ocsp.digicert.com/
200 OK 471 B IP
Hash f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4421
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:24 GMT
Last-Modified: Tue, 06 Dec 2022 14:21:43 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19269
Expires: Tue, 06 Dec 2022 20:56:33 GMT
Date: Tue, 06 Dec 2022 15:35:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3048
Expires: Tue, 06 Dec 2022 16:26:12 GMT
Date: Tue, 06 Dec 2022 15:35:24 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 15:18:39 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1005
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: vXnVclpKYzNaekNM2D2+hNYWDNb40tGT+SK0Ed4CvNIBDApqyE3fRyg7Lbiee3jVcRncLfJb9uiyP/9l5J4rDg==
x-amz-request-id: PHNGTT9B7Z26RCPN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 14:47:08 GMT
age: 2896
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
feed.yyyyyy.com/ilmiopodcast1
302 Found 393 B URL HTTP/1.1 feed.yyyyyy.com/ilmiopodcast1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (321), with CRLF line terminators
Hash 00449676ba42026bdb128c9b322237ed
b3695498dda31640d087640e4343c95786f55bbb
863c5cbd7311865087665b21b59cd9281e0b18fe91b98ba793bfb2689a860f0e
Analyzer Verdict Alert fortinet Malware
GET /ilmiopodcast1 HTTP/1.1
Host: feed.yyyyyy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: http://btpnav.com/click?data=WTI3UnV6YTZ4VmtTVzItd01rVDZFN2c3SUhYVWRYTE8yNUdGbE5TUERPV1c2V3o5SjUtdExZYjd5eE5rbFBHWU14cXVfcFNwbXRSOXB3MWwzY0xncnNDVUhoWExaVWVZUFZPMFVyZW1QZEhYcV9DaWpOMVhvcUpOWTJ5X2phZjJKdm5ETW1MbWs1TjBxNldBSzI1U2FRMg2&id=05165018-eea7-40df-9ead-3be57f7d002e
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 06 Dec 2022 15:35:24 GMT
Connection: close
Content-Length: 393
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 15:35:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
btpnav.com/click?data=WTI3UnV6YTZ4VmtTVzItd01rVDZFN2c3SUhYVWRYTE8yNUdGbE5TUERPV1c2V3o5SjUtdExZYjd5eE5rbFBHWU14cXVfcFNwbXRSOXB3MWwzY0xncnNDVUhoWExaVWVZUFZPMFVyZW1QZEhYcV9DaWpOMVhvcUpOWTJ5X2phZjJKdm5ETW1MbWs1TjBxNldBSzI1U2FRMg2&id=05165018-eea7-40df-9ead-3be57f7d002e
200 OK 5.4 kB URL HTTP/1.1 btpnav.com/click?data=WTI3UnV6YTZ4VmtTVzItd01rVDZFN2c3SUhYVWRYTE8yNUdGbE5TUERPV1c2V3o5SjUtdExZYjd5eE5rbFBHWU14cXVfcFNwbXRSOXB3MWwzY0xncnNDVUhoWExaVWVZUFZPMFVyZW1QZEhYcV9DaWpOMVhvcUpOWTJ5X2phZjJKdm5ETW1MbWs1TjBxNldBSzI1U2FRMg2&id=05165018-eea7-40df-9ead-3be57f7d002e
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (320), with CRLF line terminators
Hash bf202d2f37e39387397b1f8bebefc7a8
6a41f8c998cb0abbbcecea553b93f2d4394d9451
9f0243a53fd4673664993daa4bd99ca58f5fd7c681b1e635732d8ac8aa983542
GET /click?data=WTI3UnV6YTZ4VmtTVzItd01rVDZFN2c3SUhYVWRYTE8yNUdGbE5TUERPV1c2V3o5SjUtdExZYjd5eE5rbFBHWU14cXVfcFNwbXRSOXB3MWwzY0xncnNDVUhoWExaVWVZUFZPMFVyZW1QZEhYcV9DaWpOMVhvcUpOWTJ5X2phZjJKdm5ETW1MbWs1TjBxNldBSzI1U2FRMg2&id=05165018-eea7-40df-9ead-3be57f7d002e HTTP/1.1
Host: btpnav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: NdJaqvWXQqosUod=NdJaqvWXQqosUod; path=/
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Tue, 06 Dec 2022 15:35:24 GMT
Content-Length: 5412
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 06 Dec 2022 15:11:20 GMT
cache-control: public,max-age=3600
age: 1445
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
btpnav.com/Redirect/
302 Found 270 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 463caa3bdb2157353c43fe19ba772e49
f2f7b7e846e3c9c6fe46c8ce2ce330a6c6fe85dd
c010fb848be7a9b9ac342437aab765dab2fccd28d8624e210587bde4ee1b0710
POST /Redirect/ HTTP/1.1
Host: btpnav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 330
Origin: http://btpnav.com
Connection: keep-alive
Referer: http://btpnav.com/click?data=WTI3UnV6YTZ4VmtTVzItd01rVDZFN2c3SUhYVWRYTE8yNUdGbE5TUERPV1c2V3o5SjUtdExZYjd5eE5rbFBHWU14cXVfcFNwbXRSOXB3MWwzY0xncnNDVUhoWExaVWVZUFZPMFVyZW1QZEhYcV9DaWpOMVhvcUpOWTJ5X2phZjJKdm5ETW1MbWs1TjBxNldBSzI1U2FRMg2&id=05165018-eea7-40df-9ead-3be57f7d002e
Cookie: NdJaqvWXQqosUod=NdJaqvWXQqosUod
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: http://clarus-che.com/zcvisitor/9a2d7152-757b-11ed-b854-0a098ebbbaeb/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Tue, 06 Dec 2022 15:35:25 GMT
Content-Length: 270
ocsp.digicert.com/
200 OK 471 B IP
Hash 0f7dcaa590e32cfd1c075255188d5f06
d4bb4954fefdb3b59560b54adf500e806e252e39
195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4400
Cache-Control: max-age=153885
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:25 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 10:20:10 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
clarus-che.com/zcvisitor/9a2d7152-757b-11ed-b854-0a098ebbbaeb/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
200 1.1 kB URL HTTP/1.1 clarus-che.com/zcvisitor/9a2d7152-757b-11ed-b854-0a098ebbbaeb/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 75a5e8fd3cb459b832e62ecf0f15b1f6
97e9b97501e53458bef8270ec11fd2e0d0442217
5e9b6841a0e8fbc77c8331e5d3796bfbcb1851d61acea0224fb75a4fa709a2ad
GET /zcvisitor/9a2d7152-757b-11ed-b854-0a098ebbbaeb/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51 HTTP/1.1
Host: clarus-che.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://btpnav.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 06 Dec 2022 15:35:25 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: yzQxFTyY
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: bLuBOSZgR8NeN/WvB/8fxA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JUxcsIvHCWPADy75qv187l4FE64=
clarus-che.com/zcredirect?visitid=9a2d7152-757b-11ed-b854-0a098ebbbaeb&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
200 346 B URL HTTP/1.1 clarus-che.com/zcredirect?visitid=9a2d7152-757b-11ed-b854-0a098ebbbaeb&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 946dd6b9a8d9c19c8f7e67edb2cfaecb
a0a62a35ab7eaa2c738d501061878b23090558d7
2e018b71fb9bfeaaf20e208fbdf5f860ac4f29b82df70f251c64854a9cb7afb8
GET /zcredirect?visitid=9a2d7152-757b-11ed-b854-0a098ebbbaeb&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: clarus-che.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://clarus-che.com/zcvisitor/9a2d7152-757b-11ed-b854-0a098ebbbaeb/fa8076ca-64e7-4648-95fb-59f8b6b1f6e1?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 06 Dec 2022 15:35:26 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: ufnwlPsM
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4c50cf3b9cfd560c72960180f06ecda1
7be75bee92b3c3dd70df44ece8fbf8b1462a827d
443f582fe21161435d7ca206373b039fc1b5eb47cb9eab4996a270fa56e12e37
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "443F582FE21161435D7CA206373B039FC1B5EB47CB9EAB4996A270FA56E12E37"
Last-Modified: Tue, 06 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1328
Expires: Tue, 06 Dec 2022 15:57:34 GMT
Date: Tue, 06 Dec 2022 15:35:26 GMT
Connection: keep-alive
clever-redirect.com/s/r6?s=623619497&s2=gamboge-moose&s3=lima-ave-E70abr6f
200 OK 346 B URL HTTP/2 clever-redirect.com/s/r6?s=623619497&s2=gamboge-moose&s3=lima-ave-E70abr6f
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (346), with no line terminators
Hash 1e5d2cc948a944b0222b2cfd03432b34
6c2277a86f570e488e82674f114f18be50b1f1f6
0fed6e244523be85fc23917f66465f5b0cf3ae1e99d69dfb2bf638c47c8c2d51
GET /s/r6?s=623619497&s2=gamboge-moose&s3=lima-ave-E70abr6f HTTP/1.1
Host: clever-redirect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://clarus-che.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
referrer-policy: no-referrer
x-powered-by: PHP/7.4.27
set-cookie: 958be8703366f2597197d832c2bd0dcb=a18168f592f7002587d637e460b2c2e95ff9145681a896e2a37780827015a2f4a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%22958be8703366f2597197d832c2bd0dcb%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Wed, 07-Dec-2022 15:35:26 GMT; Max-Age=86400; path=/; HttpOnly
content-length: 346
content-type: text/html; charset=UTF-8
date: Tue, 06 Dec 2022 15:35:26 GMT
server: Apache/2.4.52 (codeit) OpenSSL/1.1.1m PHP/7.4.27
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c88612b61cd9a0ccfd2ca169859d142
c7f7ff71ff54995591c803cde86d73c5a69facb5
a34166c4d89a68d2ccdc9a6b9354071ae4660fb059905fbc68715f31a3eb07ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A34166C4D89A68D2CCDC9A6B9354071AE4660FB059905FBC68715F31A3EB07CA"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11699
Expires: Tue, 06 Dec 2022 18:50:25 GMT
Date: Tue, 06 Dec 2022 15:35:26 GMT
Connection: keep-alive
lookandfind.me/s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=dehydrer.no&s1=623619497&s2=gamboge-moose&s3=lima-ave-E70abr6f&s5=cf
200 OK 939 B URL HTTP/1.1 lookandfind.me/s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=dehydrer.no&s1=623619497&s2=gamboge-moose&s3=lima-ave-E70abr6f&s5=cf
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document, ASCII text, with very long lines (939), with no line terminators
Hash 6bb2ebae1d4c37fdb3e315abd4f5f167
85c914d4cd5e5c894f4016ca75ec303e1971dcf4
60516a55c74a1ff43d1bfb5fcf5a6fb5b947ab67426a41945728faf637a2a0d8
GET /s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=dehydrer.no&s1=623619497&s2=gamboge-moose&s3=lima-ave-E70abr6f&s5=cf HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:35:26 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.10
Set-Cookie: 2a5465a36edfe2f0f3e03c79e0027940=46f8d4f51b9032d9ee72c5b4f9bb2fe33b3d5ca9d4a1ff11a7ab004295032647a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%222a5465a36edfe2f0f3e03c79e0027940%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Wed, 07-Dec-2022 15:35:26 GMT; Max-Age=86400; path=/; HttpOnly
Referrer-Policy: strict-origin-when-cross-origin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%3DQnJGN2MvU09uTEVIWUVUSWVrSm5MV20vdEVlK0RVVWpVSURvYThuR0U3NDRLRTloRFNoNmlIRUwvemJiSkJXc2xZLzN0amErUnhZTjliT1JyVTVKenZWcWxYODNJOGI0alhsZzdKYTJhVEFVK2NJUWI2MTNEclYyQnYyOVRwalZaYXJJNEM2MWYvbStrdklncS9PdVVNeC9LamVnb01IYlhPTzhHNkp1NldMQ2hkYUFFZE44QlVzL3RrNlVkclJJcGk0V2ZRNzJqZk5yMzNqVUZQVzNnTTQvSjROODQ0M3pLM2wxZWhWckx1V3lScnZyajl2dm9lOGJlMnBBY3hxU3BNNURWUzVsd3gvSktOMnQ4WndKK2VLVEpQQ0pWdGRMOHVHVHRZeFY4QWd6ZjFkMlZrU29MVTNBdWhmbTNLcDU2SDE4Tmc2aGtDOVV4U1VBeVVxVWdXYXNTRG9Id2laemorTzZiMkQ5SGg3MFN1WVNIWE9IMFE4eU5kSmtXOWVXQ0FQNmtoeUZNVGJsakZ0ZStSNmh0Y2ljNWVsNTFKOU01RXdqRHc9PQ%3D%3D%26i%3DFx20yNThFe__XTgB%26placementId%3D7e1bed59642363555c4bee82bed1aa8d&h=000aea90b17335871feebb75a54c10f7
200 OK 867 B URL HTTP/1.1 lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3DFx20yNThFe__XTgB%26placementId%3D7e1bed59642363555c4bee82bed1aa8d&h=000aea90b17335871feebb75a54c10f7
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (867), with no line terminators
