{"report_id":"85e942e5-b7f8-4167-9200-84f98571e495","version":6,"status":"done","tags":[],"date":"2025-07-23T03:39:38Z","url":{"schema":"http","addr":"myaccountgoogle.com/","fqdn":"myaccountgoogle.com","domain":"myaccountgoogle.com","tld":"com"},"ip":{"addr":"95.211.189.151","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"no-go.kelkoogroup.net/redirect?country=no\u0026k=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\u0026url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D629D01K0TNTEXETB4MPR12H019D14E%26url%3Dhttps%253A%252F%252Ffarmasiet.no\u0026dc=false","fqdn":"no-go.kelkoogroup.net","domain":"kelkoogroup.net","tld":"net"},"title":"kelkoogroup.net"},"submit":{"url":{"schema":"http","addr":"myaccountgoogle.com/","fqdn":"myaccountgoogle.com","domain":"myaccountgoogle.com","tld":"com"},"ip":{"addr":"95.211.189.151","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-27T03:39:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"no-go.kelkoogroup.net","ip":{"addr":"95.211.116.26","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-08-18","domain_rank":0,"first_seen":"2017-10-30T14:27:38Z","last_seen":"2025-07-17T05:00:51.289483Z","alert_count":1,"request_count":3,"received_data":184580,"sent_data":4583,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.captcha-delivery.com","ip":{"addr":"54.240.174.108","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-12-23","domain_rank":38537,"first_seen":"2020-05-12T12:33:44Z","last_seen":"2025-07-17T06:27:57.33631Z","alert_count":0,"request_count":7,"received_data":62079,"sent_data":3602,"comment":"","tags":null,"fingerprints":null},{"fqdn":"geo.captcha-delivery.com","ip":{"addr":"13.50.216.15","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"domain_registered":"2019-12-23","domain_rank":43337,"first_seen":"2020-03-18T08:06:49Z","last_seen":"2025-07-20T09:18:35.551432Z","alert_count":0,"request_count":3,"received_data":1358248,"sent_data":7404,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dd.prod.captcha-delivery.com","ip":{"addr":"54.240.174.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-12-23","domain_rank":0,"first_seen":"2022-04-28T05:46:30Z","last_seen":"2025-07-20T10:42:38.940799Z","alert_count":0,"request_count":2,"received_data":24525,"sent_data":1081,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.yadore.com","ip":{"addr":"88.99.112.2","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2014-09-12","domain_rank":591567,"first_seen":"2017-11-28T09:59:40Z","last_seen":"2025-07-19T06:45:24.556711Z","alert_count":0,"request_count":1,"received_data":180942,"sent_data":704,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.shopfinder24.com","ip":{"addr":"3.127.134.231","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2023-06-23","domain_rank":0,"first_seen":"2023-07-10T12:41:50Z","last_seen":"2025-07-23T03:03:30.462848Z","alert_count":0,"request_count":2,"received_data":2233,"sent_data":1766,"comment":"","tags":null,"fingerprints":null},{"fqdn":"myaccountgoogle.com","ip":{"addr":"95.211.189.151","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2016-05-05","domain_rank":0,"first_seen":"2025-07-23T03:39:39.192308Z","last_seen":"2025-07-23T03:39:39.192309Z","alert_count":0,"request_count":1,"received_data":3585,"sent_data":488,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ct.captcha-delivery.com","ip":{"addr":"54.240.174.114","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-12-23","domain_rank":42546,"first_seen":"2020-02-05T05:26:26Z","last_seen":"2025-07-20T09:18:35.631727Z","alert_count":0,"request_count":1,"received_data":14319,"sent_data":422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adalh-zcq.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-06-27","domain_rank":0,"first_seen":"2025-07-07T14:04:49.429742Z","last_seen":"2025-07-21T15:29:18.21717Z","alert_count":0,"request_count":3,"received_data":3728,"sent_data":1872,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-07-23","alert":"Code and strings of plugins from the Tetris framework loaded by Swid","trigger":"no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100\u0026merchantUrl=https%3A%2F%2Ffarmasiet.no\u0026custom1=d2cdd33d19f8072f50088002614bd6368161edf4078b5a15c11030fd35f5b492\u0026publisherSubId=SeMwDFk4xtXL\u0026publisherTrafficType=publishernetwork\u0026originReferer=https%253A%252F%252Fwww.yadore.com","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3","date":"2020-09-06","description":"Code and strings of plugins from the Tetris framework loaded by Swid","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetrisplugins_JS"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-07-23","alert":"Code and strings of plugins from the Tetris framework loaded by Swid","trigger":"javascript.script.md5:6bd5c5632093892bb426f0c5cd0f931a","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3","date":"2020-09-06","description":"Code and strings of plugins from the Tetris framework loaded by Swid","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetrisplugins_JS"}}]},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100\u0026merchantUrl=https%3A%2F%2Ffarmasiet.no\u0026custom1=d2cdd33d19f8072f50088002614bd6368161edf4078b5a15c11030fd35f5b492\u0026publisherSubId=SeMwDFk4xtXL\u0026publisherTrafficType=publishernetwork\u0026originReferer=https%253A%252F%252Fwww.yadore.com","fqdn":"no-go.kelkoogroup.net","domain":"kelkoogroup.net","tld":"net"},"ip":{"addr":"95.211.116.26","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd5c5632093892bb426f0c5cd0f931a","sha1":"cee897a1ef5d3b6e620472f636bdd2b61584181d","sha256":"cc7fc076a8429ebd9faff0cf47f33178ad038216a0be0e128be3053581d4700e","sha512":"3cb1cbd93218c2cbe19c4ec37c9be2442e29f86c0e0bed3d22d8a57c631653851e47c1b4495567e1986251593d0ebda1da44a31590d587fe257d46c195942084","ssdeep":"1536:eCLLHNwquNej7Norq6bC4bNsQf4ly5jRSFu2VkElE7881aRiSyAetCl0Kbzf+F/F:FbkxCV+Rqkl86S8t0Cb+01vcsFv","tlshash":"c5f329973380742c034a5aba7b6f319bf07799653c447402e324dae1797281f99e7eb2","size":164950,"data":"","first_seen":"2025-07-23T03:39:41.552676Z","last_seen":"2025-07-23T03:39:41.552676Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-07-23","alert":"Code and strings of plugins from the Tetris framework loaded by Swid","trigger":"javascript.script.md5:6bd5c5632093892bb426f0c5cd0f931a","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3","date":"2020-09-06","description":"Code and strings of plugins from the Tetris framework loaded by Swid","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetrisplugins_JS"}}],"urlquery":null}},{"url":{"schema":"https","addr":"no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100\u0026merchantUrl=https%3A%2F%2Ffarmasiet.no\u0026custom1=d2cdd33d19f8072f50088002614bd6368161edf4078b5a15c11030fd35f5b492\u0026publisherSubId=SeMwDFk4xtXL\u0026publisherTrafficType=publishernetwork\u0026originReferer=https%253A%252F%252Fwww.yadore.com","fqdn":"no-go.kelkoogroup.net","domain":"kelkoogroup.net","tld":"net"},"ip":{"addr":"95.211.116.26","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c92a52e54a4e2707daa02059e9b6ed7d","sha1":"44bddccdc2ed6d435112d5ec9e49519bcab97650","sha256":"c184b3a714c7a5dd47bd3fbb7613a3edf21c3b4dea7e8e99ed878c6473982e00","sha512":"881bf14deca2ef5ce6297250be31a3583ae8abba7d7e409610d9e3e72a22aecaa96a14edec81b959aa2eb92b0daa743b25aeef87dec3323a3ec8eb5bf40c8522","ssdeep":"192:cN5riUTb6wvaQ5t9uzuKzoOnvUSjSJyjkPEpAb7+MK:iZ7+9","tlshash":"61324f4c9f76d053d08c2763cb6a56a6e9bf4cb47a84cf80b6a598a7bd2017ec011f18","size":11703,"data":"","first_seen":"2025-07-23T03:39:41.554276Z","last_seen":"2025-07-23T03:39:41.554276Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg%3D%3D\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026cid=Xs~1bUmX_skFwEQl5LMAHbCkwp_XGwHBG88K1Z1IUmyofTWKMslC5CnID4YtxPTujAxjJ6qWuCaKJMh8Wr6vpTR~wh2idjc4IZnzyTMqba3_gg5HGP2JSzjOKnThNYMo\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026s=35103\u0026b=32286\u0026dm=cd","fqdn":"geo.