r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9717
Expires: Thu, 01 Dec 2022 16:15:44 GMT
Date: Thu, 01 Dec 2022 13:33:47 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 766
Cache-Control: max-age=162611
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:47 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 10:43:58 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 13:19:46 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 841
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3966
Expires: Thu, 01 Dec 2022 14:39:53 GMT
Date: Thu, 01 Dec 2022 13:33:47 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: G1XeujT+KYIi++rzY5E8GkRjCJ1W+1csfmJOLG8uRtXt9jSq5bw7KdWK43h/fagTFtnABY/4KCQ=
x-amz-request-id: H6EWC8X6MYEENP06
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 12:46:16 GMT
age: 2851
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
hplwmdry.wy5532.com/
302 Found 11 B IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: hplwmdry.wy5532.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: sid=6b5ed9e8-7136-11ed-a81e-6e2c64150ffe
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Thu, 01 Dec 2022 13:33:47 GMT
location: http://dipaka-ead.com/zcvisitor/c8d5c694-717c-11ed-befe-0afb690b73b3/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
server: nginx
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:47 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
dipaka-ead.com/zcvisitor/c8d5c694-717c-11ed-befe-0afb690b73b3/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
200 1.1 kB URL HTTP/1.1 dipaka-ead.com/zcvisitor/c8d5c694-717c-11ed-befe-0afb690b73b3/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f634a3eb957619746fb5699c803f0b90
c435c44c776ade3d7ae73e27832b6bb715b8c186
5952ef2d722acc91e170947bd210cacfae41c4ef3a92b4e7e8c7e6057fe39ded
GET /zcvisitor/c8d5c694-717c-11ed-befe-0afb690b73b3/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51 HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Thu, 01 Dec 2022 13:33:48 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: FqxvZEJe
dipaka-ead.com/zcredirect?visitid=c8d5c694-717c-11ed-befe-0afb690b73b3&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
200 356 B URL HTTP/1.1 dipaka-ead.com/zcredirect?visitid=c8d5c694-717c-11ed-befe-0afb690b73b3&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9d114559ed5dc381324cb32d47063d90
4b16f733768b87ec64f017f9e576275330c9dbde
dbe17731b5f728e5aed60c87ffcb6473d0c9df855bbe13f29d6f5f0dd1cb61b6
GET /zcredirect?visitid=c8d5c694-717c-11ed-befe-0afb690b73b3&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dipaka-ead.com/zcvisitor/c8d5c694-717c-11ed-befe-0afb690b73b3/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Thu, 01 Dec 2022 13:33:48 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: KYTTIAPC
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 13:11:15 GMT
cache-control: public,max-age=3600
age: 1353
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 751
Cache-Control: max-age=157531
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:48 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:19:19 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
dipaka-ead.com/favicon.ico
404 653 B URL HTTP/1.1 dipaka-ead.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dipaka-ead.com/zcredirect?visitid=c8d5c694-717c-11ed-befe-0afb690b73b3&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
HTTP/1.1 404
Date: Thu, 01 Dec 2022 13:33:48 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: KYTTIAPC
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 14d95870f9a93fd54549a042314601bc
b06bcf8673df2d984a2a953789acd722e548c03d
a0dc6d4cd78e4068278ab54529c604c657409de920e939c2c929b104d906b6bd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0DC6D4CD78E4068278AB54529C604C657409DE920E939C2C929B104D906B6BD"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4649
Expires: Thu, 01 Dec 2022 14:51:17 GMT
Date: Thu, 01 Dec 2022 13:33:48 GMT
Connection: keep-alive
clever-redirect.com/s/r6?s=623619497&s2=badious-buzzard&s3=romeo-sic-vqpeyj59e3
200 OK 348 B URL HTTP/2 clever-redirect.com/s/r6?s=623619497&s2=badious-buzzard&s3=romeo-sic-vqpeyj59e3
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (348), with no line terminators
Hash da23106d267cfc06db118ea30f0586bf
7edcc1fb4ec1b2c49a44cd210995ed4b7b803aed
fd89b70cfdc7c81b90f5fd8bdbe5b2f11e6f433d73c758897346acacd07945a8
GET /s/r6?s=623619497&s2=badious-buzzard&s3=romeo-sic-vqpeyj59e3 HTTP/1.1
Host: clever-redirect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dipaka-ead.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
referrer-policy: no-referrer
x-powered-by: PHP/7.4.27
set-cookie: 73a6f0bde42c2d33b895b4c86269e949=86ee18b08f659bba431a8c94a5375332c5a5f704c6b064bcbaf430fd0a3b840ba%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2273a6f0bde42c2d33b895b4c86269e949%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Fri, 02-Dec-2022 13:33:48 GMT; Max-Age=86400; path=/; HttpOnly
content-length: 348
content-type: text/html; charset=UTF-8
date: Thu, 01 Dec 2022 13:33:48 GMT
server: Apache/2.4.52 (codeit) OpenSSL/1.1.1m PHP/7.4.27
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ygT1/QHddkekDao365bTGw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: q7t/QHfQmtyapxQNN1vrgb+fyOw=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 039404c98dc0424a3bf5b76837b634ee
ccdc8a3c508118996bf63945c7d88beb10bbeeac
4d3b2ba3b0814497a5c70b6ec0b48de53a1e2d98436232c47eab6e9741125a83
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D3B2BA3B0814497A5C70B6EC0B48DE53A1E2D98436232C47EAB6E9741125A83"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3603
Expires: Thu, 01 Dec 2022 14:33:52 GMT
Date: Thu, 01 Dec 2022 13:33:49 GMT
Connection: keep-alive
lookandfind.me/s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=norli.no&s1=623619497&s2=badious-buzzard&s3=romeo-sic-vqpeyj59e3&s5=cf
200 OK 939 B URL HTTP/1.1 lookandfind.me/s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=norli.no&s1=623619497&s2=badious-buzzard&s3=romeo-sic-vqpeyj59e3&s5=cf
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document, ASCII text, with very long lines (939), with no line terminators
Hash 906e5a8c4e8a5f00dddc3953b442d27c
2eb76b997d79c1e14ad29c07ec2eb9d5530abb06
717a6ae00da44362a952f06d8e621cc42e21b39bb5433754072003f11df18692
GET /s/a?t=10&f=1&u=f4bdb01fc36e3f720c2a963a770625c6&m=norli.no&s1=623619497&s2=badious-buzzard&s3=romeo-sic-vqpeyj59e3&s5=cf HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 13:33:49 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.10
Set-Cookie: a95331b8cf9f5b5df3112832d625d210=283f1b2eadf12805fec67b7d0fa4eda35d424b2a704ce07be7b12395fcd9d68da%3A2%3A%7Bi%3A0%3Bs%3A32%3A%22a95331b8cf9f5b5df3112832d625d210%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Fri, 02-Dec-2022 13:33:49 GMT; Max-Age=86400; path=/; HttpOnly
Referrer-Policy: strict-origin-when-cross-origin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3DNhO_3a3UlO4WGiQV%26placementId%3D3624c38524337086ab3f9470df20e777&h=65133230de1d23a63cc3ef6d55ebdb54
200 OK 867 B URL HTTP/1.1 lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3DNhO_3a3UlO4WGiQV%26placementId%3D3624c38524337086ab3f9470df20e777&h=65133230de1d23a63cc3ef6d55ebdb54
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (867), with no line terminators
Hash 9ba237bb6f6c7af355de9b6d99edbd63
1debd62d86577015a8ac13ccfa8e25020d38fef8
f2c7dc7b461ffe5b3cdca67bf2e07d671adbeccc4336ff3d7eb152d8693ff685
GET /s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3DNhO_3a3UlO4WGiQV%26placementId%3D3624c38524337086ab3f9470df20e777&h=65133230de1d23a63cc3ef6d55ebdb54 HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: a95331b8cf9f5b5df3112832d625d210=283f1b2eadf12805fec67b7d0fa4eda35d424b2a704ce07be7b12395fcd9d68da%3A2%3A%7Bi%3A0%3Bs%3A32%3A%22a95331b8cf9f5b5df3112832d625d210%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 13:33:49 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.10
Referrer-Policy: strict-origin-when-cross-origin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2431a1fcfa70947ff15d163ce1c5f617
a0029616e26a08defa66dbfaa1c3d043186058f6
5b7b05cfbb500a81eb829388e93e651cdadb3d93fee73b57c5ce2ded8f936e5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5B7B05CFBB500A81EB829388E93E651CDADB3D93FEE73B57C5CE2DED8F936E5D"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6825
Expires: Thu, 01 Dec 2022 15:27:34 GMT
Date: Thu, 01 Dec 2022 13:33:49 GMT
Connection: keep-alive
api.yadore.com/v2/r?e=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&i=NhO_3a3UlO4WGiQV&placementId=3624c38524337086ab3f9470df20e777
302 Found 0 B URL HTTP/2 api.yadore.com/v2/r?e=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&i=NhO_3a3UlO4WGiQV&placementId=3624c38524337086ab3f9470df20e777
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/r?e=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&i=NhO_3a3UlO4WGiQV&placementId=3624c38524337086ab3f9470df20e777 HTTP/1.1
Host: api.yadore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
date: Thu, 01 Dec 2022 13:33:49 GMT
location: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669881251799&.sig=oGsrC878cNEfwAQtQ9U.IWDVkYc-&affiliationId=96965886&comId=100505870&country=no&offerId=8c6ad1bcb44220775d60f19c01184656&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f81e26f387cd17e33b7078720aedd73545cea1e2131bddb91efe7c06096fc21&custom2=SRdytlITOR16&custom3=false
server: nginx
x-powered-by: PHP/8.0.25
content-length: 0
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash adfe5e29c974f40453162151aa0a1d1a
b768544ad7f88142a557e3a5e89641336f6190b3
9166425da839fa5693c2aaa1823d53fc815f32f40674796516c09755b637f7ed
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4988
Cache-Control: max-age=105612
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:49 GMT
Etag: "6387934d-1d7"
Expires: Fri, 02 Dec 2022 18:54:01 GMT
Last-Modified: Wed, 30 Nov 2022 17:30:53 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669881251799&.sig=oGsrC878cNEfwAQtQ9U.IWDVkYc-&affiliationId=96965886&comId=100505870&country=no&offerId=8c6ad1bcb44220775d60f19c01184656&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f81e26f387cd17e33b7078720aedd73545cea1e2131bddb91efe7c06096fc21&custom2=SRdytlITOR16&custom3=false
200 OK 33 kB URL HTTP/1.1 no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669881251799&.sig=oGsrC878cNEfwAQtQ9U.IWDVkYc-&affiliationId=96965886&comId=100505870&country=no&offerId=8c6ad1bcb44220775d60f19c01184656&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f81e26f387cd17e33b7078720aedd73545cea1e2131bddb91efe7c06096fc21&custom2=SRdytlITOR16&custom3=false
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13002)
Hash fc3045f2e8cd7813f479106ebc95b181
b6e81c02e09c18acd8a2076b3a39cb395d12498e
5d3d054f5aec93275e105e1b81529f2021ac8b3581c89ad691983e2fdf161873
GET /ctl/go/offersearchGo?.ts=1669881251799&.sig=oGsrC878cNEfwAQtQ9U.IWDVkYc-&affiliationId=96965886&comId=100505870&country=no&offerId=8c6ad1bcb44220775d60f19c01184656&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f81e26f387cd17e33b7078720aedd73545cea1e2131bddb91efe7c06096fc21&custom2=SRdytlITOR16&custom3=false HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 13:33:49 GMT
leadId: dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695
clickId: 107698154_1669901629963_9465895
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.014858S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/html; charset=UTF-8
Content-Length: 32876
Set-Cookie: datadome=1ttGT98VVxupxolHO1t7INPtLnVNo2SUG0yz6_eKsidCjcPCr6VJ2qKClHLUtuJePSAl66Yr7J0xK-UjCaFpDWd2n0-586IZbHRZHoez0ejhWncvwIkKn5AkuiVuPTmP; Max-Age=31536000; Expires=Fri, 01 Dec 2023 13:33:49 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
kelkooID=a4c629a-184cde4ba0b-2d4abc; Max-Age=31536000; Expires=Fri, 01 Dec 2023 13:33:49 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=100
Connection: Keep-Alive
no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&clickId=107698154_1669901629963_9465895
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&clickId=107698154_1669901629963_9465895
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a787583ddca7e537d9c289b0d78dd7c910c84cee6314ff9b544de0a900f4cedc03dba0f3846efe4e3a83be5cae61c6d40fcce3c6160be1bfe923f5bbe1192e34b0f428f14f3e4cccb3571f8b409194ec26d158733782bbd494ab7bf754c4506c6019894a7e41eabf4de7ec42976ffc94ff7b2222ed1303813901c45972462710077eb29142f457681248e65b5e617f978a6d10714aaadc272457a91dc3eeb32b2764c98a51e01a6d8ddd811549cdee11b1b148ba160e19e362adc6cf2da084eb39f61058a5a9be7b0f860f09cf9257955b8db4155daac6cab4436d8269baa7a5ea35321ecaace18401868db406bf142be3d7982acc793e3f81c406bbbc304460a5&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&clickId=107698154_1669901629963_9465895 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669881251799&.sig=oGsrC878cNEfwAQtQ9U.IWDVkYc-&affiliationId=96965886&comId=100505870&country=no&offerId=8c6ad1bcb44220775d60f19c01184656&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f81e26f387cd17e33b7078720aedd73545cea1e2131bddb91efe7c06096fc21&custom2=SRdytlITOR16&custom3=false
Content-Type: text/plain;charset=utf-8
Content-Length: 536
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=1ttGT98VVxupxolHO1t7INPtLnVNo2SUG0yz6_eKsidCjcPCr6VJ2qKClHLUtuJePSAl66Yr7J0xK-UjCaFpDWd2n0-586IZbHRZHoez0ejhWncvwIkKn5AkuiVuPTmP; kelkooID=a4c629a-184cde4ba0b-2d4abc; _ga=GA1.2.1591105251.1669901628; _gid=GA1.2.1468849845.1669901628
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 13:33:50 GMT
Request-Time: PT0.002741S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=85
Connection: Keep-Alive
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&clickId=107698154_1669901629963_9465895
200 OK 68 B URL HTTP/1.1 no-go.kelkoogroup.net/assets/images/p.png?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a787583ddca7e537d9c289b0d78dd7c910c84cee6314ff9b544de0a900f4cedc03dba0f3846efe4e3a83be5cae61c6d40fcce3c6160be1bfe923f5bbe1192e34b0f428f14f3e4cccb3571f8b409194ec26d158733782bbd494ab7bf754c4506c6019894a7e41eabf4de7ec42976ffc94ff7b2222ed1303813901c45972462710077eb29142f457681248e65b5e617f978a6d10714aaadc272457a91dc3eeb32b2764c98a51e01a6d8ddd811549cdee11b1b148ba160e19e362adc6cf2da084eb39f61058a5a9be7b0f860f09cf9257955b8db4155daac6cab4436d8269baa7a5ea35321ecaace18401868db406bf142be3d7982acc793e3f81c406bbbc304460a5&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&clickId=107698154_1669901629963_9465895
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&clickId=107698154_1669901629963_9465895 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669881251799&.sig=oGsrC878cNEfwAQtQ9U.IWDVkYc-&affiliationId=96965886&comId=100505870&country=no&offerId=8c6ad1bcb44220775d60f19c01184656&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f81e26f387cd17e33b7078720aedd73545cea1e2131bddb91efe7c06096fc21&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=1ttGT98VVxupxolHO1t7INPtLnVNo2SUG0yz6_eKsidCjcPCr6VJ2qKClHLUtuJePSAl66Yr7J0xK-UjCaFpDWd2n0-586IZbHRZHoez0ejhWncvwIkKn5AkuiVuPTmP; kelkooID=a4c629a-184cde4ba0b-2d4abc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 13:33:50 GMT