Hash 470cfaa405c12453791a543fbcec0022
c4259b8e5c805d8fa7ce3568b1bcddc6d624c2c0
33f6d74fd094c79214182802cc748dd0e7b4b752810426d11ef32bc02a13ec5b
GET /s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%3DQnJGN2MvU09uTEVIWUVUSWVrSm5MV20vdEVlK0RVVWpVSURvYThuR0U3NDRLRTloRFNoNmlIRUwvemJiSkJXc2xZLzN0amErUnhZTjliT1JyVTVKenZWcWxYODNJOGI0alhsZzdKYTJhVEFVK2NJUWI2MTNEclYyQnYyOVRwalZaYXJJNEM2MWYvbStrdklncS9PdVVNeC9LamVnb01IYlhPTzhHNkp1NldMQ2hkYUFFZE44QlVzL3RrNlVkclJJcGk0V2ZRNzJqZk5yMzNqVUZQVzNnTTQvSjROODQ0M3pLM2wxZWhWckx1V3lScnZyajl2dm9lOGJlMnBBY3hxU3BNNURWUzVsd3gvSktOMnQ4WndKK2VLVEpQQ0pWdGRMOHVHVHRZeFY4QWd6ZjFkMlZrU29MVTNBdWhmbTNLcDU2SDE4Tmc2aGtDOVV4U1VBeVVxVWdXYXNTRG9Id2laemorTzZiMkQ5SGg3MFN1WVNIWE9IMFE4eU5kSmtXOWVXQ0FQNmtoeUZNVGJsakZ0ZStSNmh0Y2ljNWVsNTFKOU01RXdqRHc9PQ%3D%3D%26i%3DFx20yNThFe__XTgB%26placementId%3D7e1bed59642363555c4bee82bed1aa8d&h=000aea90b17335871feebb75a54c10f7 HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 2a5465a36edfe2f0f3e03c79e0027940=46f8d4f51b9032d9ee72c5b4f9bb2fe33b3d5ca9d4a1ff11a7ab004295032647a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%222a5465a36edfe2f0f3e03c79e0027940%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:35:26 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.10
Referrer-Policy: strict-origin-when-cross-origin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b820de7943a1c9a56253dd1af476dd94
c5adc4242ac452aeac015eff52575ca9e820281d
475635b6695de9727ed59e748f096863a5861568e0bcaa2e4211eff80fbbbe45
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "475635B6695DE9727ED59E748F096863A5861568E0BCAA2E4211EFF80FBBBE45"
Last-Modified: Sun, 04 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1022
Expires: Tue, 06 Dec 2022 15:52:28 GMT
Date: Tue, 06 Dec 2022 15:35:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4674
Expires: Tue, 06 Dec 2022 16:53:21 GMT
Date: Tue, 06 Dec 2022 15:35:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4674
Expires: Tue, 06 Dec 2022 16:53:21 GMT
Date: Tue, 06 Dec 2022 15:35:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4674
Expires: Tue, 06 Dec 2022 16:53:21 GMT
Date: Tue, 06 Dec 2022 15:35:27 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b15136d60fd0a5e0f657a4f5c75d540f
36082b7329d473829178f280cb71a83b1531e486
79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: YVR50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tGtiCE9C3j0BUruNaFN2j1mKxCSouLmocmTXpmLMBJaLNyVwkXu1gQ==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:09:28 GMT
age: 62759
etag: "36082b7329d473829178f280cb71a83b1531e486"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffaf0de04-19bf-4944-9ac5-5178afafb192.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffaf0de04-19bf-4944-9ac5-5178afafb192.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7f2c354a00ab51d4a41221b6bf191c10
01ceb7233fe05ad8dff3a0a43eef879ea2b83ec4
7d3c8417e1db0db41ceb8b4bf3f506864392dd1ad29319a06a8a6055f6f2ed12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffaf0de04-19bf-4944-9ac5-5178afafb192.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11352
x-amzn-requestid: 7c3fc7bb-eb1f-46ec-8e92-b6ffc6261848
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSwuF1ToAMFiIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64d1-7c53152a279f00595b9886bd;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:25 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: EQorA5VTb0s2BEIWBkdkhDho-bLdLVvu8LnAIQsQqsIjgBLneYqCzg==
via: 1.1 b6d577696b14c86cbfeb5b3459f38c50.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:48:22 GMT
age: 64025
etag: "01ceb7233fe05ad8dff3a0a43eef879ea2b83ec4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3801236dc22938e1cc18947e90ea5326
5979d7dc3ba0eb61947282a4adeac8208b4148ae
3bd4eab29590ec3c316597abd2be65281cd9a6137add037ad57c093f1fca12e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6aff31b2-ef3e-4782-ae28-38f9aee8b1b7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5995
x-amzn-requestid: 25b34277-c486-4642-aea7-21e0598babc3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSzOGGjoAMF4kw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64e1-6f43ab8e0c1a5260327bce11;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YzpOZW9e-54LuSSOigtmFRb0sUGpIRpqZ-UtINp-B_Uzk6lFPnb6dw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:25:46 GMT
age: 61781
etag: "5979d7dc3ba0eb61947282a4adeac8208b4148ae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00b01871-cd98-4bab-b47d-4a29bb438277.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00b01871-cd98-4bab-b47d-4a29bb438277.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2e11524d75503e35c404d6c9a12ac540
5626b75f5c2523f1a0fc301839a06a4e2407f106
d5eb74d026014c0a68893bde1107a9a111b1f0af835e28bb740308017ef80b7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00b01871-cd98-4bab-b47d-4a29bb438277.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9354
x-amzn-requestid: fb2dad44-2f8c-4f02-bbc5-405e9586e5af
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmctYGLdoAMFyDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e55-28b5680933de0ff4208240be;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0mv3_bOi4kymDF7KB35kOjvgE9egGYnCMAXLGIse_PJE8bBMGLxdqw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 04:07:10 GMT
age: 41297
etag: "5626b75f5c2523f1a0fc301839a06a4e2407f106"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8b8df80-ffce-4960-a0e3-83eaf7ee52f3.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8b8df80-ffce-4960-a0e3-83eaf7ee52f3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ebd3528452aecd80e39bbf82d3f71f2c
eaa956309d27052d466f7c4bd75b3bdf8443f251
680066dadbddc2cd7179ad5bdfbf9b2014ea601561e585d18dfcda73512ae84a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8b8df80-ffce-4960-a0e3-83eaf7ee52f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6352
x-amzn-requestid: cd970b83-2a99-4e38-afed-580d733040a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSuWF1bIAMFcpg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64c2-1ba552306e857bb37424d679;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: m_QprITRv6aKoKB1VsoqgcIM18ZcHIrJk2gs7710QElOJBtrcskrJw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:41:55 GMT
etag: "eaa956309d27052d466f7c4bd75b3bdf8443f251"
content-type: image/jpeg
age: 64412
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 7e5ad4121411ba414363ddb3e423cf8c
fe08cede309cac27b94c7c99975b6cb10eea3036
6d457360466f2b57f859d0aa9c1b919329087d57f455fa6a7e81a93c0260c571
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4732
Cache-Control: max-age=98057
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:27 GMT
Etag: "638e2acc-1d7"
Expires: Wed, 07 Dec 2022 18:49:44 GMT
Last-Modified: Mon, 05 Dec 2022 17:30:52 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 99d1ff8fa2e095dcf2bda3d1e1af1221
f914f04a0e1fb45a221d31d2105bfc73015b03e6
90325d4299a44dbd213857ada6f6880db8c33ad61685cfcb60c4a2455a84cf87
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10183
x-amzn-requestid: 0cdea572-aab4-4d52-948b-976170a787a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_uLHQZoAMF4hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1327-7948052f39c4f6071b4a0e0d;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WDqUFMBT59kulx4WLxNh5XTsHzr4_u524juvZJnGMYBH-mUaJclnTg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:49:44 GMT
age: 63943
etag: "f914f04a0e1fb45a221d31d2105bfc73015b03e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
api.yadore.com/v2/r?e=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&i=Fx20yNThFe__XTgB&placementId=7e1bed59642363555c4bee82bed1aa8d
302 Found 33 kB URL HTTP/2 api.yadore.com/v2/r?e=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&i=Fx20yNThFe__XTgB&placementId=7e1bed59642363555c4bee82bed1aa8d
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13002)
Hash 5e55a5b9765215f48d340fa3217f0b15
91aca51f13e3f84ac2e155b3f3e0d94ac6396726
e89075999b7cc908c628ab2d971050fc6bd0dd64ce42ff20687cec574a1e8eaa
GET /v2/r?e=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&i=Fx20yNThFe__XTgB&placementId=7e1bed59642363555c4bee82bed1aa8d HTTP/1.1
Host: api.yadore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
date: Tue, 06 Dec 2022 15:35:26 GMT
location: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1670334306876&.sig=xc_nVyhJF.xf5nNxoe9lmeJw7Bs-&affiliationId=96965886&comId=100521958&country=no&offerId=1f7e078121eb0d12acef0aed27188f5a&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=c3ebf72b6769249abb813df1633abbb2fa457e7918b51c767d074088672f385f&custom2=SRdytlITOR16&custom3=false
server: nginx
x-powered-by: PHP/8.0.25
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251&clickId=107698154_1670340927143_987006
200 OK 68 B URL HTTP/1.1 no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251&clickId=107698154_1670340927143_987006
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a79ff72c5f4eb11018d701bd12f95a4f14d3a6f12326bb106c14a217f3a408220c22496ade58e3620d582766aeacff37f5141708de335457453f6be5b04aa0b5391d7e0a10de2de9a497f8a5e2d5a81a19ffd5b2aaafcd58a0ab9b93a29f71e53f7c416406d13df5b8d329f1314e9833128e8a849580437f8b9af66ee55601276aeb4496225645e8d1aed08348dce3f9486768b16ec26a05402378ca94bbed12d7fadddc0d33651edf36d22c50c0f026261958f1523a7d165976095bed500aa0428230ba9288a2fbb4587c7476c89c4b8522dbc46224eb286f0c0e22ba8a8ccd5e97970a18749d4378f8b919ef256fc89a42d0d45d0947c3062e2c061c1b07f86f&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251&clickId=107698154_1670340927143_987006 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1670334306876&.sig=xc_nVyhJF.xf5nNxoe9lmeJw7Bs-&affiliationId=96965886&comId=100521958&country=no&offerId=1f7e078121eb0d12acef0aed27188f5a&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=c3ebf72b6769249abb813df1633abbb2fa457e7918b51c767d074088672f385f&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=1hikc6iQEqxHbFfvpqM4lRxkquPzHW_XOu3r~ywhSLmQhG4P-4tt-p4UlUNxIypHxEGKMmkaE4plhWbYidqU-6PVkiY63Tw_rtZHcFMEqCRjdZ0QYkb-p1JYUIg-UD-C; kelkooID=a4c629a-184e813dea7-4ca33
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:35:27 GMT
Request-Time: PT0.001467S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: image/png
Content-Length: 68
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=98
Connection: Keep-Alive
no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251&clickId=107698154_1670340927143_987006