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"13.50.216.15","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"85289cd3b13dbda7718b859900e61051","sha1":"75bbfd0d34bc20d142757a2229bb8e871638141b","sha256":"c4b9a36ca6bbd520ac56d3db5546d238279bf7389181a2ab1faed6d29e36c887","sha512":"b5e43373f5761e2e760951c62689ad66232649290f5aa484c751665f67d94a1b352c7110d8ad1a2e92f9f1f695f51d2599b94d8296ee5a30860765ef89366234","ssdeep":"12288:bdyJuwk79C1K39IOGsQRW6rVjY2IxHF1DRD:bdyJuwk79C1K39IOGsQY0hYZX5","tlshash":"1bc41fd996440a9cb0196aae63da300331996dfaffb0e5c076324e15736e0fc75adc93","size":556984,"data":"","first_seen":"2025-07-23T03:39:41.555816Z","last_seen":"2025-07-23T03:39:41.555816Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"adalh-zcq.com/zclkvisitor/9b9af134-6776-11f0-afb4-0affc905d23b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=b4caed10-4db2-11ef-8ea9-0affd04c9415","fqdn":"adalh-zcq.com","domain":"adalh-zcq.com","tld":"com"},"ip":{"addr":"52.207.41.53","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ca41ee2c4da66235ceab70d80161af3","sha1":"bed8f1c37f39a5ea50deb1e6f93fb00c4d968fbb","sha256":"49a9fb62602bde2e2c0173658f114d3fff6f3f40edb7f024054c915ecaa53f76","sha512":"920f1c028ca65466ec5e20a1d8fb4531edb6720ecd13c26eefe55601719fc19165506549d3f7cfd4b65ecd98eef9216b51ec2ed4e730630d8782e926cef8b062","ssdeep":"","tlshash":"57511f746a7224706d2f240db73ad20a727b4233290bd4417cae99080fb0e97715ebe9","size":2818,"data":"","first_seen":"2025-07-23T03:39:41.557666Z","last_seen":"2025-07-23T03:39:41.557666Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"no-go.kelkoogroup.net/redirect?country=no\u0026k=612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af229db5f4b26792a7a0085c18a09e46410c64dad514c52683c2ae2f13d8effc5dba40b8213657d0e310774c2d0a30101e1b4e6bca077e057dc2464da45d8209d9056b9cbe2497d3431ed6a3831e9f738d36ef11839ddb16708500b01ca31449b09b20212917a29229201949a3c3cff0abac9a08cd6cec74729deb87440bec021c7c6a031ed61731a5cacafb5f2d202545c457e07fe446086ebcca70f6a75fa480423ea05a6cb27379ee5923de1bc55c1d1d3c73a3b18fc43388291fafdc23f5e013635384d8b687dc6a668179b72f83bf73c8cb2051cb68ecc5a44c40171487804fa467f6697d96d9b9aae134b27b3087262a0ddfe744d87faa42af94630f68207145a809f2ffb1d9c53fb4eb1a70bac9f704e682dfe19054e59dde4dd8706ec7cf9876823bb1b0581deb61a140fcbd7a4e811fda495a53490d265bba143fda193840894344b87c68801be77601fb7ff451a3465c8b114d1971c469d55230ff3fe5042ef364f1a32e1fdc7005081cd2ef54\u0026url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D629D01K0TNTEXETB4MPR12H019D14E%26url%3Dhttps%253A%252F%252Ffarmasiet.no\u0026dc=false","fqdn":"no-go.kelkoogroup.net","domain":"kelkoogroup.net","tld":"net"},"ip":{"addr":"95.211.116.26","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b918b49bbe2aa6180c5734ed5ae0eb30","sha1":"d6386cdbe0aa77c334c8c6db6f5cca307c18335f","sha256":"4151ae0081d4c4aba87ad9146ad6e4010e4f8ac7f537ad19f8ac152d9a4633df","sha512":"2e215cf0c01aef38799713169006e4c3029e90abb12a389038d40cc6271fd283450564b81595d7b5bf830a3c22ff4d273f37d8164db049adc769d2c15189169e","ssdeep":"","tlshash":"4ce0c0bdbf0d137838f6544fad34791d2e50403529a5ede56454d630c68f7af6912f04","size":370,"data":"","first_seen":"2025-07-23T03:39:41.559185Z","last_seen":"2025-07-23T03:39:41.559185Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ct.captcha-delivery.com/i.js","fqdn":"ct.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"54.240.174.114","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d8b19e144663a4b0a34e2030e9d1cc8","sha1":"5b9eaf949689ac7820c221a5911f4fff98c5ab02","sha256":"d5c4c11916c7bd5f5ad25bb4647f735d4a0704aa63f59835017ff625f82363dd","sha512":"259d2881ec97a9d59e3debe295415a0c8c7ad0cd80d8313cb5fc90ccfa40afad4b669a4350acb9b69ebd3f1660c97665a9524296807d382277121bf48f27d5bc","ssdeep":"192:Rc6NViX29WR+ctayDQ7/p8+TeGyfLq3RrNUOuSeGa+jX8hOUO402Q2JC0+P3VKHP:RFyr3W1Za4sQMC/C","tlshash":"645292ae58e355684767203e1bbf220cb1769123345edc50bc5c62407f90f6a9ab6bec","size":13786,"data":"","first_seen":"2025-06-25T14:14:23.065673Z","last_seen":"2025-08-12T07:28:49.404227Z","times_seen":839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100\u0026merchantUrl=https%3A%2F%2Ffarmasiet.no\u0026custom1=d2cdd33d19f8072f50088002614bd6368161edf4078b5a15c11030fd35f5b492\u0026publisherSubId=SeMwDFk4xtXL\u0026publisherTrafficType=publishernetwork\u0026originReferer=https%253A%252F%252Fwww.yadore.com","fqdn":"no-go.kelkoogroup.net","domain":"kelkoogroup.net","tld":"net"},"ip":{"addr":"95.211.116.26","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e5ed4f8c5fa7c13c778943fa62c2c3b","sha1":"2c7bfbb5d104aa56616ec0ac4b7d385fdb97cad2","sha256":"5e6c80708aa947ae88d539faace2cc6c69d402a5598aea2621792c6b89645e47","sha512":"5763b6f912965045c26f8827d76c2e1f7359a58718a666e9ceed803f394ef8d480ab0382a2f6e82276235871c188d1c0c3056ad05c6daa98bad52fe8411c144f","ssdeep":"","tlshash":"a121530f22890bab53c183d65171144be5577d2bf4d2a497376f8315781c28ea352f2d","size":1347,"data":"","first_seen":"2025-07-23T03:39:41.560638Z","last_seen":"2025-07-23T03:39:41.560638Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"adalh-zcq.com/zclkredirect?visitid=9b9af134-6776-11f0-afb4-0affc905d23b\u0026type=js\u0026browserWidth=1280\u0026browserHeight=1024\u0026iframeDetected=false\u0026webdriverDetected=false\u0026gpu=Mesa%3B%20llvmpipe\u0026timezone=UTC%2B00%3A00\u0026timezoneName=UTC","fqdn":"adalh-zcq.com","domain":"adalh-zcq.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-23T03:39:17.586Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /zclkredirect?visitid=9b9af134-6776-11f0-afb4-0affc905d23b\u0026type=js\u0026browserWidth=1280\u0026browserHeight=1024\u0026iframeDetected=false\u0026webdriverDetected=false\u0026gpu=Mesa%3B%20llvmpipe\u0026timezone=UTC%2B00%3A00\u0026timezoneName=UTC HTTP/1.1\r\nHost: adalh-zcq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://adalh-zcq.com/zclkvisitor/9b9af134-6776-11f0-afb4-0affc905d23b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=b4caed10-4db2-11ef-8ea9-0affd04c9415\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T14:28:37.844917Z","times_seen":13542679,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":1,"connect":96,"send":0,"wait":0,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.shopfinder24.com/favicon.ico","fqdn":"api.shopfinder24.com","domain":"shopfinder24.com","tld":"com"},"ip":{"addr":"3.127.134.231","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://api.shopfinder24.com/r/dG89aHR0cHMlM0ElMkYlMkZhcGkueWFkb3JlLmNvbSUyRnYyJTJGZCUzRnVybCUzRGh0dHBzJTI1M0ElMjUyRiUyNTJGZmFybWFzaWV0Lm5vJTI2bWVyY2hhbnRJZCUzRDRmZjk1OGE3MDE2ZWE4Y2FmMTA0YWViODQ5Yzk4NTg1OTFkZDA0ZGE4NWNkMDMwY2VlZWViNzk1Y2FiMDUyMmQlMjZtYXJrZXQlM0RubyUyNnByb2plY3RJZCUzRFNlTXdERms0eHRYTCUyNnBsYWNlbWVudElkJTNEJTdCY2xpY2tpZCU3RCZ0PTAmcz04ZDA1N2FhNjJjMTUyZmE0MDk5NTcyNjk3ZTAyMzE3ZQ==?c=w1dv0vfv66jt3jfbjmqv99fm\u0026var10=badious-buzzard","date":"2025-07-23T03:39:18.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.shopfinder24.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 10:56:22 GMT","end":"Mon, 29 Sep 2025 10:56:21 GMT"},"fingerprint":{"sha1":"EF:7C:72:72:85:B1:8E:7B:DD:20:23:B8:ED:CA:46:7B:EB:53:AE:B2","sha256":"8B:3B:E5:2B:08:FA:D5:AC:32:30:97:8D:B9:F3:30:20:8A:74:1A:28:BF:12:4B:FA:48:12:F9:2D:DA:2B:2A:14"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: api.shopfinder24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.shopfinder24.com/r/dG89aHR0cHMlM0ElMkYlMkZhcGkueWFkb3JlLmNvbSUyRnYyJTJGZCUzRnVybCUzRGh0dHBzJTI1M0ElMjUyRiUyNTJGZmFybWFzaWV0Lm5vJTI2bWVyY2hhbnRJZCUzRDRmZjk1OGE3MDE2ZWE4Y2FmMTA0YWViODQ5Yzk4NTg1OTFkZDA0ZGE4NWNkMDMwY2VlZWViNzk1Y2FiMDUyMmQlMjZtYXJrZXQlM0RubyUyNnByb2plY3RJZCUzRFNlTXdERms0eHRYTCUyNnBsYWNlbWVudElkJTNEJTdCY2xpY2tpZCU3RCZ0PTAmcz04ZDA1N2FhNjJjMTUyZmE0MDk5NTcyNjk3ZTAyMzE3ZQ==?c=w1dv0vfv66jt3jfbjmqv99fm\u0026var10=badious-buzzard\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 23 Jul 2025 03:39:19 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 0\r\nlast-modified: Mon, 10 Jul 2023 10:16:37 GMT\r\netag: \"64abda85-0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T14:28:37.844917Z","times_seen":13542679,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"no-go.kelkoogroup.net/favicon.ico","fqdn":"no-go.kelkoogroup.net","domain":"kelkoogroup.net","tld":"net"},"ip":{"addr":"95.211.116.26","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://no-go.kelkoogroup.net/redirect?country=no\u0026k=612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af229db5f4b26792a7a0085c18a09e46410c64dad514c52683c2ae2f13d8effc5dba40b8213657d0e310774c2d0a30101e1b4e6bca077e057dc2464da45d8209d9056b9cbe2497d3431ed6a3831e9f738d36ef11839ddb16708500b01ca31449b09b20212917a29229201949a3c3cff0abac9a08cd6cec74729deb87440bec021c7c6a031ed61731a5cacafb5f2d202545c457e07fe446086ebcca70f6a75fa480423ea05a6cb27379ee5923de1bc55c1d1d3c73a3b18fc43388291fafdc23f5e013635384d8b687dc6a668179b72f83bf73c8cb2051cb68ecc5a44c40171487804fa467f6697d96d9b9aae134b27b3087262a0ddfe744d87faa42af94630f68207145a809f2ffb1d9c53fb4eb1a70bac9f704e682dfe19054e59dde4dd8706ec7cf9876823bb1b0581deb61a140fcbd7a4e811fda495a53490d265bba143fda193840894344b87c68801be77601fb7ff451a3465c8b114d1971c469d55230ff3fe5042ef364f1a32e1fdc7005081cd2ef54\u0026url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D629D01K0TNTEXETB4MPR12H019D14E%26url%3Dhttps%253A%252F%252Ffarmasiet.no\u0026dc=false","date":"2025-07-23T03:39:20.