ebd995b31
790d3da167b670f0ba09a9f30368be07cdaeffc32f9cd79648be9c892c78fcd8
GET /wp-content/plugins/rocket-lazy-load/assets/js/12.0/lazyload.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 3633
Connection: keep-alive
www.googletagmanager.com/gtm.js?id=GTM-PNQZL82
142.250.74.168200 OK 88 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PNQZL82
IP 142.250.74.168:0
File type Unicode text, UTF-8 text, with very long lines (40170)
Hash af7ecc9a999dea6888ca48e1e6f97929
7185e1ad7c1255ef2444a5ec32d9f0b80ddda7b3
6e510ce0b3c4c9dd7e44f3843cfb898981d38c275b5da1e4f9e32cfcaf0a57d4
GET /gtm.js?id=GTM-PNQZL82 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 06 Oct 2022 22:01:06 GMT
expires: Thu, 06 Oct 2022 22:01:06 GMT
cache-control: private, max-age=900
last-modified: Thu, 06 Oct 2022 21:29:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 87855
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/frontend-builder-scripts.js
3.120.194.163200 OK 31 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/themes/Divi/includes/builder/scripts/frontend-builder-scripts.js
IP 3.120.194.163:0
Hash faf26a56e651031ab3c631961808985a
d6c1f352c66f23c36af8c32ffe09c8bda908285b
7cccf0da734eccae2b86e7638e6c6ca280bed97e23741dcdc3db06ca2b6cc707
GET /wp-content/themes/Divi/includes/builder/scripts/frontend-builder-scripts.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 31305
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 62d21942a57a6e94393a813078f61d6b
066fe5682486a2012eda4b2e0898ef66ef9b025f
a1f3543f1796d8d6de9e9c8f49944cd5df2d490d895fd1f9ac49442a396ee72b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 06 Oct 2022 21:36:53 GMT
Server: ECS (bsa/EB21)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 40aIkHOzB-V2QgnMXWHuk84w8CE3mAaay45O2dv_E8cdZfvVyiC3dA==
Age: 1453
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 5eee2baed68ec922370bd283860860fd
7d1e7dfdb9577dcd11587bb162e17c56eaf8e4c4
7931afabb9286276c385564aa73ed67927d31e12ab35eb92da84048a7896f27d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05101008/logo-new-br.svg
52.219.46.11200 OK 3.9 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05101008/logo-new-br.svg
IP 52.219.46.11:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3871), with no line terminators
Hash 600e6fd78377375dfc3cc9b9dadbfdfa
e3bb1098f191d2f9bc63a6402f5ae40d80edcd2c
b5260409c7187bbfd8d84eccf7bf1ccf96644798946c228af252775f7cb0cc13
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05101008/logo-new-br.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: R/lHek/cO1oLKBnO2kCX3tCZNPZeCTA3FpxYKTIUyPespLZzxufAmUrh5PEjpYBO4pgybht4ynM=
x-amz-request-id: EAMPGCYP7MT2NF5C
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Thu, 06 Jan 2022 06:57:00 GMT
ETag: "600e6fd78377375dfc3cc9b9dadbfdfa"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 3871
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/08/30120503/germ-one.svg
52.219.46.11200 OK 2.0 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/08/30120503/germ-one.svg
IP 52.219.46.11:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 27398d9974a03682bca55a5d1c83cfc0
011509bac7ec598f0ba6ff215d92487fc8965bac
28a2f89175ec3599ef375767ea6996f5bb73d38e5a54025deb7f0370505c382f
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/08/30120503/germ-one.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: DoymB+eWLMA7mmbalFYnF4zS4pq0kuYoyYmV4nma8v+hHO86wPvYVedmE7igUJOih0rh3dxPVlI=
x-amz-request-id: EAMXN9KY1P45CGN3
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Thu, 30 Aug 2018 12:03:58 GMT
ETag: "27398d9974a03682bca55a5d1c83cfc0"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Fri, 30 Aug 2019 12:05:03 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 2016
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/fonts/RobotoCondensed-Regular.ttf
54.230.245.188200 OK 170 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/fonts/RobotoCondensed-Regular.ttf
IP 54.230.245.188:0
File type TrueType Font data, 18 tables, 1st "GDEF", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.Roboto CondensedRegularVersion 2.137; 2017RobotoC\012- data
Size 170 kB (170284 bytes)
Hash a5a6b71255dc832da585d5c94fa1a115
6a632e0244ae68e70aeb8c8a5d3b360e1648712b
6a2cfb7e61dd09d77526fd314b256894094f96e3a6f3149d9f8000c1132ef4b8
GET /wp-content/themes/Divi-child/fonts/RobotoCondensed-Regular.ttf HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.ms-opentype
Content-Length: 170284
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:32 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 06 Oct 2022 04:56:51 GMT
Cache-Control: 2592000
ETag: "a5a6b71255dc832da585d5c94fa1a115"
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RhuZFZurx8DHG6IJ0DXY_shFsoPoA5psr1M3O8p1l5cMun_xj8jgYw==
Age: 61456
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/fonts/RobotoCondensed-Bold.ttf
54.230.245.188200 OK 170 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/fonts/RobotoCondensed-Bold.ttf
IP 54.230.245.188:0
File type TrueType Font data, 18 tables, 1st "GDEF", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.Roboto CondensedBoldRoboto Condensed BoldVersion \012- data
Size 170 kB (169800 bytes)
Hash 36b5da0333389306669655a13f2209ad
8354979a1c3d7911df925e3b57d8c99398d54020
03b4e8042b9af4bf3349428fa734ed583f2d5d83287e1f42cf4d514c909146ef
GET /wp-content/themes/Divi-child/fonts/RobotoCondensed-Bold.ttf HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.ms-opentype
Content-Length: 169800
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:32 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 06 Oct 2022 04:56:51 GMT
Cache-Control: 2592000
ETag: "36b5da0333389306669655a13f2209ad"
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1D-E9fKbvZnJ8bZuFT7fgCGcqDlDOm2S9DxWEbujNyjbJy9d9Sve3Q==
Age: 61456
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/linear-icons/Linearicons-Free.woff2?w118d
54.230.245.188200 OK 22 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/linear-icons/Linearicons-Free.woff2?w118d
IP 54.230.245.188:0
File type Web Open Font Format (Version 2), TrueType, length 21780, version 1.0\012- data
Hash 03e91f122aa5fd425abbe23c85546eb0
c87a3db06c5db4e75e639382f174eafa439aeb27
296945e5922e764eef17b1b4a3ee3e60dc202b3c7f074150b62158915bf74e33
GET /wp-content/themes/Divi-child/vendor/linear-icons/Linearicons-Free.woff2?w118d HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 21780
Connection: keep-alive
Date: Thu, 06 Oct 2022 09:20:55 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:44 GMT
ETag: "03e91f122aa5fd425abbe23c85546eb0"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
Vary: Origin
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: u1hk2pvzHROLIvWttOhNwFrpGPMxv7X7wNWr7VmsMcv_idgzOCyi2Q==
Age: 45612
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3
54.230.245.188200 OK 72 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3
IP 54.230.245.188:0
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
GET /wp-content/themes/Divi-child/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 71896
Connection: keep-alive
Date: Thu, 06 Oct 2022 09:20:55 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:43 GMT
ETag: "e6cf7c6ec7c2d6f670ae9d762604cb0b"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
Vary: Origin
X-Cache: Hit from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: uBsQqu-ilD0XWFOhuOs54MR9KUeCkIFwC5rqogh4W6cMfYK-JR4TDA==
Age: 45612
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/core/admin/fonts/modules.ttf
54.230.245.188200 OK 83 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/core/admin/fonts/modules.ttf
IP 54.230.245.188:0
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, modules \012- data
Hash 87a9fcfa516cd7576d52480b0bb21dae
7b2b31c6f1e91d53b76daad7fedea802592e4da4
c683211e591f2048ec4a840586e4f849894c8a57c147f23d7b5652d61c1260e2
GET /wp-content/themes/Divi/core/admin/fonts/modules.ttf HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.ms-opentype
Content-Length: 82920
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 06 Oct 2022 04:56:51 GMT
Cache-Control: 2592000
ETag: "87a9fcfa516cd7576d52480b0bb21dae"
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PRC5qq7wkSH1oRCK_gF5iZDk7yTGon9eGHJ8O1xPh8wbMNE0ZXf94Q==
Age: 61456
s3-eu-central-1.amazonaws.com/lycamobilespain-website/lycamobile-es-cms/wp-content/uploads/2018/06/25105546/activate-your-sim.svg
52.219.46.11200 OK 1.9 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobilespain-website/lycamobile-es-cms/wp-content/uploads/2018/06/25105546/activate-your-sim.svg
IP 52.219.46.11:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1914), with no line terminators
Hash f6081e075c11d4ee9be3b614cdcab433
5b46fc85e5698f59567f0446251f52e1207e8d72
6369d8666187a0119acd2ad3f3bff8472f2cc720649cfa8966fc23719078dd39
GET /lycamobilespain-website/lycamobile-es-cms/wp-content/uploads/2018/06/25105546/activate-your-sim.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: g5QuurnuYjhL4T8DyHZQeuN/FJcXgRQN40/MMbTWN1VyXO3gAPQYIMvcDxxJ+I+5OFz9WhEoIg4=
x-amz-request-id: EAMWR7R8T25NWNPW
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Mon, 16 Jul 2018 16:00:42 GMT
ETag: "f6081e075c11d4ee9be3b614cdcab433"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 1914
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/06075441/thumbnail_livechat-home-new.png
52.219.46.11200 OK 4.6 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/06075441/thumbnail_livechat-home-new.png
IP 52.219.46.11:0
File type PNG image data, 169 x 101, 8-bit/color RGBA, non-interlaced\012- data
Hash 997934aedeaea00686b8b3ddae955e3f
6f1ab00c2308c25108bd68368cbacfc6410bdc43
d9d42de448b8e9c5ba116ccd270456367179a295167174953421fafafb5a932b