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a79ff72c5f4eb11018d701bd12f95a4f14d3a6f12326bb106c14a217f3a408220c22496ade58e3620d582766aeacff37f5141708de335457453f6be5b04aa0b5391d7e0a10de2de9a497f8a5e2d5a81a19ffd5b2aaafcd58a0ab9b93a29f71e53f7c416406d13df5b8d329f1314e9833128e8a849580437f8b9af66ee55601276aeb4496225645e8d1aed08348dce3f9486768b16ec26a05402378ca94bbed12d7fadddc0d33651edf36d22c50c0f026261958f1523a7d165976095bed500aa0428230ba9288a2fbb4587c7476c89c4b8522dbc46224eb286f0c0e22ba8a8ccd5e97970a18749d4378f8b919ef256fc89a42d0d45d0947c3062e2c061c1b07f86f&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251&clickId=107698154_1670340927143_987006
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251&clickId=107698154_1670340927143_987006 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1670334306876&.sig=xc_nVyhJF.xf5nNxoe9lmeJw7Bs-&affiliationId=96965886&comId=100521958&country=no&offerId=1f7e078121eb0d12acef0aed27188f5a&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=c3ebf72b6769249abb813df1633abbb2fa457e7918b51c767d074088672f385f&custom2=SRdytlITOR16&custom3=false
Content-Type: text/plain;charset=utf-8
Content-Length: 536
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=1hikc6iQEqxHbFfvpqM4lRxkquPzHW_XOu3r~ywhSLmQhG4P-4tt-p4UlUNxIypHxEGKMmkaE4plhWbYidqU-6PVkiY63Tw_rtZHcFMEqCRjdZ0QYkb-p1JYUIg-UD-C; kelkooID=a4c629a-184e813dea7-4ca33; _ga=GA1.2.1244516179.1670340927; _gid=GA1.2.1374078947.1670340927
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:35:27 GMT
Request-Time: PT0.002772S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=99
Connection: Keep-Alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb4f46f8de4a4cf95e35c5191bed914f
460fce815f27bfd4c94f3978e9826299b5cee17c
e55b3ad4060cab5838cdd6ba2c47065066eb4b64c1f34df5f8143b40fc4fdddc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E55B3AD4060CAB5838CDD6BA2C47065066EB4B64C1F34DF5F8143B40FC4FDDDC"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2474
Expires: Tue, 06 Dec 2022 16:16:41 GMT
Date: Tue, 06 Dec 2022 15:35:27 GMT
Connection: keep-alive
dd.kelkoogroup.net/tags.js
200 OK 43 kB URL HTTP/2 dd.kelkoogroup.net/tags.js
IP
File type ASCII text, with very long lines (65432)
Hash 1e9601b9f2fcd0d1d742e87fd046749c
88431bfdad7d8be4cf62396a57aebcec0de09827
4bcdd319b49ac3e4683e774aefe69157100f9ebee3bc428e425cfc93a7da9feb
GET /tags.js HTTP/1.1
Host: dd.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=1hikc6iQEqxHbFfvpqM4lRxkquPzHW_XOu3r~ywhSLmQhG4P-4tt-p4UlUNxIypHxEGKMmkaE4plhWbYidqU-6PVkiY63Tw_rtZHcFMEqCRjdZ0QYkb-p1JYUIg-UD-C; kelkooID=a4c629a-184e813dea7-4ca33
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 43164
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Thu, 17 Nov 2022 15:19:16 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 f59f3000d5bbed733e1102d0cab025be.cloudfront.net (CloudFront), 1.1 9dc04feb591f6b5ae6ea4527a23d28da.cloudfront.net (CloudFront)
date: Tue, 06 Dec 2022 15:19:37 GMT
cache-control: max-age=3600, public
expires: Tue, 06 Dec 2022 16:19:32 GMT
etag: "33bf8-5edac1cc94a7f-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: LHR50-P2, ARN54-C1
x-amz-cf-id: 9y_URrZpsUlRbVvlmTGxGxg8qvnF9GA2wCTgnj5bIHgApC29qfEI1A==
age: 955
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/favicon.ico
403 Forbidden 0 B URL HTTP/1.0 no-go.kelkoogroup.net/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1670334306876&.sig=xc_nVyhJF.xf5nNxoe9lmeJw7Bs-&affiliationId=96965886&comId=100521958&country=no&offerId=1f7e078121eb0d12acef0aed27188f5a&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=c3ebf72b6769249abb813df1633abbb2fa457e7918b51c767d074088672f385f&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=1hikc6iQEqxHbFfvpqM4lRxkquPzHW_XOu3r~ywhSLmQhG4P-4tt-p4UlUNxIypHxEGKMmkaE4plhWbYidqU-6PVkiY63Tw_rtZHcFMEqCRjdZ0QYkb-p1JYUIg-UD-C; kelkooID=a4c629a-184e813dea7-4ca33; _ga=GA1.2.1244516179.1670340927; _gid=GA1.2.1374078947.1670340927
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.0 403 Forbidden
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251&clickId=107698154_1670340927143_987006&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a79ff72c5f4eb11018d701bd12f95a4f14d3a6f12326bb106c14a217f3a408220c22496ade58e3620d582766aeacff37f5141708de335457453f6be5b04aa0b5391d7e0a10de2de9a497f8a5e2d5a81a19ffd5b2aaafcd58a0ab9b93a29f71e53f7c416406d13df5b8d329f1314e9833128e8a849580437f8b9af66ee55601276aeb4496225645e8d1aed08348dce3f9486768b16ec26a05402378ca94bbed12d7fadddc0d33651edf36d22c50c0f026261958f1523a7d165976095bed500aa0428230ba9288a2fbb4587c7476c89c4b8522dbc46224eb286f0c0e22ba8a8ccd5e97970a18749d4378f8b919ef256fc89a42d0d45d0947c3062e2c061c1b07f86f&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251&clickId=107698154_1670340927143_987006&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a79ff72c5f4eb11018d701bd12f95a4f14d3a6f12326bb106c14a217f3a408220c22496ade58e3620d582766aeacff37f5141708de335457453f6be5b04aa0b5391d7e0a10de2de9a497f8a5e2d5a81a19ffd5b2aaafcd58a0ab9b93a29f71e53f7c416406d13df5b8d329f1314e9833128e8a849580437f8b9af66ee55601276aeb4496225645e8d1aed08348dce3f9486768b16ec26a05402378ca94bbed12d7fadddc0d33651edf36d22c50c0f026261958f1523a7d165976095bed500aa0428230ba9288a2fbb4587c7476c89c4b8522dbc46224eb286f0c0e22ba8a8ccd5e97970a18749d4378f8b919ef256fc89a42d0d45d0947c3062e2c061c1b07f86f&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251&clickId=107698154_1670340927143_987006&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1670334306876&.sig=xc_nVyhJF.xf5nNxoe9lmeJw7Bs-&affiliationId=96965886&comId=100521958&country=no&offerId=1f7e078121eb0d12acef0aed27188f5a&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=c3ebf72b6769249abb813df1633abbb2fa457e7918b51c767d074088672f385f&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=1hikc6iQEqxHbFfvpqM4lRxkquPzHW_XOu3r~ywhSLmQhG4P-4tt-p4UlUNxIypHxEGKMmkaE4plhWbYidqU-6PVkiY63Tw_rtZHcFMEqCRjdZ0QYkb-p1JYUIg-UD-C; kelkooID=a4c629a-184e813dea7-4ca33; _ga=GA1.2.1244516179.1670340927; _gid=GA1.2.1374078947.1670340927
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
Date: Tue, 06 Dec 2022 15:35:27 GMT
leadId: dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251
clickId: 107698154_1670340927143_987006
country: no
Location: https://www.dehydrer.no/products/mattorke-med-stalgitterbrett?kk=a4c629a-184e813dea7-4ca33&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Dehydrer+St%C3%B6ckli+d%C5%8Drrex+dehydrator+-+mat
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.015018S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=7MAFm4AM6ggTeLueE_IL2ee3m7VZdjoVNLFdofkRO1F7XBrgKXsDnGJs~vs9QHceFR6Vu_b7Ia_CL9fI_KqRkupzTG3x6yrkDKZ1epIK8TqceLTH8j3XGPe~XEIeQkLa; Max-Age=31536000; Expires=Wed, 06 Dec 2023 15:35:27 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=99
Connection: Keep-Alive
Content-Type: text/plain
ocsp.usertrust.com/
200 OK 471 B IP
Hash befe05fb3c85ee9a74ab672aaecb9aa6
a6ffd7600387830e3e1a3173f08d347aea042679
238e4f98a73ff58ae548e020a3c8d36967d5e76ed7051502abb530fc769f4ea2
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:35:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 13:51:18 GMT
Expires: Tue, 13 Dec 2022 13:51:17 GMT
Etag: "a6ffd7600387830e3e1a3173f08d347aea042679"
Cache-Control: max-age=602318,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 624
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7756176d4f27b52d-OSL
api-js.datadome.co/js/
200 OK 236 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e8f35f92463944372d2cf2394f0b720d
8c1ae456cd3607029c16bb4c14dbf5c9985e3497
0ed11fdae866e3a44d88da39e32c72322186959b9f56ba10bbbc483363c97203
POST /js/ HTTP/1.1
Host: api-js.datadome.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 4137
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:27 GMT
content-type: application/json;charset=utf-8
content-length: 236
server: DataDome
access-control-allow-origin: *
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
expires: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee1e47e0c9d48684c9797715d370b604
44f2cdb550db159ac3c651b6e8d0cc2dd1bda006
fd58013ab6e276ddb167b54321fc97d978cad6183f318fb829fdf7b63d3a97c9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD58013AB6E276DDB167B54321FC97D978CAD6183F318FB829FDF7B63D3A97C9"
Last-Modified: Sun, 04 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21578
Expires: Tue, 06 Dec 2022 21:35:05 GMT
Date: Tue, 06 Dec 2022 15:35:27 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee1e47e0c9d48684c9797715d370b604
44f2cdb550db159ac3c651b6e8d0cc2dd1bda006
fd58013ab6e276ddb167b54321fc97d978cad6183f318fb829fdf7b63d3a97c9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD58013AB6E276DDB167B54321FC97D978CAD6183F318FB829FDF7B63D3A97C9"
Last-Modified: Sun, 04 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21578
Expires: Tue, 06 Dec 2022 21:35:05 GMT
Date: Tue, 06 Dec 2022 15:35:27 GMT
Connection: keep-alive
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1670334306876%26.sig%3Dxc_nVyhJF.xf5nNxoe9lmeJw7Bs-%26affiliationId%3D96965886%26comId%3D100521958%26country%3Dno%26offerId%3D1f7e078121eb0d12acef0aed27188f5a%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3Dc3ebf72b6769249abb813df1633abbb2fa457e7918b51c767d074088672f385f%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100521958%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Dehydrer.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1244516179.1670340927&tid=UA-168544891-6&_gid=1374078947.1670340927&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251&cd3=100521958&cd4=a4c629a-184e813dea7-4ca33&cd5=&cd6=96965886%7C100521958%7C&z=1094627215
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1670334306876%26.sig%3Dxc_nVyhJF.xf5nNxoe9lmeJw7Bs-%26affiliationId%3D96965886%26comId%3D100521958%26country%3Dno%26offerId%3D1f7e078121eb0d12acef0aed27188f5a%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3Dc3ebf72b6769249abb813df1633abbb2fa457e7918b51c767d074088672f385f%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100521958%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Dehydrer.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1244516179.1670340927&tid=UA-168544891-6&_gid=1374078947.1670340927&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251&cd3=100521958&cd4=a4c629a-184e813dea7-4ca33&cd5=&cd6=96965886%7C100521958%7C&z=1094627215