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.kelkoogroup.net","organization":"Kelkoo SAS"},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 26 Sep 2024 00:00:00 GMT","end":"Fri, 10 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"AB:7F:31:B1:66:46:76:99:39:20:8C:5B:A4:03:6B:DE:E6:6B:F4:17","sha256":"40:D1:E4:00:09:F0:62:75:AF:0D:CD:D1:9E:83:56:B0:FF:6D:74:43:76:CA:2F:93:47:88:C0:FE:63:C3:5D:71"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: no-go.kelkoogroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://no-go.kelkoogroup.net/redirect?country=no\u0026k=612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af229db5f4b26792a7a0085c18a09e46410c64dad514c52683c2ae2f13d8effc5dba40b8213657d0e310774c2d0a30101e1b4e6bca077e057dc2464da45d8209d9056b9cbe2497d3431ed6a3831e9f738d36ef11839ddb16708500b01ca31449b09b20212917a29229201949a3c3cff0abac9a08cd6cec74729deb87440bec021c7c6a031ed61731a5cacafb5f2d202545c457e07fe446086ebcca70f6a75fa480423ea05a6cb27379ee5923de1bc55c1d1d3c73a3b18fc43388291fafdc23f5e013635384d8b687dc6a668179b72f83bf73c8cb2051cb68ecc5a44c40171487804fa467f6697d96d9b9aae134b27b3087262a0ddfe744d87faa42af94630f68207145a809f2ffb1d9c53fb4eb1a70bac9f704e682dfe19054e59dde4dd8706ec7cf9876823bb1b0581deb61a140fcbd7a4e811fda495a53490d265bba143fda193840894344b87c68801be77601fb7ff451a3465c8b114d1971c469d55230ff3fe5042ef364f1a32e1fdc7005081cd2ef54\u0026url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D629D01K0TNTEXETB4MPR12H019D14E%26url%3Dhttps%253A%252F%252Ffarmasiet.no\u0026dc=false\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: datadome=Xs~1bUmX_skFwEQl5LMAHbCkwp_XGwHBG88K1Z1IUmyofTWKMslC5CnID4YtxPTujAxjJ6qWuCaKJMh8Wr6vpTR~wh2idjc4IZnzyTMqba3_gg5HGP2JSzjOKnThNYMo; kelkooID=a4c6295-198355d3b82-355ae\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nRequest-Time: PT0.000556579S\r\nX-Robots-Tag: noindex,nofollow\r\nReferrer-Policy: origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'none'\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nDate: Wed, 23 Jul 2025 03:39:19 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 1144\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1144,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"8560de521c4990c7c870121fc9643508","sha1":"0cacf7a6b96cceeb6ceae74d5f14dc87406a6f39","sha256":"73a434285c3a752bc8c44aebd50e10f1a766853cbc7184e78d5c934c7b52b620","sha512":"aafb16d81fe8ac491cf7b738e32f127bcaff894e1ed33ad47fa1bd5150badbf9ed76a30dacc1ce50f8277eb7be099cb11789aa651f9a89bbc305eb0fa7affd34","ssdeep":"","tlshash":"3121fda6a6e70846b51a9130a3a3b7813356820be24bcd383f6e63249f402b5c4d3b0c","first_seen":"2023-04-08T17:23:22Z","last_seen":"2026-04-09T13:20:29.060407Z","times_seen":7747,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.captcha-delivery.com/common/fonts/roboto/roboto.woff2","fqdn":"static.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"54.240.174.108","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg==\u0026cid=Xs~1bUmX_skFwEQl5LMAHh_zpU2JSYA2BTS4iv0cr_IpwAj0VE4W6TdK2i5Whu1ONmsFjAXjT0j2aQUqsCNidgiTsHxIrQOCg9obNW0lZK_Vnh9zqkENUp3jHb811SVj\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026t=fe\u0026s=35103\u0026e=0f73cba2d0d0db236638af0c57e767e6dec5f044b2c1fa16087a426491e07932\u0026ir=36%2C20%2C676\u0026dm=dc_ir","date":"2025-07-23T03:39:26.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M03","organization":"Amazon"},"validity":{"start":"Thu, 13 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D","sha256":"39:7E:A0:90:B7:3F:4A:9E:8B:76:F5:15:A3:76:47:F4:F4:F9:BB:3F:40:68:3E:E8:36:C5:70:FE:98:20:75:9C"}}},"request":{"raw":"GET /common/fonts/roboto/roboto.woff2 HTTP/1.1\r\nHost: static.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://geo.captcha-delivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.captcha-delivery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 15688\r\naccess-control-allow-origin: https://geo.captcha-delivery.com\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\naccess-control-allow-credentials: true\r\nlast-modified: Fri, 06 May 2022 16:47:07 GMT\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 23 Jul 2025 01:28:06 GMT\r\netag: \"aa23b7b4bcf2b8f0e876106bb3de69c6\"\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: -zJ7-Tr5w7u8va6xYGeEgVUc1rLUSD4JRWjDTRHO2q5434shLnpASQ==\r\nage: 8857\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15688, version 1.0","md5":"aa23b7b4bcf2b8f0e876106bb3de69c6","sha1":"106ac454ba4e503e0a1cd15e1275130918049182","sha256":"cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca","sha512":"4b46d59ba6c76e5f30c89a5bb3f96f7a72bd7d60cfcad7d48638059d60ec61a317a40df70bb1cd2f2a477de1bb0c2399c671880c2981779df6af99043043b46c","ssdeep":"384:8dYfjMKhQeGWnVBs+whGU7J1eNaUgFS7WWPtl2jLMgS4:8hteGIKadgFSn4l","tlshash":"9162d04c9b1901fce30d2efa445bf6bf58c6051c2140af80bde599944ed9d27878fd56","first_seen":"2023-04-09T23:24:15Z","last_seen":"2026-04-09T14:17:18.246689Z","times_seen":14300,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"no-go.kelkoogroup.net/redirect?country=no\u0026k=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\u0026url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D629D01K0TNTEXETB4MPR12H019D14E%26url%3Dhttps%253A%252F%252Ffarmasiet.no\u0026dc=false","fqdn":"no-go.kelkoogroup.net","domain":"kelkoogroup.net","tld":"net"},"ip":{"addr":"95.211.116.26","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-23T03:39:20.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.kelkoogroup.net","organization":"Kelkoo SAS"},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 26 Sep 2024 00:00:00 GMT","end":"Fri, 10 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"AB:7F:31:B1:66:46:76:99:39:20:8C:5B:A4:03:6B:DE:E6:6B:F4:17","sha256":"40:D1:E4:00:09:F0:62:75:AF:0D:CD:D1:9E:83:56:B0:FF:6D:74:43:76:CA:2F:93:47:88:C0:FE:63:C3:5D:71"}}},"request":{"raw":"GET /redirect?country=no\u0026k=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\u0026url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D629D01K0TNTEXETB4MPR12H019D14E%26url%3Dhttps%253A%252F%252Ffarmasiet.no\u0026dc=false HTTP/1.1\r\nHost: no-go.kelkoogroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100\u0026merchantUrl=https%3A%2F%2Ffarmasiet.no\u0026custom1=d2cdd33d19f8072f50088002614bd6368161edf4078b5a15c11030fd35f5b492\u0026publisherSubId=SeMwDFk4xtXL\u0026publisherTrafficType=publishernetwork\u0026originReferer=https%253A%252F%252Fwww.yadore.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: datadome=57EmdHeBNw3alx2YWF~pdxXN_m9G9qcpn2ugintFtZUH2Ttciq12lMAUbe1A8oXEnlxWJgH3sfwLTezzerLdZ6QQBE0bhKvCrkJ35c50P0e86j8pPEP4dCAmdf5LyqDv; kelkooID=a4c6295-198355d3b82-355ae\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nPragma: no-cache\r\nX-DD-B: 3\r\nCharset: utf-8\r\nAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory\r\nSet-Cookie: datadome=Xs~1bUmX_skFwEQl5LMAHbCkwp_XGwHBG88K1Z1IUmyofTWKMslC5CnID4YtxPTujAxjJ6qWuCaKJMh8Wr6vpTR~wh2idjc4IZnzyTMqba3_gg5HGP2JSzjOKnThNYMo; Max-Age=31104000; Expires=Sat, 18 Jul 2026 03:39:20 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure\r\nX-DataDome: protected\r\nRequest-Time: PT0.01823511S\r\nCache-Control: max-age=0, private, no-cache, no-store, must-revalidate\r\nX-DataDome-CID: AHrlqAAAAAMArem7VvqFlv4AW1oqmg==\r\nReferrer-Policy: origin-when-cross-origin\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nDate: Wed, 23 Jul 2025 03:39:19 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 744\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":744,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (744), with no line terminators","md5":"fcedf1b854db5ee769bdf288c8d314ab","sha1":"9057d4e3bb25d9d55fb7ed1424762a0afa538a78","sha256":"e40a7c2aad955c1fcf0905edd1c9c0493df875370ed44e7e4f56edf4d15963c0","sha512":"d7c92af9a13db80e3a2d69ec6f6e0df3ceb8175cc0378281b01c3f88df4a3abbc4a223287360ea0c4d3c8f2caa21e753513f65a1419d241a3163cb93f526e6ac","ssdeep":"","tlshash":"2501d0afae1922696cf954cab8b0f15c0812546439a1ed927494d934eb0e2a65e01d00","first_seen":"2025-07-23T03:39:41.534486Z","last_seen":"2025-07-23T03:39:41.534486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.captcha-delivery.com/common/fonts/roboto/font-face.css","fqdn":"static.