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/06075441/thumbnail_livechat-home-new.png HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: DtIF7/QAT2eTsrfELn40DcvUHQqKeTsWaDbOO8vra2/o+zvW0Vbg0y/TbhUy56NvAN81Q4yInbg=
x-amz-request-id: EAMY66S9T43C29TD
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Wed, 06 Oct 2021 07:51:37 GMT
ETag: "997934aedeaea00686b8b3ddae955e3f"
Cache-Control: max-age=31536000
Expires: Thu, 06 Oct 2022 07:54:41 GMT
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 4589
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/quick-topup.svg
54.230.245.188200 OK 794 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/quick-topup.svg
IP 54.230.245.188:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (568)
Hash cf1e3a7aa04f38e1620d798558f2d606
2c9ad3c5756a3992d80838aea679b7d13fe2e17b
aa9f77e1ebcb1a541bf88994cecc556f52cf27c8176ee8ae14789f38ff55de84
GET /wp-content/themes/Divi-child/img/quick-topup.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 794
Connection: keep-alive
Date: Thu, 06 Oct 2022 07:37:57 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:38 GMT
ETag: "cf1e3a7aa04f38e1620d798558f2d606"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dqTksqOedNrHM4aYne3fMc2wOFvfOslWdAL7eodgGr-trAw4PwgRKw==
Age: 51789
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/roaming.svg
54.230.245.188200 OK 1.2 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/roaming.svg
IP 54.230.245.188:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 85a478244d79ab2a1e7caa74f73e89f7
eb1209457084c01a4a6685a268d4e495ea67a5d0
cab3eb0e16aec816bf8f738a6fbe7de33f67f2703c00fd13213385314f497f60
GET /wp-content/themes/Divi-child/img/roaming.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 06 Oct 2022 07:37:57 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:38 GMT
ETag: W/"babdb0858ab2d63fb92348873cb8ddba"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1cCs--1EWpOIHJJegz7Y3mMskZenJjn3gb2zjqSnsnhGNTvDjAtRZw==
Age: 51790
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/international-1.svg
54.230.245.188200 OK 2.0 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/international-1.svg
IP 54.230.245.188:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e241cbde90ecbd5a21a851ec1c0d806e
66e85e599a77f141b5b51f7f56fda9a05c348631
bfe76a79be638c8c32cc23e2cc26ac45743aeaf3c16c6851e10d3683f56d17be
GET /wp-content/themes/Divi-child/img/international-1.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 06 Oct 2022 07:37:57 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:37 GMT
ETag: W/"5056ce6c6883a123509cb1cca4031429"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: r02Ht_pRQ3x77cvEU3qYA_X8OJcxltUTSRfb9HBRFdE-77_SMAwFsg==
Age: 51789
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/faq.svg
54.230.245.188200 OK 785 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/faq.svg
IP 54.230.245.188:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b97c7e4122996f575e68c944d87095d8
d8a4695fe27064b95e4918099aaa3c2be1821f32
42ab849ec5e04c9bad98c11a45f2363492238778f29a64b0a9dc5896dcc90892
GET /wp-content/themes/Divi-child/img/faq.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 06 Oct 2022 07:49:58 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:36 GMT
ETag: W/"6f426cc5e8b051ff22516894f385ff7b"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cXYgfmlG9j2cZdiXKArj4koqzfS_lKtO0baEs9WjdtBMU8AoJDV7XA==
Age: 51069
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/store-locator.svg
54.230.245.188200 OK 958 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/store-locator.svg
IP 54.230.245.188:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e21443e37ca744aa7d29d2829b46591a
ca3158f56f1c6e1de9564583c398e78d097ed4c4
d07b478885d58c759e9494a4756dbec42b616fc46a14d5b5eed6bbc0dae35352
GET /wp-content/themes/Divi-child/img/store-locator.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 958
Connection: keep-alive
Date: Thu, 06 Oct 2022 07:49:58 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:39 GMT
ETag: "e21443e37ca744aa7d29d2829b46591a"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PXtY4JwwXpnGhWWkY0RQ1XOHwCzz74xGO4Q_jFguy-j9oExunsPANg==
Age: 51069
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/buy-bundles.svg
54.230.245.188200 OK 531 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/buy-bundles.svg
IP 54.230.245.188:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash aef142490302120ac015789bd33c80b8
3d42c7c7cc66add811d9cfe6e35dfe75a70fc342
e6ec4a71d5f1a50ca83d0d116c01c63d259da6e058557d6e25a11d09b92e8ffe
GET /wp-content/themes/Divi-child/img/buy-bundles.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 06 Oct 2022 07:37:57 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:33 GMT
ETag: W/"5fb98b5d9331ffac000aa38ccddcc058"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ke_vijNiQBFqPH5MxwusjERPcic0QVwMu20ZIMZFvD9qTvVcRCbV8g==
Age: 51789
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/mobile-settings.svg
54.230.245.188200 OK 1.2 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/mobile-settings.svg
IP 54.230.245.188:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3b9d0b16e49f983feb68c71c0c435ec4
e6d82cd2b529e1ec219aa8503080b5815a3d271f
9e17a9e0e46f86caaac0774b886dce68c39a3de44469efb7088200e449343d22
GET /wp-content/themes/Divi-child/img/mobile-settings.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:37 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:58:28 GMT
Cache-Control: 2592000
ETag: W/"94e63e235909be075a2884c96906c941"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HUtPQMyMMo_G_bEvnprPDRXDdxge4-lGVlESKVI1V1j6XEqmDesOGw==
Age: 61359
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/contactus.svg
54.230.245.188200 OK 646 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/contactus.svg
IP 54.230.245.188:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b127a283d70bf1c4ecbfab932da2aa69
90be95e05ee092b3b78059ec4d8451468c0f3b64
9d9ef67ed9cdf2eae32c4f8ffb5a1c154501573a36d37bfd0ca910e1e8ae5ca2
GET /wp-content/themes/Divi-child/img/contactus.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 06 Oct 2022 07:37:57 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:36 GMT
ETag: W/"be5d61340a17d803b181cf8d2cee077c"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mcN4xhgnVde0ONymrxSEvzY09xBRFi845IMTY2azT-Balk7hy34t8w==
Age: 51789
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/favicon.ico
54.230.245.188200 OK 1.2 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/favicon.ico
IP 54.230.245.188:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 2eed3e79d00bb4bc002d5cff16db207b
dc4cdaf71a4d8fa44eabfe5530403988de1d2bf8
0ed56bfe2a738fc69afc0c991d8c65abe9f5a2204c9a44fa0570e5bd8e47466f
GET /wp-content/themes/Divi-child/img/favicon.ico HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/x-icon
Content-Length: 1150
Connection: keep-alive
Last-Modified: Mon, 18 Oct 2021 07:31:03 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 06 Oct 2022 04:12:18 GMT
ETag: "2eed3e79d00bb4bc002d5cff16db207b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: aiel2tOhhp8tK8rL_KCMFIb55XBygCW44RkDJi1GNHFK-gDlp3NYdw==
Age: 64129
www.lyca-mobile.no/wp-content/uploads/json_uploads/errorhandle.json
3.120.194.163200 OK 4.1 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/uploads/json_uploads/errorhandle.json
IP 3.120.194.163:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1442)
Hash 9c8e140cc95739dfbfa7e6bb132e890c
6995f8ca8d9fb5a68cd8fae4460502bc73fa2c92
3906c7164353e4321efbc4637888bd17c95938e6329f2df1f19c444350f7bbad
GET /wp-content/uploads/json_uploads/errorhandle.json HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Type: application/json
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:58 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 4099
Connection: keep-alive
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102139/header-fb-new.svg
52.219.46.11200 OK 8.4 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102139/header-fb-new.svg
IP 52.219.46.11:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (11262)
Hash 852b81efbbae0dcfd857f87d6c98189a
d8022ff32daac638cb94b4bd15ec7e7891eaefcb
58480bbcf53220a5a596bebc793c65cd7a22b77f49e4329c0f5f7c8ed8da125a
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102139/header-fb-new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: oZJ+R/YOWmbA6/0G6P7Iti1exUj9ry2wsus75cA5tDL2PHMZwMJ9m4SAOOT/kTKKhL5AJ4qy4oA=
x-amz-request-id: EAMWZB4AFKYNPBY7
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:37 GMT
ETag: "852b81efbbae0dcfd857f87d6c98189a"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:39 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 8393
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102144/header-twitter-new.svg
52.219.46.11200 OK 15 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102144/header-twitter-new.svg
IP 52.219.46.11:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (20393)
Hash 1b0607b1b648a1f756b1419bbbfaacd9
fd5d74112b7172baffc62e024b91f398f0d280cd
2fedb7c9aad7c7e9473f4ce37fe4ffb0f23ed83dbc188a14aad73de5e858e542
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102144/header-twitter-new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: qRt8Byq+qkqr1YfQFJhsZuhC+uNyfVXJj44Z7FWae2WNiFIwavrzrq+zFDhSHvQnrt/98c9Y5I8=
x-amz-request-id: EAMKG80Y61FMMD52
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:42 GMT
ETag: "1b0607b1b648a1f756b1419bbbfaacd9"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:44 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 15288