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1670334306876%26.sig%3Dxc_nVyhJF.xf5nNxoe9lmeJw7Bs-%26affiliationId%3D96965886%26comId%3D100521958%26country%3Dno%26offerId%3D1f7e078121eb0d12acef0aed27188f5a%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3Dc3ebf72b6769249abb813df1633abbb2fa457e7918b51c767d074088672f385f%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100521958%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Dehydrer.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1244516179.1670340927&tid=UA-168544891-6&_gid=1374078947.1670340927&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1670340927151_2609251&cd3=100521958&cd4=a4c629a-184e813dea7-4ca33&cd5=&cd6=96965886%7C100521958%7C&z=1094627215 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Tue, 06 Dec 2022 15:35:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24cc8b33d7d74bbaddfebd3e5d80d04f
c4d5c31e9e5355c4dabc68f24676d8091d3c2b7d
3cf91bca49276560663b0476ce37d17fa0655fe21a9aeb7e83dd2614c73726d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF91BCA49276560663B0476CE37D17FA0655FE21A9AEB7E83DD2614C73726D2"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13943
Expires: Tue, 06 Dec 2022 19:27:50 GMT
Date: Tue, 06 Dec 2022 15:35:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24cc8b33d7d74bbaddfebd3e5d80d04f
c4d5c31e9e5355c4dabc68f24676d8091d3c2b7d
3cf91bca49276560663b0476ce37d17fa0655fe21a9aeb7e83dd2614c73726d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF91BCA49276560663B0476CE37D17FA0655FE21A9AEB7E83DD2614C73726D2"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13943
Expires: Tue, 06 Dec 2022 19:27:50 GMT
Date: Tue, 06 Dec 2022 15:35:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24cc8b33d7d74bbaddfebd3e5d80d04f
c4d5c31e9e5355c4dabc68f24676d8091d3c2b7d
3cf91bca49276560663b0476ce37d17fa0655fe21a9aeb7e83dd2614c73726d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF91BCA49276560663B0476CE37D17FA0655FE21A9AEB7E83DD2614C73726D2"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13943
Expires: Tue, 06 Dec 2022 19:27:50 GMT
Date: Tue, 06 Dec 2022 15:35:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24cc8b33d7d74bbaddfebd3e5d80d04f
c4d5c31e9e5355c4dabc68f24676d8091d3c2b7d
3cf91bca49276560663b0476ce37d17fa0655fe21a9aeb7e83dd2614c73726d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF91BCA49276560663B0476CE37D17FA0655FE21A9AEB7E83DD2614C73726D2"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13943
Expires: Tue, 06 Dec 2022 19:27:50 GMT
Date: Tue, 06 Dec 2022 15:35:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24cc8b33d7d74bbaddfebd3e5d80d04f
c4d5c31e9e5355c4dabc68f24676d8091d3c2b7d
3cf91bca49276560663b0476ce37d17fa0655fe21a9aeb7e83dd2614c73726d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF91BCA49276560663B0476CE37D17FA0655FE21A9AEB7E83DD2614C73726D2"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13942
Expires: Tue, 06 Dec 2022 19:27:50 GMT
Date: Tue, 06 Dec 2022 15:35:28 GMT
Connection: keep-alive
cdn.shopify.com/s/files/1/0091/4826/8604/files/logo_trans_a81a5a9f-c558-4cf7-a1e9-87396d0cd6b6_300x300.png?v=1623874014
200 OK 4.5 kB URL HTTP/2 cdn.shopify.com/s/files/1/0091/4826/8604/files/logo_trans_a81a5a9f-c558-4cf7-a1e9-87396d0cd6b6_300x300.png?v=1623874014
IP
File type ISO Media, AVIF Image\012- data
Hash 2e9351593a4ea53a3e8fcfff65bcffe9
2cdbea8733f3402a03ee20cb5e882e47acc973d4
3372478e5cd97c0854bacc75f910459addff578364004f6a052ca3cc666dced0
GET /s/files/1/0091/4826/8604/files/logo_trans_a81a5a9f-c558-4cf7-a1e9-87396d0cd6b6_300x300.png?v=1623874014 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: image/avif
content-length: 4514
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0091/4826/8604/files/logo_trans_a81a5a9f-c558-4cf7-a1e9-87396d0cd6b6_300x300.png>; rel="canonical"
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 2994656f-1d5a-4df7-ad6c-725a9dfd221a
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
last-modified: Wed, 24 Aug 2022 21:20:21 GMT
cf-cache-status: HIT
age: 8853636
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9QxJT5cSSIMkbik9gJYpu1qkSBe69RRnIUGhfUhpwwkLFo94VEqIcPLJIoa0nuVneYLJmoCB9i5TP24X%2BZME2VcGFrIddChdDjNJCSVNdgucW9%2BNtoP5XFMpqKswwsAsqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=270.617, imageryFetch;dur=53.133, imageryProcess;dur=216.460;desc="image", cfRequestDuration;dur=10.999918
server: cloudflare
cf-ray: 7756177018b2b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0091/4826/8604/files/Logo_Stockli_rgb_large.png?v=1598193160
200 OK 3.0 kB URL HTTP/2 cdn.shopify.com/s/files/1/0091/4826/8604/files/Logo_Stockli_rgb_large.png?v=1598193160
IP
File type ISO Media, AVIF Image\012- data
Hash 9baa47235b4ea578e2bef5a52f2f20a6
14a56f4bb9f61e8c1ece73ef055c46a4895fa2fa
664c31b64b41ed442d39ce7a15c240ab53cfe204fdff091ad07f2942faccfcc4
GET /s/files/1/0091/4826/8604/files/Logo_Stockli_rgb_large.png?v=1598193160 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: image/avif
content-length: 3025
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0091/4826/8604/files/Logo_Stockli_rgb_large.png>; rel="canonical"
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 8863c584-610b-4423-90be-7e069735665b
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
last-modified: Fri, 26 Aug 2022 17:47:12 GMT
cf-cache-status: HIT
age: 8804896
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ursgkLKd3gTj4kmuIIP9GB%2FbRLbQjpHc6qQfgPq3YBlMLLUQubb%2BZWgYzYefxDEL%2BJgytcaD00PkJ8WrVHSAiXT6BvgiYjU1wuBijOf9TIAOl74iDZAgPbC49Ziv13g9oQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=279.507, imageryFetch;dur=122.655, imageryProcess;dur=155.980;desc="image", cfRequestDuration;dur=12.000084
server: cloudflare
cf-ray: 7756177018b4b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.shopify.com/shopifycloud/shopify/assets/storefront/load_feature-a5f1052ed1a8af5abd2f31dfef1a6c95288a6be319e39bfd7072f5f196d63612.js
200 OK 3.7 kB URL HTTP/2 cdn.shopify.com/shopifycloud/shopify/assets/storefront/load_feature-a5f1052ed1a8af5abd2f31dfef1a6c95288a6be319e39bfd7072f5f196d63612.js
IP
File type ASCII text, with very long lines (10197), with no line terminators
Hash f064902537338153d6ac37e7cde7bfcc
3f6ffe3bf78790b9759f3a71b0c6758dd78ddbe2
65942ea2bd8158370f0e302d8219247f92ea3fd5e758d95c5f90f04315651c57
GET /shopifycloud/shopify/assets/storefront/load_feature-a5f1052ed1a8af5abd2f31dfef1a6c95288a6be319e39bfd7072f5f196d63612.js HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dehydrer.no
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31556952, immutable
link: <https://cdn.shopify.com/shopifycloud/shopify/assets/storefront/load_feature-a5f1052ed1a8af5abd2f31dfef1a6c95288a6be319e39bfd7072f5f196d63612.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 8d4d4668-04a2-4f98-8b69-a61188647825
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
last-modified: Wed, 16 Nov 2022 00:46:35 GMT
cf-cache-status: HIT
age: 1755903
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9IkC5AIgW4cTvuupxsjkDo15XHG4%2FvKY5u%2BhNFG4TxyeAJtw0OjdwfFdwYgLFr6c%2FMfZ8N3cxmJVby6Mvvtub5Vqe9bT%2B4kVVf3rW%2FCHEwymUBezcBifNHY%2BGMDdw5aQjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=23.279, imageryFetch;dur=23.104, cfRequestDuration;dur=62.000036
server: cloudflare
cf-ray: 775617701f220b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/timber.scss.css?v=177815308897072677291623875163
200 OK 14 kB URL HTTP/2 cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/timber.scss.css?v=177815308897072677291623875163
IP
File type ASCII text, with very long lines (54650)
Hash 146dbcf61afaea8a3a5946722a264511
4217eeb8232533074beab4598d24b5c8a940c3a8
e9609d5f0c362c720a4de1f89c48224454344b10791f9725133ef4eef6582000
GET /s/files/1/0091/4826/8604/t/6/assets/timber.scss.css?v=177815308897072677291623875163 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: text/css
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/timber.scss.css>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: eaec4212-a5da-4597-945c-70af1e21eb9c
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
last-modified: Wed, 24 Aug 2022 21:20:20 GMT
cf-cache-status: HIT
age: 8853637
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RkuW0Hfo1C%2BLS8QxhTtik%2BpqTxxduKe4fO%2FHJojFSYSNA2w21JI%2Fl7IlxZrkwileGnGUc4xcmq3GQ%2BqwDVcx449Fv8KxNEQ63tz9%2BLHImw72CikLEgJtcSD6fQTFdRRKOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=527.638, imageryFetch;dur=46.550, imageryProcess;dur=473.992;desc="scss", cfRequestDuration;dur=9.999990
server: cloudflare
cf-ray: 7756177028d1b506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/theme.scss.css?v=19243550261346047811623875163
200 OK 21 kB URL HTTP/2 cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/theme.scss.css?v=19243550261346047811623875163
IP
File type ASCII text, with very long lines (40204)
Hash 0755edba390885928a2b30ea9ef45b35
f7c27d663acf22bf20291ea307fe3699c4fec211
70cc9208c23fc61e7cc1bd7dab58fa45c6e68947e340c8197a196979ede1ad80
GET /s/files/1/0091/4826/8604/t/6/assets/theme.scss.css?v=19243550261346047811623875163 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: text/css
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/theme.scss.css>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 5ebbd48f-cb75-4d7f-a770-09e17c698d76
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-central1,us-central1
last-modified: Sun, 16 Oct 2022 21:38:44 GMT
cf-cache-status: HIT
age: 1703493
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X1lIsGEnPTEoOB9cEydJlySxeFw5UjqCHeshWrwIFUWbdfRn9P3I9lsixv3F4%2FxyTXD80Sec9VBKlMngjDgJIvIg8x7UekKuIaYPpj5XuwGH4uIqkJMKt6BjPgv%2F5gvJ1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=495.465, imageryFetch;dur=73.343, imageryProcess;dur=414.226;desc="scss", cfRequestDuration;dur=55.999994
server: cloudflare
cf-ray: 7756177018afb506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/jquery-2.2.3.min.js?v=58211863146907186831623873909
200 OK 70 kB URL HTTP/2 cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/jquery-2.2.3.min.js?v=58211863146907186831623873909
IP
File type ASCII text, with very long lines (32065)
Hash 294dce413fb9a436298d107601ff3a4a
786555f53414411900e0c645ed4057ee36fd9a8a
bf2ca3e82b1168e7235d2776e9600b0960117595c859fac69305b896fb13206f
GET /s/files/1/0091/4826/8604/t/6/assets/jquery-2.2.3.min.js?v=58211863146907186831623873909 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/jquery-2.2.3.min.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 87b19771-d094-4b14-bd35-34a44c9dbda0
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-central1,us-central1
last-modified: Thu, 25 Aug 2022 04:02:54 GMT
cf-cache-status: HIT
age: 8868682
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MRnxy4NFCT66lQC%2B9cnol3%2Bz88dSfi32kr18TjkA7hB3ZoVJFF1Jqm4xPznXUTJTriUH2NRTCf%2FIw4WBNFxvFAyN2%2FDOu93qN%2BOllrHBcjLk1ynF8U4mYBapD%2Bk1Ll3epQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=58.428, imageryFetch;dur=58.291, cfRequestDuration;dur=9.999990