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"54.240.174.108","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg%3D%3D\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026cid=Xs~1bUmX_skFwEQl5LMAHbCkwp_XGwHBG88K1Z1IUmyofTWKMslC5CnID4YtxPTujAxjJ6qWuCaKJMh8Wr6vpTR~wh2idjc4IZnzyTMqba3_gg5HGP2JSzjOKnThNYMo\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%3D612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af229db5f4b26792a7a0085c18a09e46410c64dad514c52683c2ae2f13d8effc5dba40b8213657d0e310774c2d0a30101e1b4e6bca077e057dc2464da45d8209d9056b9cbe2497d3431ed6a3831e9f738d36ef11839ddb16708500b01ca31449b09b20212917a29229201949a3c3cff0abac9a08cd6cec74729deb87440bec021c7c6a031ed61731a5cacafb5f2d202545c457e07fe446086ebcca70f6a75fa480423ea05a6cb27379ee5923de1bc55c1d1d3c73a3b18fc43388291fafdc23f5e013635384d8b687dc6a668179b72f83bf73c8cb2051cb68ecc5a44c40171487804fa467f6697d96d9b9aae134b27b3087262a0ddfe744d87faa42af94630f68207145a809f2ffb1d9c53fb4eb1a70bac9f704e682dfe19054e59dde4dd8706ec7cf9876823bb1b0581deb61a140fcbd7a4e811fda495a53490d265bba143fda193840894344b87c68801be77601fb7ff451a3465c8b114d1971c469d55230ff3fe5042ef364f1a32e1fdc7005081cd2ef54%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026s=35103\u0026b=32286\u0026dm=cd","date":"2025-07-23T03:39:20.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M03","organization":"Amazon"},"validity":{"start":"Thu, 13 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D","sha256":"39:7E:A0:90:B7:3F:4A:9E:8B:76:F5:15:A3:76:47:F4:F4:F9:BB:3F:40:68:3E:E8:36:C5:70:FE:98:20:75:9C"}}},"request":{"raw":"GET /common/fonts/roboto/font-face.css HTTP/1.1\r\nHost: static.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geo.captcha-delivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 519\r\nlast-modified: Fri, 19 Jul 2024 12:42:09 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 23 Jul 2025 00:58:02 GMT\r\netag: \"e4f77074c0ffbfab377011e19283eb13\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: hGaGbkT5lOKtD2AgRoAA9CmAETw1IwgBssNRvZki22jqFkIFjI0PGQ==\r\nage: 9679\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":519,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e4f77074c0ffbfab377011e19283eb13","sha1":"9160259165ca1ef84209d4dd675c3ed367babff1","sha256":"66599c34190f7a6a402b38664a30a9b564fc22510f51fa3c5f027fb91e7a0e51","sha512":"6ebf2429055be6a945d7e3b84af00b3a68247c8c85c6874c6a670985cf400b2ba06267601c5526b97bfc0d9678b63a33fc38726128e2e05cdc9ec04e450d2794","ssdeep":"","tlshash":"bdf0e9520c86704667020e5d775b651cbc5d640b2809d856f6ee388a9fd7a3f8294f4e","first_seen":"2024-07-20T08:22:48Z","last_seen":"2026-04-09T14:07:41.098706Z","times_seen":10633,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":69,"dns":41,"connect":1,"send":0,"wait":1,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.captcha-delivery.com/common/fonts/roboto/roboto.woff2","fqdn":"static.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"54.240.174.108","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg%3D%3D\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026cid=Xs~1bUmX_skFwEQl5LMAHbCkwp_XGwHBG88K1Z1IUmyofTWKMslC5CnID4YtxPTujAxjJ6qWuCaKJMh8Wr6vpTR~wh2idjc4IZnzyTMqba3_gg5HGP2JSzjOKnThNYMo\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026s=35103\u0026b=32286\u0026dm=cd","date":"2025-07-23T03:39:21.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M03","organization":"Amazon"},"validity":{"start":"Thu, 13 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D","sha256":"39:7E:A0:90:B7:3F:4A:9E:8B:76:F5:15:A3:76:47:F4:F4:F9:BB:3F:40:68:3E:E8:36:C5:70:FE:98:20:75:9C"}}},"request":{"raw":"GET /common/fonts/roboto/roboto.woff2 HTTP/1.1\r\nHost: static.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://geo.captcha-delivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.captcha-delivery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 15688\r\naccess-control-allow-origin: https://geo.captcha-delivery.com\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\naccess-control-allow-credentials: true\r\nlast-modified: Fri, 06 May 2022 16:47:07 GMT\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 23 Jul 2025 01:28:06 GMT\r\netag: \"aa23b7b4bcf2b8f0e876106bb3de69c6\"\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 5R7in-MqrGOm5rUYekgvg2izHqKaasIhe_TybnAQaj1IfNFeUuVOTQ==\r\nage: 8852\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15688, version 1.0","md5":"aa23b7b4bcf2b8f0e876106bb3de69c6","sha1":"106ac454ba4e503e0a1cd15e1275130918049182","sha256":"cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca","sha512":"4b46d59ba6c76e5f30c89a5bb3f96f7a72bd7d60cfcad7d48638059d60ec61a317a40df70bb1cd2f2a477de1bb0c2399c671880c2981779df6af99043043b46c","ssdeep":"384:8dYfjMKhQeGWnVBs+whGU7J1eNaUgFS7WWPtl2jLMgS4:8hteGIKadgFSn4l","tlshash":"9162d04c9b1901fce30d2efa445bf6bf58c6051c2140af80bde599944ed9d27878fd56","first_seen":"2023-04-09T23:24:15Z","last_seen":"2026-04-09T14:17:18.246689Z","times_seen":14300,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.captcha-delivery.com/captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css","fqdn":"static.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"54.240.174.108","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg==\u0026cid=Xs~1bUmX_skFwEQl5LMAHh_zpU2JSYA2BTS4iv0cr_IpwAj0VE4W6TdK2i5Whu1ONmsFjAXjT0j2aQUqsCNidgiTsHxIrQOCg9obNW0lZK_Vnh9zqkENUp3jHb811SVj\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026t=fe\u0026s=35103\u0026e=0f73cba2d0d0db236638af0c57e767e6dec5f044b2c1fa16087a426491e07932\u0026ir=36%2C20%2C676\u0026dm=dc_ir","date":"2025-07-23T03:39:23.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M03","organization":"Amazon"},"validity":{"start":"Thu, 13 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D","sha256":"39:7E:A0:90:B7:3F:4A:9E:8B:76:F5:15:A3:76:47:F4:F4:F9:BB:3F:40:68:3E:E8:36:C5:70:FE:98:20:75:9C"}}},"request":{"raw":"GET /captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css HTTP/1.1\r\nHost: static.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geo.captcha-delivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Apr 2024 08:21:58 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\ndate: Wed, 23 Jul 2025 01:16:34 GMT\r\netag: W/\"1f113f0b6d6855568c684e354bb853d1\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: KgVDxRzi0mLv7PBlvJ081ikZ4mEGN45Nek2JPeV36KPi916XQ1NLmA==\r\nage: 8570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6162,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1f113f0b6d6855568c684e354bb853d1","sha1":"2a2fbd27d5408fa3e53c74f04b7790ab1aea9b2c","sha256":"d49fce4d3745c6d9f755f6be625eb218238baec337cfdb30be0e87d8c0ff6653","sha512":"69800766009ab6645b6560c9df923bbd384e17bd2197c0b5623e3bb48d27c7dd610ce6ba0696375c011a4108afa74910fa2493176ab9d22694b092e187710834","ssdeep":"96:8uP8pig6K2JRZi9aL1Cjl4c3wS8OJqU6gms50nqKc:8uSig4JAaL1Cjyc3wSpJqU6FsmnA","tlshash":"ead1cda48e8140b7663789745bf84679e24d8c43e70219e17dac62448ff68e4b271e8f","first_seen":"2024-08-19T15:55:50.878702Z","last_seen":"2025-12-31T11:21:05.701763Z","times_seen":8908,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg%3D%3D\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026cid=Xs~1bUmX_skFwEQl5LMAHbCkwp_XGwHBG88K1Z1IUmyofTWKMslC5CnID4YtxPTujAxjJ6qWuCaKJMh8Wr6vpTR~wh2idjc4IZnzyTMqba3_gg5HGP2JSzjOKnThNYMo\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026s=35103\u0026b=32286\u0026dm=cd","fqdn":"geo.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"13.50.216.15","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://no-go.kelkoogroup.net/redirect?country=no\u0026k=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\u0026url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D629D01K0TNTEXETB4MPR12H019D14E%26url%3Dhttps%253A%252F%252Ffarmasiet.no\u0026dc=false","date":"2025-07-23T03:39:20.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M02","organization":"Amazon"},"validity":{"start":"Thu, 13 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:9E:7E:72:25:57:E3:AF:B6:87:61:A0:0D:B1:85:B4:85:82:E6:96","sha256":"86:E5:03:06:38:8D:F3:19:52:DE:AE:12:59:2E:D3:FD:0B:3B:73:4B:FE:2C:58:C4:34:42:5F:05:42:24:58:D8"}}},"request":{"raw":"GET /interstitial/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg%3D%3D\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026cid=Xs~1bUmX_skFwEQl5LMAHbCkwp_XGwHBG88K1Z1IUmyofTWKMslC5CnID4YtxPTujAxjJ6qWuCaKJMh8Wr6vpTR~wh2idjc4IZnzyTMqba3_gg5HGP2JSzjOKnThNYMo\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026s=35103\u0026b=32286\u0026dm=cd HTTP/1.1\r\nHost: geo.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://no-go.kelkoogroup.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 23 Jul 2025 03:39:20 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":559865,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (61855)","md5":"617661f0eb0bf71f27076cdde81a18d9","sha1":"b60a1a98fa9204b378d8e5a4d34e34206105dfe4","sha256":"b2c77d1ebafef52ddca16e4375c62d8a41efd22d3d34d26f622cf48ee1ebe7e4","sha512":"9c3f7f7553d9a132036143f6269756f413ebf137adddebc15528128abb4d73cf7190669a35f420e66f4533f2fd827037a2fe203126de4a6edd5504469e832b0a","ssdeep":"12288:odyJuwk79C1K39IOGsQRW6rVjY2IxHF1DRo:odyJuwk79C1K39IOGsQY0hYZX2","tlshash":"04c42fd996440a9cb0196aae63da300331996dfaffb0e5c076324e15736e0fc75adc93","first_seen":"2025-07-23T03:39:41.538015Z","last_seen":"2025-07-23T03:39:41.538015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":100,"dns":30,"connect":11,"send":0,"wait":14,"receive":48,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo.captcha-delivery.com/interstitial/","fqdn":"geo.