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/07072809/breadcrumb_newbrand_be.png
52.219.46.11200 OK 24 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/07072809/breadcrumb_newbrand_be.png
IP 52.219.46.11:0
File type PNG image data, 1920 x 140, 8-bit/color RGB, non-interlaced\012- data
Hash ad2b8da460e7f9706da7008773b132b3
5f7ddfbb68f26ba1fb5f0769dca8f88bc01d7829
a55b84d8174fc43917cae9c623df2b1758d7c05493b0881252a55ca87dcfdbf0
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/07072809/breadcrumb_newbrand_be.png HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: MTo3WFu7xxh+N/CTm3Hff+HWQtOEt88TBY60WBJu3AQVHllNAP6fL2Ywob8zJ/BI8DKkzpYl9zM=
x-amz-request-id: EAMNFP6TN8TRZ712
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Thu, 07 Oct 2021 07:25:03 GMT
ETag: "ad2b8da460e7f9706da7008773b132b3"
Cache-Control: max-age=31536000
Expires: Fri, 07 Oct 2022 07:28:09 GMT
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 23600
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102142/header-insta-new.svg
52.219.46.11200 OK 18 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102142/header-insta-new.svg
IP 52.219.46.11:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (23958)
Hash 9a55d81cd439e49798109bd463dd1f1b
1afef555c1541124cc9b6c85ae258a72b6818ec1
61f9f838ab4dd5a633b7ae5329af4d2acae8045d2e0e667fd73a3f116b00dab6
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102142/header-insta-new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: BTynvZ/WXnXm7xATpZ4ZiIHSwhEnbscroZ7GcED7ykgiGAGjuDTRPcHZbdnu6LJeL0uVZ6bkqZI=
x-amz-request-id: EAMSD0FE7ZQQP8DJ
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:40 GMT
ETag: "9a55d81cd439e49798109bd463dd1f1b"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:42 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 17998
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102146/header-youtube-new.svg
52.219.46.11200 OK 18 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102146/header-youtube-new.svg
IP 52.219.46.11:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (24655)
Hash 74d50291fad9e577ecbde522f9882145
7dcf477169f8d5a1d0ee5dd970c10da54cde13f1
a9fc0811ec1d0594b50275f6bb1e275a61144d25f8885333fd5172d34b7f8655
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102146/header-youtube-new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: DSUhVO76TRgkjS5sVkncu5Niql7hWbAdH2g36CzAOh7Z0HrcURTiVXf+ItnAA62VOqpm0LQ0O6w=
x-amz-request-id: EAMNJD7EEDZ7C5G5
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:44 GMT
ETag: "74d50291fad9e577ecbde522f9882145"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:46 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 18504
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/11065021/european-union_new.svg
52.219.46.11200 OK 726 B URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/11065021/european-union_new.svg
IP 52.219.46.11:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2193), with no line terminators
Hash 300ca84c801a3dff40b9f85bd024669a
d6a6b760a33b8db7e552cb63ad7ca064ef4fae70
9de40f884583d6bc5bbd40bd5b74d0b20c853538aa6a3fabf4144c23ef674983
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/11065021/european-union_new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: qMvLeihsX/ezCkuUAPHarCCawwyZr03hXwuXGNWw6B2BId/javzEtLqOmtV9kNgterYEowHgx+w=
x-amz-request-id: A89TQP8QKM8RCR96
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 11 Oct 2021 06:50:14 GMT
ETag: "300ca84c801a3dff40b9f85bd024669a"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Tue, 11 Oct 2022 06:50:21 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 726
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 8c3fe3c89c79a4054c16712a696aa6bf
4b9a02355dd0151d090fdb49ddd34019b4d054b6
2ea7f348184b0e12eb811fcb8bf4cf0158f8eb45eb74cfad4d89c1eb51afce3e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Thu, 06 Oct 2022 20:49:40 GMT
Server: ECS (nyb/1D18)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fDrRTqAcxZrAClUM2VCxCiMo02BmJOTaVC_3JbQFZV48HA7s5O1tcA==
Age: 4287
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 8c3fe3c89c79a4054c16712a696aa6bf
4b9a02355dd0151d090fdb49ddd34019b4d054b6
2ea7f348184b0e12eb811fcb8bf4cf0158f8eb45eb74cfad4d89c1eb51afce3e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Thu, 06 Oct 2022 20:23:55 GMT
Server: ECS (nyb/1D1A)
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: i2Edroy8Fytkh4wnQOr9ySYhkpsxI2rNalRTDTGIOdTBnjjvz10GVA==
Age: 5833
consent.cookiebot.com/uc.js
104.84.152.233200 OK 32 kB URL HTTP/2 consent.cookiebot.com/uc.js
IP 104.84.152.233:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Hash 3c4e162c3321e924fd3d27dc6d095f08
9d2027cab49aaf66a89a521c16133ba818ff3d9d
425713b3dc09882376e466e3e6798ade37f8262d82138cf0e11ecbe92e2d565b
GET /uc.js HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 04 Oct 2022 09:02:48 GMT
accept-ranges: bytes
etag: "0ac913d0d7d81:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 31718
cache-control: public, max-age=500
expires: Thu, 06 Oct 2022 22:09:27 GMT
date: Thu, 06 Oct 2022 22:01:07 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 96423370618a4e8cef79532d1bebee5b
4c0a07466a54f9355819062fb899f86f21716876
1c6ca25ca73d54ab1186a44ef9b3d3ac75d936a4acc11e4d3dbb103a8cb150e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05104722/Belgium1.png
52.95.143.5200 OK 3.1 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05104722/Belgium1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 05b0430105aa244028af3d4812cfa862
9eab0b05bd6168d57cce062705562be4feb82f6f
58c034ac6bd3419e05ea16f2ebfbc4682fb594f29a4e2d5d794bcfec5b0993fb
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05104722/Belgium1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: gmR/n4A/cyjgVcPzdOPVIEix1Vt24Yge+kczQdW0l9dG7eWMt/bnC33unc6DUbCuFdugcT5eDmU=
x-amz-request-id: A89VPWTQFKBRJV21
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:28 GMT
ETag: "05b0430105aa244028af3d4812cfa862"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 10:47:22 GMT
x-amz-version-id: xPo84QQnS78MMDy3NywneivcwR8deWQC
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3134
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111007/Cyprus1.png
52.95.143.5200 OK 7.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111007/Cyprus1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a07ecb819e9041e7aaa1ba734b925e10
3d0a03e7fb4b990a576f3ebe8d07d1cd58ccf0a1
5a7be5dbead23ec1820ad5e47695ccac7082151c22b119af4aa025b7c235596d
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111007/Cyprus1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: EdvWb/lfdje/lcWfyCRioII8D6OlZWFJNch4XTsMF49TQAeeinJJex4nIhNWWwMJn1vQZDZNeRg=
x-amz-request-id: A89Y5CZYG49H6H93
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "a07ecb819e9041e7aaa1ba734b925e10"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:10:07 GMT
x-amz-version-id: clCEU3GO5qQuk5QhAMDw0v0RnkhC3c6d
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 7763
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 8c3fe3c89c79a4054c16712a696aa6bf
4b9a02355dd0151d090fdb49ddd34019b4d054b6
2ea7f348184b0e12eb811fcb8bf4cf0158f8eb45eb74cfad4d89c1eb51afce3e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Thu, 06 Oct 2022 20:48:16 GMT
Server: ECS (nyb/1D2F)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: JV4XN2wrZQKDbb2bGt4H6F108Od7CNbV6hx1oz6QJf1KaV21Pho3YA==
Age: 4371
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05105612/Bulgaria1.png
52.95.143.5200 OK 3.6 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05105612/Bulgaria1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a988ef19186744cb92fbb0b29fd46956
f44b4bca4cbeb6af59414d97e487de1177106ac5
c0a8e61b25f5d6a64c9f45deda84748f57d25db76108601fca0a705188664d3c
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05105612/Bulgaria1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: ie1JYAKZ2gP/bE3K/QvGD7b1VmV5IyqM+EnkwfRlSH4W+vyrQcUmgUu4rN3gu7JBfdP+sue/YuY=
x-amz-request-id: A89PSGJ0J0853FWA
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:28 GMT
ETag: "a988ef19186744cb92fbb0b29fd46956"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 10:56:12 GMT
x-amz-version-id: rhxVu5a7c0dtIOfOVBZfLRNgZLQcxKbW
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3556
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 8c3fe3c89c79a4054c16712a696aa6bf
4b9a02355dd0151d090fdb49ddd34019b4d054b6
2ea7f348184b0e12eb811fcb8bf4cf0158f8eb45eb74cfad4d89c1eb51afce3e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Thu, 06 Oct 2022 20:27:38 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: DzG0ty7__ETGUm4UWq_cDo9ZT6_VC3v4HFZG1sNS53gb7CGLXm5B_w==
Age: 5609
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112541/greece1.png
52.95.143.5200 OK 4.4 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112541/greece1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 9f96f9ec7e6c20ae3e2fffad9e2d5935
d20f275da48cf934daae0622fba00ac789996576
a5bf00e8fce671f3814258643082db0739a309e5c4f9900e34e08eb12203ab14
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112541/greece1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: z8CHR2EDzlvXfRYYeYQdjexqukgttJVhPQV6mHFecAxmH5v/zTmF+QHI7+rGDS7JeIYi205qFkg=
x-amz-request-id: A89MXH8AV9RJ4MXX
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "9f96f9ec7e6c20ae3e2fffad9e2d5935"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:25:41 GMT
x-amz-version-id: Q7IT_DK9DqY8YXPoF3wYqidHHps8u5mo
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 4373
11029147.fls.doubleclick.net/activityi;src=11029147;type=invmedia;cat=nolyc0;ord=2623627268248;gtm=2wga50;auiddc=65109662.1665093667;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1?