Request-Time: PT0.001689S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: image/png
Content-Length: 68
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=69
Connection: Keep-Alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3f98f4fa62eaa47719d9eb6660f3652d
cfeb4965fb58b133cb9bdff64ece40ad8ea4df97
183607b7c4ada6fd66036dfa32df5345aeced7375f12f419fcc80773f6d7cc68
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "183607B7C4ADA6FD66036DFA32DF5345AECED7375F12F419FCC80773F6D7CC68"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19097
Expires: Thu, 01 Dec 2022 18:52:07 GMT
Date: Thu, 01 Dec 2022 13:33:50 GMT
Connection: keep-alive
no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&clickId=107698154_1669901629963_9465895&url=https%3A%2F%2Ftrack.adtraction.com%2Ft%2Ft%3Fa%3D1487386353%26as%3D1331389421%26t%3D2%26tk%3D1%26epi%3Ddc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695%26url%3Dhttps%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&clickId=107698154_1669901629963_9465895&url=https%3A%2F%2Ftrack.adtraction.com%2Ft%2Ft%3Fa%3D1487386353%26as%3D1331389421%26t%3D2%26tk%3D1%26epi%3Ddc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695%26url%3Dhttps%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=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&leadId=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&clickId=107698154_1669901629963_9465895&url=https%3A%2F%2Ftrack.adtraction.com%2Ft%2Ft%3Fa%3D1487386353%26as%3D1331389421%26t%3D2%26tk%3D1%26epi%3Ddc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695%26url%3Dhttps%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1669881251799&.sig=oGsrC878cNEfwAQtQ9U.IWDVkYc-&affiliationId=96965886&comId=100505870&country=no&offerId=8c6ad1bcb44220775d60f19c01184656&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f81e26f387cd17e33b7078720aedd73545cea1e2131bddb91efe7c06096fc21&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=1ttGT98VVxupxolHO1t7INPtLnVNo2SUG0yz6_eKsidCjcPCr6VJ2qKClHLUtuJePSAl66Yr7J0xK-UjCaFpDWd2n0-586IZbHRZHoez0ejhWncvwIkKn5AkuiVuPTmP; kelkooID=a4c629a-184cde4ba0b-2d4abc; _ga=GA1.2.1591105251.1669901628; _gid=GA1.2.1468849845.1669901628
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
Date: Thu, 01 Dec 2022 13:33:50 GMT
leadId: dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695
clickId: 107698154_1669901629963_9465895
country: no
Location: https://track.adtraction.com/t/t?a=1487386353&as=1331389421&t=2&tk=1&epi=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&url=https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.0158S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=5k7Fi_998yeXYbjwQZ2gVbcejSUd6~UQn4A1jIn8Cbk7mxSBygBkWa2Oxhx6dRjXmCsvX_TtQQW~8RKBoC~sz~Tl9_cq9MN9xe49LWmvU7vVKo5HquHMKdGVPEA_~nyr; Max-Age=31536000; Expires=Fri, 01 Dec 2023 13:33:50 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=100
Connection: Keep-Alive
Content-Type: text/plain
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12019
Expires: Thu, 01 Dec 2022 16:54:09 GMT
Date: Thu, 01 Dec 2022 13:33:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12019
Expires: Thu, 01 Dec 2022 16:54:09 GMT
Date: Thu, 01 Dec 2022 13:33:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12019
Expires: Thu, 01 Dec 2022 16:54:09 GMT
Date: Thu, 01 Dec 2022 13:33:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12019
Expires: Thu, 01 Dec 2022 16:54:09 GMT
Date: Thu, 01 Dec 2022 13:33:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1e6b6ba4f82221b41c3d9129008c76d
2f9532d698b4c28df23e18bbb66399ec776d5b9f
218c6f41a16e6087c611d4db5784a7cc1d027084d0bf2bd6dc3843ee5dfd560f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: c08f55b2-7ac6-4dec-b53c-fd3f4533f9c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpBiGoHIAMFR2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bba3-69c2c2d05e55fd745caf1dce;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:09:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w_Mb-0pBwp-pUyU2bdJ8MhrGHkk6VQgJmcGV9MfHwj_yGUMIYZkyrg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 10:48:24 GMT
age: 9926
etag: "2f9532d698b4c28df23e18bbb66399ec776d5b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 820cf89fcab8380adff42982c9fb11ed
84241ddddbbfd7de30118307fb1a62800d0a4cb3
0d051495f06ac84de934283b40cbfee7a042d32153a73486dd7c017430e882d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12898
x-amzn-requestid: 9b594c3c-6b8c-4589-8fcb-b3d7518b46f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cQZBNFxToAMF_9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63833ba1-767f510d72eef86d0cc892df;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 10:27:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gsn5uUFEzDZDOMPTvW9UQxtccvRfJKUM4eJ8U99jvUGzNIKkF9SzeA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:49:20 GMT
age: 56670
etag: "84241ddddbbfd7de30118307fb1a62800d0a4cb3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash ca42971e9beb5d1d0e360da4f145ed33
854b77accf551bd45272355b949286143a1039d8
2a84154925fa70deb58bea0db76963399f7ce82f7de2c51bd53e22894dc9006b
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4160
Cache-Control: max-age=125289
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:50 GMT
Etag: "6387e367-1d7"
Expires: Sat, 03 Dec 2022 00:21:59 GMT
Last-Modified: Wed, 30 Nov 2022 23:12:39 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5508d05a290b663fd89ead9b58f2efd8
53650399f9a986ba54addd668b4557109d12003b
65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:44:47 GMT
age: 56943
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26d6dffbf400da4803a2e76e2a8ef2f8
2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8
04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8740
x-amzn-requestid: 4823cf63-98eb-40d3-bb8b-e09cd2262f36
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7SqHjYIAMF8xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c10-316b213c33ce9bc2355c0900;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tK4wl-g5kcUhVFE3iZGILhZhZSsaMzQD9JTBHj1JXV95yXs_e3gMGw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 12:31:43 GMT
age: 3727
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ffd12f9c423ffc627d9e3b3145944fe4
5cf9a7a784952e1bb0cbe499104f1774b1269d08
a25f1b752d9af599aefd73073c105853130f1759905269de3d582d2eb35fe167
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16038
x-amzn-requestid: 9d34c42b-ba0c-498f-8f99-d4ab527ffa89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbzMdHXNIAMFgaw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cbe9-376846f31dc9b995797cbd18;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:25 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DngCuOTO9fQAwWe_ip6EtBcgruigZN6Bl1_v5BHM2dsWlhqCXCL3gg==
via: 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:45:33 GMT
age: 56897
etag: "5cf9a7a784952e1bb0cbe499104f1774b1269d08"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d2dd5a4bcfd47db8f38544bf39ce3031
fa2217bae05b7beca2e12597eaad835298276b82
3266004f5e73af5359b71622eea31f1e28abb4bbc443b5f9e481b5a8b2e9249e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4762
x-amzn-requestid: b7c0e28a-de0d-443d-8bf4-900a964bf110
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7uSFcMoAMF2CQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830cc1-7abade3a670201cf1906b79f;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gZSkafSw8cXo9AChLOTVJW7r_hHLW8kaHlA-ED2_zFJwuUk1uS3VRw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 13:29:36 GMT
age: 254
etag: "fa2217bae05b7beca2e12597eaad835298276b82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
track.adtraction.com/t/t?a=1487386353&as=1331389421&t=2&tk=1&epi=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&url=https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger
302 0 B URL HTTP/1.1 track.adtraction.com/t/t?a=1487386353&as=1331389421&t=2&tk=1&epi=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&url=https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/t?a=1487386353&as=1331389421&t=2&tk=1&epi=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&url=https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger HTTP/1.1
Host: track.adtraction.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Cache-Control: no-cache
Access-Control-Allow-Origin: *
X-TraceId: 6df04ab3-cc30-4a17-9a6a-545b04d3f3a7
Set-Cookie: at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; Max-Age=94608000; Path=/; Domain=track.adtraction.com; SameSite=None; Secure
Location: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Transfer-Encoding: chunked
Date: Thu, 01 Dec 2022 13:33:50 GMT
Connection: close
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 368d96ce9274666b30a55e2e2ef02000
2182d797142609a9090a128c8f44ef43b5f146b4
1f80f5af1f3273b010142ac9cfcae05edb9b9865a7d0d3709e15c2a7d7a1d3ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F80F5AF1F3273B010142AC9CFCAE05EDB9B9865A7D0D3709E15C2A7D7A1D3AD"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10315
Expires: Thu, 01 Dec 2022 16:25:45 GMT
Date: Thu, 01 Dec 2022 13:33:50 GMT
Connection: keep-alive
www.norli.no/runtime.24d09a632ec388e45887.js
200 OK 4.2 kB URL HTTP/2 www.norli.no/runtime.24d09a632ec388e45887.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash d4641bbf3d14aa0ee9a3bb8975327a2e
d41068076d0a3113f0fe6c862270001877aa92d2
856978c4c873790cef9acafe7a21ad7284e3c02c92790eef724a11764ccf0963
GET /runtime.24d09a632ec388e45887.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:50 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-1c42"
expires: Fri, 01 Dec 2023 13:33:50 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
200 OK 91 kB URL HTTP/2 www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
IP
ASN #14061 DIGITALOCEAN-ASN
Hash b06c2e2a2746f2de9ba42f26fcfb1fe4
c9bd900ebc4f91b1743cc6ca39d8d7802bb89d7e
10d83663141d191c7795bd17f2f790436ca28233079b3dd253798f45437521a3
GET /spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5 HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:50 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-powered-by: Express
etag: W/"1240-3/kd9dHP5mWi6zELlJS2CU4sQSo"
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 188c50963e7939b1f26a31dbcb8c8200
859416e6148ea6618584e53604efcf072bb989cc
3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 188c50963e7939b1f26a31dbcb8c8200
859416e6148ea6618584e53604efcf072bb989cc
3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1669881251799%26.sig%3DoGsrC878cNEfwAQtQ9U.IWDVkYc-%26affiliationId%3D96965886%26comId%3D100505870%26country%3Dno%26offerId%3D8c6ad1bcb44220775d60f19c01184656%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D4f81e26f387cd17e33b7078720aedd73545cea1e2131bddb91efe7c06096fc21%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100505870%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Norli.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1591105251.1669901628&tid=UA-168544891-6&_gid=1468849845.1669901628&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&cd3=100505870&cd4=a4c629a-184cde4ba0b-2d4abc&cd5=&cd6=96965886%7C100505870%7C&z=1727258898
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1669881251799%26.sig%3DoGsrC878cNEfwAQtQ9U.IWDVkYc-%26affiliationId%3D96965886%26comId%3D100505870%26country%3Dno%26offerId%3D8c6ad1bcb44220775d60f19c01184656%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D4f81e26f387cd17e33b7078720aedd73545cea1e2131bddb91efe7c06096fc21%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100505870%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Norli.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1591105251.1669901628&tid=UA-168544891-6&_gid=1468849845.1669901628&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&cd3=100505870&cd4=a4c629a-184cde4ba0b-2d4abc&cd5=&cd6=96965886%7C100505870%7C&z=1727258898
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1669881251799%26.sig%3DoGsrC878cNEfwAQtQ9U.IWDVkYc-%26affiliationId%3D96965886%26comId%3D100505870%26country%3Dno%26offerId%3D8c6ad1bcb44220775d60f19c01184656%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D4f81e26f387cd17e33b7078720aedd73545cea1e2131bddb91efe7c06096fc21%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100505870%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Norli.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=1591105251.1669901628&tid=UA-168544891-6&_gid=1468849845.1669901628&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-01.prod.dc1.kelkoo.net_1669901629968_753695&cd3=100505870&cd4=a4c629a-184cde4ba0b-2d4abc&cd5=&cd6=96965886%7C100505870%7C&z=1727258898 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Thu, 01 Dec 2022 13:33:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d2df291ti5v5sq.cloudfront.net/rc/13220/scripts/s.js
200 OK 17 B URL HTTP/2 d2df291ti5v5sq.cloudfront.net/rc/13220/scripts/s.js
IP
File type ASCII text, with no line terminators
Hash a33a21825ee0bbfbd37c7f17465ee58b
0a1cea8a83e1df552650c210cc03ec629839dc1a
0df9a681956d3517ba546fb467fb16450db50fbe22a87f318e12789161f3b78f
GET /rc/13220/scripts/s.js HTTP/1.1
Host: d2df291ti5v5sq.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 17
last-modified: Fri, 06 Dec 2019 13:57:34 GMT
x-amz-meta-version: -1
x-amz-meta-previous: rc/13220/scripts/s-1575640652.js
x-amz-meta-blankedout: true
x-amz-meta-deployeddate: 2019-12-06 13:57:33
x-amz-meta-invalidationid: ITFNXGXFIPBAQ
accept-ranges: bytes
server: AmazonS3
date: Thu, 01 Dec 2022 05:53:18 GMT
etag: "a33a21825ee0bbfbd37c7f17465ee58b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6N49PVxGlKaNUNsNjEoIQ5HeFcRj3frSxBod0bHqNc41GuhTa8lzOA==
age: 27633
X-Firefox-Spdy: h2
www.norli.no/static/fonts/gotham-narrow-medium.woff2
200 OK 43 kB URL HTTP/2 www.norli.no/static/fonts/gotham-narrow-medium.woff2
IP
ASN #14061 DIGITALOCEAN-ASN
File type Web Open Font Format (Version 2), CFF, length 43220, version 0.0\012- data
Hash 0dd522d10b025c66d719f215f122904f
b1bb0c7000ede0c27f7bdd75586de6aaec739731
6c05e2f8c5f55e5d99e2fd3e580bd29ad1ff6a590c90b840fb6e3d0f5a56f7e8
GET /static/fonts/gotham-narrow-medium.woff2 HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/octet-stream
content-length: 43220
last-modified: Wed, 12 Oct 2022 06:55:27 GMT
etag: "634664df-a8d4"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/instantsearch.css@7/themes/algolia-min.css
200 OK 3.2 kB URL HTTP/2 cdn.jsdelivr.net/npm/instantsearch.css@7/themes/algolia-min.css
IP
File type ASCII text, with very long lines (16308), with no line terminators
Hash 8f1e8c8241a1b02b05b09fac275085c2
88c60bb22835efd0ec6a788cffb677868b7b279e