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"13.50.216.15","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg%3D%3D\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026cid=Xs~1bUmX_skFwEQl5LMAHbCkwp_XGwHBG88K1Z1IUmyofTWKMslC5CnID4YtxPTujAxjJ6qWuCaKJMh8Wr6vpTR~wh2idjc4IZnzyTMqba3_gg5HGP2JSzjOKnThNYMo\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026s=35103\u0026b=32286\u0026dm=cd","date":"2025-07-23T03:39:23.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M02","organization":"Amazon"},"validity":{"start":"Thu, 13 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:9E:7E:72:25:57:E3:AF:B6:87:61:A0:0D:B1:85:B4:85:82:E6:96","sha256":"86:E5:03:06:38:8D:F3:19:52:DE:AE:12:59:2E:D3:FD:0B:3B:73:4B:FE:2C:58:C4:34:42:5F:05:42:24:58:D8"}}},"request":{"raw":"POST /interstitial/ HTTP/1.1\r\nHost: geo.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 7436\r\nOrigin: https://geo.captcha-delivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg%3D%3D\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026cid=Xs~1bUmX_skFwEQl5LMAHbCkwp_XGwHBG88K1Z1IUmyofTWKMslC5CnID4YtxPTujAxjJ6qWuCaKJMh8Wr6vpTR~wh2idjc4IZnzyTMqba3_gg5HGP2JSzjOKnThNYMo\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026s=35103\u0026b=32286\u0026dm=cd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 23 Jul 2025 03:39:23 GMT\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1793\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1793,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f3715db749154f29db810acff5f3e5c7","sha1":"3c2a17019325a75a1fc434c1aef5795137792217","sha256":"d3e9e84bed2765cf5139816bcd02625063cf122ba9fe760d15d1e9511ee94686","sha512":"fe7fa25dce310446c4d7aa4b273399a94ce39d2b0a5a4134227690070ba488def8f847577039b75a116aa82ed70c7546f74950cc2a905461d362d1ee3db1f2b2","ssdeep":"","tlshash":"a231f9f0ee6715bb4ae90b25f8ade948d1822307e99053ccb00a3711d99e795602360f","first_seen":"2025-07-23T03:39:41.539637Z","last_seen":"2025-07-23T03:39:41.539637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myaccountgoogle.com/","fqdn":"myaccountgoogle.com","domain":"myaccountgoogle.com","tld":"com"},"ip":{"addr":"95.211.189.151","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-23T03:39:16.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"myaccountgoogle.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 May 2025 17:07:59 GMT","end":"Sat, 09 Aug 2025 17:07:58 GMT"},"fingerprint":{"sha1":"03:59:84:64:67:51:45:73:5C:B6:F0:5F:68:39:05:75:CD:9E:53:A6","sha256":"E4:0B:60:F7:5B:CE:41:55:5F:FC:24:77:17:20:0B:81:7D:C3:89:B4:DF:26:B6:25:A3:51:C8:7F:F5:D2:40:EB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: myaccountgoogle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-length: 11\r\ndate: Wed, 23 Jul 2025 03:39:16 GMT\r\nlocation: http://adalh-zcq.com/zclkvisitor/9b9af134-6776-11f0-afb4-0affc905d23b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=b4caed10-4db2-11ef-8ea9-0affd04c9415\r\nserver: Cowboy\r\nset-cookie: sid=9b933ead-6776-11f0-8255-725757240080; path=/; domain=.myaccountgoogle.com; expires=Mon, 10 Aug 2093 06:53:23 GMT; max-age=2147483647; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":3086,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T14:28:37.844917Z","times_seen":13542679,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":86,"dns":1,"connect":22,"send":0,"wait":509,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ct.captcha-delivery.com/i.js","fqdn":"ct.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"54.240.174.114","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://no-go.kelkoogroup.net/redirect?country=no\u0026k=612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af229db5f4b26792a7a0085c18a09e46410c64dad514c52683c2ae2f13d8effc5dba40b8213657d0e310774c2d0a30101e1b4e6bca077e057dc2464da45d8209d9056b9cbe2497d3431ed6a3831e9f738d36ef11839ddb16708500b01ca31449b09b20212917a29229201949a3c3cff0abac9a08cd6cec74729deb87440bec021c7c6a031ed61731a5cacafb5f2d202545c457e07fe446086ebcca70f6a75fa480423ea05a6cb27379ee5923de1bc55c1d1d3c73a3b18fc43388291fafdc23f5e013635384d8b687dc6a668179b72f83bf73c8cb2051cb68ecc5a44c40171487804fa467f6697d96d9b9aae134b27b3087262a0ddfe744d87faa42af94630f68207145a809f2ffb1d9c53fb4eb1a70bac9f704e682dfe19054e59dde4dd8706ec7cf9876823bb1b0581deb61a140fcbd7a4e811fda495a53490d265bba143fda193840894344b87c68801be77601fb7ff451a3465c8b114d1971c469d55230ff3fe5042ef364f1a32e1fdc7005081cd2ef54\u0026url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D629D01K0TNTEXETB4MPR12H019D14E%26url%3Dhttps%253A%252F%252Ffarmasiet.no\u0026dc=false","date":"2025-07-23T03:39:20.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M03","organization":"Amazon"},"validity":{"start":"Thu, 13 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D","sha256":"39:7E:A0:90:B7:3F:4A:9E:8B:76:F5:15:A3:76:47:F4:F4:F9:BB:3F:40:68:3E:E8:36:C5:70:FE:98:20:75:9C"}}},"request":{"raw":"GET /i.js HTTP/1.1\r\nHost: ct.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://no-go.kelkoogroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 13786\r\nlast-modified: Wed, 25 Jun 2025 12:23:22 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 22 Jul 2025 12:25:00 GMT\r\netag: \"4d8b19e144663a4b0a34e2030e9d1cc8\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: j0NBPmqqY8s_2aKijvgLIj3mcyG1LZ9uom2O5wVmJfOEIGdCyadgng==\r\nage: 54861\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13786,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4d8b19e144663a4b0a34e2030e9d1cc8","sha1":"5b9eaf949689ac7820c221a5911f4fff98c5ab02","sha256":"d5c4c11916c7bd5f5ad25bb4647f735d4a0704aa63f59835017ff625f82363dd","sha512":"259d2881ec97a9d59e3debe295415a0c8c7ad0cd80d8313cb5fc90ccfa40afad4b669a4350acb9b69ebd3f1660c97665a9524296807d382277121bf48f27d5bc","ssdeep":"192:Rc6NViX29WR+ctayDQ7/p8+TeGyfLq3RrNUOuSeGa+jX8hOUO402Q2JC0+P3VKHP:RFyr3W1Za4sQMC/C","tlshash":"645292ae58e355684767203e1bbf220cb1769123345edc50bc5c62407f90f6a9ab6bec","first_seen":"2025-06-25T14:14:23.065673Z","last_seen":"2025-08-12T07:28:49.404227Z","times_seen":839,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":44,"dns":14,"connect":1,"send":0,"wait":1,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dd.prod.captcha-delivery.com/image/2025-07-23/7ca43413992b67c229bfa8edd3c129e0.frag.png","fqdn":"dd.prod.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"54.240.174.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg==\u0026cid=Xs~1bUmX_skFwEQl5LMAHh_zpU2JSYA2BTS4iv0cr_IpwAj0VE4W6TdK2i5Whu1ONmsFjAXjT0j2aQUqsCNidgiTsHxIrQOCg9obNW0lZK_Vnh9zqkENUp3jHb811SVj\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026t=fe\u0026s=35103\u0026e=0f73cba2d0d0db236638af0c57e767e6dec5f044b2c1fa16087a426491e07932\u0026ir=36%2C20%2C676\u0026dm=dc_ir","date":"2025-07-23T03:39:23.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dd.prod.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 27 Jan 2025 00:00:00 GMT","end":"Wed, 25 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:DE:FA:F7:3D:63:84:2A:F7:68:BE:5E:19:5C:02:C6:7A:A4:A2:DA","sha256":"68:9C:BA:AD:4C:BB:E5:8C:C5:99:0E:75:D7:76:AC:96:B3:39:C7:A4:90:DC:AB:1C:A4:E1:FC:33:09:AA:78:23"}}},"request":{"raw":"GET /image/2025-07-23/7ca43413992b67c229bfa8edd3c129e0.frag.png HTTP/1.1\r\nHost: dd.prod.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://geo.captcha-delivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geo.captcha-delivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 7541\r\ndate: Wed, 23 Jul 2025 00:04:04 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3600\r\nlast-modified: Sat, 19 Jul 2025 05:03:39 GMT\r\nx-amz-expiration: expiry-date=\"Sun, 27 Jul 2025 00:00:00 GMT\", rule-id=\"auto-clean old captchas image (7 days)\"\r\netag: \"11ceeaee810f62c9a067b6bc8feeac90\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: nnD9uXIva6sqhSIfKf23mlubx1C7QGnX\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: eW8e9AFERhJgbazgvk6MEEBK35nnV_RPWDdwVb6moC5N3Zh3w1je_w==\r\nage: 12920\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7541,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"PNG image data, 63 x 155, 8-bit/color RGBA, non-interlaced","md5":"11ceeaee810f62c9a067b6bc8feeac90","sha1":"578906df3a0073f47797f5105d3027853847b54f","sha256":"fddade9d0d79ea9f0dfc4ddbae841ab33997ee9090654dc06416822ea0d14a93","sha512":"41f649e98c0ac52324b1c2b24662ce7beda2b04d7ab84d308079ed4bb80b5eaeeaa93bdfa2a4447e061b9174a05e18a79f079f4049c38dddd2ef6adcbb636141","ssdeep":"192:LLDu05Zlh8vQPBOOBvtVrtQlpLA96Io1zIDtw11A:P6A0vyO0Vb2VZtIBV","tlshash":"9af19f0f99d3714e8bc51e9fec1f5db36883ea18af86515e80504097144ab49d9585c3","first_seen":"2025-07-23T03:39:41.541731Z","last_seen":"2025-07-23T03:39:41.541731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":56,"dns":14,"connect":6,"send":0,"wait":4,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.captcha-delivery.com/common/fonts/roboto/font-face.css","fqdn":"static.