142.250.74.70200 OK 471 B URL HTTP/2 11029147.fls.doubleclick.net/activityi;src=11029147;type=invmedia;cat=nolyc0;ord=2623627268248;gtm=2wga50;auiddc=65109662.1665093667;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1?
IP 142.250.74.70:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (652), with no line terminators
Hash 12f0da98e568dc3d2a8f0de5ef8133c6
34fe3f7bee9f7dab74529c4afab07e4555c8ad7e
c3041c6e40a1d28aef7dc3b5d05f1d236d1132a22c69fcbf84f075a1503d7ba7
GET /activityi;src=11029147;type=invmedia;cat=nolyc0;ord=2623627268248;gtm=2wga50;auiddc=65109662.1665093667;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1? HTTP/1.1
Host: 11029147.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 22:01:07 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 471
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 06-Oct-2022 22:16:07 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 8c3fe3c89c79a4054c16712a696aa6bf
4b9a02355dd0151d090fdb49ddd34019b4d054b6
2ea7f348184b0e12eb811fcb8bf4cf0158f8eb45eb74cfad4d89c1eb51afce3e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Thu, 06 Oct 2022 21:21:03 GMT
Server: ECS (nyb/1D29)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5jpIrexiE8T-bAC8iByMOgN1l7B890xqVOqoVkNteyu03FeelY4Q9g==
Age: 2404
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113718/Italy1.png
52.95.143.5200 OK 3.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113718/Italy1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 0f891a07f54e96ad26eab45eff4a4ac4
4216d39a4d5d857a5043a74344e38fae2d57cbb4
b8b8229f776ee43d90df36e703367c559bbb484b837e824b87cd0d0667f96f68
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113718/Italy1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: dy1TS8YJT9wLII4JXIa+6x7qfzbFgWftCCB44yEbLU9L98LtAghA2jeg/8muxGUOmI/3kEieRxA=
x-amz-request-id: A89RDW004SJ52SNZ
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:36 GMT
ETag: "0f891a07f54e96ad26eab45eff4a4ac4"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:37:18 GMT
x-amz-version-id: GTF1L1A9A6.2B4uTj.N2PdO2SsTH.sh1
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3807
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113518/Ireland1.png
52.95.143.5200 OK 2.4 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113518/Ireland1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit colormap, non-interlaced\012- data
Hash 43d299857d925a89b5e9d9ed735137e6
98dfeb70ca2e020803d0bce2b702762856c1bbe9
f3582ced229071311c510cec9ec473bc624d73866c637def53b9156c8e0007a3
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113518/Ireland1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 95bXBS9jx8fAaG/zcNjrOiYboxsWxZMewluWjb6r3qxYrbdcahdw2uj9i0mudckP7mtX9WbL3CU=
x-amz-request-id: A89WR84ZXB1E9A6F
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Wed, 14 Jul 2021 12:18:42 GMT
ETag: "43d299857d925a89b5e9d9ed735137e6"
x-amz-version-id: 144H9sB0.wvoZ7J_SgDb17LmdFMdZ4mk
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 2353
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112045/France1.png
52.95.143.5200 OK 3.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112045/France1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a77830776e897150a6ff71086e102b0d
d51b723d1070266baa7c5f7d7c848245791f7729
aef7056201ef0b57ad96204bca42e09d38886c1139ed77c6d4d102fcdac339fd
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112045/France1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 60d5Kv4nw0spW+W+pM/IDgfR4hPEzAwnTnAQojte52Qe46V6tRtV6rFhsD+wTculDh9L9UmrF9g=
x-amz-request-id: A89P412X5GNQEBP2
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "a77830776e897150a6ff71086e102b0d"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:20:45 GMT
x-amz-version-id: pu8R6M7CKxBCciwISencqH_AybVJLBjI
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3805
consentcdn.cookiebot.com/sdk/bc-v4.min.html
104.110.3.72200 OK 392 B URL HTTP/2 consentcdn.cookiebot.com/sdk/bc-v4.min.html
IP 104.110.3.72:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (627), with no line terminators
Hash e7268eccad39bd651697fa793a52cc5c
47299cefa2397b0c1d0c5bf232390a5cf1bcc4d3
907e16c84d35556e4ed841a3511915e6d4bb4e9d68cfca178a740e90b4d80e35
GET /sdk/bc-v4.min.html HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163"
last-modified: Mon, 04 Apr 2022 07:23:49 GMT
server: AkamaiNetStorage
x-akamai-transformed: 9 - 0 pmb=mRUM,1
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31175407
expires: Mon, 02 Oct 2023 17:51:14 GMT
date: Thu, 06 Oct 2022 22:01:07 GMT
content-length: 392
server-timing: cdn-cache; desc=HIT, edge; dur=1
X-Firefox-Spdy: h2
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112017/Finland1.png
52.95.143.5200 OK 3.6 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112017/Finland1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 5e1cfce111a4d74a372c674d4cc37413
83f346da964635dea608a27d54f85df4477e1fb9
618376f66c76753dbe413321c2600f615d7a86cad126b13f07878c0af4d554d7
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112017/Finland1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: j5nr274K7rVezJeS3kg7YsNqS4OmbAsj/ijl/nhiJ95GbC27yj2kgR9XcArx8o3PTRKMM1KMtPQ=
x-amz-request-id: A89WDMMMNBJA25RG
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "5e1cfce111a4d74a372c674d4cc37413"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:20:17 GMT
x-amz-version-id: OwXKXGP8WQZs7BHDS_f4YevL7kKbeDCt
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3636
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114724/Latvia1.png
52.95.143.5200 OK 3.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114724/Latvia1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash b9c786d407210d6bc0c2a86265d9f7b0
beb959603fc7cb94368ac2b0db83d5157fc3ed59
88cbf9a06a0e429b27afe129c11e2668cf4dc3cf61918e25b717546ba5f74cc8
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114724/Latvia1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: OYJtmj0zO1n9GTsjIWPM3Z5+8OCPR5UHa0inS1sMY/r9wvSE3f8eNG5heTziKi6IfA15dU9d954=
x-amz-request-id: A89HFC859RQJDW2B
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:36 GMT
ETag: "b9c786d407210d6bc0c2a86265d9f7b0"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:47:24 GMT
x-amz-version-id: hBXvw2q1TABuXXEllSZB6IP18vQ.9xX4
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3774
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 96423370618a4e8cef79532d1bebee5b
4c0a07466a54f9355819062fb899f86f21716876
1c6ca25ca73d54ab1186a44ef9b3d3ac75d936a4acc11e4d3dbb103a8cb150e2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114956/Lithuania1.png
52.95.143.5200 OK 3.9 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114956/Lithuania1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 2bcea2869112db9a45348df3a5635c24
05f022a59b8e0a0973309ebceeef184f76387a81
f6b0d4241d0d93d79acb7f9037b4a279c28286fb30835b826afa11d2f486fdc7
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114956/Lithuania1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: exKYoXWYFLTVCFvRxtpJTYiTatYk5Ji+LwTjCkZpqTjeg/ELQLMkYjeQI+AkLQzZTeUVcnWiZJ8=
x-amz-request-id: A89M10K8GBJXD7R9
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:36 GMT
ETag: "2bcea2869112db9a45348df3a5635c24"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:49:56 GMT
x-amz-version-id: QFPy2elHo6TU_9hmnKFhg_Ap__GibKsp
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3864
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115743/Malta1.png
52.95.143.5200 OK 4.3 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115743/Malta1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a83ad8aa720acb4451c0d59cd08c628f
086e729447dbc761c4b2561973314882a4d8cf7c
dda9ab435b2059745ebf794a823a6f72b2ffa34a18b178c5bdd9673b962baf12
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115743/Malta1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 1/zM7ca81VWXB4aJbZrnnHzDSelJ0R0XJxHtgmpXuq9JGUfhB2nTZ+gt0iPnn5G4NO0lWyaYyic=
x-amz-request-id: A89HTG9S4X5XX4PY
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:40 GMT
ETag: "a83ad8aa720acb4451c0d59cd08c628f"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:57:43 GMT
x-amz-version-id: rqG497F_yoU1eO77PnVOCv8uXhA_1r2V
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 4287
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash 561c60f92c5d20bfa1c6b664b73e7c52
c61d6c00b248c11e8cdedef7122786aad9367d6b
11fe0bdea79cef15a84d50dc93b5ef0ef19e939d0afb02bdc80ad1fb9dc1f512
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 22:01:07 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 15:46:25 GMT
Expires: Tue, 11 Oct 2022 15:46:24 GMT
Etag: "c61d6c00b248c11e8cdedef7122786aad9367d6b"
Cache-Control: max-age=408916,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7561ac7c69e31c0a-OSL
zerossl.ocsp.sectigo.com/
104.18.32.68200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP 104.18.32.68:0
Hash 561c60f92c5d20bfa1c6b664b73e7c52
c61d6c00b248c11e8cdedef7122786aad9367d6b
11fe0bdea79cef15a84d50dc93b5ef0ef19e939d0afb02bdc80ad1fb9dc1f512
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 22:01:07 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 15:46:25 GMT
Expires: Tue, 11 Oct 2022 15:46:24 GMT
Etag: "c61d6c00b248c11e8cdedef7122786aad9367d6b"
Cache-Control: max-age=408916,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7561ac7c7967b4ee-OSL
www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.js
3.120.194.163200 OK 3.9 kB URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.js
IP 3.120.194.163:0
Hash 3e651c805d98f379e5b0ad3576d5ee0b
a921beaf6a7a518db0d5a33b7367b77f0e1fa471
f0c25debbfdc38763304b11360d01fc4ac3c911e869f7af0c995842d611501ae
GET /wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:05 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
transfer-encoding: chunked
Connection: keep-alive
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111205/Denmark1.png