77c3563288c68881236a766e41c03a91262e808f765b19f3463e0f94cadfc5ba
GET /npm/instantsearch.css@7/themes/algolia-min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 7.4.5
x-jsd-version-type: version
etag: W/"3fb4-aMko+bzJrgKsHtY3e3nMvXUeO2A"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 01 Dec 2022 13:33:51 GMT
age: 42287
x-served-by: cache-fra-eddf8230026-FRA, cache-bma1669-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3211
X-Firefox-Spdy: h2
www.norli.no/static/fonts/convert-new-smooth.woff2
200 OK 5.1 kB URL HTTP/2 www.norli.no/static/fonts/convert-new-smooth.woff2
IP
ASN #14061 DIGITALOCEAN-ASN
File type Web Open Font Format (Version 2), TrueType, length 5144, version 1.0\012- data
Hash e505620b6d53cbe5620fbab4ed4b6e0f
afae9697bd8639867e4fd846f9acfd89124f0ed5
ef6c2049e65a197bbdd9cd8e7e2bdfbc859d4ff407b69610c52a042c58f122f7
GET /static/fonts/convert-new-smooth.woff2 HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/octet-stream
content-length: 5144
last-modified: Wed, 12 Oct 2022 06:55:27 GMT
etag: "634664df-1418"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.norli.no/static/fonts/gotham-book.woff2
200 OK 41 kB URL HTTP/2 www.norli.no/static/fonts/gotham-book.woff2
IP
ASN #14061 DIGITALOCEAN-ASN
File type Web Open Font Format (Version 2), CFF, length 40964, version 0.0\012- data
Hash c7297be57c0d762be03a9311d894f9d2
0777770c28e84a1390985934c6a66da4d3018a65
b54d3e51c771addad4d422083c6cea7eb4a90639a6fd58c38de2fbc59cd9d758
GET /static/fonts/gotham-book.woff2 HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/octet-stream
content-length: 40964
last-modified: Wed, 12 Oct 2022 06:55:27 GMT
etag: "634664df-a004"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.norli.no/static/fonts/gotham-medium.woff2
200 OK 41 kB URL HTTP/2 www.norli.no/static/fonts/gotham-medium.woff2
IP
ASN #14061 DIGITALOCEAN-ASN
File type Web Open Font Format (Version 2), CFF, length 40884, version 0.0\012- data
Hash 7b8c0317fa1ed87067ade7a6ba8a7e4f
40a08e1e2b97ab584855bc0147ebd9433ec3bfbf
6ec956aa5888241c9bccf29db3abb7626ee591ff35eb0c8160eef82eddbc5d46
GET /static/fonts/gotham-medium.woff2 HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/octet-stream
content-length: 40884
last-modified: Wed, 12 Oct 2022 06:55:27 GMT
etag: "634664df-9fb4"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash 4006e2dc2ab9c1062f99d7d07730cc97
1222db7aabd01487567064c9957037da7628ad33
fa6d484c6388b5f6c68034673ca943b532f7307298d018e1f9257c4bdc2444cb
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 13:33:51 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "A4FDCD26B01F1668988872E2CF0CD64014C0D717"
Expires: Fri, 02 Dec 2022 01:00:00 GMT
Last-Modified: Thu, 01 Dec 2022 13:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1243
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772c326c1b631c12-OSL
www.norli.no/graphql?query=query+ResolveURL%28%24url%3A+String%21%29+%7B%0A++++++++urlResolver%28url%3A+%24url%29+%7B%0A++++++++++++type%0A++++++++++++id%0A++++++++++++relative_url%0A++++++++++++redirectCode%0A++++++++++++...ResolveUrlExtraFields%0A++++++++%7D%0A++++%7D%0A++++fragment+ResolveUrlExtraFields+on+EntityUrl+%7B%0A++id%0A%7D%0A&variables=%7B%22url%22%3A%22%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%22%7D&operationName=ResolveURL
200 OK 140 B URL HTTP/2 www.norli.no/graphql?query=query+ResolveURL%28%24url%3A+String%21%29+%7B%0A++++++++urlResolver%28url%3A+%24url%29+%7B%0A++++++++++++type%0A++++++++++++id%0A++++++++++++relative_url%0A++++++++++++redirectCode%0A++++++++++++...ResolveUrlExtraFields%0A++++++++%7D%0A++++%7D%0A++++fragment+ResolveUrlExtraFields+on+EntityUrl+%7B%0A++id%0A%7D%0A&variables=%7B%22url%22%3A%22%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%22%7D&operationName=ResolveURL
IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with no line terminators
Hash 1a3fd6ecbbf958b48373bd7152731fa2
664020d4acfd152f3d715868365f68c60ab46d07
6858feee32b8af4982057d7aa4e608db845f778ffb08286f68e5cbeaa53827e1
GET /graphql?query=query+ResolveURL%28%24url%3A+String%21%29+%7B%0A++++++++urlResolver%28url%3A+%24url%29+%7B%0A++++++++++++type%0A++++++++++++id%0A++++++++++++relative_url%0A++++++++++++redirectCode%0A++++++++++++...ResolveUrlExtraFields%0A++++++++%7D%0A++++%7D%0A++++fragment+ResolveUrlExtraFields+on+EntityUrl+%7B%0A++id%0A%7D%0A&variables=%7B%22url%22%3A%22%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%22%7D&operationName=ResolveURL HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
content-type: application/json
store: pwa
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/json
content-length: 140
vary: Accept-Encoding, Origin
content-encoding: gzip
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
www.norli.no/graphql?query=query+cmsBlocks%28%24identifiers%3A%5BString%5D%21%29%7BcmsBlocks%28identifiers%3A%24identifiers%29%7Bitems%7Bcontent+identifier+__typename%7D__typename%7D%7D&operationName=cmsBlocks&variables=%7B%22identifiers%22%3A%22popular-searches-magento%22%7D
200 OK 321 B URL HTTP/2 www.norli.no/graphql?query=query+cmsBlocks%28%24identifiers%3A%5BString%5D%21%29%7BcmsBlocks%28identifiers%3A%24identifiers%29%7Bitems%7Bcontent+identifier+__typename%7D__typename%7D%7D&operationName=cmsBlocks&variables=%7B%22identifiers%22%3A%22popular-searches-magento%22%7D
IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with very long lines (829), with no line terminators
Hash d713ed9b7241217ea12c26e0b6cc15d0
136ba108b9bed35b5f78ff3a3a039e794fab3602
312612cd6e67bb914560c1352e3d224c7c619af03910afa18138c7c291ff29d8
GET /graphql?query=query+cmsBlocks%28%24identifiers%3A%5BString%5D%21%29%7BcmsBlocks%28identifiers%3A%24identifiers%29%7Bitems%7Bcontent+identifier+__typename%7D__typename%7D%7D&operationName=cmsBlocks&variables=%7B%22identifiers%22%3A%22popular-searches-magento%22%7D HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
content-type: application/json
authorization:
store: pwa
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/json
content-length: 321
vary: Accept-Encoding, Origin
content-encoding: gzip
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
www.norli.no/graphql?query=query+cmsBlocks%28%24identifiers%3A%5BString%5D%21%29%7BcmsBlocks%28identifiers%3A%24identifiers%29%7Bitems%7Bcontent+identifier+__typename%7D__typename%7D%7D&operationName=cmsBlocks&variables=%7B%22identifiers%22%3A%5B%22usp_list%22%2C%22footer_payments_block%22%5D%7D
200 OK 620 B URL HTTP/2 www.norli.no/graphql?query=query+cmsBlocks%28%24identifiers%3A%5BString%5D%21%29%7BcmsBlocks%28identifiers%3A%24identifiers%29%7Bitems%7Bcontent+identifier+__typename%7D__typename%7D%7D&operationName=cmsBlocks&variables=%7B%22identifiers%22%3A%5B%22usp_list%22%2C%22footer_payments_block%22%5D%7D
IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- HTML document, ASCII text, with very long lines (1659), with no line terminators
Hash 8d626ab1c0ecf5cc338bd99992b374f3
15804c083ed8ea800649a0f04e63badb16211051
bf4eba19a2957dcda6cf120c835461d230b552cd56c8495c87e26ad9f31e139b
GET /graphql?query=query+cmsBlocks%28%24identifiers%3A%5BString%5D%21%29%7BcmsBlocks%28identifiers%3A%24identifiers%29%7Bitems%7Bcontent+identifier+__typename%7D__typename%7D%7D&operationName=cmsBlocks&variables=%7B%22identifiers%22%3A%5B%22usp_list%22%2C%22footer_payments_block%22%5D%7D HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
content-type: application/json
authorization:
store: pwa
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/json
content-length: 620
vary: Accept-Encoding, Origin
content-encoding: gzip
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
www.norli.no/graphql?query=query+getStoreConfigData%7BstoreConfig%7Bid+cms_home_page+code+secure_base_media_url+store_name+locale+root_category_id+oauth_access_token_lifetime_customer+magento_wishlist_general_is_enabled+algoliasearch_enabled+algoliasearch_app_id+algoliasearch_api_key+algoliasearch_price_key+algoliasearch_instantsearch%7Benabled+index_name+hits_per_page+facet_max_values+infinite_scroll_enabled+facets%7Battribute+label+isSwatch+type+searchable+__typename%7Dsorting_indices%7Battribute+name+label+sort+__typename%7D__typename%7Dcatalog_default_sort_by+freeShipping%7Benabled+minAmount+showPercent+showText+__typename%7Dconvert_widgets_footer%7Btitle+links%7Blink+title+enable+custom_class+__typename%7D__typename%7Dconvert_cookies_text+convert_cookies_link_text+convert_cookies_link_url+convert_cookies_privacy_link_text+convert_cookies_privacy_link_url+convert_cookies_status+convert_social_follow_status+convert_social_follow_title+convert_social_follow_description+convert_follow%7Btitle+type+link+enable+__typename%7Dconvert_usp_cart_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_category_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_checkout_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_footer%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_home_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_product_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Ddefault_display_currency_code+convert_currency_hide_symbol+convert_currency_precision+convert_currency_symbol_position+convert_currency_custom_thousand_delimeter+convert_currency_decimal_suffix+convert_currency_thousand_delimeter_char+convert_newsletter_footer_status+convert_newsletter_footer_title+convert_newsletter_footer_description+convert_newsletter_footer_placeholder+convert_brand_enable+convert_brand_attribute+amshopby_brand_general_url_key+amasty_gdpr_cookie_bar%7Btype+design%7Bnotification_text+__typename%7Dgroups%7Bcookies%7Bdescription+lifetime+name+provider+type+__typename%7Ddescription+groupId+isEssential+name+__typename%7D__typename%7Damasty_gdpr_cookie_enabled+amasty_gdpr_enabled+amasty_gdpr_customer_access_delete+dy_enabled+dy_dynamic_script_url+dy_static_script_url+vipps_login_enabled+yotpo_widget_url+yotpo_enabled+yotpo_key+yotpo_widget_enabled+yotpo_category_enabled+yotpo_product_enabled+yotpo_qna_enabled+algoliasearch_instantsearch%7Bindex_name_authors+index_name_categories+index_name_pages+replace_categories+__typename%7Dall_authors_cms_block+convert_click_and_send%7Benabled+google_maps_api_key+__typename%7Dconvert_pickup_in_store%7Benabled+google_maps_api_key+__typename%7Dcookie_root_domain+fav_store_stock_query_enabled+kindle_email_description_cms_block+member_description_block+member_iframe_url+member_price_attribute_code+member_terms_block+member_terms_enabled+member_terms_title+membership_enabled+norli_format_attribute_code+norli_junior_tips_url+norli_target_rule_enabled+vipps_payment_active+vipps_express_active+vipps_express_active_for_physical+__typename%7D%7D&operationName=getStoreConfigData&variables=%7B%7D
200 OK 4.2 kB URL HTTP/2 www.norli.no/graphql?query=query+getStoreConfigData%7BstoreConfig%7Bid+cms_home_page+code+secure_base_media_url+store_name+locale+root_category_id+oauth_access_token_lifetime_customer+magento_wishlist_general_is_enabled+algoliasearch_enabled+algoliasearch_app_id+algoliasearch_api_key+algoliasearch_price_key+algoliasearch_instantsearch%7Benabled+index_name+hits_per_page+facet_max_values+infinite_scroll_enabled+facets%7Battribute+label+isSwatch+type+searchable+__typename%7Dsorting_indices%7Battribute+name+label+sort+__typename%7D__typename%7Dcatalog_default_sort_by+freeShipping%7Benabled+minAmount+showPercent+showText+__typename%7Dconvert_widgets_footer%7Btitle+links%7Blink+title+enable+custom_class+__typename%7D__typename%7Dconvert_cookies_text+convert_cookies_link_text+convert_cookies_link_url+convert_cookies_privacy_link_text+convert_cookies_privacy_link_url+convert_cookies_status+convert_social_follow_status+convert_social_follow_title+convert_social_follow_description+convert_follow%7Btitle+type+link+enable+__typename%7Dconvert_usp_cart_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_category_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_checkout_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_footer%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_home_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_product_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Ddefault_display_currency_code+convert_currency_hide_symbol+convert_currency_precision+convert_currency_symbol_position+convert_currency_custom_thousand_delimeter+convert_currency_decimal_suffix+convert_currency_thousand_delimeter_char+convert_newsletter_footer_status+convert_newsletter_footer_title+convert_newsletter_footer_description+convert_newsletter_footer_placeholder+convert_brand_enable+convert_brand_attribute+amshopby_brand_general_url_key+amasty_gdpr_cookie_bar%7Btype+design%7Bnotification_text+__typename%7Dgroups%7Bcookies%7Bdescription+lifetime+name+provider+type+__typename%7Ddescription+groupId+isEssential+name+__typename%7D__typename%7Damasty_gdpr_cookie_enabled+amasty_gdpr_enabled+amasty_gdpr_customer_access_delete+dy_enabled+dy_dynamic_script_url+dy_static_script_url+vipps_login_enabled+yotpo_widget_url+yotpo_enabled+yotpo_key+yotpo_widget_enabled+yotpo_category_enabled+yotpo_product_enabled+yotpo_qna_enabled+algoliasearch_instantsearch%7Bindex_name_authors+index_name_categories+index_name_pages+replace_categories+__typename%7Dall_authors_cms_block+convert_click_and_send%7Benabled+google_maps_api_key+__typename%7Dconvert_pickup_in_store%7Benabled+google_maps_api_key+__typename%7Dcookie_root_domain+fav_store_stock_query_enabled+kindle_email_description_cms_block+member_description_block+member_iframe_url+member_price_attribute_code+member_terms_block+member_terms_enabled+member_terms_title+membership_enabled+norli_format_attribute_code+norli_junior_tips_url+norli_target_rule_enabled+vipps_payment_active+vipps_express_active+vipps_express_active_for_physical+__typename%7D%7D&operationName=getStoreConfigData&variables=%7B%7D
IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with very long lines (14636), with no line terminators
Hash 66739b412469842fc45da27c3d67e995
cdd414bd314835b604da8a6076be1f77c6a8df0f
aa00a61e7512fa08a41e3d106d8c54b3f6b54f806afcc2d93d5fe8d334778278