server: cloudflare
cf-ray: 7756177028cfb506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.dehydrer.no/products/mattorke-med-stalgitterbrett?kk=a4c629a-184e813dea7-4ca33&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Dehydrer+St%C3%B6ckli+d%C5%8Drrex+dehydrator+-+mat
200 OK 30 kB URL HTTP/2 www.dehydrer.no/products/mattorke-med-stalgitterbrett?kk=a4c629a-184e813dea7-4ca33&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Dehydrer+St%C3%B6ckli+d%C5%8Drrex+dehydrator+-+mat
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6495)
Hash 626be2fecba3e21add901321c49c2545
c0ff247e0f34351968bd27bf3779a91eeee34e27
4a535e8af42e4811ddcdfaccb0f0dc30b8b610d780638ed3dc1335269023e5a8
GET /products/mattorke-med-stalgitterbrett?kk=a4c629a-184e813dea7-4ca33&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=Dehydrer+St%C3%B6ckli+d%C5%8Drrex+dehydrator+-+mat HTTP/1.1
Host: www.dehydrer.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:27 GMT
content-type: text/html; charset=utf-8
x-sorting-hat-podid: 71
x-sorting-hat-shopid: 9148268604
x-storefront-renderer-rendered: 1
set-cookie: keep_alive=e368ef16-d140-4e4e-bf68-e323cf38a68d; path=/; expires=Tue, 06 Dec 2022 16:05:27 GMT; HttpOnly; SameSite=Lax
secure_customer_sig=; path=/; expires=Wed, 06 Dec 2023 15:35:27 GMT; secure; HttpOnly; SameSite=Lax
localization=NO; path=/; expires=Wed, 06 Dec 2023 15:35:27 GMT; SameSite=Lax
_tracking_consent=%7B%22con%22%3A%7B%22GDPR%22%3A%22%22%7D%2C%22v%22%3A%222.0%22%2C%22lim%22%3A%5B%22GDPR%22%5D%2C%22reg%22%3A%22GDPR%22%7D; Expires=Wed, 06-Dec-23 15:35:27 GMT; Domain=dehydrer.no; Path=/; SameSite=Lax
_orig_referrer=https%3A%2F%2Fno-go.kelkoogroup.net%2F; Domain=dehydrer.no; Path=/; HttpOnly; SameSite=Lax
_landing_page=%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat; Domain=dehydrer.no; Path=/; HttpOnly; SameSite=Lax
_y=0019ed9c-a4ca-4470-8104-449e84dcced5; Domain=dehydrer.no; Path=/; SameSite=Lax
_s=b34aae18-0fd1-4acc-97e0-3c0e454ca08d; Domain=dehydrer.no; Path=/; SameSite=Lax
_shopify_y=0019ed9c-a4ca-4470-8104-449e84dcced5; Domain=dehydrer.no; Path=/; SameSite=Lax
_shopify_s=b34aae18-0fd1-4acc-97e0-3c0e454ca08d; Domain=dehydrer.no; Path=/; SameSite=Lax
_shopify_tm=; Expires=Tue, 06-Dec-22 16:05:27 GMT; Domain=dehydrer.no; Path=/; HttpOnly; SameSite=Lax
_shopify_tw=; Expires=Tue, 20-Dec-22 15:35:27 GMT; Domain=dehydrer.no; Path=/; HttpOnly; SameSite=Lax
_shopify_m=session; Expires=Wed, 06-Dec-23 15:35:27 GMT; Domain=dehydrer.no; Path=/; SameSite=Lax
link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin
x-alternate-cache-key: cacheable:99829a3ca2af042a4368bc5ab25d992d
x-cache: miss
x-frame-options: DENY
content-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
access-control-allow-origin: *
strict-transport-security: max-age=7889238
x-shopid: 9148268604
x-shardid: 71
vary: Accept
content-language: nb
x-shopify-stage: production
x-dc: gcp-europe-north1,europe-west1,gcp-europe-west1
x-request-id: d53d8ed6-e01b-47fa-9fa5-3f66dfa2273c
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d%2BG2L1ivbkbAnZw1nT0OaqzCVQO2QiM%2Bb3JOpuBN4%2BrjYCBQJPf40dhXeHn%2FFP79%2BmNLTakcjcEBDiBHrAaadfOYNB%2B6F3TFkUKsurUPOdG95SJZUoC%2Fzz8%2BXuJxshBPBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: processing;dur=181, db;dur=103, parse;dur=14, asn;desc="50304", edge;desc="OSL", country;desc="NO", cfRequestDuration;dur=426.999807
server: cloudflare
cf-ray: 7756176dca84b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a4c3de39b96ac1d7c6e29f12be8d9d74
d12dc0a07a4f515cd2238f2e7dfcc5a524d58b93
bcb31e30b5b469a6d51ec5cac3f8774efebac8ee40ad85d946ff70449dc01c97
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCB31E30B5B469A6D51EC5CAC3F8774EFEBAC8EE40AD85D946FF70449DC01C97"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17535
Expires: Tue, 06 Dec 2022 20:27:43 GMT
Date: Tue, 06 Dec 2022 15:35:28 GMT
Connection: keep-alive
cdn.shopify.com/shopifycloud/shopify/assets/storefront/features-87e8399988880142f2c62771b9d8f2ff6c290b3ff745dd426eb0dfe0db9d1dae.js
200 OK 13 kB URL HTTP/2 cdn.shopify.com/shopifycloud/shopify/assets/storefront/features-87e8399988880142f2c62771b9d8f2ff6c290b3ff745dd426eb0dfe0db9d1dae.js
IP
File type ASCII text, with very long lines (32755)
Hash c2a180de1d85cca695638a21be33676f
14afcd93fb8da5ae0024c95f2a5197f33a6c7144
79718c385789762f68ab980274bed2339a82d834f0289ead85e5d5e010a9f3a0
GET /shopifycloud/shopify/assets/storefront/features-87e8399988880142f2c62771b9d8f2ff6c290b3ff745dd426eb0dfe0db9d1dae.js HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dehydrer.no
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31556952, immutable
link: <https://cdn.shopify.com/shopifycloud/shopify/assets/storefront/features-87e8399988880142f2c62771b9d8f2ff6c290b3ff745dd426eb0dfe0db9d1dae.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 2887dbb1-e983-47c6-9453-f263a94f5583
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
last-modified: Tue, 25 Oct 2022 21:47:15 GMT
cf-cache-status: HIT
age: 1703493
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sYl59Y1wAYNOFUJq7JzlrsWQ2z%2Fj1r0t5E5AspJ%2F6a4rflQJDjQR60QKst9r3OLRlgJKV5xzwyZhOWfE2AJG%2BASEz6V8R8IuCT5dWQh18fTq4K5fy%2BGgD8fin%2F34z4H3yQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=24.004, imageryFetch;dur=23.791, cfRequestDuration;dur=16.000032
server: cloudflare
cf-ray: 775617701f2e0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f8c0d852e24776fd069fc3d4928d1dc4
3b376f971a0e8b9734c5f716fccf59555133ccd9
59943d5f71c6b2a4acc7ce46ea28667bb5b3e66fe82056e0c0e0e1c04977144d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59943D5F71C6B2A4ACC7CE46EA28667BB5B3E66FE82056E0C0E0E1C04977144D"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10058
Expires: Tue, 06 Dec 2022 18:23:06 GMT
Date: Tue, 06 Dec 2022 15:35:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 36 kB IP
ASN #20940 Akamai International B.V.
Hash 1d5aab40718a31a23987b9fef96068b7
d0b0038e1dd631121a470abfe9477308a03ce301
588d98b580baca03836a26f5556b77d6f123b043d80fabb4be3d44f654d4204c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59943D5F71C6B2A4ACC7CE46EA28667BB5B3E66FE82056E0C0E0E1C04977144D"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10058
Expires: Tue, 06 Dec 2022 18:23:06 GMT
Date: Tue, 06 Dec 2022 15:35:28 GMT
Connection: keep-alive
cdn.shopify.com/s/files/1/0091/4826/8604/products/437567-3282024d8bcc4ad68caf9b2cffe7ff1e_300x300.jpg?v=1554030194
200 OK 6.8 kB URL HTTP/2 cdn.shopify.com/s/files/1/0091/4826/8604/products/437567-3282024d8bcc4ad68caf9b2cffe7ff1e_300x300.jpg?v=1554030194
IP
File type ISO Media, AVIF Image\012- data
Hash d584be85d53040771cff25a82b95e70a
f2de117d63b712893ae6e9eb419268d2f125a8c1
63b2adc0c92be8dc17ce9c1659f812b80f912ac0c3efe2821000161b4376bd14
GET /s/files/1/0091/4826/8604/products/437567-3282024d8bcc4ad68caf9b2cffe7ff1e_300x300.jpg?v=1554030194 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: image/avif
content-length: 6800
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0091/4826/8604/products/437567-3282024d8bcc4ad68caf9b2cffe7ff1e_300x300.jpg>; rel="canonical"
source-length: 52626
source-type: image/jpeg
timing-allow-origin: *
vary: Accept, Accept-Encoding
x-content-type-options: nosniff
x-request-id: 2c524f84-f361-4900-9dfe-6841b92761ad
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
last-modified: Tue, 06 Dec 2022 15:35:28 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sg9uk3nTYiP5a5wDgvVyqBAxp7IdPvi7NfmKyodJXsefNIJWR9FS2guWK3LZUxLLEoBQv3gePV3M6TnYpUDR2nH2DgZoNBJHz9iOIvzcYwyXM%2FIOt1UQrTdD3raupkeWZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=466.114, imageryFetch;dur=100.362, imageryProcess;dur=362.721;desc="image", cfRequestDuration;dur=618.000031
server: cloudflare
cf-ray: 7756177018b3b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
monorail-edge.shopifysvc.com/v1/produce
200 OK 0 B URL HTTP/2 monorail-edge.shopifysvc.com/v1/produce
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/produce HTTP/1.1
Host: monorail-edge.shopifysvc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-monorail-edge-client-message-id,x-monorail-edge-event-created-at-ms,x-monorail-edge-event-sent-at-ms
Referer: https://www.dehydrer.no/
Origin: https://www.dehydrer.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For
access-control-allow-methods: OPTIONS,POST
access-control-allow-origin: https://www.dehydrer.no
access-control-max-age: 86400
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
x-request-id: 8a043d73-7f6b-4dbf-a9b4-b91539571a0f
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WcvbLpCjkWMExgP6Od76%2FXq4aIaJ5puw9XjszIFYautaLW%2FzyM4ukO6rRB%2F0VLVnNg8Hu4v4%2FbpiTKvVkqRx09k9Co7QUTbYm%2Bzi7%2BSYocoQ70Jq2kA7uIbra%2FghR%2FIry%2FEhDvALwBx7V3LTx9g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server-timing: cfRequestDuration;dur=147.000074
server: cloudflare
cf-ray: 775617732fa1b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f8c0d852e24776fd069fc3d4928d1dc4
3b376f971a0e8b9734c5f716fccf59555133ccd9
59943d5f71c6b2a4acc7ce46ea28667bb5b3e66fe82056e0c0e0e1c04977144d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59943D5F71C6B2A4ACC7CE46EA28667BB5B3E66FE82056E0C0E0E1C04977144D"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10058
Expires: Tue, 06 Dec 2022 18:23:06 GMT
Date: Tue, 06 Dec 2022 15:35:28 GMT
Connection: keep-alive
monorail-edge.shopifysvc.com/v1/produce
200 OK 0 B URL HTTP/2 monorail-edge.shopifysvc.com/v1/produce
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/produce HTTP/1.1
Host: monorail-edge.shopifysvc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dehydrer.no/
Content-Type: application/json; charset=utf-8
X-Monorail-Edge-Event-Created-At-Ms: 1670340928392
X-Monorail-Edge-Event-Sent-At-Ms: 1670340928392
X-Monorail-Edge-Client-Message-Id: 7d3c55b8-4121-40e6-a982-297b636468c9
Origin: https://www.dehydrer.no
Content-Length: 430
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For
access-control-allow-methods: OPTIONS,POST
access-control-allow-origin: https://www.dehydrer.no
access-control-max-age: 86400
x-request-id: 279031f4-1d41-4c82-bbe5-673cd6549505
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2KGbmKXDEtraiM972G1Hfnp3590XbQE8t6moKMhRcL%2FbxWs0xcibFSfxIaNrWKQUU1TxZ%2FQkXNN95P%2F%2BcK%2BIaLlSjggca4XkaY0i60nlTs9jfrNiMzPF%2BwlqoVH93xx9t%2Fo8TkPw%2B7NRloUX6UY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server-timing: cfRequestDuration;dur=122.999907
server: cloudflare
cf-ray: 7756177408beb51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 2.2 kB IP
ASN #20940 Akamai International B.V.