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"54.240.174.108","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg==\u0026cid=Xs~1bUmX_skFwEQl5LMAHh_zpU2JSYA2BTS4iv0cr_IpwAj0VE4W6TdK2i5Whu1ONmsFjAXjT0j2aQUqsCNidgiTsHxIrQOCg9obNW0lZK_Vnh9zqkENUp3jHb811SVj\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%3D612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af229db5f4b26792a7a0085c18a09e46410c64dad514c52683c2ae2f13d8effc5dba40b8213657d0e310774c2d0a30101e1b4e6bca077e057dc2464da45d8209d9056b9cbe2497d3431ed6a3831e9f738d36ef11839ddb16708500b01ca31449b09b20212917a29229201949a3c3cff0abac9a08cd6cec74729deb87440bec021c7c6a031ed61731a5cacafb5f2d202545c457e07fe446086ebcca70f6a75fa480423ea05a6cb27379ee5923de1bc55c1d1d3c73a3b18fc43388291fafdc23f5e013635384d8b687dc6a668179b72f83bf73c8cb2051cb68ecc5a44c40171487804fa467f6697d96d9b9aae134b27b3087262a0ddfe744d87faa42af94630f68207145a809f2ffb1d9c53fb4eb1a70bac9f704e682dfe19054e59dde4dd8706ec7cf9876823bb1b0581deb61a140fcbd7a4e811fda495a53490d265bba143fda193840894344b87c68801be77601fb7ff451a3465c8b114d1971c469d55230ff3fe5042ef364f1a32e1fdc7005081cd2ef54%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026t=fe\u0026s=35103\u0026e=0f73cba2d0d0db236638af0c57e767e6dec5f044b2c1fa16087a426491e07932\u0026ir=36%2C20%2C676\u0026dm=dc_ir","date":"2025-07-23T03:39:23.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M03","organization":"Amazon"},"validity":{"start":"Thu, 13 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D","sha256":"39:7E:A0:90:B7:3F:4A:9E:8B:76:F5:15:A3:76:47:F4:F4:F9:BB:3F:40:68:3E:E8:36:C5:70:FE:98:20:75:9C"}}},"request":{"raw":"GET /common/fonts/roboto/font-face.css HTTP/1.1\r\nHost: static.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geo.captcha-delivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 519\r\nlast-modified: Fri, 19 Jul 2024 12:42:09 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 23 Jul 2025 00:58:02 GMT\r\netag: \"e4f77074c0ffbfab377011e19283eb13\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: pjv4Gfz2Hnt8art5Vt-yd0h2PHW7WU52mWrujwQG1MJfOWG35vmEUA==\r\nage: 9682\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":519,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e4f77074c0ffbfab377011e19283eb13","sha1":"9160259165ca1ef84209d4dd675c3ed367babff1","sha256":"66599c34190f7a6a402b38664a30a9b564fc22510f51fa3c5f027fb91e7a0e51","sha512":"6ebf2429055be6a945d7e3b84af00b3a68247c8c85c6874c6a670985cf400b2ba06267601c5526b97bfc0d9678b63a33fc38726128e2e05cdc9ec04e450d2794","ssdeep":"","tlshash":"bdf0e9520c86704667020e5d775b651cbc5d640b2809d856f6ee388a9fd7a3f8294f4e","first_seen":"2024-07-20T08:22:48Z","last_seen":"2026-04-09T14:07:41.098706Z","times_seen":10633,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.captcha-delivery.com/common/fonts/roboto/roboto.woff2","fqdn":"static.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"54.240.174.108","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg==\u0026cid=Xs~1bUmX_skFwEQl5LMAHh_zpU2JSYA2BTS4iv0cr_IpwAj0VE4W6TdK2i5Whu1ONmsFjAXjT0j2aQUqsCNidgiTsHxIrQOCg9obNW0lZK_Vnh9zqkENUp3jHb811SVj\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026t=fe\u0026s=35103\u0026e=0f73cba2d0d0db236638af0c57e767e6dec5f044b2c1fa16087a426491e07932\u0026ir=36%2C20%2C676\u0026dm=dc_ir","date":"2025-07-23T03:39:24.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M03","organization":"Amazon"},"validity":{"start":"Thu, 13 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D","sha256":"39:7E:A0:90:B7:3F:4A:9E:8B:76:F5:15:A3:76:47:F4:F4:F9:BB:3F:40:68:3E:E8:36:C5:70:FE:98:20:75:9C"}}},"request":{"raw":"GET /common/fonts/roboto/roboto.woff2 HTTP/1.1\r\nHost: static.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://geo.captcha-delivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.captcha-delivery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 15688\r\naccess-control-allow-origin: https://geo.captcha-delivery.com\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\naccess-control-allow-credentials: true\r\nlast-modified: Fri, 06 May 2022 16:47:07 GMT\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 23 Jul 2025 01:28:06 GMT\r\netag: \"aa23b7b4bcf2b8f0e876106bb3de69c6\"\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: RtkRCgMvk6dXHWlPXMVsQGyjQDhl6S3jmZ5vycRK3RTN8driQFKdGg==\r\nage: 8855\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15688, version 1.0","md5":"aa23b7b4bcf2b8f0e876106bb3de69c6","sha1":"106ac454ba4e503e0a1cd15e1275130918049182","sha256":"cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca","sha512":"4b46d59ba6c76e5f30c89a5bb3f96f7a72bd7d60cfcad7d48638059d60ec61a317a40df70bb1cd2f2a477de1bb0c2399c671880c2981779df6af99043043b46c","ssdeep":"384:8dYfjMKhQeGWnVBs+whGU7J1eNaUgFS7WWPtl2jLMgS4:8hteGIKadgFSn4l","tlshash":"9162d04c9b1901fce30d2efa445bf6bf58c6051c2140af80bde599944ed9d27878fd56","first_seen":"2023-04-09T23:24:15Z","last_seen":"2026-04-09T14:17:18.246689Z","times_seen":14300,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"adalh-zcq.com/favicon.ico","fqdn":"adalh-zcq.com","domain":"adalh-zcq.com","tld":"com"},"ip":{"addr":"52.207.41.53","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"http://adalh-zcq.com/zclkvisitor/9b9af134-6776-11f0-afb4-0affc905d23b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=b4caed10-4db2-11ef-8ea9-0affd04c9415","date":"2025-07-23T03:39:17.270Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: adalh-zcq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://adalh-zcq.com/zclkvisitor/9b9af134-6776-11f0-afb4-0affc905d23b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=b4caed10-4db2-11ef-8ea9-0affd04c9415\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 \r\nDate: Wed, 23 Jul 2025 03:39:17 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":82,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a4218335cafcdc88e5a044e9ffb62297","sha1":"a4dbaad3f1f1092ca78c246ce49a11506c55fd97","sha256":"8bd36567ce2738c2f7d8d327a75cc46e208ab5344631b274e7c0d27c69f4b034","sha512":"1d9030bd4d2c3e121ca2fe67638ec18d01b44b6d0305bb3f7944e5abab0c61f8d8afd848c55a3a1656a252d05c83173293aca568203354c82e4fae9cb3c94ce8","ssdeep":"","tlshash":"76a0122108894009af01c16510c40515550095c118380c4534898630aa10a0f6018014","first_seen":"2025-07-23T03:39:41.543152Z","last_seen":"2025-07-23T03:39:41.543152Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.captcha-delivery.com/captcha/assets/tpl/device-check/index.css","fqdn":"static.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"54.240.174.108","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg%3D%3D\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026cid=Xs~1bUmX_skFwEQl5LMAHbCkwp_XGwHBG88K1Z1IUmyofTWKMslC5CnID4YtxPTujAxjJ6qWuCaKJMh8Wr6vpTR~wh2idjc4IZnzyTMqba3_gg5HGP2JSzjOKnThNYMo\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026s=35103\u0026b=32286\u0026dm=cd","date":"2025-07-23T03:39:20.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M03","organization":"Amazon"},"validity":{"start":"Thu, 13 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D","sha256":"39:7E:A0:90:B7:3F:4A:9E:8B:76:F5:15:A3:76:47:F4:F4:F9:BB:3F:40:68:3E:E8:36:C5:70:FE:98:20:75:9C"}}},"request":{"raw":"GET /captcha/assets/tpl/device-check/index.css HTTP/1.1\r\nHost: static.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geo.captcha-delivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Feb 2024 08:41:29 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\ndate: Wed, 23 Jul 2025 01:11:33 GMT\r\netag: W/\"d24f433ae1916185b0e4e20ed76cb64b\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 9wn86n64k9S72Cs_CG2CmqU6WxdifXjuj3oMP3Bsg49XMpEtE3d5hg==\r\nage: 8894\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3683,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d24f433ae1916185b0e4e20ed76cb64b","sha1":"e0c8d4c58b7d0983f9b4042bea94c014cd5ec668","sha256":"f40a7b02a8a2d420aa9d4cb5b0b26a92468828984fdc4b0d1202de4e24f59859","sha512":"27dc9609b3c3fece38efb136f3ef0c3ec99740cc10311c1ec42ef6469bc4580472150306106a1fa5c7db0b6e3a9a83382c2d07405a506a1202911a7eb064319c","ssdeep":"","tlshash":"7971c135ae6318e7c80f82694faac514224b89832b2fcfd57bdc64454f0c5696b637cc","first_seen":"2025-04-07T11:00:20.043803Z","last_seen":"2025-11-06T08:11:57.231038Z","times_seen":4450,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":66,"dns":35,"connect":1,"send":0,"wait":1,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg==\u0026cid=Xs~1bUmX_skFwEQl5LMAHh_zpU2JSYA2BTS4iv0cr_IpwAj0VE4W6TdK2i5Whu1ONmsFjAXjT0j2aQUqsCNidgiTsHxIrQOCg9obNW0lZK_Vnh9zqkENUp3jHb811SVj\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026t=fe\u0026s=35103\u0026e=0f73cba2d0d0db236638af0c57e767e6dec5f044b2c1fa16087a426491e07932\u0026ir=36%2C20%2C676\u0026dm=dc_ir","fqdn":"geo.