GET /graphql?query=query+getStoreConfigData%7BstoreConfig%7Bid+cms_home_page+code+secure_base_media_url+store_name+locale+root_category_id+oauth_access_token_lifetime_customer+magento_wishlist_general_is_enabled+algoliasearch_enabled+algoliasearch_app_id+algoliasearch_api_key+algoliasearch_price_key+algoliasearch_instantsearch%7Benabled+index_name+hits_per_page+facet_max_values+infinite_scroll_enabled+facets%7Battribute+label+isSwatch+type+searchable+__typename%7Dsorting_indices%7Battribute+name+label+sort+__typename%7D__typename%7Dcatalog_default_sort_by+freeShipping%7Benabled+minAmount+showPercent+showText+__typename%7Dconvert_widgets_footer%7Btitle+links%7Blink+title+enable+custom_class+__typename%7D__typename%7Dconvert_cookies_text+convert_cookies_link_text+convert_cookies_link_url+convert_cookies_privacy_link_text+convert_cookies_privacy_link_url+convert_cookies_status+convert_social_follow_status+convert_social_follow_title+convert_social_follow_description+convert_follow%7Btitle+type+link+enable+__typename%7Dconvert_usp_cart_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_category_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_checkout_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_footer%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_home_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Dconvert_usp_product_page%7Btitle+items%7Btitle+description+link+custom_class+__typename%7D__typename%7Ddefault_display_currency_code+convert_currency_hide_symbol+convert_currency_precision+convert_currency_symbol_position+convert_currency_custom_thousand_delimeter+convert_currency_decimal_suffix+convert_currency_thousand_delimeter_char+convert_newsletter_footer_status+convert_newsletter_footer_title+convert_newsletter_footer_description+convert_newsletter_footer_placeholder+convert_brand_enable+convert_brand_attribute+amshopby_brand_general_url_key+amasty_gdpr_cookie_bar%7Btype+design%7Bnotification_text+__typename%7Dgroups%7Bcookies%7Bdescription+lifetime+name+provider+type+__typename%7Ddescription+groupId+isEssential+name+__typename%7D__typename%7Damasty_gdpr_cookie_enabled+amasty_gdpr_enabled+amasty_gdpr_customer_access_delete+dy_enabled+dy_dynamic_script_url+dy_static_script_url+vipps_login_enabled+yotpo_widget_url+yotpo_enabled+yotpo_key+yotpo_widget_enabled+yotpo_category_enabled+yotpo_product_enabled+yotpo_qna_enabled+algoliasearch_instantsearch%7Bindex_name_authors+index_name_categories+index_name_pages+replace_categories+__typename%7Dall_authors_cms_block+convert_click_and_send%7Benabled+google_maps_api_key+__typename%7Dconvert_pickup_in_store%7Benabled+google_maps_api_key+__typename%7Dcookie_root_domain+fav_store_stock_query_enabled+kindle_email_description_cms_block+member_description_block+member_iframe_url+member_price_attribute_code+member_terms_block+member_terms_enabled+member_terms_title+membership_enabled+norli_format_attribute_code+norli_junior_tips_url+norli_target_rule_enabled+vipps_payment_active+vipps_express_active+vipps_express_active_for_physical+__typename%7D%7D&operationName=getStoreConfigData&variables=%7B%7D HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
content-type: application/json
authorization:
store: pwa
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/json
content-length: 4180
vary: Accept-Encoding, Origin
content-encoding: gzip
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-1500324.js?sv=6
200 OK 3.9 kB URL HTTP/2 static.hotjar.com/c/hotjar-1500324.js?sv=6
IP
File type ASCII text, with very long lines (5909)
Hash 6c599dd728cdfd8b74623e53ac38d395
d87ce40036265cd39fe93418c26f76961f8bc828
5036a884c0d2717be9418f3be80575f5fa32c23d5d7ede5a47f9c31b03797ec3
GET /c/hotjar-1500324.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Thu, 01 Dec 2022 13:32:52 GMT
cache-control: max-age=60
etag: W/adc797bc219959b8f16980fa547f9f26
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HBo-RA_TPbxpplHkLzWOla2F8wQzpbOlxWyKCFqwBH8MeTG529_cbA==
age: 59
X-Firefox-Spdy: h2
www.norli.no/graphql
200 OK 5.7 kB IP
ASN #14061 DIGITALOCEAN-ASN
Hash 036613d0d47ae135c9a54f7fee2529ce
ca3903072732ada5e414c6ed4b193f887f347c13
9bc1bc95c0a4400375f2dc890b50f1c29166a56eaaa38a1ad5e06286b0f827ed
POST /graphql HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
content-type: application/json
authorization:
store: pwa
Origin: https://www.norli.no
Content-Length: 109
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/json
vary: Accept-Encoding, Accept-Encoding, Origin
set-cookie: PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; expires=Thu, 01-Dec-2022 15:33:51 GMT; Max-Age=7200; path=/; domain=www.norli.no; secure; HttpOnly; SameSite=Lax
private_content_version=ef128b4fa83dd6b91add41ec7aebfb84; expires=Sun, 28-Nov-2032 13:33:51 GMT; Max-Age=315360000; path=/; secure; SameSite=Lax
private_content_version=07b45e0a3a2fd9dfeaeeffff8639f8d4; expires=Sun, 28-Nov-2032 13:33:51 GMT; Max-Age=315360000; path=/; secure; SameSite=Lax
private_content_version=15246b48164c115b2914358dae7f1da9; expires=Sun, 28-Nov-2032 13:33:51 GMT; Max-Age=315360000; path=/; secure; SameSite=Lax
access-control-allow-origin: https://www.norli.no
access-control-allow-credentials: true
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/cookies-4DH.svg
200 OK 34 kB URL HTTP/2 www.norli.no/cookies-4DH.svg
IP
ASN #14061 DIGITALOCEAN-ASN
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (55393)
Hash 22eb1898df50129c0d5f8b184e93028f
e150d5d40a4b84c258b64e1857d6e62ce61c616c
8739962f9a962af03cdb76147788e0deecab7a7890ade67c922e200ca6c9cf7d
GET /cookies-4DH.svg HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=76c9c11c0e79487adea041486a50b77d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: image/svg+xml
last-modified: Wed, 12 Oct 2022 06:55:27 GMT
vary: Accept-Encoding
etag: W/"634664df-22fb"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1601a7c8a96ebe5b2af6fe1abcb6b90b
fb19f5121052f37c9cef4640791964583618560c
893364204eb010f01c891762b80db20df137be75ecb85fa4e22dbc68143b53fb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5253
Cache-Control: max-age=113819
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:51 GMT
Etag: "6387b255-1d7"
Expires: Fri, 02 Dec 2022 21:10:50 GMT
Last-Modified: Wed, 30 Nov 2022 19:43:17 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
www.norli.no/i18n-nb_NO.7a9fb125d3c02ffe911a.js
200 OK 18 kB URL HTTP/2 www.norli.no/i18n-nb_NO.7a9fb125d3c02ffe911a.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash b15d50a3baf6917caf749de4498ee5af
fafe5ef68e09da5a5f6d75bda49a154d36d61266
bca4868d326aaed1101df75fc8fb608b7f75efb750fab6185665cace9ee32740
GET /i18n-nb_NO.7a9fb125d3c02ffe911a.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-da1b"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/graphql?query=query+ResolveURL%28%24url%3A+String%21%29+%7B%0A++++++++urlResolver%28url%3A+%24url%29+%7B%0A++++++++++++type%0A++++++++++++id%0A++++++++++++relative_url%0A++++++++++++redirectCode%0A++++++++++++...ResolveUrlExtraFields%0A++++++++%7D%0A++++%7D%0A++++fragment+ResolveUrlExtraFields+on+EntityUrl+%7B%0A++id%0A%7D%0A&variables=%7B%22url%22%3A%22%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%22%7D&operationName=ResolveURL
200 OK 140 B URL HTTP/2 www.norli.no/graphql?query=query+ResolveURL%28%24url%3A+String%21%29+%7B%0A++++++++urlResolver%28url%3A+%24url%29+%7B%0A++++++++++++type%0A++++++++++++id%0A++++++++++++relative_url%0A++++++++++++redirectCode%0A++++++++++++...ResolveUrlExtraFields%0A++++++++%7D%0A++++%7D%0A++++fragment+ResolveUrlExtraFields+on+EntityUrl+%7B%0A++id%0A%7D%0A&variables=%7B%22url%22%3A%22%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%22%7D&operationName=ResolveURL
IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with no line terminators
Hash 1a3fd6ecbbf958b48373bd7152731fa2
664020d4acfd152f3d715868365f68c60ab46d07
6858feee32b8af4982057d7aa4e608db845f778ffb08286f68e5cbeaa53827e1
GET /graphql?query=query+ResolveURL%28%24url%3A+String%21%29+%7B%0A++++++++urlResolver%28url%3A+%24url%29+%7B%0A++++++++++++type%0A++++++++++++id%0A++++++++++++relative_url%0A++++++++++++redirectCode%0A++++++++++++...ResolveUrlExtraFields%0A++++++++%7D%0A++++%7D%0A++++fragment+ResolveUrlExtraFields+on+EntityUrl+%7B%0A++id%0A%7D%0A&variables=%7B%22url%22%3A%22%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%22%7D&operationName=ResolveURL HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
content-type: application/json
store: pwa
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/json
content-length: 140
vary: Accept-Encoding, Origin
content-encoding: gzip
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
www.norli.no/graphql?query=query+GetMenuStructure%28%24isTypeSnowdogMenu%3ABoolean%21%24snowdogMenuIdentifier%3AString%29%7Bcategory%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+default_sort_by+thumbnail+__typename%7D__typename%7D__typename%7D__typename%7D__typename%7D__typename%7DsnowdogMenu%28identifier%3A%24snowdogMenuIdentifier%29%40include%28if%3A%24isTypeSnowdogMenu%29%7Bcss_class+id+identifier+is_active+title+nodes%7Bclasses+content+...on+SnowdogMenuCmsBlockNode%7Bcms_block%7Bcontent+identifier+title+__typename%7D__typename%7D...on+SnowdogMenuProductNode%7Bproduct%7Bsku+id+url_key+url_suffix+__typename%7D__typename%7Did+image+image_alt_text+level+menu_id+parent_id+position+target+title+type+nodes%7Bclasses+content+...on+SnowdogMenuCmsBlockNode%7Bcms_block%7Bcontent+identifier+title+__typename%7D__typename%7D...on+SnowdogMenuProductNode%7Bproduct%7Bid+sku+url_key+url_suffix+__typename%7D__typename%7Did+image+image_alt_text+level+menu_id+parent_id+position+target+title+type+nodes%7Bclasses+content+...on+SnowdogMenuCmsBlockNode%7Bcms_block%7Bcontent+identifier+title+__typename%7D__typename%7D...on+SnowdogMenuProductNode%7Bproduct%7Bid+sku+url_key+url_suffix+__typename%7D__typename%7Did+image+image_alt_text+level+menu_id+parent_id+position+target+title+type+__typename%7D__typename%7D__typename%7D__typename%7D%7D&operationName=GetMenuStructure&variables=%7B%22isTypeSnowdogMenu%22%3Atrue%2C%22snowdogMenuIdentifier%22%3A%22main%22%7D
200 OK 34 kB URL HTTP/2 www.norli.no/graphql?query=query+GetMenuStructure%28%24isTypeSnowdogMenu%3ABoolean%21%24snowdogMenuIdentifier%3AString%29%7Bcategory%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+default_sort_by+thumbnail+__typename%7D__typename%7D__typename%7D__typename%7D__typename%7D__typename%7DsnowdogMenu%28identifier%3A%24snowdogMenuIdentifier%29%40include%28if%3A%24isTypeSnowdogMenu%29%7Bcss_class+id+identifier+is_active+title+nodes%7Bclasses+content+...on+SnowdogMenuCmsBlockNode%7Bcms_block%7Bcontent+identifier+title+__typename%7D__typename%7D...on+SnowdogMenuProductNode%7Bproduct%7Bsku+id+url_key+url_suffix+__typename%7D__typename%7Did+image+image_alt_text+level+menu_id+parent_id+position+target+title+type+nodes%7Bclasses+content+...on+SnowdogMenuCmsBlockNode%7Bcms_block%7Bcontent+identifier+title+__typename%7D__typename%7D...on+SnowdogMenuProductNode%7Bproduct%7Bid+sku+url_key+url_suffix+__typename%7D__typename%7Did+image+image_alt_text+level+menu_id+parent_id+position+target+title+type+nodes%7Bclasses+content+...on+SnowdogMenuCmsBlockNode%7Bcms_block%7Bcontent+identifier+title+__typename%7D__typename%7D...on+SnowdogMenuProductNode%7Bproduct%7Bid+sku+url_key+url_suffix+__typename%7D__typename%7Did+image+image_alt_text+level+menu_id+parent_id+position+target+title+type+__typename%7D__typename%7D__typename%7D__typename%7D%7D&operationName=GetMenuStructure&variables=%7B%22isTypeSnowdogMenu%22%3Atrue%2C%22snowdogMenuIdentifier%22%3A%22main%22%7D
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7fa1adf963ee3140c78dae33dcb89778
e0e8b3f19ab4afcae0ba978635c6bcf18c1e5abe
9c89c0f014ea9df87827e2b8300366a881bcb846313e6ce76b91017b6d3d2269
GET /graphql?query=query+GetMenuStructure%28%24isTypeSnowdogMenu%3ABoolean%21%24snowdogMenuIdentifier%3AString%29%7Bcategory%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+children_count+default_sort_by+thumbnail+children%7Bid+name+hide_in_subcategories+include_in_menu+canonical_url+url_path+url_suffix+position+level+default_sort_by+thumbnail+__typename%7D__typename%7D__typename%7D__typename%7D__typename%7D__typename%7DsnowdogMenu%28identifier%3A%24snowdogMenuIdentifier%29%40include%28if%3A%24isTypeSnowdogMenu%29%7Bcss_class+id+identifier+is_active+title+nodes%7Bclasses+content+...on+SnowdogMenuCmsBlockNode%7Bcms_block%7Bcontent+identifier+title+__typename%7D__typename%7D...on+SnowdogMenuProductNode%7Bproduct%7Bsku+id+url_key+url_suffix+__typename%7D__typename%7Did+image+image_alt_text+level+menu_id+parent_id+position+target+title+type+nodes%7Bclasses+content+...on+SnowdogMenuCmsBlockNode%7Bcms_block%7Bcontent+identifier+title+__typename%7D__typename%7D...on+SnowdogMenuProductNode%7Bproduct%7Bid+sku+url_key+url_suffix+__typename%7D__typename%7Did+image+image_alt_text+level+menu_id+parent_id+position+target+title+type+nodes%7Bclasses+content+...on+SnowdogMenuCmsBlockNode%7Bcms_block%7Bcontent+identifier+title+__typename%7D__typename%7D...on+SnowdogMenuProductNode%7Bproduct%7Bid+sku+url_key+url_suffix+__typename%7D__typename%7Did+image+image_alt_text+level+menu_id+parent_id+position+target+title+type+__typename%7D__typename%7D__typename%7D__typename%7D%7D&operationName=GetMenuStructure&variables=%7B%22isTypeSnowdogMenu%22%3Atrue%2C%22snowdogMenuIdentifier%22%3A%22main%22%7D HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
content-type: application/json
authorization:
store: pwa
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/json
content-length: 34183
vary: Accept-Encoding, Origin
content-encoding: gzip
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
script.hotjar.com/modules.8066ef274cc529c933d8.js
200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.8066ef274cc529c933d8.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 0b6db42a732a2de4485e2b0a05434f63
66444f933838db2867531f93074398f64d88f564
00b5a5f52cd6034433eb7f56b4de77c78f305bbb2046d25ffcb55a821f71d1b4
GET /modules.8066ef274cc529c933d8.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68637
date: Wed, 30 Nov 2022 12:36:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "0b6db42a732a2de4485e2b0a05434f63"
last-modified: Wed, 30 Nov 2022 12:35:50 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vsdWZ4cEL_1YFtwxUYWWOttNUjt_iN3o1nJTQE4MMtgjl_-8FMhw1Q==
age: 89865
X-Firefox-Spdy: h2
adtr.io/jsTag?ap=1437273961
200 OK 12 kB URL HTTP/2 adtr.io/jsTag?ap=1437273961
IP
File type ASCII text, with very long lines (11638), with no line terminators
Hash 6351752e0e30f327310f7a8634d35282
176116284d5318c9cc480bd64eb6b33491d92f16
2831247aba38bc82671e35ca7500317bbd0103068541d6010ec577d4604fa6a8
GET /jsTag?ap=1437273961 HTTP/1.1
Host: adtr.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=UTF-8
content-length: 11638
access-control-allow-origin: *
x-traceid: 0b661f7c-f6d1-48fc-9ee0-7cd5fc284424
date: Thu, 01 Dec 2022 13:08:02 GMT
cache-control: max-age=10800, s-maxage=1800
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9EOJ3GKNIsKsp-wCOFE45uNxm2UtT7Cakje_x_Oo4u-df3AUiaR_Qg==
age: 1549
X-Firefox-Spdy: h2
vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash e0652b84b7b3b650769c759fc520c3f8
0b55d6e28613350c7f41b88f19e726e6751ad03b
94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Wed, 23 Nov 2022 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Wed, 23 Nov 2022 13:09:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nUDBZ-YQZhJwdHML-NIQVkCnaBcuk0ZOdOBhlK_dEn8ABzj4ZL3YUQ==
age: 692625