Hash 1b22975b8d48ef9f60773940c239f69b
73f0caf661bebd5a6aab07f56fdc6dd12ae6b356
94cc8b5d2c28fbd52f59b08b92ebb7f44b274ef26ef70961349a7a0f351855f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F28B95553614FEF2785C822D8353E815994780CB23BB780070E62DD154A16BE4"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2136
Expires: Tue, 06 Dec 2022 16:11:04 GMT
Date: Tue, 06 Dec 2022 15:35:28 GMT
Connection: keep-alive
godog.shopifycloud.com/v1/event.gif?q=eyJuYW1lIjoic3BiLmluaXQuY2FsbGVkIiwidHlwZSI6ImluY3JlbWVudCIsInRhZ3MiOlsicGFnZVR5cGU6cHJvZHVjdCJdfQ==
200 OK 42 B URL HTTP/2 godog.shopifycloud.com/v1/event.gif?q=eyJuYW1lIjoic3BiLmluaXQuY2FsbGVkIiwidHlwZSI6ImluY3JlbWVudCIsInRhZ3MiOlsicGFnZVR5cGU6cHJvZHVjdCJdfQ==
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /v1/event.gif?q=eyJuYW1lIjoic3BiLmluaXQuY2FsbGVkIiwidHlwZSI6ImluY3JlbWVudCIsInRhZ3MiOlsicGFnZVR5cGU6cHJvZHVjdCJdfQ== HTTP/1.1
Host: godog.shopifycloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: image/gif
content-length: 42
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-dc: gcp-us-central1
X-Firefox-Spdy: h2
godog.shopifycloud.com/v1/event.gif?q=eyJuYW1lIjoic3BiLmluc3RydW1lbnQubG9hZGluZy50aW1lIiwidHlwZSI6Imhpc3RvZ3JhbSIsInZhbHVlIjo1LCJ0YWdzIjpbImluc3RydW1lbnQ6Q2hlY2tvdXQiLCJwYWdlVHlwZTpwcm9kdWN0Il19
200 OK 42 B URL HTTP/2 godog.shopifycloud.com/v1/event.gif?q=eyJuYW1lIjoic3BiLmluc3RydW1lbnQubG9hZGluZy50aW1lIiwidHlwZSI6Imhpc3RvZ3JhbSIsInZhbHVlIjo1LCJ0YWdzIjpbImluc3RydW1lbnQ6Q2hlY2tvdXQiLCJwYWdlVHlwZTpwcm9kdWN0Il19
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /v1/event.gif?q=eyJuYW1lIjoic3BiLmluc3RydW1lbnQubG9hZGluZy50aW1lIiwidHlwZSI6Imhpc3RvZ3JhbSIsInZhbHVlIjo1LCJ0YWdzIjpbImluc3RydW1lbnQ6Q2hlY2tvdXQiLCJwYWdlVHlwZTpwcm9kdWN0Il19 HTTP/1.1
Host: godog.shopifycloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: image/gif
content-length: 42
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-dc: gcp-us-central1
X-Firefox-Spdy: h2
godog.shopifycloud.com/v1/event.gif?q=eyJuYW1lIjoic3BiLmF2YWlsYWJsZS5pbnN0cnVtZW50IiwidHlwZSI6ImluY3JlbWVudCIsInRhZ3MiOlsiaW5zdHJ1bWVudDpDaGVja291dCIsInBhZ2VUeXBlOnByb2R1Y3QiXX0=
200 OK 42 B URL HTTP/2 godog.shopifycloud.com/v1/event.gif?q=eyJuYW1lIjoic3BiLmF2YWlsYWJsZS5pbnN0cnVtZW50IiwidHlwZSI6ImluY3JlbWVudCIsInRhZ3MiOlsiaW5zdHJ1bWVudDpDaGVja291dCIsInBhZ2VUeXBlOnByb2R1Y3QiXX0=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /v1/event.gif?q=eyJuYW1lIjoic3BiLmF2YWlsYWJsZS5pbnN0cnVtZW50IiwidHlwZSI6ImluY3JlbWVudCIsInRhZ3MiOlsiaW5zdHJ1bWVudDpDaGVja291dCIsInBhZ2VUeXBlOnByb2R1Y3QiXX0= HTTP/1.1
Host: godog.shopifycloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: image/gif
content-length: 42
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-dc: gcp-us-central1
X-Firefox-Spdy: h2
monorail-edge.shopifysvc.com/v1/produce
200 OK 0 B URL HTTP/2 monorail-edge.shopifysvc.com/v1/produce
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/produce HTTP/1.1
Host: monorail-edge.shopifysvc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dehydrer.no/
Content-Type: application/json; charset=utf-8
X-Monorail-Edge-Event-Created-At-Ms: 1670340928796
X-Monorail-Edge-Event-Sent-At-Ms: 1670340928796
X-Monorail-Edge-Client-Message-Id: acb0959e-4894-4c86-a1b4-7d4a0afc7224
Origin: https://www.dehydrer.no
Content-Length: 478
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:29 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For
access-control-allow-methods: OPTIONS,POST
access-control-allow-origin: https://www.dehydrer.no
access-control-max-age: 86400
x-request-id: 587781b4-08e2-41f3-b944-a1de321d1a5d
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BcL4GF7F4KwBCMzGy92yB%2F%2FhGBlx68vq3feUjN%2FzLHmg%2FtCVe4fKzGtIbdPX5kV731HcfwaAkn5ZCbGnpx1TsCDDGypdhzDcuEHZnZTElHmcvZBAJqiP1B1RDxwKgMWumVouH57rCcUxsoJ5yYk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server-timing: cfRequestDuration;dur=118.999958
server: cloudflare
cf-ray: 775617758afbb51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
godog.shopifycloud.com/v1/event.gif?q=eyJuYW1lIjoic3BiLmFjY2VsZXJhdGVkLmluc3RydW1lbnQiLCJ0eXBlIjoiaW5jcmVtZW50IiwidGFncyI6WyJpbnN0cnVtZW50OkNoZWNrb3V0IiwicGFnZVR5cGU6cHJvZHVjdCJdfQ==
200 OK 42 B URL HTTP/2 godog.shopifycloud.com/v1/event.gif?q=eyJuYW1lIjoic3BiLmFjY2VsZXJhdGVkLmluc3RydW1lbnQiLCJ0eXBlIjoiaW5jcmVtZW50IiwidGFncyI6WyJpbnN0cnVtZW50OkNoZWNrb3V0IiwicGFnZVR5cGU6cHJvZHVjdCJdfQ==
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /v1/event.gif?q=eyJuYW1lIjoic3BiLmFjY2VsZXJhdGVkLmluc3RydW1lbnQiLCJ0eXBlIjoiaW5jcmVtZW50IiwidGFncyI6WyJpbnN0cnVtZW50OkNoZWNrb3V0IiwicGFnZVR5cGU6cHJvZHVjdCJdfQ== HTTP/1.1
Host: godog.shopifycloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: image/gif
content-length: 42
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-dc: gcp-us-central1
X-Firefox-Spdy: h2
godog.shopifycloud.com/v1/event.gif?q=eyJuYW1lIjoic3BiLmFjY2VsZXJhdGVkLmJ1dHRvbi50dGwiLCJ0eXBlIjoiaGlzdG9ncmFtIiwidmFsdWUiOjQwMSwidGFncyI6WyJpbnN0cnVtZW50OkNoZWNrb3V0IiwicGFnZVR5cGU6cHJvZHVjdCJdfQ==
200 OK 1.1 kB URL HTTP/2 godog.shopifycloud.com/v1/event.gif?q=eyJuYW1lIjoic3BiLmFjY2VsZXJhdGVkLmJ1dHRvbi50dGwiLCJ0eXBlIjoiaGlzdG9ncmFtIiwidmFsdWUiOjQwMSwidGFncyI6WyJpbnN0cnVtZW50OkNoZWNrb3V0IiwicGFnZVR5cGU6cHJvZHVjdCJdfQ==
IP
Hash 897bfa9bc95b102cb0347d31df5f4e06
9b4da027f01f01a866ddaa55700a014b9be4d4a5
f78e712c3e06b356d17e53525b96e442b0eaa0ab950a36a062b9b4a790645c8f
GET /v1/event.gif?q=eyJuYW1lIjoic3BiLmFjY2VsZXJhdGVkLmJ1dHRvbi50dGwiLCJ0eXBlIjoiaGlzdG9ncmFtIiwidmFsdWUiOjQwMSwidGFncyI6WyJpbnN0cnVtZW50OkNoZWNrb3V0IiwicGFnZVR5cGU6cHJvZHVjdCJdfQ== HTTP/1.1
Host: godog.shopifycloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: image/gif
content-length: 42
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-dc: gcp-us-central1
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 01d3689f93e662cce1eaf83fa6ca8206
b4d0318821ab12c5c0b97b1426443ac412d9a57b
300186916f1a17730ca6db5fa3d93dadc46b4c54671fd72d978d1e8001c0a8bd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "300186916F1A17730CA6DB5FA3D93DADC46B4C54671FD72D978D1E8001C0A8BD"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2871
Expires: Tue, 06 Dec 2022 16:23:20 GMT
Date: Tue, 06 Dec 2022 15:35:29 GMT
Connection: keep-alive
s.kk-resources.com/leadtag.js?shop=dehydrer.myshopify.com
200 OK 2.6 kB URL HTTP/1.1 s.kk-resources.com/leadtag.js?shop=dehydrer.myshopify.com
IP
File type C source, ASCII text, with very long lines (6910)
Hash b9c7aa9898d0e7b5d8dfa27c81eda1ac
3e22a4f4ac1fd469128de60e1a80433513242071
980531f0a81016e3a7a4c3fa56f75e7b791f1f4c09296992221bd766b91a53a0
GET /leadtag.js?shop=dehydrer.myshopify.com HTTP/1.1
Host: s.kk-resources.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Length: 2595
Connection: keep-alive
X-Gravitee-Transaction-Id: a60409c4-41f4-4313-8409-c441f4931332
X-Gravitee-Request-Id: a60409c4-41f4-4313-8409-c441f4931332
ETag: "05e089e0c08fd98ee6b4f6497ec87752b123fc2f"
Request-Time: 19
Accept-Ranges: bytes
Cache-Control: public, max-age=3600
Last-Modified: Tue, 12 Jul 2022 13:51:05 GMT
Content-Encoding: gzip
Date: Tue, 06 Dec 2022 15:01:38 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GSS_8xPVP9eD54Ah5rpiV2ET2EA9Rp3WTmG2vRq39wZssNstNKrgaA==
Age: 2031
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=AW-833441087
200 OK 53 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-833441087
IP
File type ASCII text, with very long lines (1921)
Hash 78431273a0694a95ad4a0450041ef0af
6d539aef638304884a7aaab7a2182161e0de4516
951fd8e9d87372d27e8a2b005bd81de08f0829f7c0096499677eb718b9c28f47
GET /gtag/js?id=AW-833441087 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Dec 2022 15:35:29 GMT
expires: Tue, 06 Dec 2022 15:35:29 GMT
cache-control: private, max-age=900
last-modified: Tue, 06 Dec 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 52883
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 193d8810870a774252164a702c672a1e
a905bb3d9b73e2773875a2899de31bd0936b4aa7
f1837511a3b3df8bd537ad69635a48e0a10499e32524f55b955fe3030db125fd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=153127
Date: Tue, 06 Dec 2022 15:35:29 GMT
Etag: "638f035b-1d7"
Expires: Thu, 08 Dec 2022 10:07:36 GMT
Last-Modified: Tue, 06 Dec 2022 08:54:51 GMT
Server: ECS (bsa/EB14)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zuWCnDV8M8oeAJdCO1jsHTB9JPi8CQE31wjtkajrexZNdchBiF8Xyw==
Age: 4365
status.thawte.com/
200 OK 471 B IP
Hash 7e5ad4121411ba414363ddb3e423cf8c
fe08cede309cac27b94c7c99975b6cb10eea3036
6d457360466f2b57f859d0aa9c1b919329087d57f455fa6a7e81a93c0260c571
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5951
Cache-Control: max-age=99274
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Etag: "638e2acc-1d7"
Expires: Wed, 07 Dec 2022 19:10:03 GMT
Last-Modified: Mon, 05 Dec 2022 17:30:52 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
200 OK 471 B IP
Hash 7e5ad4121411ba414363ddb3e423cf8c
fe08cede309cac27b94c7c99975b6cb10eea3036
6d457360466f2b57f859d0aa9c1b919329087d57f455fa6a7e81a93c0260c571
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5239
Cache-Control: max-age=98562
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Etag: "638e2acc-1d7"
Expires: Wed, 07 Dec 2022 18:58:11 GMT
Last-Modified: Mon, 05 Dec 2022 17:30:52 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
s.kelkoogroup.net/k.gif
200 OK 0 B IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /k.gif HTTP/1.1
Host: s.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: etag
Referer: https://www.dehydrer.no/
Origin: https://www.dehydrer.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-Gravitee-Transaction-Id: 219c224f-588b-4047-9c22-4f588b104796
X-Gravitee-Request-Id: 219c224f-588b-4047-9c22-4f588b104796
Vary: Origin
Access-Control-Max-Age: 3600
Access-Control-Allow-Origin: https://www.dehydrer.no
Access-Control-Allow-Headers: etag
Access-Control-Allow-Methods: GET
Access-Control-Allow-Credentials: true
Date: Tue, 06 Dec 2022 15:35:29 GMT
content-length: 0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 01d3689f93e662cce1eaf83fa6ca8206
b4d0318821ab12c5c0b97b1426443ac412d9a57b
300186916f1a17730ca6db5fa3d93dadc46b4c54671fd72d978d1e8001c0a8bd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "300186916F1A17730CA6DB5FA3D93DADC46B4C54671FD72D978D1E8001C0A8BD"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2871
Expires: Tue, 06 Dec 2022 16:23:20 GMT
Date: Tue, 06 Dec 2022 15:35:29 GMT
Connection: keep-alive
s3.eu-west-1.amazonaws.com/production-klarna-il-shopify-osm/df9e9749fad4029c418fcebdee2381d9e8d1b88c/dehydrer.myshopify.com-1646062946484.js?shop=dehydrer.myshopify.com
200 OK 1.8 kB URL HTTP/1.1 s3.eu-west-1.amazonaws.com/production-klarna-il-shopify-osm/df9e9749fad4029c418fcebdee2381d9e8d1b88c/dehydrer.myshopify.com-1646062946484.js?shop=dehydrer.myshopify.com
IP
File type ASCII text, with very long lines (2930)
Hash 9619c79a33b8bf2546955fadefae3068
ddda781de5e4a87752faca52ac3e77e1291da81e
9efb182b30d79572ddd813151499fc139d3b29129fe15b2f6f84e8f108813949
GET /production-klarna-il-shopify-osm/df9e9749fad4029c418fcebdee2381d9e8d1b88c/dehydrer.myshopify.com-1646062946484.js?shop=dehydrer.myshopify.com HTTP/1.1
Host: s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: OplbAFY2DCdSMFbZtUpkLKUltbJTq8+OztPvFVUILFYpS25Ijj7EMtB5ae5/0MwZUEzqElMYjx8=
x-amz-request-id: 6Y4SMXB1XXJEYNGN
Date: Tue, 06 Dec 2022 15:35:30 GMT
Last-Modified: Mon, 28 Feb 2022 15:42:27 GMT