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"13.50.216.15","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://no-go.kelkoogroup.net/redirect?country=no\u0026k=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\u0026url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D629D01K0TNTEXETB4MPR12H019D14E%26url%3Dhttps%253A%252F%252Ffarmasiet.no\u0026dc=false","date":"2025-07-23T03:39:23.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M02","organization":"Amazon"},"validity":{"start":"Thu, 13 Feb 2025 00:00:00 GMT","end":"Sat, 14 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:9E:7E:72:25:57:E3:AF:B6:87:61:A0:0D:B1:85:B4:85:82:E6:96","sha256":"86:E5:03:06:38:8D:F3:19:52:DE:AE:12:59:2E:D3:FD:0B:3B:73:4B:FE:2C:58:C4:34:42:5F:05:42:24:58:D8"}}},"request":{"raw":"GET /captcha/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg==\u0026cid=Xs~1bUmX_skFwEQl5LMAHh_zpU2JSYA2BTS4iv0cr_IpwAj0VE4W6TdK2i5Whu1ONmsFjAXjT0j2aQUqsCNidgiTsHxIrQOCg9obNW0lZK_Vnh9zqkENUp3jHb811SVj\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026t=fe\u0026s=35103\u0026e=0f73cba2d0d0db236638af0c57e767e6dec5f044b2c1fa16087a426491e07932\u0026ir=36%2C20%2C676\u0026dm=dc_ir HTTP/1.1\r\nHost: geo.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg%3D%3D\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026cid=Xs~1bUmX_skFwEQl5LMAHbCkwp_XGwHBG88K1Z1IUmyofTWKMslC5CnID4YtxPTujAxjJ6qWuCaKJMh8Wr6vpTR~wh2idjc4IZnzyTMqba3_gg5HGP2JSzjOKnThNYMo\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%3D612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af229db5f4b26792a7a0085c18a09e46410c64dad514c52683c2ae2f13d8effc5dba40b8213657d0e310774c2d0a30101e1b4e6bca077e057dc2464da45d8209d9056b9cbe2497d3431ed6a3831e9f738d36ef11839ddb16708500b01ca31449b09b20212917a29229201949a3c3cff0abac9a08cd6cec74729deb87440bec021c7c6a031ed61731a5cacafb5f2d202545c457e07fe446086ebcca70f6a75fa480423ea05a6cb27379ee5923de1bc55c1d1d3c73a3b18fc43388291fafdc23f5e013635384d8b687dc6a668179b72f83bf73c8cb2051cb68ecc5a44c40171487804fa467f6697d96d9b9aae134b27b3087262a0ddfe744d87faa42af94630f68207145a809f2ffb1d9c53fb4eb1a70bac9f704e682dfe19054e59dde4dd8706ec7cf9876823bb1b0581deb61a140fcbd7a4e811fda495a53490d265bba143fda193840894344b87c68801be77601fb7ff451a3465c8b114d1971c469d55230ff3fe5042ef364f1a32e1fdc7005081cd2ef54%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026s=35103\u0026b=32286\u0026dm=cd\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 23 Jul 2025 03:39:23 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":796068,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (40811)","md5":"f2370a6c9a9e762883b5d05984d11a1f","sha1":"fcb526e3698d176d170772f275fd1f898115f07b","sha256":"8d094abfc031818743d5cdd63c7e9e0a4c02f30a7d1b9a67e45a9a827aa95641","sha512":"56dd809435d2be7b0d24657f68a341da256261a4f2b1fea275b33c78d9c1959313b17ceea49a3184bd19b6321b292d8626115bed8c6dab8d614cd4aec446f24c","ssdeep":"6144:egRW7Rxdyja2cXtyLaDmo7iUWA2yXCbGQQC6xK9+QDEONQbHF8B/+M7zcOc+AtuY:4bHFGDzcxtuwRww24N","tlshash":"6305cce462c4ed4b659c0d87be417eb92066ac779cc1a247db777e8e0abd047c0acc85","first_seen":"2025-07-23T03:39:41.54513Z","last_seen":"2025-07-23T03:39:41.54513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"adalh-zcq.com/zclkvisitor/9b9af134-6776-11f0-afb4-0affc905d23b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=b4caed10-4db2-11ef-8ea9-0affd04c9415","fqdn":"adalh-zcq.com","domain":"adalh-zcq.com","tld":"com"},"ip":{"addr":"52.207.41.53","port":80,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-23T03:39:16.753Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /zclkvisitor/9b9af134-6776-11f0-afb4-0affc905d23b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=b4caed10-4db2-11ef-8ea9-0affd04c9415 HTTP/1.1\r\nHost: adalh-zcq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nDate: Wed, 23 Jul 2025 03:39:16 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Length: 3086\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, pre-check=0, post-check=0\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS\r\nAccess-Control-Allow-Headers: X-Requested-With,Content-Type\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3086,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (408)","md5":"97fc24fdda732a1f4f88a0d2a96d3084","sha1":"fa2a4c38249d0752d54f3c480f589ac3e9e15b6f","sha256":"0cbf506dad7e377c8bb0b3aea4f9ecdb8d2315be3648505823eb97ec4a4d852e","sha512":"b56dd2c5a565b94212366c9bfdf31081dd18a3d20668d39200c9204b6647de5a2b2c9a8f140a17a4cf8ea85d8f8bfb3f1cf42d6a307b8adcc12d045d80508e2e","ssdeep":"","tlshash":"e95120b46a7224706d2f290db73ae20a72774233290bd440b89d99084fb0e97755fbfd","first_seen":"2025-07-23T03:39:41.546968Z","last_seen":"2025-07-23T03:39:41.546968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":99,"dns":10,"connect":92,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.shopfinder24.com/r/dG89aHR0cHMlM0ElMkYlMkZhcGkueWFkb3JlLmNvbSUyRnYyJTJGZCUzRnVybCUzRGh0dHBzJTI1M0ElMjUyRiUyNTJGZmFybWFzaWV0Lm5vJTI2bWVyY2hhbnRJZCUzRDRmZjk1OGE3MDE2ZWE4Y2FmMTA0YWViODQ5Yzk4NTg1OTFkZDA0ZGE4NWNkMDMwY2VlZWViNzk1Y2FiMDUyMmQlMjZtYXJrZXQlM0RubyUyNnByb2plY3RJZCUzRFNlTXdERms0eHRYTCUyNnBsYWNlbWVudElkJTNEJTdCY2xpY2tpZCU3RCZ0PTAmcz04ZDA1N2FhNjJjMTUyZmE0MDk5NTcyNjk3ZTAyMzE3ZQ==?c=w1dv0vfv66jt3jfbjmqv99fm\u0026var10=badious-buzzard","fqdn":"api.shopfinder24.com","domain":"shopfinder24.com","tld":"com"},"ip":{"addr":"3.127.134.231","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-23T03:39:18.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.shopfinder24.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 10:56:22 GMT","end":"Mon, 29 Sep 2025 10:56:21 GMT"},"fingerprint":{"sha1":"EF:7C:72:72:85:B1:8E:7B:DD:20:23:B8:ED:CA:46:7B:EB:53:AE:B2","sha256":"8B:3B:E5:2B:08:FA:D5:AC:32:30:97:8D:B9:F3:30:20:8A:74:1A:28:BF:12:4B:FA:48:12:F9:2D:DA:2B:2A:14"}}},"request":{"raw":"GET /r/dG89aHR0cHMlM0ElMkYlMkZhcGkueWFkb3JlLmNvbSUyRnYyJTJGZCUzRnVybCUzRGh0dHBzJTI1M0ElMjUyRiUyNTJGZmFybWFzaWV0Lm5vJTI2bWVyY2hhbnRJZCUzRDRmZjk1OGE3MDE2ZWE4Y2FmMTA0YWViODQ5Yzk4NTg1OTFkZDA0ZGE4NWNkMDMwY2VlZWViNzk1Y2FiMDUyMmQlMjZtYXJrZXQlM0RubyUyNnByb2plY3RJZCUzRFNlTXdERms0eHRYTCUyNnBsYWNlbWVudElkJTNEJTdCY2xpY2tpZCU3RCZ0PTAmcz04ZDA1N2FhNjJjMTUyZmE0MDk5NTcyNjk3ZTAyMzE3ZQ==?c=w1dv0vfv66jt3jfbjmqv99fm\u0026var10=badious-buzzard HTTP/1.1\r\nHost: api.shopfinder24.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, private\r\ndate: Wed, 23 Jul 2025 03:39:18 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkVlTmVRSkNCQXhDVzFFcnhOdFczamc9PSIsInZhbHVlIjoiRzhVRmhmNG82UlBSSVBEcUZDMjhOZndnTjE5bXVGNkNsajBqTWRhZGpQWTFpeWxjdWJGVmF1Z253ZDdJaXBIYi8raUsrK3dDVkRwWjdKYVkxbHpSQXE3MWh4QnpiZ2pNNW9sS2hvRnEzclNrTGR2OGowYWxDMDFKNldZRXJyM2siLCJtYWMiOiIzZTI0Y2VmOWUxNjAyZWJjM2Q4M2M5ZGJhYzIyMjk1MmJhYTRjYzljOWE4NjEyOTc2ZDY0OGIxMTI4ZTAwNGFjIiwidGFnIjoiIn0%3D; expires=Wed, 23 Jul 2025 05:39:18 GMT; Max-Age=7200; path=/; domain=https://api.shopfinder.com; samesite=lax\nshopfinder24_session=eyJpdiI6InlqN1BXekRNTnpMZjZZclprdXJHYVE9PSIsInZhbHVlIjoiNld2eFRyZzNYTGJzK3hDemkzMi9HREhHbzZaV0R6dEExZDllTHQvaEVXMklVVUxRa1hocUFnZkwxMy9xcEZlUmdVcGRmcVc4UlRQVXBKd2V3Z1dMbTlWUHhUTU5FVy8rbnVMakJoSXEvRnl5MWhBNDdBQUJ3YU1ROVhJa2hCMnUiLCJtYWMiOiJiOTU1YWU3Y2RjYjNlZjA4M2FhYjkzMjRkOTI4MGFmMTA2ZWRlMWE0ZjYzMDlkNjA5NzJhNDVlY2VjZmFiZTc0IiwidGFnIjoiIn0%3D; expires=Wed, 23 Jul 2025 05:39:18 GMT; Max-Age=7200; path=/; domain=https://api.shopfinder.com; httponly; samesite=lax\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":756,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (756), with no line terminators","md5":"22f0fd99a2594629c82405c13d200cb4","sha1":"83e8d1ef78a87b28822710c2da5df3ef56f9a035","sha256":"d8353fb0b0dd9b9d822efac5360627d51e434f6ad09e4bb37534b1f7bc628199","sha512":"5f9499e1883daa530ee5e7704b77b28d907853c8f291e56b3d5b1b5fb534f7473a5d6e42d5493021cb9d42c5bdec09ab728943b86ffa993da3a503bfa9beda87","ssdeep":"","tlshash":"c1016d45cc8174530ff532cc08d1ee5d691a07c7aa549a4354d1a8731e18df2cf24af0","first_seen":"2025-07-23T03:39:41.548144Z","last_seen":"2025-07-23T03:39:41.548144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":66,"dns":3,"connect":21,"send":0,"wait":35,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yadore.com/v2/d?url=https%3A%2F%2Ffarmasiet.no\u0026merchantId=4ff958a7016ea8caf104aeb849c9858591dd04da85cd030ceeeeb795cab0522d\u0026market=no\u0026projectId=SeMwDFk4xtXL\u0026placementId=w1dv0vfv66jt3jfbjmqv99fm","fqdn":"api.yadore.com","domain":"yadore.com","tld":"com"},"ip":{"addr":"88.99.112.2","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-23T03:39:18.