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=852109172365378&ev=PageView&dl=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1669901630545&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%222553825411593730%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22NOK%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22215792073442768%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1669901630544.1961874988&it=1669901630405&coo=false&exp=b3&rqm=GET&cd[rex]=%7B%22uid%22%3A%224f8c124sd-a43c-4708-9f9a-725fe3f98e3d%22%2C%22retry%22%3A0%7D
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=852109172365378&ev=PageView&dl=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1669901630545&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%222553825411593730%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22NOK%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22215792073442768%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1669901630544.1961874988&it=1669901630405&coo=false&exp=b3&rqm=GET&cd[rex]=%7B%22uid%22%3A%224f8c124sd-a43c-4708-9f9a-725fe3f98e3d%22%2C%22retry%22%3A0%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=852109172365378&ev=PageView&dl=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1669901630545&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&par[0]=%7B%22extractorID%22%3A%222553825411593730%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%22priceCurrency%22%3A%22NOK%22%7D%7D%7D&par[1]=%7B%22extractorID%22%3A%22215792073442768%22%2C%22jsonLD%22%3A%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%22%2C%22%40type%22%3A%22Product%22%2C%22offers%22%3A%7B%7D%7D%7D&fbp=fb.1.1669901630544.1961874988&it=1669901630405&coo=false&exp=b3&rqm=GET&cd[rex]=%7B%22uid%22%3A%224f8c124sd-a43c-4708-9f9a-725fe3f98e3d%22%2C%22retry%22%3A0%7D HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin: https://www.norli.no
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 01 Dec 2022 13:33:52 GMT
X-Firefox-Spdy: h2
vc.hotjar.io/sessions/1500324?s=0.25&r=0.2039238514780034
204 No Content 0 B URL HTTP/2 vc.hotjar.io/sessions/1500324?s=0.25&r=0.2039238514780034
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sessions/1500324?s=0.25&r=0.2039238514780034 HTTP/1.1
Host: vc.hotjar.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-store
date: Thu, 01 Dec 2022 13:33:52 GMT
server: Python/3.7 aiohttp/3.5.4
x-cache: Miss from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 54Ucwew2iCE5ZC_kMySCDOF1XVx3kj6UgDdRw93jL52SulVL-WJIUQ==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 51d5484b700426c5612c309bbf14b114
026994960bfaaa4e2604b66cb795b2787fe300a2
e3e30a64f2e4fc59120c46b320d104f1b9d9a8af90106ab78715d14e49e11ae0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/993096944/?random=1669901630567&cv=11&fst=1669901630567&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Forside%20-%20Norli%20Bokhandel&auid=884175602.1669901629&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/993096944/?random=1669901630567&cv=11&fst=1669901630567&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Forside%20-%20Norli%20Bokhandel&auid=884175602.1669901629&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2277), with no line terminators
Hash a1d2854f0dfa57067fd60bae1debdae6
a045cf3eca78b20a2cbb5ea77f7ca3fd4b7715d6
7bde8b84a07342e2f20c76e9ec92f691000d4552f2bdce1f1f8d2528b4dce3a9
GET /pagead/viewthroughconversion/993096944/?random=1669901630567&cv=11&fst=1669901630567&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Forside%20-%20Norli%20Bokhandel&auid=884175602.1669901629&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 01 Dec 2022 13:33:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1008
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 01-Dec-2022 13:48:52 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 51d5484b700426c5612c309bbf14b114
026994960bfaaa4e2604b66cb795b2787fe300a2
e3e30a64f2e4fc59120c46b320d104f1b9d9a8af90106ab78715d14e49e11ae0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.norli.no/graphql?query=query+getItemCount%28%24cartId%3AString%21%29%7Bcart%28cart_id%3A%24cartId%29%7Bid+...CartTriggerFragment+__typename%7D%7Dfragment+CartTriggerFragment+on+Cart%7Bid+total_quantity+...FreeShippingFragment+__typename%7Dfragment+FreeShippingFragment+on+Cart%7Bfree_shipping%7Bhas_free_shipping+remaining_amount%7Bvalue+currency+__typename%7Dprogress_percent+__typename%7D__typename%7D&operationName=getItemCount&variables=%7B%22cartId%22%3A%22CxtNfb6rdApnybXmqnvcNeNSvkCCodXg%22%7D
200 OK 199 B URL HTTP/2 www.norli.no/graphql?query=query+getItemCount%28%24cartId%3AString%21%29%7Bcart%28cart_id%3A%24cartId%29%7Bid+...CartTriggerFragment+__typename%7D%7Dfragment+CartTriggerFragment+on+Cart%7Bid+total_quantity+...FreeShippingFragment+__typename%7Dfragment+FreeShippingFragment+on+Cart%7Bfree_shipping%7Bhas_free_shipping+remaining_amount%7Bvalue+currency+__typename%7Dprogress_percent+__typename%7D__typename%7D&operationName=getItemCount&variables=%7B%22cartId%22%3A%22CxtNfb6rdApnybXmqnvcNeNSvkCCodXg%22%7D
IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with no line terminators
Hash ba66d03ae06c81b75e52ff2459691e6c
b40a4eaeb50fe250effc2e65ec06906bcfcd16f7
1333372b689d304960e9d980737899b5fecb1cf9fc917d9a0f8fdfc389d8261d
GET /graphql?query=query+getItemCount%28%24cartId%3AString%21%29%7Bcart%28cart_id%3A%24cartId%29%7Bid+...CartTriggerFragment+__typename%7D%7Dfragment+CartTriggerFragment+on+Cart%7Bid+total_quantity+...FreeShippingFragment+__typename%7Dfragment+FreeShippingFragment+on+Cart%7Bfree_shipping%7Bhas_free_shipping+remaining_amount%7Bvalue+currency+__typename%7Dprogress_percent+__typename%7D__typename%7D&operationName=getItemCount&variables=%7B%22cartId%22%3A%22CxtNfb6rdApnybXmqnvcNeNSvkCCodXg%22%7D HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
content-type: application/json
authorization:
store: pwa
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:52 GMT
content-type: application/json
content-length: 199
vary: Accept-Encoding, Origin
set-cookie: PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; expires=Thu, 01-Dec-2022 15:33:52 GMT; Max-Age=7200; path=/; domain=www.norli.no; secure; HttpOnly; SameSite=Lax
content-encoding: gzip
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
www.norli.no/graphql?query=query+checkUserIsAuthed%28%24cartId%3AString%21%29%7Bcart%28cart_id%3A%24cartId%29%7Bid+prices%7Bgrand_total%7Bcurrency+value+__typename%7D__typename%7Ditems%7Bid+product%7Bid+__typename%7Dquantity+__typename%7D__typename%7D%7D&operationName=checkUserIsAuthed&variables=%7B%22cartId%22%3A%22CxtNfb6rdApnybXmqnvcNeNSvkCCodXg%22%7D
200 OK 160 B URL HTTP/2 www.norli.no/graphql?query=query+checkUserIsAuthed%28%24cartId%3AString%21%29%7Bcart%28cart_id%3A%24cartId%29%7Bid+prices%7Bgrand_total%7Bcurrency+value+__typename%7D__typename%7Ditems%7Bid+product%7Bid+__typename%7Dquantity+__typename%7D__typename%7D%7D&operationName=checkUserIsAuthed&variables=%7B%22cartId%22%3A%22CxtNfb6rdApnybXmqnvcNeNSvkCCodXg%22%7D
IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with no line terminators
Hash 09adfff4f844e19745df69ccb451b772
c24f021ddf2af09787866b73febd0e24be1e9ee1
f13558ea1bd9ce20abd32f51dd12ac700787e2d95e17c149ea22b619bd726d65
GET /graphql?query=query+checkUserIsAuthed%28%24cartId%3AString%21%29%7Bcart%28cart_id%3A%24cartId%29%7Bid+prices%7Bgrand_total%7Bcurrency+value+__typename%7D__typename%7Ditems%7Bid+product%7Bid+__typename%7Dquantity+__typename%7D__typename%7D%7D&operationName=checkUserIsAuthed&variables=%7B%22cartId%22%3A%22CxtNfb6rdApnybXmqnvcNeNSvkCCodXg%22%7D HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
content-type: application/json
authorization:
store: pwa
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:52 GMT
content-type: application/json
content-length: 160
vary: Accept-Encoding, Origin
set-cookie: PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; expires=Thu, 01-Dec-2022 15:33:52 GMT; Max-Age=7200; path=/; domain=www.norli.no; secure; HttpOnly; SameSite=Lax
content-encoding: gzip
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
www.norli.no/graphql?query=query+GetCartDetails%28%24cartId%3AString%21%24includeGiftWrapping%3ABoolean%3Dfalse%29%7Bcart%28cart_id%3A%24cartId%29%7Bid+...AvailableGiftWrappingsFragment+...CartPageFragment+__typename%7D%7Dfragment+AvailableGiftWrappingsFragment+on+Cart%7Bid%40include%28if%3A%24includeGiftWrapping%29__typename%7Dfragment+CartPageFragment+on+Cart%7Bid+total_quantity+...AppliedCouponsFragment+...GiftCardFragment+...ProductListingFragment+...PriceSummaryFragment+__typename%7Dfragment+AppliedCouponsFragment+on+Cart%7Bid+applied_coupons%7Bcode+__typename%7D__typename%7Dfragment+GiftCardFragment+on+Cart%7B__typename+id%7Dfragment+ProductListingFragment+on+Cart%7Bid+items%7B__typename+id+uid+product%7Bid+name+sku+small_image%7Burl+__typename%7Dcrosssell_products%7Bname+id+media_gallery_entries%7Bid+label+position+disabled+file+__typename%7Dprice_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Dsmall_image%7Burl+__typename%7Dsku+stock_status+url_key+__typename%7Dstock_status+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Durl_key+url_suffix+thumbnail%7Burl+__typename%7Dsmall_image%7Burl+__typename%7Dstock_status+...on+ConfigurableProduct%7Bvariants%7Battributes%7Buid+__typename%7Dproduct%7Bid+small_image%7Burl+__typename%7D__typename%7D__typename%7D__typename%7Dconvert_product_list_attributes%7Bcode+label+value+__typename%7Dbrand_info%7Btitle+url_key+__typename%7Dcolor+__typename%7Dprices%7Bprice%7Bcurrency+value+__typename%7Dprice_including_tax%7Bcurrency+value+__typename%7Drow_total_including_tax%7Bcurrency+value+__typename%7D__typename%7Dquantity+...on+ConfigurableCartItem%7Bconfigurable_options%7Bid+configurable_product_option_value_uid+option_label+value_id+value_label+__typename%7D__typename%7D...on+BundleCartItem%7Bbundle_options%7Bid+label+values%7Bid+label+quantity+__typename%7D__typename%7D__typename%7Derrors%7D...CartProductListingCustomFragment+__typename%7Dfragment+CartProductListingCustomFragment+on+Cart%7Bis_register+member_saving+items%7Bid+product%7Bmember_price+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Dconvert_labels%7Bcss_class+label_image+title+color+__typename%7Dstatus_msg_netshop+availability_date+url_key_master_category+format+format_value+__typename%7Dis_signed+signing_text+__typename%7D__typename%7Dfragment+PriceSummaryFragment+on+Cart%7Bid+items%7Bid+quantity+__typename%7D...ShippingSummaryFragment+prices%7B...TaxSummaryFragment+...DiscountSummaryFragment+...GrandTotalFragment+subtotal_excluding_tax%7Bcurrency+value+__typename%7D__typename%7D...GiftCardSummaryFragment+__typename%7Dfragment+DiscountSummaryFragment+on+CartPrices%7Bdiscounts%7Bamount%7Bcurrency+value+__typename%7Dlabel+__typename%7D__typename%7Dfragment+GiftCardSummaryFragment+on+Cart%7Bid+__typename%7Dfragment+GrandTotalFragment+on+CartPrices%7Bgrand_total%7Bcurrency+value+__typename%7D__typename%7Dfragment+ShippingSummaryFragment+on+Cart%7Bid+shipping_addresses%7Bselected_shipping_method%7Bamount%7Bcurrency+value+__typename%7D__typename%7Dstreet+__typename%7D__typename%7Dfragment+TaxSummaryFragment+on+CartPrices%7Bapplied_taxes%7Bamount%7Bcurrency+value+__typename%7D__typename%7D__typename%7D&operationName=GetCartDetails&variables=%7B%22includeGiftWrapping%22%3Afalse%2C%22cartId%22%3A%22CxtNfb6rdApnybXmqnvcNeNSvkCCodXg%22%7D
200 OK 251 B URL HTTP/2 www.norli.no/graphql?query=query+GetCartDetails%28%24cartId%3AString%21%24includeGiftWrapping%3ABoolean%3Dfalse%29%7Bcart%28cart_id%3A%24cartId%29%7Bid+...AvailableGiftWrappingsFragment+...CartPageFragment+__typename%7D%7Dfragment+AvailableGiftWrappingsFragment+on+Cart%7Bid%40include%28if%3A%24includeGiftWrapping%29__typename%7Dfragment+CartPageFragment+on+Cart%7Bid+total_quantity+...AppliedCouponsFragment+...GiftCardFragment+...ProductListingFragment+...PriceSummaryFragment+__typename%7Dfragment+AppliedCouponsFragment+on+Cart%7Bid+applied_coupons%7Bcode+__typename%7D__typename%7Dfragment+GiftCardFragment+on+Cart%7B__typename+id%7Dfragment+ProductListingFragment+on+Cart%7Bid+items%7B__typename+id+uid+product%7Bid+name+sku+small_image%7Burl+__typename%7Dcrosssell_products%7Bname+id+media_gallery_entries%7Bid+label+position+disabled+file+__typename%7Dprice_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Dsmall_image%7Burl+__typename%7Dsku+stock_status+url_key+__typename%7Dstock_status+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Durl_key+url_suffix+thumbnail%7Burl+__typename%7Dsmall_image%7Burl+__typename%7Dstock_status+...on+ConfigurableProduct%7Bvariants%7Battributes%7Buid+__typename%7Dproduct%7Bid+small_image%7Burl+__typename%7D__typename%7D__typename%7D__typename%7Dconvert_product_list_attributes%7Bcode+label+value+__typename%7Dbrand_info%7Btitle+url_key+__typename%7Dcolor+__typename%7Dprices%7Bprice%7Bcurrency+value+__typename%7Dprice_including_tax%7Bcurrency+value+__typename%7Drow_total_including_tax%7Bcurrency+value+__typename%7D__typename%7Dquantity+...on+ConfigurableCartItem%7Bconfigurable_options%7Bid+configurable_product_option_value_uid+option_label+value_id+value_label+__typename%7D__typename%7D...on+BundleCartItem%7Bbundle_options%7Bid+label+values%7Bid+label+quantity+__typename%7D__typename%7D__typename%7Derrors%7D...CartProductListingCustomFragment+__typename%7Dfragment+CartProductListingCustomFragment+on+Cart%7Bis_register+member_saving+items%7Bid+product%7Bmember_price+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Dconvert_labels%7Bcss_class+label_image+title+color+__typename%7Dstatus_msg_netshop+availability_date+url_key_master_category+format+format_value+__typename%7Dis_signed+signing_text+__typename%7D__typename%7Dfragment+PriceSummaryFragment+on+Cart%7Bid+items%7Bid+quantity+__typename%7D...ShippingSummaryFragment+prices%7B...TaxSummaryFragment+...DiscountSummaryFragment+...GrandTotalFragment+subtotal_excluding_tax%7Bcurrency+value+__typename%7D__typename%7D...GiftCardSummaryFragment+__typename%7Dfragment+DiscountSummaryFragment+on+CartPrices%7Bdiscounts%7Bamount%7Bcurrency+value+__typename%7Dlabel+__typename%7D__typename%7Dfragment+GiftCardSummaryFragment+on+Cart%7Bid+__typename%7Dfragment+GrandTotalFragment+on+CartPrices%7Bgrand_total%7Bcurrency+value+__typename%7D__typename%7Dfragment+ShippingSummaryFragment+on+Cart%7Bid+shipping_addresses%7Bselected_shipping_method%7Bamount%7Bcurrency+value+__typename%7D__typename%7Dstreet+__typename%7D__typename%7Dfragment+TaxSummaryFragment+on+CartPrices%7Bapplied_taxes%7Bamount%7Bcurrency+value+__typename%7D__typename%7D__typename%7D&operationName=GetCartDetails&variables=%7B%22includeGiftWrapping%22%3Afalse%2C%22cartId%22%3A%22CxtNfb6rdApnybXmqnvcNeNSvkCCodXg%22%7D
IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with very long lines (406), with no line terminators
Hash 0fb50a86549984d8da915ae9919ca1a8
2c8bca2c741e7ef89d3bae86f53d4df91f3e51ec
f210a71b62e8988eaadf20681f8bd16444b1fc515b9a5b5368ce25fceb133443