x-amz-expiration: expiry-date="Wed, 01 Mar 2023 00:00:00 GMT", rule-id="NDY0MzI3NGQtNzIyMS00MjYwLWJkM2YtZmI5NzBiMjU2ZDAy"
ETag: "9619c79a33b8bf2546955fadefae3068"
x-amz-server-side-encryption: AES256
Content-Encoding: gzip
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 1762
ocsp.sectigo.com/
200 OK 472 B IP
Hash 72d997db6c13738f5fa6a10684386618
6065d2a95e9556f00a9d078815c8be450333a9ff
1b139dace902a5aa9824a5cdcb8a1dfafd7d489f4258fa3e53a85eb78cc832f5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 15:35:29 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 02:30:24 GMT
Expires: Tue, 13 Dec 2022 02:30:23 GMT
Etag: "6065d2a95e9556f00a9d078815c8be450333a9ff"
Cache-Control: max-age=557093,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77561776e8350b02-OSL
s.kelkoogroup.net/k.gif
200 OK 43 B IP
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /k.gif HTTP/1.1
Host: s.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
ETag: a2Vsa29vSWQ9YTRjNjI5YS0xODRlODEzZGVhNy00Y2EzMw==
Origin: https://www.dehydrer.no
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
X-Gravitee-Transaction-Id: 5d67474d-98fc-477a-a747-4d98fcf77ae7
X-Gravitee-Request-Id: 5d67474d-98fc-477a-a747-4d98fcf77ae7
ETag: a2Vsa29vSWQ9YTRjNjI5YS0xODRlODEzZGVhNy00Y2EzMw==
Vary: *,Origin
Pragma: no-cache
Expires: 0
Request-Time: 1
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate
Last-Modified: Fri, 01 Jan 2010 00:00:00 GMT
Access-Control-Allow-Origin: https://www.dehydrer.no
Access-Control-Expose-Headers: ETag
Access-Control-Allow-Credentials: true
Date: Tue, 06 Dec 2022 15:35:29 GMT
Content-Type: image/gif
content-length: 43
production-klarna-il-shopify-osm.s3.eu-west-1.amazonaws.com/df9e9749fad4029c418fcebdee2381d9e8d1b88c/258.index.js
200 OK 7.3 kB URL HTTP/1.1 production-klarna-il-shopify-osm.s3.eu-west-1.amazonaws.com/df9e9749fad4029c418fcebdee2381d9e8d1b88c/258.index.js
IP
File type ASCII text, with very long lines (27997)
Hash b7c0eb5dbc0c7e9f220f476edc2caf97
caedc46a175d4d35a490b7850a695fcdbce712bc
177f65b0fd0791cdad43324cf967f6e4cf525b73b48cf0587152b6bcf902ba1a
GET /df9e9749fad4029c418fcebdee2381d9e8d1b88c/258.index.js HTTP/1.1
Host: production-klarna-il-shopify-osm.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: onT+lBPe/pKObilNJJOxdxT4Hxien8r7KKyReGwY2c+6SyJZQtFYbndzAQeFLuUpOKH129v8MKk=
x-amz-request-id: 6Y4WSFKQJM2TN72J
Date: Tue, 06 Dec 2022 15:35:30 GMT
Last-Modified: Mon, 28 Feb 2022 15:36:58 GMT
x-amz-expiration: expiry-date="Wed, 01 Mar 2023 00:00:00 GMT", rule-id="NDY0MzI3NGQtNzIyMS00MjYwLWJkM2YtZmI5NzBiMjU2ZDAy"
ETag: "b7c0eb5dbc0c7e9f220f476edc2caf97"
x-amz-server-side-encryption: AES256
Content-Encoding: gzip
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 7290
production-klarna-il-shopify-osm.s3.eu-west-1.amazonaws.com/df9e9749fad4029c418fcebdee2381d9e8d1b88c/906.index.js
200 OK 5.2 kB URL HTTP/1.1 production-klarna-il-shopify-osm.s3.eu-west-1.amazonaws.com/df9e9749fad4029c418fcebdee2381d9e8d1b88c/906.index.js
IP
File type ASCII text, with very long lines (14710), with no line terminators
Hash b0f3d5ac9d75b108e178d2da73791f09
0c977d3b573a049b1dbee7155ca2669df4aeb067
0de45ee933df80e8d122ee6ed123c181d004397fd4fe57d1bcda5c612988f333
GET /df9e9749fad4029c418fcebdee2381d9e8d1b88c/906.index.js HTTP/1.1
Host: production-klarna-il-shopify-osm.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: TXuk82Ipa6ewbS5YDZz20b4ZNsgEMwlBJy+6Kzgj1aDUZWTc2a2gVW128JmSkX/PWl2lKfEqOl4=
x-amz-request-id: 6Y4MF52BBZE51K5Q
Date: Tue, 06 Dec 2022 15:35:30 GMT
Last-Modified: Mon, 28 Feb 2022 15:36:58 GMT
x-amz-expiration: expiry-date="Wed, 01 Mar 2023 00:00:00 GMT", rule-id="NDY0MzI3NGQtNzIyMS00MjYwLWJkM2YtZmI5NzBiMjU2ZDAy"
ETag: "b0f3d5ac9d75b108e178d2da73791f09"
x-amz-server-side-encryption: AES256
Content-Encoding: gzip
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 5209
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 61b8fa2ffc35511d99bbe17c58c87040
660f0d66fd7a59ff0b1205f2213a04e1c45eff06
fd06c7c91c7c9d77f676d8bbfc9b980cb73091ef54b95c36eb15a3e7f5943753
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c10bc583c46449dc192a809398b4e814
ff0f7ad905d32d7f3d01e4054552d0ad551503a5
defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5006b8e985c5838b7fd2f2b558a65bc4
183ff15e0faedf346305fd6fe1c70c9c7a1eef4a
fcbfec9f5fd0e10d44778c1df64d8612281cd39881cdfd0aa8ca30d13655655a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5006b8e985c5838b7fd2f2b558a65bc4
183ff15e0faedf346305fd6fe1c70c9c7a1eef4a
fcbfec9f5fd0e10d44778c1df64d8612281cd39881cdfd0aa8ca30d13655655a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/833441087/?random=1670340929226&cv=11&fst=1670340929226&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&auid=1256831237.1670340929&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/833441087/?random=1670340929226&cv=11&fst=1670340929226&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&auid=1256831237.1670340929&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2577), with no line terminators
Hash 223c3fc534b624908b5cd40dfa77fcd7
94dff9a34d026975d6242887a1e354372f7da414
8d0d94747b7d346948e8cf4dabe5b4695df1510feba7688445cb17dc21796f3f
GET /pagead/viewthroughconversion/833441087/?random=1670340929226&cv=11&fst=1670340929226&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&auid=1256831237.1670340929&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 15:35:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1080
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Dec-2022 15:50:29 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
200 OK 37 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
Hash 7b06aaed43b1abce854f8bffd6f77823
8002a06337489d51fb690fd91645e6641648534f
f134f5e5cd98e814afc3f35b0688ed1e3df0945bea5c102185144651379b0c15
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 18:51:00 GMT
expires: Thu, 30 Nov 2023 18:51:00 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 506669
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/637850987/?random=1670340929343&cv=11&fst=1670340929343&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=5AN7CPzf8c8BEOuqk7AC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no>m_ee=1&auid=1919709117.1670340929&data=event%3Dview_item%3Becomm_prodid%3Dshopify_NO_2491340652604_22348315099196%3Becomm_totalvalue%3DNaN%3Becomm_pagetype%3Dproduct&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/637850987/?random=1670340929343&cv=11&fst=1670340929343&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=5AN7CPzf8c8BEOuqk7AC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no>m_ee=1&auid=1919709117.1670340929&data=event%3Dview_item%3Becomm_prodid%3Dshopify_NO_2491340652604_22348315099196%3Becomm_totalvalue%3DNaN%3Becomm_pagetype%3Dproduct&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/637850987/?random=1670340929343&cv=11&fst=1670340929343&fmt=3&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=5AN7CPzf8c8BEOuqk7AC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no>m_ee=1&auid=1919709117.1670340929&data=event%3Dview_item%3Becomm_prodid%3Dshopify_NO_2491340652604_22348315099196%3Becomm_totalvalue%3DNaN%3Becomm_pagetype%3Dproduct&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 15:35:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Dec-2022 15:50:29 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/637850987/?random=1670340929343&cv=11&fst=1670340929343&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=5AN7CPzf8c8BEOuqk7AC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no>m_ee=1&auid=1919709117.1670340929&data=event%3Dview_item%3Becomm_prodid%3Dshopify_NO_2491340652604_22348315099196%3Becomm_totalvalue%3DNaN%3Becomm_pagetype%3Dproduct&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/637850987/?random=1670340929343&cv=11&fst=1670340929343&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=5AN7CPzf8c8BEOuqk7AC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no>m_ee=1&auid=1919709117.1670340929&data=event%3Dview_item%3Becomm_prodid%3Dshopify_NO_2491340652604_22348315099196%3Becomm_totalvalue%3DNaN%3Becomm_pagetype%3Dproduct&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/637850987/?random=1670340929343&cv=11&fst=1670340929343&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=5AN7CPzf8c8BEOuqk7AC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no>m_ee=1&auid=1919709117.1670340929&data=event%3Dview_item%3Becomm_prodid%3Dshopify_NO_2491340652604_22348315099196%3Becomm_totalvalue%3DNaN%3Becomm_pagetype%3Dproduct&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 15:35:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/637850987/?random=1670340929343&cv=11&fst=1670340929343&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=5AN7CPzf8c8BEOuqk7AC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no>m_ee=1&auid=1919709117.1670340929&data=event%3Dview_item%3Becomm_prodid%3Dshopify_NO_2491340652604_22348315099196%3Becomm_totalvalue%3DNaN%3Becomm_pagetype%3Dproduct&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
easygdpr.b-cdn.net/v/1553540745/gdpr.min.js?shop=dehydrer.myshopify.com
403 Forbidden 496 B URL HTTP/2 easygdpr.b-cdn.net/v/1553540745/gdpr.min.js?shop=dehydrer.myshopify.com
IP
ASN #60068 Datacamp Limited
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (711)
Hash e9b8ae5d46592f259e057de2908853c4
1f3cb8c21f7a8aae75809a3acb428a1c98b2fa5f
21cbd24482bdf6ec80887b5f572f81064b01a792d0df4649cce2e52dad9fe275
GET /v/1553540745/gdpr.min.js?shop=dehydrer.myshopify.com HTTP/1.1
Host: easygdpr.b-cdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Tue, 06 Dec 2022 15:35:29 GMT
content-type: text/html
vary: Accept-Encoding
server: BunnyCDN-DE1-723
cdn-requestid: 0607b6e55308d3abd557c26627364bde
content-encoding: br
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/637850987/?random=1670340929338&cv=11&fst=1670340929338&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=VZkdCPbf8c8BEOuqk7AC&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F>m_ee=1&auid=1919709117.1670340929&data=event%3Dpage_view%3Bpage_path%3D%2Fproducts%2Fmattorke-med-stalgitterbrett&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/637850987/?random=1670340929338&cv=11&fst=1670340929338&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=VZkdCPbf8c8BEOuqk7AC&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F>m_ee=1&auid=1919709117.1670340929&data=event%3Dpage_view%3Bpage_path%3D%2Fproducts%2Fmattorke-med-stalgitterbrett&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/637850987/?random=1670340929338&cv=11&fst=1670340929338&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=VZkdCPbf8c8BEOuqk7AC&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F>m_ee=1&auid=1919709117.1670340929&data=event%3Dpage_view%3Bpage_path%3D%2Fproducts%2Fmattorke-med-stalgitterbrett&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 15:35:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/637850987/?random=1670340929338&cv=11&fst=1670340929338&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=VZkdCPbf8c8BEOuqk7AC&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F>m_ee=1&auid=1919709117.1670340929&data=event%3Dpage_view%3Bpage_path%3D%2Fproducts%2Fmattorke-med-stalgitterbrett&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c10bc583c46449dc192a809398b4e814