52.95.143.5200 OK 3.9 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111205/Denmark1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 017dcaacabe7f7dfbf5b430b8188b614
f4cdef6d7cd166e354bcd343aac76dd867eac2eb
4b7007c107f881d48678205fd27f0fdd50d23088bdbf1c7b12af442630909a34
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111205/Denmark1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: dkxdbscD3qaPlJK2A7/OW4Di1ofnL8EnBRhI3WTvxFH5eCdHpbO/AZA+qDvBIjl+YsRtecyIa9s=
x-amz-request-id: A89YNCD5S1E7K6YP
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "017dcaacabe7f7dfbf5b430b8188b614"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:12:05 GMT
x-amz-version-id: uiFsOj3HohBE.Jebck2oQOY6RiDfxk3Q
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3893
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05134701/Netherlands1.png
52.95.143.5200 OK 3.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05134701/Netherlands1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a19874c7d02744990237b827439132a4
d9a7a1eb5ee2e5a4dbbc75e43d7905b17ec0f6c0
e75bffa1dae0a23fa6d5cfa73835a321f5933810079f7c61d733a4a0f033d605
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05134701/Netherlands1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: n7PEvJ2SWBhjwvVkczA4eBbvEuCGrujgB1LHBU5vszYmXWX2Fi3JqyADoQS764XSKEaXNMJQmtQ=
x-amz-request-id: A89N4GW57XJNET5P
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:41 GMT
ETag: "a19874c7d02744990237b827439132a4"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 13:47:01 GMT
x-amz-version-id: 28LeGCtB6pYn.FjZ8bQqfzeq4Hz2DMmS
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3841
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05135311/Norway1.png
52.95.143.5200 OK 3.1 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05135311/Norway1.png
IP 52.95.143.5:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 9021ba1b169c443fcf1ef4205c66746b
57b448f98b746fdd70b85c2c3db3a692c59ed4e9
29be706a53e4348fc185d63ce98c4747e517c1371e9806be940e13637eeed375
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05135311/Norway1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 6rsHENc2R0418EXcBagz6HVy+S4gIZwOygJp+Z4/iG2ac4mA6A9PWMrV46JrdlLd/E3GTuzDPEg=
x-amz-request-id: A89JZ9744JS55GW9
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Wed, 14 Jul 2021 12:09:56 GMT
ETag: "9021ba1b169c443fcf1ef4205c66746b"
x-amz-version-id: U31NsyBZvHkqDUS_Ugic5SNoLOgwf_dQ
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3056
consent.cookiebot.com/96a1d7e4-5650-4b38-a86a-76e9471fade7/cc.js?renew=false&referer=www.lyca-mobile.no&dnt=false&init=false
104.84.152.233200 OK 55 kB URL HTTP/2 consent.cookiebot.com/96a1d7e4-5650-4b38-a86a-76e9471fade7/cc.js?renew=false&referer=www.lyca-mobile.no&dnt=false&init=false
IP 104.84.152.233:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65499)
Hash 2f6566a799f89de29fc30b71bf74831e
c12191cfda8b33670a6b1d93f080bb245ade4bac
29d4f50b257709e53a94fe930d00788c1ecc969c99632c45662d72064dc0e5c5
GET /96a1d7e4-5650-4b38-a86a-76e9471fade7/cc.js?renew=false&referer=www.lyca-mobile.no&dnt=false&init=false HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=1200
content-type: application/x-javascript; charset=utf-8
content-encoding: gzip
last-modified: Thu, 06 Oct 2022 22:01:07 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 55313
date: Thu, 06 Oct 2022 22:01:07 GMT
X-Firefox-Spdy: h2
tracker.selectivv.com/view?clickid={clickid}
85.17.54.17400 Bad Request 46 B URL HTTP/1.1 tracker.selectivv.com/view?clickid={clickid}
IP 85.17.54.17:0
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e4a33c59b51dbdbf84b51054c586a9d
7cff1535efd061f8d1d5b8ac61f2c1517bc8569e
4fd44ea9678a34eca7c647ce4877e6faa94745ac95947a1eeffde864d9026204
GET /view?clickid={clickid} HTTP/1.1
Host: tracker.selectivv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 400 Bad Request
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 22:01:07 GMT
Content-Type: application/json
Content-Length: 46
Connection: keep-alive
tracker.selectivv.com/uniclick.js?defaultcampaignid=620d05b69b851500013fe531&attribution=lastpaid®viewonce=false&cookiedomain=lyca-mobile.no&cookieduration=30
85.17.54.17200 OK 5.0 kB URL HTTP/1.1 tracker.selectivv.com/uniclick.js?defaultcampaignid=620d05b69b851500013fe531&attribution=lastpaid®viewonce=false&cookiedomain=lyca-mobile.no&cookieduration=30
IP 85.17.54.17:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash e7910221398fb0f44728667851e745b8
ccae17db0ac09ef4577a1d646def200c486000e9
eeb36f1cfec8bf102d377e6ee18385de5987160d2ce963e254eae3ddc0c80292
GET /uniclick.js?defaultcampaignid=620d05b69b851500013fe531&attribution=lastpaid®viewonce=false&cookiedomain=lyca-mobile.no&cookieduration=30 HTTP/1.1
Host: tracker.selectivv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 22:01:07 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/phone-call.svg
54.230.245.188200 OK 604 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/phone-call.svg
IP 54.230.245.188:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with very long lines (469)
Hash 2a3c2d102f0a6647ff4c989f9e5183dd
bfaf1194f81cb8b5300a3789624534c6786c8cb1
0c7b8c0063cebc49797c54a410e7e9b783047885c1a925c9bd4f1948353733c7
GET /wp-content/uploads/2017/06/phone-call.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 604
Connection: keep-alive
Date: Thu, 06 Oct 2022 07:47:14 GMT
Last-Modified: Tue, 15 Feb 2022 04:56:36 GMT
ETag: "2a3c2d102f0a6647ff4c989f9e5183dd"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: JlcKcQ6NmZVsgfPqUYqO8gfrpZGWE82Mcq-Tm__SS9_ZMpo77z9efg==
Age: 51234
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/mobile_icons_svg_bundle.svg
54.230.245.188200 OK 422 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/mobile_icons_svg_bundle.svg
IP 54.230.245.188:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash efc5d499203342c7943e44c68c22f670
6cd73fa1bfb854fa47ca2323986aca519e566936
adbb8b4b73d3eec20f434af5a3207f4076f2d47cc4e8f94b916a6b9a5a827454
GET /wp-content/uploads/2017/06/mobile_icons_svg_bundle.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 422
Connection: keep-alive
Last-Modified: Tue, 15 Feb 2022 04:56:40 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 06 Oct 2022 04:33:09 GMT
ETag: "efc5d499203342c7943e44c68c22f670"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: GHuzb3RHLY84U2fNctud_Fyb8AcV1Gx5pCr7w95BurHQj0slauZ75g==
Age: 62879
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/national-text.svg
54.230.245.188200 OK 379 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/national-text.svg
IP 54.230.245.188:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (379), with no line terminators
Hash 873789b36bcca252488070dc6727c3b3
03147946a7c606a77334fc61848099d96a240a4b
6a8c3a01af957fe571fd86413bf84ac367df9b687f811efa6dc0814600d331cb
GET /wp-content/uploads/2017/06/national-text.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 379
Connection: keep-alive
Date: Thu, 06 Oct 2022 07:01:00 GMT
Last-Modified: Tue, 15 Feb 2022 04:56:38 GMT
ETag: "873789b36bcca252488070dc6727c3b3"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CaKPbIRjObgCa_AaLwwPTq81AxfjG1XxzC-5adg2h9tm4A7cqDTCeA==
Age: 54008
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2018/06/Refer_a_friend_br.png
54.230.245.188200 OK 63 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2018/06/Refer_a_friend_br.png
IP 54.230.245.188:0
File type PNG image data, 522 x 235, 8-bit/color RGBA, non-interlaced\012- data
Hash 4fe087bad3bb3390beeea312c1a14de8
cf28dafa12cf6e1892ad7c76f839eccb35a0f840
f6dacf9f4c9eeba6a1743731c3228cca08c0dfd61db94db66cd3c26a3958ccad
GET /wp-content/uploads/2018/06/Refer_a_friend_br.png HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 62719
Connection: keep-alive
Date: Thu, 06 Oct 2022 07:52:10 GMT
Last-Modified: Mon, 18 Oct 2021 05:20:24 GMT
ETag: "4fe087bad3bb3390beeea312c1a14de8"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 71c9LWLtYFFU3aRFuDW-3xFiczIJx5PDV1Xg0PUrR-2mArkrO_yXug==
Age: 50938
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2018/06/buy_sim_new-br-1.png
54.230.245.188200 OK 15 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2018/06/buy_sim_new-br-1.png
IP 54.230.245.188:0
File type PNG image data, 522 x 235, 8-bit/color RGBA, non-interlaced\012- data
Hash 445a17c3cfa8b089268d00afb9cc2a12
9ab22aafb3bf1f21831e8fff3770306a4da50fcc
955ea640ad8413dcbd59590421eb5462a49c8224cdfa4638db9bcef8ff8d2d9b
GET /wp-content/uploads/2018/06/buy_sim_new-br-1.png HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 15283
Connection: keep-alive
Date: Thu, 06 Oct 2022 07:01:06 GMT
Last-Modified: Mon, 18 Oct 2021 05:20:16 GMT
ETag: "445a17c3cfa8b089268d00afb9cc2a12"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Yqy-xi47zWzSTIEyTykmcZX-LgCbvrL1vuIma5C_O5BrFEdItP-1sw==
Age: 54002
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 87465c15992fe10c24c62a185f8c171d
fa938b624d06d1e2927c8eda6a44b2a32d930f59
239ef7fe5df8c396d96a928c20d66c842a5ec3e9ff71a3cd7c0068906fc3e537
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tracker.selectivv.com/view?clickid={clickid}&referrer=
85.17.54.17400 Bad Request 46 B URL HTTP/1.1 tracker.selectivv.com/view?clickid={clickid}&referrer=
IP 85.17.54.17:0
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e4a33c59b51dbdbf84b51054c586a9d
7cff1535efd061f8d1d5b8ac61f2c1517bc8569e
4fd44ea9678a34eca7c647ce4877e6faa94745ac95947a1eeffde864d9026204
GET /view?clickid={clickid}&referrer= HTTP/1.1
Host: tracker.selectivv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 400 Bad Request
Server: nginx/1.21.3
Date: Thu, 06 Oct 2022 22:01:07 GMT
Content-Type: application/json
Content-Length: 46
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ecc594c8ad8a58175abca6f74592cad0
bc3eb5409877f214ca5d45c39d39754fd80997ae
4376e30946f541ed958cbbff449d18b6acb24608aa48fa078440cb99291dc7d1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4133