GET /graphql?query=query+GetCartDetails%28%24cartId%3AString%21%24includeGiftWrapping%3ABoolean%3Dfalse%29%7Bcart%28cart_id%3A%24cartId%29%7Bid+...AvailableGiftWrappingsFragment+...CartPageFragment+__typename%7D%7Dfragment+AvailableGiftWrappingsFragment+on+Cart%7Bid%40include%28if%3A%24includeGiftWrapping%29__typename%7Dfragment+CartPageFragment+on+Cart%7Bid+total_quantity+...AppliedCouponsFragment+...GiftCardFragment+...ProductListingFragment+...PriceSummaryFragment+__typename%7Dfragment+AppliedCouponsFragment+on+Cart%7Bid+applied_coupons%7Bcode+__typename%7D__typename%7Dfragment+GiftCardFragment+on+Cart%7B__typename+id%7Dfragment+ProductListingFragment+on+Cart%7Bid+items%7B__typename+id+uid+product%7Bid+name+sku+small_image%7Burl+__typename%7Dcrosssell_products%7Bname+id+media_gallery_entries%7Bid+label+position+disabled+file+__typename%7Dprice_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Dsmall_image%7Burl+__typename%7Dsku+stock_status+url_key+__typename%7Dstock_status+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Durl_key+url_suffix+thumbnail%7Burl+__typename%7Dsmall_image%7Burl+__typename%7Dstock_status+...on+ConfigurableProduct%7Bvariants%7Battributes%7Buid+__typename%7Dproduct%7Bid+small_image%7Burl+__typename%7D__typename%7D__typename%7D__typename%7Dconvert_product_list_attributes%7Bcode+label+value+__typename%7Dbrand_info%7Btitle+url_key+__typename%7Dcolor+__typename%7Dprices%7Bprice%7Bcurrency+value+__typename%7Dprice_including_tax%7Bcurrency+value+__typename%7Drow_total_including_tax%7Bcurrency+value+__typename%7D__typename%7Dquantity+...on+ConfigurableCartItem%7Bconfigurable_options%7Bid+configurable_product_option_value_uid+option_label+value_id+value_label+__typename%7D__typename%7D...on+BundleCartItem%7Bbundle_options%7Bid+label+values%7Bid+label+quantity+__typename%7D__typename%7D__typename%7Derrors%7D...CartProductListingCustomFragment+__typename%7Dfragment+CartProductListingCustomFragment+on+Cart%7Bis_register+member_saving+items%7Bid+product%7Bmember_price+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Dconvert_labels%7Bcss_class+label_image+title+color+__typename%7Dstatus_msg_netshop+availability_date+url_key_master_category+format+format_value+__typename%7Dis_signed+signing_text+__typename%7D__typename%7Dfragment+PriceSummaryFragment+on+Cart%7Bid+items%7Bid+quantity+__typename%7D...ShippingSummaryFragment+prices%7B...TaxSummaryFragment+...DiscountSummaryFragment+...GrandTotalFragment+subtotal_excluding_tax%7Bcurrency+value+__typename%7D__typename%7D...GiftCardSummaryFragment+__typename%7Dfragment+DiscountSummaryFragment+on+CartPrices%7Bdiscounts%7Bamount%7Bcurrency+value+__typename%7Dlabel+__typename%7D__typename%7Dfragment+GiftCardSummaryFragment+on+Cart%7Bid+__typename%7Dfragment+GrandTotalFragment+on+CartPrices%7Bgrand_total%7Bcurrency+value+__typename%7D__typename%7Dfragment+ShippingSummaryFragment+on+Cart%7Bid+shipping_addresses%7Bselected_shipping_method%7Bamount%7Bcurrency+value+__typename%7D__typename%7Dstreet+__typename%7D__typename%7Dfragment+TaxSummaryFragment+on+CartPrices%7Bapplied_taxes%7Bamount%7Bcurrency+value+__typename%7D__typename%7D__typename%7D&operationName=GetCartDetails&variables=%7B%22includeGiftWrapping%22%3Afalse%2C%22cartId%22%3A%22CxtNfb6rdApnybXmqnvcNeNSvkCCodXg%22%7D HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
content-type: application/json
authorization:
store: pwa
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:52 GMT
content-type: application/json
content-length: 251
vary: Accept-Encoding, Origin
set-cookie: PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; expires=Thu, 01-Dec-2022 15:33:52 GMT; Max-Age=7200; path=/; domain=www.norli.no; secure; HttpOnly; SameSite=Lax
content-encoding: gzip
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8c16b5b01c5d88cecc4d695a55edd5ae
aa12b1797db6ce281c0382c08f70794a642ddc49
5aa48a0df3bb018f1778ad6ee1e34491e9f980372bde1f51248b0838e6696286
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/workbox-cdn/releases/5.1.3/workbox-sw.js
200 OK 739 B URL HTTP/2 storage.googleapis.com/workbox-cdn/releases/5.1.3/workbox-sw.js
IP
File type ASCII text, with very long lines (1287)
Hash 0cf82bfc15b93ecda1f07081be866311
ac958aa907dc8f03c0ffb8753c3ff385b9a6beb3
529b1b990c9cd1e2afcba3392f63199486471079a89574e5b50ec80da3755f8b
GET /workbox-cdn/releases/5.1.3/workbox-sw.js HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsqpTxO6bjHGkMg1PTKGSEYm2Ow7Rpmg7xL4on1WfgRxnwrLuZ3Cbfh9HK3UPAiN8C_wX7T3UP8f2Rlx7Xs-uXkzFQC1i1I
x-goog-generation: 1587741742854026
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 739
content-encoding: gzip
x-goog-hash: crc32c=5dBCkg==, md5=DPgr/BW5Ps2h8HCBvoZjEQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 739
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Thu, 01 Dec 2022 12:45:26 GMT
expires: Fri, 01 Dec 2023 12:45:26 GMT
cache-control: public, max-age=31536000
age: 2906
last-modified: Fri, 24 Apr 2020 15:22:22 GMT
etag: "0cf82bfc15b93ecda1f07081be866311"
content-type: application/javascript; charset=utf-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8c16b5b01c5d88cecc4d695a55edd5ae
aa12b1797db6ce281c0382c08f70794a642ddc49
5aa48a0df3bb018f1778ad6ee1e34491e9f980372bde1f51248b0838e6696286
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 16c3ad4a2bc7f419fb354b37778f8b2f
d193a1336556dcf6b4975a057e7c849037eef0ff
5993deb5a53b2e844b9027a6b6906c718f6e9f69c27388199c4343a80ef067f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.norli.no/104.e66d822e6089596f5dd9.js
200 OK 2.6 kB URL HTTP/2 www.norli.no/104.e66d822e6089596f5dd9.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash e11884cd14fee990dc8809bd9caaa62f
a97183c7f4161b970f6cf29447cf1a663081eb7a
b0a0bee6762dcb6a83de919bb2c171f9b20aa59d0ac3b265932507747b6b5f78
GET /104.e66d822e6089596f5dd9.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:52 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-1330"
expires: Fri, 01 Dec 2023 13:33:52 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/993096944/?random=1669901630567&cv=11&fst=1669899600000&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Forside%20-%20Norli%20Bokhandel&fmt=3&is_vtc=1&random=3646047955&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/993096944/?random=1669901630567&cv=11&fst=1669899600000&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Forside%20-%20Norli%20Bokhandel&fmt=3&is_vtc=1&random=3646047955&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/993096944/?random=1669901630567&cv=11&fst=1669899600000&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Forside%20-%20Norli%20Bokhandel&fmt=3&is_vtc=1&random=3646047955&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 01 Dec 2022 13:33:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/993096944/?random=1669901630567&cv=11&fst=1669899600000&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Forside%20-%20Norli%20Bokhandel&fmt=3&is_vtc=1&random=3646047955&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/993096944/?random=1669901630567&cv=11&fst=1669899600000&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Forside%20-%20Norli%20Bokhandel&fmt=3&is_vtc=1&random=3646047955&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/993096944/?random=1669901630567&cv=11&fst=1669899600000&bg=ffffff&guid=ON&async=1>m=2wgbs0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&tiba=Forside%20-%20Norli%20Bokhandel&fmt=3&is_vtc=1&random=3646047955&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 01 Dec 2022 13:33:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 533f66ef53706466ce20dc9aebf11812
0c0d713d538eb224deeb9241917a117205f16cb2
8ce7b68022c847b59b9a132ada3a75eea73bb57bae4683901c8df08fa255ba79
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 81abfd63eeb2fadc85b31541378babb1
09d3223c1a2a4e2cbfcba0381ead2cee5ee0a200
c7665c83165956c11bdbe0509ae03bf6af1b34ca68bf352fbfd629dc3a04b815
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.norli.no/static/fonts/gotham-narrow-book.woff2
200 OK 44 kB URL HTTP/2 www.norli.no/static/fonts/gotham-narrow-book.woff2
IP
ASN #14061 DIGITALOCEAN-ASN
File type Web Open Font Format (Version 2), CFF, length 43488, version 0.0\012- data
Hash 7a1dfa16ab90c2b3c00a7d6d155dd763
3c5a1bc9d1102c3f79110d9b5739103b073c0125
09f9d057ec3423728fb38382dcf7458c57643f92f73c55fdb066954feed3743f
GET /static/fonts/gotham-narrow-book.woff2 HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: application/octet-stream
content-length: 43488
last-modified: Wed, 12 Oct 2022 06:55:27 GMT
etag: "634664df-a9e0"
expires: Fri, 01 Dec 2023 13:33:53 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
checkout.norli.no/media/wysiwyg/Rectangle_325.jpg
200 OK 142 kB URL HTTP/2 checkout.norli.no/media/wysiwyg/Rectangle_325.jpg
IP
ASN #14061 DIGITALOCEAN-ASN
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x313, components 3\012- data
Size 142 kB (141610 bytes)
Hash 81867a38d712f12b821c3fb81fab93d7
a601965b0c0203b3ddda47cd2a15778e3ecee336
91f67876a5e3ad2ce8513e773bb8c9e8a9641016eb0cb5ff2759d69ed9da957f
GET /media/wysiwyg/Rectangle_325.jpg HTTP/1.1
Host: checkout.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: image/jpeg
content-length: 141610
last-modified: Wed, 12 Oct 2022 12:32:18 GMT
etag: "6346b3d2-2292a"
expires: Fri, 01 Dec 2023 13:33:53 GMT
cache-control: max-age=31536000, public
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
accept-ranges: bytes
strict-transport-security: max-age=31536000;
X-Firefox-Spdy: h2
www.norli.no/static/fonts/gotham-narrow-bold.woff2
200 OK 44 kB URL HTTP/2 www.norli.no/static/fonts/gotham-narrow-bold.woff2
IP
ASN #14061 DIGITALOCEAN-ASN
File type Web Open Font Format (Version 2), CFF, length 43548, version 0.0\012- data
Hash 8dd55cd39e273d13feb9bf8f25a98ffd
25f8617a49e890647bf13851a28580b43f14408a
0f34f3c922437f1856ed44abbd093cf5323cfba70cde26b0515f5edc6d6a8e25
GET /static/fonts/gotham-narrow-bold.woff2 HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: application/octet-stream
content-length: 43548
last-modified: Wed, 12 Oct 2022 06:55:27 GMT
etag: "634664df-aa1c"
expires: Fri, 01 Dec 2023 13:33:53 GMT
cache-control: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.norli.no/102.03917c7de13d90f527a5.js
200 OK 3.9 kB URL HTTP/2 www.norli.no/102.03917c7de13d90f527a5.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (3138)
Hash 72d3118c8e8ab674b0f4f6d2f91d7c60
a57de2cbd870d09e9d233e682cd9e50bdb1df32a
222090940e14e2dc28d162e4e3658ac88a4c30b87d609e09a1b31f85d1a10f81
GET /102.03917c7de13d90f527a5.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-1517"
expires: Fri, 01 Dec 2023 13:33:53 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/static/svg/icon-vipps-color.svg
200 OK 1.3 kB URL HTTP/2 www.norli.no/static/svg/icon-vipps-color.svg
IP
ASN #14061 DIGITALOCEAN-ASN
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2365)
Hash ac2c61f73d98f88b5aa6a24287abf115
b82ed0852499f8c365e59de7eb63b9c0aaad0bce
0eb2b5cd9fa6da0781919e1d9314d660c164749ebdd61aab208a16ecc97bd941
GET /static/svg/icon-vipps-color.svg HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: image/svg+xml
last-modified: Wed, 12 Oct 2022 06:55:27 GMT
vary: Accept-Encoding
etag: W/"634664df-9a5"
expires: Fri, 01 Dec 2023 13:33:53 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/105.2af1cac97e5150004d42.js
200 OK 1.6 kB URL HTTP/2 www.norli.no/105.2af1cac97e5150004d42.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (880)
Hash eb317c39f3e20bb4f43d4e6f47a1e45d
55bac9c4ea5063a8260df8ac6d6c1e3dd60cf708
68cd85827766246b1c5419ca1a17ec862a0c1883ac64b02d3e6c28728b591198
GET /105.2af1cac97e5150004d42.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-90a"
expires: Fri, 01 Dec 2023 13:33:53 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3519a58310eefa01756f0440e2acd7dd
50153382830684a6abb653dc7b4e41d7c7e386b5
5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
staticw2.yotpo.com/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/widget.js
200 OK 116 kB URL HTTP/2 staticw2.yotpo.com/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/widget.js
IP
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (50735)
Size 116 kB (115742 bytes)
Hash a9bab2bcb496b5ada7e655c14bdf109c
1acbe8e7b4b3c790950b7e0d59160f4efb265ee4
1c17e1f91a5df1efb4fd8638def75c24c864f75c269ed4a98db9a05c933bb7c6
GET /QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/widget.js HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"a9bab2bcb496b5ada7e655c14bdf109c"
x-request-id: 755a6a6247ec0659e15bf117912a9fbd
x-runtime: 0.037208
access-control-allow-headers: *
content-length: 115742
cache-control: public, max-age=7707
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/js?key=AIzaSyBsIgn-YS22LrZdDnRWjQ5HwVDdesSYbGM&libraries=places
200 OK 56 kB URL HTTP/2 maps.googleapis.com/maps/api/js?key=AIzaSyBsIgn-YS22LrZdDnRWjQ5HwVDdesSYbGM&libraries=places
IP
File type ASCII text, with very long lines (2459)
Hash e052f544851dae120cac618ea1d6e896
02b2bcc2047c7b4a137aab71497e6e824e45ee7f
3c136a12b23b6e09d99477670f87aa7ec0fd2f64d248347ec7e77c466f6f3a7d
GET /maps/api/js?key=AIzaSyBsIgn-YS22LrZdDnRWjQ5HwVDdesSYbGM&libraries=places HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Thu, 01 Dec 2022 13:33:54 GMT
expires: Thu, 01 Dec 2022 14:03:54 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 55767
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=15
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.norli.no/107.34ec8d45da80cf52bcd8.js
200 OK 12 kB URL HTTP/2 www.norli.no/107.34ec8d45da80cf52bcd8.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 87481da890f4f667cf6a0f853ba754a9
a6be32890dd5cc208526f31586a5f8fec9900ce5
d3ceb835843d59085cdff847334130afeb48f05dce2457d4288ecec91ffd4bf2
GET /107.34ec8d45da80cf52bcd8.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-b48"
expires: Fri, 01 Dec 2023 13:33:53 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/113.393dacd766feebf11f7d.js
200 OK 51 kB URL HTTP/2 www.norli.no/113.393dacd766feebf11f7d.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash d107d174ea7281c29e9ce951ddf586b4
2264ebe67e8b9415cd7d9b001a49c7a3650f0c77
28a44538f49e172419a92b65600dc13cf3ed5109ca64ba14e83344c8b4412d6a
GET /113.393dacd766feebf11f7d.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-b7"
expires: Fri, 01 Dec 2023 13:33:53 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3519a58310eefa01756f0440e2acd7dd
50153382830684a6abb653dc7b4e41d7c7e386b5
5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.norli.no/graphql?query=query+getAdditionalData%28%24skuList%3A%5BString%21%5D%29%7Bproducts%28filter%3A%7Bsku%3A%7Bin%3A%24skuList%7D%7D%29%7Bitems%7Bcommon_products%7Bid+language_value+format_value+url_key+url_key_master_category+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7D__typename%7Dconvert_labels%7Bcss_class+label_image+title+color+__typename%7Dmember_price+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Dsame_in_series_products%7Bid+__typename%7Dsku+__typename%7D__typename%7D%7D&operationName=getAdditionalData&variables=%7B%22skuList%22%3A%5B%227090033004147%22%2C%225010993437641%22%2C%227090033001276%22%2C%224005556167722%22%2C%227031655200623%22%2C%225712854200639%22%2C%225702017161839%22%2C%229788241934971%22%2C%229788283730173%22%2C%229788284570099%22%2C%228018190029925%22%2C%229788241933653%22%5D%7D