ff0f7ad905d32d7f3d01e4054552d0ad551503a5
defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee6bfe50f8e4b9c142f971a55496ac26
8c3fd42aaa7fa3ebdedc4f7b0271b8caae166e64
4582e8e1ada92a279cbc5d82904c7fd27b9d4b95bc06c7a8b3c13168978f0b33
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/gsf-scripts/global-remarketing/dehydrer.js?1657937687&shop=dehydrer.myshopify.com
200 OK 18 kB URL HTTP/2 storage.googleapis.com/gsf-scripts/global-remarketing/dehydrer.js?1657937687&shop=dehydrer.myshopify.com
IP
File type ASCII text, with very long lines (18097), with no line terminators
Hash 724c7c45a3da8e92ab9bcb3e6c755edd
55f7784ddf747be975d44f4f5d5c8d47a38e6b4a
a2b00ab55c231aa906e94fcba0bcf0166e040d9ecf3df92263f8b11aca10a295
GET /gsf-scripts/global-remarketing/dehydrer.js?1657937687&shop=dehydrer.myshopify.com HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdszYv-YW8-dMvL6uGc4VV3gIpATdl6mf6bNwYZ4srrSw6VbwklUn6AaxPGvjn1BGqwJeCV1AgXjYewALg_7piLDTN2alIUf
x-goog-generation: 1657937684422962
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 18097
x-goog-hash: crc32c=xCd1VQ==, md5=ckx8RaPajpKrm8s+bHVe3Q==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 18097
server: UploadServer
date: Tue, 06 Dec 2022 15:35:29 GMT
expires: Tue, 06 Dec 2022 15:35:29 GMT
cache-control: no-cache, max-age=0
last-modified: Sat, 16 Jul 2022 02:14:44 GMT
etag: "724c7c45a3da8e92ab9bcb3e6c755edd"
content-type: text/javascript
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 61b8fa2ffc35511d99bbe17c58c87040
660f0d66fd7a59ff0b1205f2213a04e1c45eff06
fd06c7c91c7c9d77f676d8bbfc9b980cb73091ef54b95c36eb15a3e7f5943753
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 1.0 kB IP
Hash 311df84c77e43f67c55e59886f4f96c6
7b8c67cb1f9e125de470240e72b24644cfb2c6af
7e3fc4de5be1c4294e7f7f73ad4e098ba29771868a0e6cf7ad90d8c6b51d0453
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 30 kB IP
Hash 77ac99c7f71f140a757a3cc2d3959578
a56a06951c6e694e5645a9c10d30d9b899431b0b
d0ff585a446b571086c29494a6c6728da15e66b0d71da2676c5ce543724e5215
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-conversion/637850987/?random=1670340929338&cv=11&fst=1670340929338&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=VZkdCPbf8c8BEOuqk7AC&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F>m_ee=1&auid=1919709117.1670340929&data=event%3Dpage_view%3Bpage_path%3D%2Fproducts%2Fmattorke-med-stalgitterbrett&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/637850987/?random=1670340929338&cv=11&fst=1670340929338&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=VZkdCPbf8c8BEOuqk7AC&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F>m_ee=1&auid=1919709117.1670340929&data=event%3Dpage_view%3Bpage_path%3D%2Fproducts%2Fmattorke-med-stalgitterbrett&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/637850987/?random=1670340929338&cv=11&fst=1670340929338&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=VZkdCPbf8c8BEOuqk7AC&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F>m_ee=1&auid=1919709117.1670340929&data=event%3Dpage_view%3Bpage_path%3D%2Fproducts%2Fmattorke-med-stalgitterbrett&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dehydrer.no/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 15:35:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/833441087/?random=1670340929226&cv=11&fst=1670338800000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1954600237&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/833441087/?random=1670340929226&cv=11&fst=1670338800000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1954600237&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/833441087/?random=1670340929226&cv=11&fst=1670338800000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=1954600237&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 15:35:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/637850987/?random=1670340929343&cv=11&fst=1670340929343&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=5AN7CPzf8c8BEOuqk7AC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no>m_ee=1&auid=1919709117.1670340929&data=event%3Dview_item%3Becomm_prodid%3Dshopify_NO_2491340652604_22348315099196%3Becomm_totalvalue%3DNaN%3Becomm_pagetype%3Dproduct&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/637850987/?random=1670340929343&cv=11&fst=1670340929343&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=5AN7CPzf8c8BEOuqk7AC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no>m_ee=1&auid=1919709117.1670340929&data=event%3Dview_item%3Becomm_prodid%3Dshopify_NO_2491340652604_22348315099196%3Becomm_totalvalue%3DNaN%3Becomm_pagetype%3Dproduct&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/637850987/?random=1670340929343&cv=11&fst=1670340929343&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&label=5AN7CPzf8c8BEOuqk7AC&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.dehydrer.no%2Fproducts%2Fmattorke-med-stalgitterbrett%3Fkk%3Da4c629a-184e813dea7-4ca33%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DDehydrer%2BSt%25C3%25B6ckli%2Bd%25C5%258Drrex%2Bdehydrator%2B-%2Bmat&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=St%C3%B6ckli%20d%C5%8Drrex%20dehydrator%20-%20matt%C3%B8rke%20med%20st%C3%A5lgitterbrett%20%E2%80%93%20Dehydrer.no>m_ee=1&auid=1919709117.1670340929&data=event%3Dview_item%3Becomm_prodid%3Dshopify_NO_2491340652604_22348315099196%3Becomm_totalvalue%3DNaN%3Becomm_pagetype%3Dproduct&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dehydrer.no/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 15:35:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 15:35:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/theme.js?v=111521626819710852421623873910
200 OK 0 B URL HTTP/2 cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/theme.js?v=111521626819710852421623873910
IP
GET /s/files/1/0091/4826/8604/t/6/assets/theme.js?v=111521626819710852421623873910 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/theme.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: a5c7cf3b-5441-4dd8-a6f8-3a6ac655ee0e
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-central1,us-central1
last-modified: Thu, 13 Oct 2022 08:29:58 GMT
cf-cache-status: HIT
age: 1133538
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m5noCJyXLwlnfJEIhr34mZm5q9F5n4609TZKjh8kJeE%2BS8ZR5jRRirvaDydIYUFZqd6IOQ97iyjRrbfZtIKEQT6kAiRUZuFQENWF%2Fc20faKbH%2BqzNFBXtGxClAqtVveKgg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=72.139, imageryFetch;dur=46.480, cfRequestDuration;dur=16.999960
server: cloudflare
cf-ray: 7756177038deb506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.shopify.com/shopifycloud/shopify/assets/themes_support/option_selection-9f517843f664ad329c689020fb1e45d03cac979f64b9eb1651ea32858b0ff452.js
200 OK 0 B URL HTTP/2 cdn.shopify.com/shopifycloud/shopify/assets/themes_support/option_selection-9f517843f664ad329c689020fb1e45d03cac979f64b9eb1651ea32858b0ff452.js
IP
GET /shopifycloud/shopify/assets/themes_support/option_selection-9f517843f664ad329c689020fb1e45d03cac979f64b9eb1651ea32858b0ff452.js HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31556952, immutable
link: <https://cdn.shopify.com/shopifycloud/shopify/assets/themes_support/option_selection-9f517843f664ad329c689020fb1e45d03cac979f64b9eb1651ea32858b0ff452.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 9850e120-0acc-4104-a452-e084da43724e
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-central1
last-modified: Tue, 30 Aug 2022 13:31:14 GMT
cf-cache-status: HIT
age: 8470808
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yhnjl%2FGSOPIk9acibRP2uAlHfkmhCt%2BHN%2Fy8tgQjNmgpqFesTanRKKgtEc7UfV8hzkOq5Tcr6dnWRkJok51gKiPzLVHh%2BsUva8dT0Z8jK%2FcoOM08F2PguQFAGvIX46%2BWCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=85.729, imageryFetch;dur=85.540, cfRequestDuration;dur=10.999918
server: cloudflare
cf-ray: 7756177028d4b506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/lazysizes.min.js?v=155223123402716617051623873909
200 OK 0 B URL HTTP/2 cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/lazysizes.min.js?v=155223123402716617051623873909
IP
GET /s/files/1/0091/4826/8604/t/6/assets/lazysizes.min.js?v=155223123402716617051623873909 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:28 GMT
content-type: text/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: public, max-age=31557600
link: <https://cdn.shopify.com/s/files/1/0091/4826/8604/t/6/assets/lazysizes.min.js>; rel="canonical"
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: 7034cfed-cc51-48a3-8b09-a143ef3181bf
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
last-modified: Thu, 18 Aug 2022 11:11:38 GMT
cf-cache-status: HIT
age: 8841761
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ijm%2F4oGE%2BFL1JmX10E5AJyRQI4j5M%2B2AxR5nWIia1IAz2%2FBLvXkB%2F%2Fgok5FcDafqbiH9PNW7jH6CRsHrZ51nlrLSklCI%2FlF4vBOORDg6utmnlknduapNg4uTcRDob0%2BK%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: imagery;dur=150.349, imageryFetch;dur=150.225, cfRequestDuration;dur=22.999763
server: cloudflare
cf-ray: 7756177028cab506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
productreviews.shopifycdn.com/embed/loader.js?shop=dehydrer.myshopify.com
200 OK 0 B URL HTTP/2 productreviews.shopifycdn.com/embed/loader.js?shop=dehydrer.myshopify.com
IP
GET /embed/loader.js?shop=dehydrer.myshopify.com HTTP/1.1
Host: productreviews.shopifycdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 15:35:29 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
p3p: CP="Shopify does not support P3P."
x-robots-tag: noindex,nofollow
cache-control: max-age=300, public
etag: W/"a3812189666813b6f4ab0c83f9df0be9"
x-request-id: 3d2ef9f9-28a6-4bbf-89d5-bc63804c13aa
x-runtime: 0.004386
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: origin-when-cross-origin
content-security-policy: default-src https: 'self'; font-src https: data: 'self'; frame-ancestors https: *.myshopify.com admin.shopify.com; img-src https: data: 'self'; object-src 'none'; script-src https: 'unsafe-eval' 'strict-dynamic'; style-src https: 'unsafe-inline'; upgrade-insecure-requests
x-dc: gcp-us-east1,us-east1,gke
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ynC4gSGnGfKCdx8gh6MowKyJC0QzIo6oAvTnFmCYV0152CnWHCeDLN5Cry4z4NzR3Yi3aF7uJfdl%2FQyedXvDdgoWaRxHMkkFt%2FwAouCgOo45HnTVwdKvuyXqU8cuvuJfErKC0WnOYWNlIg8DKUuX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: processing;dur=6, socket_queue;dur=1.632, edge;dur=0.05, util;dur=0.1, cfRequestDuration;dur=171.000004
server: cloudflare
cf-ray: 775617771919b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
eu-library.klarnaservices.com/lib.js
200 OK 0 B URL HTTP/2 eu-library.klarnaservices.com/lib.js
IP
GET /lib.js HTTP/1.1
Host: eu-library.klarnaservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dehydrer.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 06 Dec 2022 15:25:14 GMT
last-modified: Mon, 05 Dec 2022 14:07:43 GMT
x-amz-server-side-encryption: AES256
cache-control: max-age=900
server: AmazonS3
content-encoding: br
etag: W/"fa32d9967e7309c8cac12442fa74612c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZogKtrAvgK96XFfb0Z98rPabis8S13x_YO7s1I1p6TrvR9Iq9-r4Pw==
age: 617
X-Firefox-Spdy: h2
192.99.158.243
34.102.187.140
162.159.130.71
13.51.39.45
52.92.0.32
93.184.220.29
185.60.164.26
185.59.220.198
23.36.77.32
95.211.116.27