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Thu, 06 Oct 2022 20:52:14 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
static.ads-twitter.com/uwt.js
151.101.84.157200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP 151.101.84.157:0
File type ASCII text, with very long lines (57443), with no line terminators
Hash 1e9c4d503a9e162d8b549dc3d9c040e2
1fa99d7d7e878cdd45567af4b0c3c65542036c1d
f936c0124c595fe5d0c7858277f3a5f3bd104de39d36ac92557501fa1dec8563
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 20:19:10 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "d4de8398858246712016031c834bb061+gzip+gzip"
accept-ranges: bytes
date: Thu, 06 Oct 2022 22:01:07 GMT
x-served-by: cache-iad-kcgs7200165-IAD, cache-bma1652-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15317
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 06 Oct 2022 20:41:09 GMT
expires: Thu, 06 Oct 2022 22:41:09 GMT
cache-control: public, max-age=7200
age: 4798
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=2623627268248;gtm=2wga50;auiddc=65109662.1665093667;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1
142.250.74.162200 OK 469 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=2623627268248;gtm=2wga50;auiddc=65109662.1665093667;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1
IP 142.250.74.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (651), with no line terminators
Hash f0f97174f8d9fd5dfbb7000820f96911
bfcbd5dcc67c9380cbdb94dcf66510a71758ee65
6300e876c30f23b38544b7a9db1f0c7858baf981c787abf4237e517b3f0a191c
GET /ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=2623627268248;gtm=2wga50;auiddc=65109662.1665093667;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1 HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://11029147.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 22:01:07 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 469
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash e1327a02d76346c7e23d114e4e508b30
195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: EwdhXohPOTKv60I/JbTnUEjnBlzY/4FHvaGcjXYLQEPoAsZcNT2CWxJ642Esh/66TUvIVcFKoC3c6sA5fUayEw==
content-length: 26840
x-fb-trip-id: 1904183273
date: Thu, 06 Oct 2022 22:01:07 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
bat.bing.com/bat.js
204.79.197.200200 OK 11 kB IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=1CCD0481C55667A32F3F16B4C4A36655; domain=.bing.com; expires=Tue, 31-Oct-2023 22:01:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A2EBA63A43784568AC26E62854624AE5 Ref B: OSL30EDGE0110 Ref C: 2022-10-06T22:01:07Z
date: Thu, 06 Oct 2022 22:01:07 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ecc594c8ad8a58175abca6f74592cad0
bc3eb5409877f214ca5d45c39d39754fd80997ae
4376e30946f541ed958cbbff449d18b6acb24608aa48fa078440cb99291dc7d1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4133
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Thu, 06 Oct 2022 20:52:14 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 87465c15992fe10c24c62a185f8c171d
fa938b624d06d1e2927c8eda6a44b2a32d930f59
239ef7fe5df8c396d96a928c20d66c842a5ec3e9ff71a3cd7c0068906fc3e537
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 38c8ed81c69d2af0003394c9fb9274c5
a71c6fb6d685275f8a8c7d9d87860df08a450038
fdff30d374603ecd62c6d244a1175731787725dba48777122802055969be28f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/conversion_async.js
142.250.74.164200 OK 15 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP 142.250.74.164:0
File type ASCII text, with very long lines (1654)
Hash 8766c5a801f08afceca9b66ff9097e6a
ce7640d1d166eddeb9d40be642ec34652f790713
f448f99b4ad9a9b50daa9c38054cf16ab2b9fcb5d83ddad60571fb6a8a432a99
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 06 Oct 2022 22:01:07 GMT
expires: Thu, 06 Oct 2022 22:01:07 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 1cecd042e106c70af7e8f0d9863ca3d9
fa94604e9e99c752d18708abcec8584a5eee66ea
3525f542ce5a72795646c2bba144333920f67f3e9938748f9d3bd3aff9ac496e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash 7065fbf8d63d2ecd8879362fd907ec32
321677349d53a38d7f786c0bc60778ebbf5b115e
17db658b429ff9d8ad5f06672ca0929a328af27af7e5a054848d676a455d585f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6297
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:07 GMT
Last-Modified: Thu, 06 Oct 2022 20:16:10 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 313
adservice.google.no/ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=2623627268248;gtm=2wga50;auiddc=65109662.1665093667;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1
142.250.74.162200 OK 177 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=2623627268248;gtm=2wga50;auiddc=65109662.1665093667;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1
IP 142.250.74.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9393b28661a65a763699c108887882eb
c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
GET /ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=2623627268248;gtm=2wga50;auiddc=65109662.1665093667;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1 HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 22:01:07 GMT
expires: Thu, 06 Oct 2022 22:01:07 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 1cecd042e106c70af7e8f0d9863ca3d9
fa94604e9e99c752d18708abcec8584a5eee66ea
3525f542ce5a72795646c2bba144333920f67f3e9938748f9d3bd3aff9ac496e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
inv-dmp.admixer.net/dmpcnt.js?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1
146.0.227.110200 OK 1.2 kB URL HTTP/1.1 inv-dmp.admixer.net/dmpcnt.js?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1
IP 146.0.227.110:0
ASN #20773 Host Europe GmbH
File type ASCII text, with CRLF line terminators
Hash 7a5630060035f7670289c38e0bff4dc1
db1486ab589b63bb77247de9d4a050e627af2439
092b0bd22ee271439f83ca28cc486b818f829063c1bfb79c1c7656c73fd0eb75
GET /dmpcnt.js?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1 HTTP/1.1
Host: inv-dmp.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 22:01:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store
Expires: Wed, 21 Oct 2015 07:28:00 GMT
Set-Cookie: am-uid=32bc104e29b3478691e3551fac99de23; expires=Wed, 04 Jan 2023 22:01:07 GMT;domain=.admixer.net;path=/;secure;SameSite=None
P3P: CP="NID DSP ALL COR"
Keep-Alive: timeout=25
t.co/i/adsct?bci=3&eci=2&event_id=3115842f-55bb-4ea7-b02c-df373106d23d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c0ecc953-a3b7-417e-893e-7478b8b8c955&tw_document_href=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o13z4&type=javascript&version=2.3.27
104.244.42.133200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=3115842f-55bb-4ea7-b02c-df373106d23d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c0ecc953-a3b7-417e-893e-7478b8b8c955&tw_document_href=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o13z4&type=javascript&version=2.3.27
IP 104.244.42.133:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=3115842f-55bb-4ea7-b02c-df373106d23d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=c0ecc953-a3b7-417e-893e-7478b8b8c955&tw_document_href=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o13z4&type=javascript&version=2.3.27 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 22:01:06 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=c283b8c3-3b35-44b3-83bc-4b2872b244e0; Max-Age=63072000; Expires=Sat, 05 Oct 2024 22:01:07 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 59a032b107af5885
strict-transport-security: max-age=0
x-response-time: 105
x-connection-hash: 357ebb3396de06859cbe6e4cf93e26de4d7e7f1b6eadceb5b0729d1c671c92b9
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 5690c00c386c753af6de22646db06434
aa5b0574bf8aa58bc5608d593e7dcba23100b454
741af8ab8cb30aac3a08fe0ae823577cb602c717416f9bcd52cef5b830b5fb0e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 22:01:07 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 06 Oct 2022 18:25:20 GMT
Expires: Thu, 13 Oct 2022 18:25:19 GMT
Etag: "aa5b0574bf8aa58bc5608d593e7dcba23100b454"
Cache-Control: max-age=591251,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7561ac801cd01c06-OSL
my.rtmark.net/p.js?f=sync&lr=1&partner=473b8bc3bdca24c35606febcd8b32398d0535658845a248b665bbd0d9b9f9df4
139.45.195.8200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=473b8bc3bdca24c35606febcd8b32398d0535658845a248b665bbd0d9b9f9df4
IP 139.45.195.8:0
Hash 2b7b1b11c547b114ff62014920325ec3
dcfd06ea418764ac4c32c310000a0c4af864f283
ff0ba5752d3c1490c62a811381e6dabd467e5a8b9fd2101c719831c39097cd26
GET /p.js?f=sync&lr=1&partner=473b8bc3bdca24c35606febcd8b32398d0535658845a248b665bbd0d9b9f9df4 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:07 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 3db145289b500f1470331da92de122e0
25ead98b6d9146b1fff19cad82f469d0975e6a63
cb18a455be39854b1b2c9939df00e2829fa0dc6c47a240b31e27afa8bd743fbc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 22:01:07 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 11:44:15 GMT
Expires: Mon, 10 Oct 2022 11:44:14 GMT
Etag: "25ead98b6d9146b1fff19cad82f469d0975e6a63"
Cache-Control: max-age=307986,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7561ac7fc9ae0b65-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 3db145289b500f1470331da92de122e0
25ead98b6d9146b1fff19cad82f469d0975e6a63
cb18a455be39854b1b2c9939df00e2829fa0dc6c47a240b31e27afa8bd743fbc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 22:01:08 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 11:44:15 GMT
Expires: Mon, 10 Oct 2022 11:44:14 GMT
Etag: "25ead98b6d9146b1fff19cad82f469d0975e6a63"
Cache-Control: max-age=307986,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7561ac7fbde8b4eb-OSL
cdn.admixer.net/analytics/tag-manager.js?m=data-from-dom
92.223.97.97200 OK 97 kB URL HTTP/2 cdn.admixer.net/analytics/tag-manager.js?m=data-from-dom
IP 92.223.97.97:0
ASN #199524 G-Core Labs S.A.