200 OK 648 B URL HTTP/2 www.norli.no/graphql?query=query+getAdditionalData%28%24skuList%3A%5BString%21%5D%29%7Bproducts%28filter%3A%7Bsku%3A%7Bin%3A%24skuList%7D%7D%29%7Bitems%7Bcommon_products%7Bid+language_value+format_value+url_key+url_key_master_category+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7D__typename%7Dconvert_labels%7Bcss_class+label_image+title+color+__typename%7Dmember_price+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Dsame_in_series_products%7Bid+__typename%7Dsku+__typename%7D__typename%7D%7D&operationName=getAdditionalData&variables=%7B%22skuList%22%3A%5B%227090033004147%22%2C%225010993437641%22%2C%227090033001276%22%2C%224005556167722%22%2C%227031655200623%22%2C%225712854200639%22%2C%225702017161839%22%2C%229788241934971%22%2C%229788283730173%22%2C%229788284570099%22%2C%228018190029925%22%2C%229788241933653%22%5D%7D
IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with very long lines (6087), with no line terminators
Hash f1a96f7f59333c61643732de92bb89ea
d53139f8534e44c07571a5d04821f37a2acdd45f
686b7c645aa8ef58506bdb9ccb494844ce619d1757308502998bb08ac6ac199b
GET /graphql?query=query+getAdditionalData%28%24skuList%3A%5BString%21%5D%29%7Bproducts%28filter%3A%7Bsku%3A%7Bin%3A%24skuList%7D%7D%29%7Bitems%7Bcommon_products%7Bid+language_value+format_value+url_key+url_key_master_category+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7D__typename%7Dconvert_labels%7Bcss_class+label_image+title+color+__typename%7Dmember_price+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Dsame_in_series_products%7Bid+__typename%7Dsku+__typename%7D__typename%7D%7D&operationName=getAdditionalData&variables=%7B%22skuList%22%3A%5B%227090033004147%22%2C%225010993437641%22%2C%227090033001276%22%2C%224005556167722%22%2C%227031655200623%22%2C%225712854200639%22%2C%225702017161839%22%2C%229788241934971%22%2C%229788283730173%22%2C%229788284570099%22%2C%228018190029925%22%2C%229788241933653%22%5D%7D HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
content-type: application/json
authorization:
store: pwa
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: application/json
content-length: 648
vary: Accept-Encoding, Origin
content-encoding: gzip
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
staticw2.yotpo.com/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/widget.css?widget_version=2022-10-06_07-58-33
200 OK 45 kB URL HTTP/2 staticw2.yotpo.com/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/widget.css?widget_version=2022-10-06_07-58-33
IP
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (65423)
Hash 905b38c37fd5ca4f78595744f4e09e02
0a7f89b8701769d1bc2d88e18d8d8e7ebcbc856e
e954042f493ddd5f8dce1d6cc175b47783587eba29502ef3855b35464a5273e4
GET /QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/widget.css?widget_version=2022-10-06_07-58-33 HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"905b38c37fd5ca4f78595744f4e09e02"
x-request-id: e297ab1b49ca18395dffae25f7768f66
x-runtime: 0.155196
access-control-allow-headers: *
content-length: 45211
cache-control: public, max-age=1743
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
async-px-eu.dynamicyield.com/batch?cnst=1&_=1669901632931_589291
200 OK 0 B URL HTTP/2 async-px-eu.dynamicyield.com/batch?cnst=1&_=1669901632931_589291
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /batch?cnst=1&_=1669901632931_589291 HTTP/1.1
Host: async-px-eu.dynamicyield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 567
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Cookie: DYID=-5692549033973207743
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Thu, 01 Dec 2022 13:33:54 GMT
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0CST2NAeZZxXgyYB4mcGIQc4mhnlThW0LAXc1AEVcga5iVjiw0-Iwg==
X-Firefox-Spdy: h2
www.norli.no/111.3036fc38e8bfe8834fbd.js
200 OK 9.6 kB URL HTTP/2 www.norli.no/111.3036fc38e8bfe8834fbd.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash a0524f8ffac17dfc181f1eaa678ff58b
3ca70a3a858559ae36e620e450d323bb32d0f5ed
de383d00709c02aaa40271244bf8eca1ed7db6f9fd58654c6c63593fcf74ca34
GET /111.3036fc38e8bfe8834fbd.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-1b6d"
expires: Fri, 01 Dec 2023 13:33:54 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/9/7/9788284570099_1.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
200 OK 4.2 kB URL HTTP/2 www.norli.no/media/catalog/product/9/7/9788284570099_1.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 80x120, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8eb75ff42a3d248f3896024af73163b7
563e6875b959c06afb43b79cceb7e0ddd9ee1643
7461b0071e9d12cc3b6c31180bba07968ab09666261f44f269162d78161e287b
GET /media/catalog/product/9/7/9788284570099_1.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Thu, 06 Oct 2022 23:48:06 GMT
etag: W/"4da27-183afb2fe0f"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/8/0/8018190029925.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
200 OK 4.2 kB URL HTTP/2 www.norli.no/media/catalog/product/8/0/8018190029925.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 80x121, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 76718e75870fe8a1c62702ab7c9df898
75508d2e3d5fca521ee92a63827548a5be8f0b93
12d0dae1005837714bb80c397c8b5fb07fb989852762ea9a11b261e3d3edd13f
GET /media/catalog/product/8/0/8018190029925.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Tue, 20 Sep 2022 10:26:07 GMT
etag: W/"43c01-1835a6f001a"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash b834c4a52bf1ecc33189b8c8e5230c1f
14354319fd3fae3de9632a61ab4813f620630415
a8c529a33975a7848fcbc2379911450604ea31b7a832205b1115f8eb12660783
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"b834c4a52bf1ecc33189b8c8e5230c1f"
x-request-id: 1e72db7eb5c6c729a1cf97d2b8a37114
x-runtime: 0.020835
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6496
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=67
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/4/0/4005556167722_2.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
200 OK 5.9 kB URL HTTP/2 www.norli.no/media/catalog/product/4/0/4005556167722_2.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 130x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 56bcd3cccc72424a457d58623e4776bb
754a1634158af444df16e607c16c22b42ba3fe0b
0f86a65ca35a1350c653bc3b29817cb6ba2e2d6f6aba2bfdbb1253d909b1e3a8
GET /media/catalog/product/4/0/4005556167722_2.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Fri, 22 Oct 2021 11:01:30 GMT
etag: W/"27570-17ca7a9b84d"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash c82f2fd099f73ee421a3ec65b63a41d4
41e66d3c225eb334e625cb00e7284be6de5b29fa
d8b8e1fa7254422b48820dea0250e464c6f668283219644caab49bb35aa2a176
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"c82f2fd099f73ee421a3ec65b63a41d4"
x-request-id: 3764492db1679675ff1c058a4f4c5a70
x-runtime: 0.025908
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6486
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline
200 OK 148 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash be371d23a597de67bd09aa3f8bb8d53f
268f4040776589011ec13ad469ea8e50ab392be9
b9aa8bb0ec3ef2f615dac25d0da5ef2dda38c30fcb58f225680ba5aafe3f9c85
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"be371d23a597de67bd09aa3f8bb8d53f"
x-request-id: 6aa13675de6f3a07499d9b9fcd09d8df
x-runtime: 0.021537
access-control-allow-headers: *
content-length: 148
cache-control: public, max-age=6520
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=3
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline
200 OK 334 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- HTML document, ASCII text, with very long lines (945), with no line terminators
Hash 2b34eedad05c51e1ef84ec7f896bb9cc
1f02e9f6a86cd02da343792127f389f73b0adcf3
097e63926f84be5cb8a8afa7b096ab7c7b6ce121f5e846dd1989d0a5449b383d
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"2b34eedad05c51e1ef84ec7f896bb9cc"
x-request-id: ada0c6db435a08b0d701b2ebbcf329c3
x-runtime: 0.043964
access-control-allow-headers: *
content-length: 334
cache-control: public, max-age=6575
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=3
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash c82f2fd099f73ee421a3ec65b63a41d4
41e66d3c225eb334e625cb00e7284be6de5b29fa
d8b8e1fa7254422b48820dea0250e464c6f668283219644caab49bb35aa2a176
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"c82f2fd099f73ee421a3ec65b63a41d4"
x-request-id: 3764492db1679675ff1c058a4f4c5a70
x-runtime: 0.025908
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6486
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=122
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline
200 OK 148 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash be371d23a597de67bd09aa3f8bb8d53f
268f4040776589011ec13ad469ea8e50ab392be9
b9aa8bb0ec3ef2f615dac25d0da5ef2dda38c30fcb58f225680ba5aafe3f9c85
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"be371d23a597de67bd09aa3f8bb8d53f"
x-request-id: 6aa13675de6f3a07499d9b9fcd09d8df
x-runtime: 0.021537
access-control-allow-headers: *
content-length: 148
cache-control: public, max-age=6520
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=115
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/6/4/6430031712940.jpg?auto=webp&format=pjpg&width=960&height=1200&fit=cover
200 OK 10 kB URL HTTP/2 www.norli.no/media/catalog/product/6/4/6430031712940.jpg?auto=webp&format=pjpg&width=960&height=1200&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 312x344, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 69445133212e9583ea62ec3838b9935d
990782fb0c08addc8fedc225b87e936345a21e4e
fdcdddda7cd8a7c3b7b5660769668ce45ea79e26ffcf125dfd16dd2ee337d158
GET /media/catalog/product/6/4/6430031712940.jpg?auto=webp&format=pjpg&width=960&height=1200&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Wed, 26 Sep 2018 13:45:05 GMT
etag: W/"3bbf-166162044be"
vary: Accept
x-optimized: hastily
x-proxy-cache: MISS
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/7/0/7090033004147_1_1.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
200 OK 2.0 kB URL HTTP/2 www.norli.no/media/catalog/product/7/0/7090033004147_1_1.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 90x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 32cd3cce16ad5391a94ee59c33e77667
2d8f84605a8584e97a4e3d37926a0ea4d18fb632
71692426f227b57ef9c53d117434fab387c7e39814f1d3233ea79ccc059be02f
GET /media/catalog/product/7/0/7090033004147_1_1.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Fri, 08 Apr 2022 09:20:13 GMT
etag: W/"2afe7-18008796021"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/5/0/5010993437641_1_1.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
200 OK 5.7 kB URL HTTP/2 www.norli.no/media/catalog/product/5/0/5010993437641_1_1.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 111x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e1535698cbca2dce3619f52958a32e1e
9b5c5fde65c6b77cb8bcb89bbb7792e7da9fbee8
2eb4e387dd3b7682c051ff1908a1f8b01adce450e875a175b61c7549459c7377
GET /media/catalog/product/5/0/5010993437641_1_1.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Fri, 08 Apr 2022 11:00:12 GMT
etag: W/"76de8-18008d4e866"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/5/7/5712854200639.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
200 OK 1.8 kB URL HTTP/2 www.norli.no/media/catalog/product/5/7/5712854200639.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 104x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b5b6a848fdcac3371c1a2c17c2daed0a
67cdd2fe1a03a79b3c4f1d14433804c338c48499
1b87eae540bec9099a1eeeadbfa307d565c60caeb6355800484133d63a4cf476
GET /media/catalog/product/5/7/5712854200639.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Tue, 21 Sep 2021 15:52:09 GMT
etag: W/"2d635-17c090eaee4"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
www.norli.no/112.089ba50a27dfd016bff8.js
200 OK 535 B URL HTTP/2 www.norli.no/112.089ba50a27dfd016bff8.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (503)
Hash 334df7aad163d08df9a227943f23acae
13611b2fa77d91dabc8941f03babe15faf83a804
99de7c4c9afabc68b525ab1c80cf4561769fc7633d9963fda63f2de28a677d8c
GET /112.089ba50a27dfd016bff8.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901633.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-449"
expires: Fri, 01 Dec 2023 13:33:54 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 4996c594807007006986795587cd5330
6b0fc7bc40e940446ed3c6caf8fd7c20939aba26
17c921aa5b0ec21597f6f7badcd818820e7dc2d48685e7a2889ddfe765699402
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"4996c594807007006986795587cd5330"
x-request-id: e0c7b1ad3bbd0621fdd743f47e6bf07e
x-runtime: 0.019665
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6568
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=19
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 544f9bcdbba9e8b24cb0318d54783f46
feaf0d2bc1a84b96f2e1fc169c548fe46177e64f
92a54351891c6dcde438807948ab044450e9f5d7797eacd03b2ea406ac680f70
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"544f9bcdbba9e8b24cb0318d54783f46"
x-request-id: aac51f343c22b386e21f09d1787c0ed9
x-runtime: 0.038177
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6492
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline
200 OK 148 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 2ab22a51e70f4566abac7aafabb30fb0
9f4e3f9d663f46f26f729f8a296414192a37adc6
be7600bf9eba4d8b6e37f0282c373b3d03c4e9c02c30d67b110a6c0fd5664ce7
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"2ab22a51e70f4566abac7aafabb30fb0"
x-request-id: 44b97520f4ba0df1082fb53796e3049b
x-runtime: 0.020784
access-control-allow-headers: *
content-length: 148
cache-control: public, max-age=6486
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c9035af0f9bb7c1f319285127be0e6a
175b3322e4accffc7ec8b02f4e9df4ec41d7f218
1439b0e2ee7b18fc9b32729ba7adbceaf0a570c4668141fab776d008a255c6d1
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"1c9035af0f9bb7c1f319285127be0e6a"
x-request-id: a7c53aa45e299686c4deb56932744335
x-runtime: 0.044462
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6558
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
st-eu.dynamicyield.com/st?sec=9878366&inHead=true&id=0&jsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&scriptVersion=1.140.0&isSesNew=true&dyid_server=&ctx=%7B%22type%22%3A%22PRODUCT%22%2C%22data%22%3A%5B%226430031712940%22%5D%7D
200 OK 95 kB URL HTTP/2 st-eu.dynamicyield.com/st?sec=9878366&inHead=true&id=0&jsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&scriptVersion=1.140.0&isSesNew=true&dyid_server=&ctx=%7B%22type%22%3A%22PRODUCT%22%2C%22data%22%3A%5B%226430031712940%22%5D%7D