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yadore.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Jun 2025 06:40:20 GMT","end":"Sat, 06 Sep 2025 06:40:19 GMT"},"fingerprint":{"sha1":"17:D8:7E:9D:96:18:E1:F8:99:39:B8:90:BE:01:09:18:9E:30:04:06","sha256":"21:DC:4D:E4:90:52:40:25:AF:F2:A3:45:03:1C:8E:F1:FD:96:7C:80:7A:F0:3A:D5:FF:59:CC:EE:A0:D5:F0:11"}}},"request":{"raw":"GET /v2/d?url=https%3A%2F%2Ffarmasiet.no\u0026merchantId=4ff958a7016ea8caf104aeb849c9858591dd04da85cd030ceeeeb795cab0522d\u0026market=no\u0026projectId=SeMwDFk4xtXL\u0026placementId=w1dv0vfv66jt3jfbjmqv99fm HTTP/1.1\r\nHost: api.yadore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.shopfinder24.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, Content-Type, Accept, API-Key\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 23 Jul 2025 03:39:19 GMT\r\nlocation: https://no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100\u0026merchantUrl=https%3A%2F%2Ffarmasiet.no\u0026custom1=d2cdd33d19f8072f50088002614bd6368161edf4078b5a15c11030fd35f5b492\u0026publisherSubId=SeMwDFk4xtXL\u0026publisherTrafficType=publishernetwork\u0026originReferer=https%253A%252F%252Fwww.yadore.com\r\nreferrer-policy: no-referrer\r\nserver: nginx\r\nx-powered-by: PHP/8.3.23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":180143,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T14:28:37.844917Z","times_seen":13542679,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":82,"dns":10,"connect":27,"send":0,"wait":112,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100\u0026merchantUrl=https%3A%2F%2Ffarmasiet.no\u0026custom1=d2cdd33d19f8072f50088002614bd6368161edf4078b5a15c11030fd35f5b492\u0026publisherSubId=SeMwDFk4xtXL\u0026publisherTrafficType=publishernetwork\u0026originReferer=https%253A%252F%252Fwww.yadore.com","fqdn":"no-go.kelkoogroup.net","domain":"kelkoogroup.net","tld":"net"},"ip":{"addr":"95.211.116.26","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-23T03:39:19.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.kelkoogroup.net","organization":"Kelkoo SAS"},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 26 Sep 2024 00:00:00 GMT","end":"Fri, 10 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"AB:7F:31:B1:66:46:76:99:39:20:8C:5B:A4:03:6B:DE:E6:6B:F4:17","sha256":"40:D1:E4:00:09:F0:62:75:AF:0D:CD:D1:9E:83:56:B0:FF:6D:74:43:76:CA:2F:93:47:88:C0:FE:63:C3:5D:71"}}},"request":{"raw":"GET /permanentLinkGo?country=no\u0026id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100\u0026merchantUrl=https%3A%2F%2Ffarmasiet.no\u0026custom1=d2cdd33d19f8072f50088002614bd6368161edf4078b5a15c11030fd35f5b492\u0026publisherSubId=SeMwDFk4xtXL\u0026publisherTrafficType=publishernetwork\u0026originReferer=https%253A%252F%252Fwww.yadore.com HTTP/1.1\r\nHost: no-go.kelkoogroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nleadId: 629D01K0TNTEXETB4MPR12H019D14E\r\nPragma: no-cache\r\nX-DD-B: 3\r\nCharset: utf-8\r\nclickId: 107698149_1753241959298_2404142\r\ncountry: no\r\nAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory\r\nSet-Cookie: datadome=57EmdHeBNw3alx2YWF~pdxXN_m9G9qcpn2ugintFtZUH2Ttciq12lMAUbe1A8oXEnlxWJgH3sfwLTezzerLdZ6QQBE0bhKvCrkJ35c50P0e86j8pPEP4dCAmdf5LyqDv; Max-Age=31104000; Expires=Sat, 18 Jul 2026 03:39:19 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure\nkelkooID=a4c6295-198355d3b82-355ae; Max-Age=31536000; Expires=Thu, 23 Jul 2026 03:39:19 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly\r\nX-DataDome: protected\r\nRequest-Time: PT0.057726674S\r\nX-Robots-Tag: noindex,nofollow\r\nCache-Control: max-age=0, private, no-cache, no-store, must-revalidate\r\nX-DataDome-CID: AHrlqAAAAAMArem7VvqFlv4AW1oqmg==\r\nReferrer-Policy: origin-when-cross-origin\r\nX-Frame-Options: ALLOWALL\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nDate: Wed, 23 Jul 2025 03:39:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 180143\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":180143,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (30599)","md5":"0c54407399db962254ef9cae6495f01a","sha1":"7e01e3bb873ea464047cc6df94186526f3d6cc90","sha256":"f8c2d96fb0caa843a1ee563e53a267f7be2cc270a233e0db74583b80e71da284","sha512":"7fc11ead9de57a46800c50f6380b474ec9aed0a602a641c1f38970f978e86a316d2cb3634d3e452e0740f9ebf2ec1176ddddca3376f78c55aafa29d973aff5aa","ssdeep":"1536:p0CLLHNwquNej7Norq6bC4bNsQf4ly5jRSFu2VkElE7881aRiSyAetCl0Kbzf+F6:pbkxCV+Rqkl86S8t0Cb+01vcsFuzew","tlshash":"2504089a7780f41d024e177bab6f219af07b4d6439447942f320dae27c2281fd5a7eb1","first_seen":"2025-07-23T03:39:41.549751Z","last_seen":"2025-07-23T03:39:41.549751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":195,"dns":28,"connect":30,"send":0,"wait":80,"receive":105,"ssl":131},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-07-23","alert":"Code and strings of plugins from the Tetris framework loaded by Swid","trigger":"no-go.kelkoogroup.net/permanentLinkGo?country=no\u0026id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100\u0026merchantUrl=https%3A%2F%2Ffarmasiet.no\u0026custom1=d2cdd33d19f8072f50088002614bd6368161edf4078b5a15c11030fd35f5b492\u0026publisherSubId=SeMwDFk4xtXL\u0026publisherTrafficType=publishernetwork\u0026originReferer=https%253A%252F%252Fwww.yadore.com","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3","date":"2020-09-06","description":"Code and strings of plugins from the Tetris framework loaded by Swid","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetrisplugins_JS"}}],"urlquery":null}},{"url":{"schema":"https","addr":"dd.prod.captcha-delivery.com/image/2025-07-23/7ca43413992b67c229bfa8edd3c129e0.jpg","fqdn":"dd.prod.captcha-delivery.com","domain":"captcha-delivery.com","tld":"com"},"ip":{"addr":"54.240.174.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMArem7VvqFlv4AW1oqmg==\u0026cid=Xs~1bUmX_skFwEQl5LMAHh_zpU2JSYA2BTS4iv0cr_IpwAj0VE4W6TdK2i5Whu1ONmsFjAXjT0j2aQUqsCNidgiTsHxIrQOCg9obNW0lZK_Vnh9zqkENUp3jHb811SVj\u0026referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D629D01K0TNTEXETB4MPR12H019D14E%2526url%253Dhttps%25253A%25252F%25252Ffarmasiet.no%26dc%3Dfalse\u0026hash=5954443B90DC91C1E924DE9BFBEAA5\u0026t=fe\u0026s=35103\u0026e=0f73cba2d0d0db236638af0c57e767e6dec5f044b2c1fa16087a426491e07932\u0026ir=36%2C20%2C676\u0026dm=dc_ir","date":"2025-07-23T03:39:23.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dd.prod.captcha-delivery.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 27 Jan 2025 00:00:00 GMT","end":"Wed, 25 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:DE:FA:F7:3D:63:84:2A:F7:68:BE:5E:19:5C:02:C6:7A:A4:A2:DA","sha256":"68:9C:BA:AD:4C:BB:E5:8C:C5:99:0E:75:D7:76:AC:96:B3:39:C7:A4:90:DC:AB:1C:A4:E1:FC:33:09:AA:78:23"}}},"request":{"raw":"GET /image/2025-07-23/7ca43413992b67c229bfa8edd3c129e0.jpg HTTP/1.1\r\nHost: dd.prod.captcha-delivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://geo.captcha-delivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geo.captcha-delivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 14919\r\ndate: Wed, 23 Jul 2025 00:04:04 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3600\r\nlast-modified: Sat, 19 Jul 2025 05:03:39 GMT\r\nx-amz-expiration: expiry-date=\"Sun, 27 Jul 2025 00:00:00 GMT\", rule-id=\"auto-clean old captchas image (7 days)\"\r\netag: \"29ef206ab0fd7fe57692404117b9144a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: pFrtWVfnh5HLGrl_hFhBZNZ3vzx3Aqog\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: WQBqsVBFKN3JavwlS2ndMlkn67NqrehIcCuXMi61V5gNj1rUBe75xw==\r\nage: 12920\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14919,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x155, components 3","md5":"29ef206ab0fd7fe57692404117b9144a","sha1":"1e9681a6bada68daa1c882d5f293d9996f418072","sha256":"ec6ba9c11be9616a1c8056bf4d8026a31edba69525de7f0682c4c1030ceb60b3","sha512":"89ceee8187b571749e3a960cf403d1084c35d69136f0cd314e2d144aacbefab7984badd370d0c73a4e45c2e1e8454f84769c509297410d61ccc848002dbf1554","ssdeep":"192:gS/n9aXbf4Pt9NuQJpaWhreDizZ1qNpOsZBhpTaDM7YNBc9+cqz2Fm5RgnYKDzmq:gq9ub+t9NCWMuzD2pGUfk0P39ZR2lr0","tlshash":"5462bf2e4b410ad33b60e8c27c315e63b0dbaf54359c3e94a9dacb91a5c5fe6c4069f4","first_seen":"2025-07-23T03:39:41.551156Z","last_seen":"2025-07-23T03:39:41.551156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":39,"dns":16,"connect":1,"send":0,"wait":3,"receive":9,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}