File type ASCII text, with very long lines (36161)
Hash d12b13190078833eed5d2889997f275f
da97d81e39359c800e0b3dfdacde783184cbacc2
c7ef1452ca3b0173deb82f8bc4591281023361ffeffb22ea9a2cf07313cecaf3
GET /analytics/tag-manager.js?m=data-from-dom HTTP/1.1
Host: cdn.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Cookie: am-uid=32bc104e29b3478691e3551fac99de23
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:08 GMT
content-type: application/javascript
last-modified: Mon, 12 Apr 2021 13:21:02 GMT
vary: Accept-Encoding
etag: W/"6074493e-6e96"
expires: Fri, 29 Sep 2023 02:54:41 GMT
cache-control: max-age=31622400
access-control-expose-headers: content-range
cache: HIT
x-cached-since: 2022-09-28T02:54:41+00:00
x-id: sto5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=15267795&tm=gtm002&Ver=2&mid=d3f78443-db9f-4215-af13-0182c44ab15e&sid=61398c2045c211edb88a5700ded9b2c2&vid=613971e045c211ed9ef065ad2bddf68f&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Hello%20Norway%20L%20-%20Lycamobile&p=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&r=<=3155&evt=pageLoad&sv=1&rn=856373
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=15267795&tm=gtm002&Ver=2&mid=d3f78443-db9f-4215-af13-0182c44ab15e&sid=61398c2045c211edb88a5700ded9b2c2&vid=613971e045c211ed9ef065ad2bddf68f&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Hello%20Norway%20L%20-%20Lycamobile&p=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&r=<=3155&evt=pageLoad&sv=1&rn=856373
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=15267795&tm=gtm002&Ver=2&mid=d3f78443-db9f-4215-af13-0182c44ab15e&sid=61398c2045c211edb88a5700ded9b2c2&vid=613971e045c211ed9ef065ad2bddf68f&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Hello%20Norway%20L%20-%20Lycamobile&p=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&r=<=3155&evt=pageLoad&sv=1&rn=856373 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=35BA697C1BDE66C729D57B491A2B6704; domain=.bing.com; expires=Tue, 31-Oct-2023 22:01:08 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7E0CCD1A8B63482DBFE043630756FC97 Ref B: OSL30EDGE0110 Ref C: 2022-10-06T22:01:08Z
date: Thu, 06 Oct 2022 22:01:07 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash 09ca26eaf86cfbfac28b54cac6d42d5f
e3272c4faf239c1792aeae0e6fcf5b4eb9ab2d8c
f3ac85d3475c24a00784d37e006fbdc7b393326417f736c4a774c299697a95fa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6087
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Thu, 06 Oct 2022 20:19:41 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 313
googleads.g.doubleclick.net/pagead/viewthroughconversion/10965854962/?random=1665093667565&cv=9&fst=1665093667565&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=8&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaa50&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&tiba=Hello%20Norway%20L%20-%20Lycamobile&auid=65109662.1665093667&hn=www.google.com&us_privacy=1---&async=1&rfmt=3&fmt=4
216.58.211.2200 OK 1.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10965854962/?random=1665093667565&cv=9&fst=1665093667565&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=8&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaa50&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&tiba=Hello%20Norway%20L%20-%20Lycamobile&auid=65109662.1665093667&hn=www.google.com&us_privacy=1---&async=1&rfmt=3&fmt=4
IP 216.58.211.2:0
File type ASCII text, with very long lines (2680), with no line terminators
Hash 14749e14ff4800ccf76af2a2416124f7
1dca29255e0227662391117649c7ea6f74cc2c10
af5647e1db3bfb35f62c72708bc0c62e3ffb1298e9763a3aa22818f7607db696
GET /pagead/viewthroughconversion/10965854962/?random=1665093667565&cv=9&fst=1665093667565&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=8&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaa50&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&tiba=Hello%20Norway%20L%20-%20Lycamobile&auid=65109662.1665093667&hn=www.google.com&us_privacy=1---&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 22:01:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1155
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 06-Oct-2022 22:16:08 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/p/action/15267795.js
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/15267795.js
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/15267795.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=2044618437316AD53EA973B136C46BEC; domain=.bing.com; expires=Tue, 31-Oct-2023 22:01:08 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 015E737BBB2B40989D9CED555DFF8A7F Ref B: OSL30EDGE0110 Ref C: 2022-10-06T22:01:08Z
date: Thu, 06 Oct 2022 22:01:07 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 05cdf02bcbbeed0122679c1118a350ce
b5311d6866b69206bec8f67a19cfeeefed233ef1
4b7235ec2ca2295957e75e79fdc718fbacc13bfd5674d1aeb7cbe5bed9fe9ead
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
inv-nets-eu.admixer.net/cntcm.aspx?pvOId=a312db71-5f61-4ec7-b713-c2b1c43480e9&ssp=E5485342-9239-467B-BD48-1C9876BA2A52&cntoid=857dd00f-c12c-43ff-be0e-596c692063d1&pv=1&referrer=&page=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1
146.0.227.110204 No Content 0 B URL HTTP/1.1 inv-nets-eu.admixer.net/cntcm.aspx?pvOId=a312db71-5f61-4ec7-b713-c2b1c43480e9&ssp=E5485342-9239-467B-BD48-1C9876BA2A52&cntoid=857dd00f-c12c-43ff-be0e-596c692063d1&pv=1&referrer=&page=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1
IP 146.0.227.110:0
ASN #20773 Host Europe GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cntcm.aspx?pvOId=a312db71-5f61-4ec7-b713-c2b1c43480e9&ssp=E5485342-9239-467B-BD48-1C9876BA2A52&cntoid=857dd00f-c12c-43ff-be0e-596c692063d1&pv=1&referrer=&page=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1 HTTP/1.1
Host: inv-nets-eu.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Cookie: am-uid=32bc104e29b3478691e3551fac99de23
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 204 No Content
Server: nginx
Date: Thu, 06 Oct 2022 22:01:08 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.lyca-mobile.no
X-XSS-Protection: 0
Keep-Alive: timeout=25
www.google.no/pagead/1p-user-list/10965854962/?random=1665093667565&cv=9&fst=1665093600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=8&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaa50&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&tiba=Hello%20Norway%20L%20-%20Lycamobile&async=1&fmt=3&is_vtc=1&random=1209427405&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10965854962/?random=1665093667565&cv=9&fst=1665093600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=8&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaa50&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&tiba=Hello%20Norway%20L%20-%20Lycamobile&async=1&fmt=3&is_vtc=1&random=1209427405&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10965854962/?random=1665093667565&cv=9&fst=1665093600000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=8&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oaa50&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&tiba=Hello%20Norway%20L%20-%20Lycamobile&async=1&fmt=3&is_vtc=1&random=1209427405&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 06 Oct 2022 22:01:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
inv-nets-eu.admixer.net/dmpapxl.aspx?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1&referrer=&page=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1
146.0.227.110200 OK 43 B URL HTTP/1.1 inv-nets-eu.admixer.net/dmpapxl.aspx?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1&referrer=&page=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1
IP 146.0.227.110:0
ASN #20773 Host Europe GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash d3e941fe204d0a9cc5b92782bbf882c8
682a77b3dd546b61ae894285128ffba13a33cf7d
281c5ae8bf152f644e12a943ec5d59681e1950c54fb6c0b3cc77539bf5e69340
POST /dmpapxl.aspx?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1&referrer=&page=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1 HTTP/1.1
Host: inv-nets-eu.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Cookie: am-uid=32bc104e29b3478691e3551fac99de23
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 06 Oct 2022 22:01:08 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store
Expires: Wed, 21 Oct 2015 07:28:00 GMT
Set-Cookie: am-uid=32bc104e29b3478691e3551fac99de23; expires=Wed, 04 Jan 2023 22:01:08 GMT;domain=.admixer.net;path=/;secure;SameSite=None
P3P: CP="NID DSP ALL COR"
Keep-Alive: timeout=25
www.facebook.com/tr/?id=538386406931299&ev=PageView&dl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&rl=&if=false&ts=1665093668137&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1665093668136.1912098934&it=1665093667522&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=538386406931299&ev=PageView&dl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&rl=&if=false&ts=1665093668137&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1665093668136.1912098934&it=1665093667522&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=538386406931299&ev=PageView&dl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1&rl=&if=false&ts=1665093668137&sw=1280&sh=1024&v=2.9.84&r=stable&ec=0&o=30&fbp=fb.1.1665093668136.1912098934&it=1665093667522&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Thu, 06 Oct 2022 22:01:08 GMT
X-Firefox-Spdy: h2
cdn.admixer.net/analytics/tag-manager.runtime.js
92.223.97.97200 OK 767 B URL HTTP/2 cdn.admixer.net/analytics/tag-manager.runtime.js
IP 92.223.97.97:0
ASN #199524 G-Core Labs S.A.
Hash bf5229829a18386bdc3a989ea42678ea
103e40ddc0323a7995355fd2f78d23059497a019
6c7414aa2b7ca2889d47007899b5e7d2c866d38fcd70c81259066adcd151b2d4
GET /analytics/tag-manager.runtime.js HTTP/1.1
Host: cdn.admixer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Cookie: am-uid=32bc104e29b3478691e3551fac99de23
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:08 GMT
content-type: application/javascript
last-modified: Mon, 12 Apr 2021 13:21:02 GMT
vary: Accept-Encoding
etag: W/"6074493e-515"
expires: Fri, 29 Sep 2023 03:00:21 GMT
cache-control: max-age=31622400
access-control-expose-headers: content-range
cache: HIT
x-cached-since: 2022-09-28T03:00:21+00:00
x-id: sto5-up-gc15
content-encoding: gzip
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22755827-1&cid=1962819867.1665093668&jid=117001813&gjid=243765039&_gid=462735951.1665093668&_u=YEBAAEAAAAAAACABI~&z=2042829338
173.194.73.154200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22755827-1&cid=1962819867.1665093668&jid=117001813&gjid=243765039&_gid=462735951.1665093668&_u=YEBAAEAAAAAAACABI~&z=2042829338
IP 173.194.73.154:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22755827-1&cid=1962819867.1665093668&jid=117001813&gjid=243765039&_gid=462735951.1665093668&_u=YEBAAEAAAAAAACABI~&z=2042829338 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.lyca-mobile.no
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 06 Oct 2022 22:01:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=473b8bc3bdca24c35606febcd8b32398d0535658845a248b665bbd0d9b9f9df4&ttl=&rurl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=473b8bc3bdca24c35606febcd8b32398d0535658845a248b665bbd0d9b9f9df4&ttl=&rurl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=473b8bc3bdca24c35606febcd8b32398d0535658845a248b665bbd0d9b9f9df4&ttl=&rurl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6135999%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:08 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=9162714219564e6ba4feae139c1e7d48; expires=Fri, 06 Oct 2023 22:01:08 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash bba80f38fa67734d6edf4fbc51e46cda
a11c1b4cebf5d7c486f7cd640ea72eab2326b0f2
d1fef1e84b2e2a8973103d9adcf67dc46310de68f01ea6844695a0d220fd0a23
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5309
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 22:01:08 GMT
Last-Modified: Thu, 06 Oct 2022 20:32:40 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
s2.adform.net/banners/scripts/st/trackpoint-async.js
37.157.5.71200 OK 31 kB URL HTTP/2 s2.adform.net/banners/scripts/st/trackpoint-async.js
IP 37.157.5.71:0
File type ASCII text, with very long lines (992)
Hash d950f975e05d61bbb865aaf2271a37df
9d4cb867d3a37fd874eb386e698a1b40e65d1628
79acb0d54071b4e56a9c5042f9e6a7f2a4521c99469a801bfdc3367f0d5450e1
GET /banners/scripts/st/trackpoint-async.js HTTP/1.1
Host: s2.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lyca-mobile.no/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:09 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 05 Oct 2022 12:23:24 GMT
x-rgw-object-type: Normal
etag: W/"4cb8e818a3c8dda5fd80d6d9a55d958d"
x-amz-request-id: tx00000b0a58fecc884a3e4-00633f501b-3293c1b6-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
asia.adform.net/Serving/TrackPoint/?pm=1828276&ADFPageName=ROS&ADFdivider=%7C&ord=463049636665&ADFtpmode=2&us_privacy=1---&loc=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campa&Set1=en-US%7Cen-US%7C1280x1024%7C24
185.84.60.20302 Found 844 B URL HTTP/2 asia.adform.net/Serving/TrackPoint/?pm=1828276&ADFPageName=ROS&ADFdivider=%7C&ord=463049636665&ADFtpmode=2&us_privacy=1---&loc=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campa&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP 185.84.60.20:0
Hash a575d28d8b6e85f4628b7984562fbd6c
38711983ce6cb2ffd38c0999ea27b5e4b56ebff4
7ede40ecda4da627c58761b6db01fa865b518577474d7d318e34ce773f144803
GET /Serving/TrackPoint/?pm=1828276&ADFPageName=ROS&ADFdivider=%7C&ord=463049636665&ADFtpmode=2&us_privacy=1---&loc=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campa&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: asia.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Thu, 06 Oct 2022 22:01:09 GMT
content-type: text/html; charset=utf-8
location: https://asia.adform.net/Serving/TrackPoint/?CC=1&pm=1828276&ADFPageName=ROS&ADFdivider=%7C&ord=463049636665&ADFtpmode=2&us_privacy=1---&loc=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campa&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Sun, 06-Nov-2022 23:01:09 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
toapodazoay.com/?l=qCqekRDLtEBTXwP&s=602009051597115555&z=4295058&g=NO&svar=1665093661&ba=0&dm=0&ep=0&vi=0&vo=0&i18db=0&tr=default&svar=1665093661&ssk=efa3edada1e890b2948f154ff0862475&svarok=1&b=79056&oaid=a71261a5b9494b5bbd5b94d0e2911d22&rdk=rk3
139.45.197.155200 OK 0 B URL HTTP/2 toapodazoay.com/?l=qCqekRDLtEBTXwP&s=602009051597115555&z=4295058&g=NO&svar=1665093661&ba=0&dm=0&ep=0&vi=0&vo=0&i18db=0&tr=default&svar=1665093661&ssk=efa3edada1e890b2948f154ff0862475&svarok=1&b=79056&oaid=a71261a5b9494b5bbd5b94d0e2911d22&rdk=rk3
IP 139.45.197.155:0
GET /?l=qCqekRDLtEBTXwP&s=602009051597115555&z=4295058&g=NO&svar=1665093661&ba=0&dm=0&ep=0&vi=0&vo=0&i18db=0&tr=default&svar=1665093661&ssk=efa3edada1e890b2948f154ff0862475&svarok=1&b=79056&oaid=a71261a5b9494b5bbd5b94d0e2911d22&rdk=rk3 HTTP/1.1
Host: toapodazoay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:02 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.25
set-cookie: reverse=OCjvx1xYTF92y2nN1-P7ychg00ocBaUosWwE-Wvw5Xk; expires=Thu, 06-Oct-2022 23:01:01 GMT; Max-Age=3600; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
54.230.245.188200 OK 0 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
IP 54.230.245.188:0
GET /wp-content/themes/Divi-child/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 15 Jul 2022 07:16:49 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 06 Oct 2022 04:11:20 GMT
ETag: W/"07571e83ac07033388dffa6b348bc459"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OAbnRHHcycMVV1sGoi2DRiwPbJqqBLjEBWngeGvhMOfr1EQXQUFSVQ==
Age: 64186
unphionetor.com/fv.js?t=56193&cb=1422701229
139.45.197.236200 OK 0 B URL HTTP/2 unphionetor.com/fv.js?t=56193&cb=1422701229
IP 139.45.197.236:0
Analyzer Verdict Alert quad9 Sinkholed
GET /fv.js?t=56193&cb=1422701229 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://toapodazoay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 22:01:02 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 84a73f821e988a7f014413ce8cdbd51d
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
asia.adform.net/serving/scripts/trackpoint/async/
185.84.60.20301 Moved Permanently 0 B URL HTTP/2 asia.adform.net/serving/scripts/trackpoint/async/
IP 185.84.60.20:0
GET /serving/scripts/trackpoint/async/ HTTP/1.1
Host: asia.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 06 Oct 2022 22:01:08 GMT
content-type: text/html
location: https://s2.adform.net/banners/scripts/st/trackpoint-async.js
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.lyca-mobile.no/wp-content/plugins/lyca-marketing/assets/js/jquery.lazy.min.js
3.120.194.163200 OK 0 B URL HTTP/1.1 www.lyca-mobile.no/wp-content/plugins/lyca-marketing/assets/js/jquery.lazy.min.js
IP 3.120.194.163:0
GET /wp-content/plugins/lyca-marketing/assets/js/jquery.lazy.min.js HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6135999&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=cek9v48kfk2kaemli3q6in1c6b; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/javascript
Date: Thu, 06 Oct 2022 22:01:06 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2331
Connection: keep-alive