IP
Hash 03058183fd6d8695bd1974794d76722a
60eb7911b866ed37de12dcccead9780107bf5878
462a9e2cda765fed8aa5155c0740ef56e6077e9f750ad20abccbba254e581e48
GET /st?sec=9878366&inHead=true&id=0&jsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef&ref=https%3A%2F%2Fno-go.kelkoogroup.net%2F&scriptVersion=1.140.0&isSesNew=true&dyid_server=&ctx=%7B%22type%22%3A%22PRODUCT%22%2C%22data%22%3A%5B%226430031712940%22%5D%7D HTTP/1.1
Host: st-eu.dynamicyield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Thu, 01 Dec 2022 13:33:53 GMT
cache-control: no-cache
expires: Thu, 01 Dec 2022 13:33:52 GMT
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS"
access-control-allow-origin: *
set-cookie: DYID=-5692549033973207743; Domain=.dynamicyield.com; Path=/; Expires=Fri, 01 Dec 2023 13:33:53 GMT; Secure; SameSite=None
vary: Accept-Encoding
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zedXzlf9PKyLVe9-rALbfum4GWKg9CC3qqpJgMQdZ3UoLsBDeWex6w==
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/5/7/5702017161839_7.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
200 OK 5.1 kB URL HTTP/2 www.norli.no/media/catalog/product/5/7/5702017161839_7.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 122x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f4ddf4a1378367117d73ac6beb7c01c4
786c3f8d1e3a520f5169190b8aa0763b34213406
3d6717c2cbed857f896eeb64bd2b5ce2eabe9cd1ba85009829df2194f6cd45b2
GET /media/catalog/product/5/7/5702017161839_7.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Mon, 08 Aug 2022 11:40:24 GMT
etag: W/"1b6d8-1827d418de8"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash b834c4a52bf1ecc33189b8c8e5230c1f
14354319fd3fae3de9632a61ab4813f620630415
a8c529a33975a7848fcbc2379911450604ea31b7a832205b1115f8eb12660783
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"b834c4a52bf1ecc33189b8c8e5230c1f"
x-request-id: 1e72db7eb5c6c729a1cf97d2b8a37114
x-runtime: 0.020835
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6496
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 8b41addf36515fe3e3d058dc6078c268
a036f494da62bb5ada32b03004ca8d4343bd04cd
142d8b14f26c9864deb5de0da543bb113ed195a2e0b47671a1c333927d302b1a
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"8b41addf36515fe3e3d058dc6078c268"
x-request-id: 0cc49d8693b6a6c04704e5169d0a9c53
x-runtime: 0.021737
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6534
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash c82f2fd099f73ee421a3ec65b63a41d4
41e66d3c225eb334e625cb00e7284be6de5b29fa
d8b8e1fa7254422b48820dea0250e464c6f668283219644caab49bb35aa2a176
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"c82f2fd099f73ee421a3ec65b63a41d4"
x-request-id: 3764492db1679675ff1c058a4f4c5a70
x-runtime: 0.025908
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6486
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=3
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c9035af0f9bb7c1f319285127be0e6a
175b3322e4accffc7ec8b02f4e9df4ec41d7f218
1439b0e2ee7b18fc9b32729ba7adbceaf0a570c4668141fab776d008a255c6d1
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"1c9035af0f9bb7c1f319285127be0e6a"
x-request-id: a7c53aa45e299686c4deb56932744335
x-runtime: 0.044462
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6558
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=173
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash a34e61e75fb037315aee3204d6d8b9a6
5fef7064e0d73fbc5569ebd4089646a937920a66
660a5a64b030c230c9008454ef6385490e254c955ef591d739e679e304389d5f
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"a34e61e75fb037315aee3204d6d8b9a6"
x-request-id: 2083ca0b884fc4d29f842283e77a8fa9
x-runtime: 0.020102
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6520
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=167
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
www.norli.no/110.99b47e6cf82b048ed2fe.js
200 OK 5.5 kB URL HTTP/2 www.norli.no/110.99b47e6cf82b048ed2fe.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 604ae6c15df6adcfcbd13b2390fe64f6
5660d78fbf5b08b9c7b4b6888bc828989a6bda8d
3b727ece206b8cf936ec12a0a27234ea1dd5d3ae36df2b8bf9fa5af47bde0747
GET /110.99b47e6cf82b048ed2fe.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-b12"
expires: Fri, 01 Dec 2023 13:33:54 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/7/0/7031655200623_1.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
200 OK 2.6 kB URL HTTP/2 www.norli.no/media/catalog/product/7/0/7031655200623_1.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 81x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d39e492181e1aed88d75880e132d6888
619bcbb6e50c79d39e4a7053a87878ca5ad35327
a6280c463e8810bbb5630f563992fe90b313a5b2506bf350ee131a84508a708f
GET /media/catalog/product/7/0/7031655200623_1.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Tue, 26 Mar 2019 00:16:39 GMT
etag: W/"33ca8-169b75b2b73"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 9bbc83dc35ec9eb56f1afe3d0a145847
b10db392ffa8dc02c805571d9c1a5344a8c6ea80
30a7031559e55af8ff7896d03d5f744d974823318c2523aa03868acc7eabe76e
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"9bbc83dc35ec9eb56f1afe3d0a145847"
x-request-id: 6384a1b1b12ca6dac6ead6514894b86c
x-runtime: 0.018396
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6485
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=128
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/rich_snippet
200 OK 65 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/rich_snippet
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash dd4c6825cb3449f7731d1ba3f32fbfd3
bb7e1c476889a8c1da3d0b83be3dafafc42935af
703fdccf00fdd7165b1757bb7456e810673edfc8a0081d643fb8f9b5397ed6d5
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/rich_snippet HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 306
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"dd4c6825cb3449f7731d1ba3f32fbfd3"
x-request-id: 88ebc0eb7ad7bfbd119b6c6c898600e2
x-runtime: 0.056849
access-control-allow-headers: *
content-length: 65
cache-control: public, max-age=10800
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=REVALIDATE, edge; dur=143, origin; dur=156
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash e737f83269c0db34cf49fe2ad7411abc
4ce14a276eb97a16258103a1761230eb1a9b7a81
1cb991f344bb9722a60b8f9b4bce157903d2f68a6fdcd4cb442d5bb82807edd6
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"e737f83269c0db34cf49fe2ad7411abc"
x-request-id: c3672d2238e189998275481727e78c62
x-runtime: 0.019412
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=10800
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=MISS, edge; dur=138, origin; dur=121
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash bada8a1438d859131fc28baa2d859057
b337dfd255c6e52b5f8fb38d7ec34370ff13fd2b
d9bdd195d1f8953cceb20356b9f220cfee55a1cf295f2d6c3f7afa24239ead0b
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"bada8a1438d859131fc28baa2d859057"
x-request-id: 084c315cdc4ae19603df3a256775d373
x-runtime: 0.076477
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=10767
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=MISS, edge; dur=61, origin; dur=178
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV
200 OK 160 B URL HTTP/2 staticw2.yotpo.com/batch/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with very long lines (311), with no line terminators
Hash 7c7b33279f79731bd5755ff4892a9db8
25d750983426d0fd050120deb96dcef700c60e8f
b0a74e8a7c1b98e21e1a0ee0083e8e280698fc9289ee738bc76a2a151ccd9baf
POST /batch/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 555
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"7c7b33279f79731bd5755ff4892a9db8"
x-request-id: 6acee5e6540380b445afb2cabb53f945
x-runtime: 0.036637
access-control-allow-headers: *
content-length: 160
cache-control: public, max-age=10781
date: Thu, 01 Dec 2022 13:33:54 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=MISS, edge; dur=6, origin; dur=138
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/rich_snippet
200 OK 65 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/rich_snippet
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash dd4c6825cb3449f7731d1ba3f32fbfd3
bb7e1c476889a8c1da3d0b83be3dafafc42935af
703fdccf00fdd7165b1757bb7456e810673edfc8a0081d643fb8f9b5397ed6d5
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/rich_snippet HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 306
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"dd4c6825cb3449f7731d1ba3f32fbfd3"
x-request-id: 88ebc0eb7ad7bfbd119b6c6c898600e2
x-runtime: 0.056849
access-control-allow-headers: *
content-length: 65
cache-control: public, max-age=10799
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=7
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/main_widget
200 OK 2.9 kB URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/main_widget
IP
ASN #1299 Telia Company AB
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (14943), with no line terminators
Hash 69937d44a0a6cfff388c74a5a6205ba7
a5aaea3911ae2062cd98910fced936c84b34842b
1ee4bb30d6981a84b8ff7e72da23a76b825226a17c663f1bfc98df942d02c43b
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/main_widget HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 278
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"69937d44a0a6cfff388c74a5a6205ba7"
x-request-id: dd3d005f4799e139d832714a1964764f
x-runtime: 0.067041
access-control-allow-headers: *
content-length: 2888
cache-control: public, max-age=3224
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=7
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/bottomline
200 OK 315 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with very long lines (930), with no line terminators
Hash dd4a1adea8b3bd6816af546edde2d847
5e11df067c077d6da1a9c0c5552d3337ff815dd4
823cd7e582c9c4a9bdfbdc884b995619c532d1320c1ae6387db9cd7694b0d301
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"dd4a1adea8b3bd6816af546edde2d847"
x-request-id: f774e28e5e9dab6acda12c8842e3f77c
x-runtime: 0.025268
access-control-allow-headers: *
content-length: 315
cache-control: public, max-age=3249
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 07508730bc3544e12a89313b538faba3
5d5f08f541c4b1a2d4b897d7c406d1e1c7bfb095
2f7134bfb659486e56e9b0eb21af8b2412b54ca2c8fec9a82abafff3471ba274
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=117122
Date: Thu, 01 Dec 2022 13:33:55 GMT
Etag: "6387bd79-1d7"
Expires: Fri, 02 Dec 2022 22:05:57 GMT
Last-Modified: Wed, 30 Nov 2022 20:30:49 GMT
Server: ECS (bsa/EB11)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: o-37Dmh28t38HBlJh5GZENDW9aZ72Ox4CYFIqjiPVBYSOdNrJ7OONg==
Age: 5708
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/bottomline
200 OK 315 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with very long lines (930), with no line terminators
Hash dd4a1adea8b3bd6816af546edde2d847
5e11df067c077d6da1a9c0c5552d3337ff815dd4
823cd7e582c9c4a9bdfbdc884b995619c532d1320c1ae6387db9cd7694b0d301
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"dd4a1adea8b3bd6816af546edde2d847"
x-request-id: f774e28e5e9dab6acda12c8842e3f77c
x-runtime: 0.025268
access-control-allow-headers: *
content-length: 315
cache-control: public, max-age=3249
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash b834c4a52bf1ecc33189b8c8e5230c1f
14354319fd3fae3de9632a61ab4813f620630415
a8c529a33975a7848fcbc2379911450604ea31b7a832205b1115f8eb12660783
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"b834c4a52bf1ecc33189b8c8e5230c1f"
x-request-id: 1e72db7eb5c6c729a1cf97d2b8a37114
x-runtime: 0.020835
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6495
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 07508730bc3544e12a89313b538faba3
5d5f08f541c4b1a2d4b897d7c406d1e1c7bfb095
2f7134bfb659486e56e9b0eb21af8b2412b54ca2c8fec9a82abafff3471ba274
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=117280
Date: Thu, 01 Dec 2022 13:33:55 GMT
Etag: "6387bd79-1d7"
Expires: Fri, 02 Dec 2022 22:08:35 GMT
Last-Modified: Wed, 30 Nov 2022 20:30:49 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: OdXHb2Lnehb24SZT2lBKZ6ya-7oSLW3I8S6xA9XoCFgVn11SyAEBdQ==
Age: 5866
www.norli.no/media/catalog/product/5/7/5712854200639.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
200 OK 20 kB URL HTTP/2 www.norli.no/media/catalog/product/5/7/5712854200639.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 627x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 09f6d683f431871d39f927f21f5c2e3c
9816f9bc7464dcce7d93c0ae4ff873e98abb3398
f43d7fed6d51faec07ee271da6f69e08be13ff1cbd498d6fa96cd079b34f5396
GET /media/catalog/product/5/7/5712854200639.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901633.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Tue, 21 Sep 2021 15:52:09 GMT
etag: W/"2d635-17c090eaee4"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 07508730bc3544e12a89313b538faba3
5d5f08f541c4b1a2d4b897d7c406d1e1c7bfb095
2f7134bfb659486e56e9b0eb21af8b2412b54ca2c8fec9a82abafff3471ba274
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=117935
Date: Thu, 01 Dec 2022 13:33:55 GMT
Etag: "6387bd79-1d7"
Expires: Fri, 02 Dec 2022 22:19:30 GMT
Last-Modified: Wed, 30 Nov 2022 20:30:49 GMT
Server: ECS (dcb/7EA7)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SjZ3fBO0rwCI-342EL3H8GFDGYqjppzgjiP_j4BYtcrDZjMThAQG-A==
Age: 6521
staticw2.yotpo.com/sessions/sign_in_url
200 OK 189 B URL HTTP/2 staticw2.yotpo.com/sessions/sign_in_url
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 83f6ba84854b59b850aae6b45c75771f
741526238a586e8688d488d0c514cec507304bbd
c9624c73d400b33134a0829d4f1a608ca8aacb94864293efa174d18b637a7043
GET /sessions/sign_in_url HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"83f6ba84854b59b850aae6b45c75771f"
x-request-id: edabdc629b5c1517e76beae5133aad4c
x-runtime: 0.001640
access-control-allow-headers: *
content-length: 189
cache-control: private, must-revalidate, max-age=0
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=REVALIDATE, edge; dur=29, origin; dur=102
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
p.yotpo.com/i?e=pv&page=Spill%20Ordet%20Fanger%20NO%20-%20Norli%20Bokhandel&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901632976&tid=780892&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
200 OK 35 B URL HTTP/2 p.yotpo.com/i?e=pv&page=Spill%20Ordet%20Fanger%20NO%20-%20Norli%20Bokhandel&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901632976&tid=780892&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /i?e=pv&page=Spill%20Ordet%20Fanger%20NO%20-%20Norli%20Bokhandel&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901632976&tid=780892&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5 HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 13:33:55 GMT
content-type: image/gif
content-length: 35
server: nginx
set-cookie: pixel=10f26df6-09fb-4cec-46a8-1b955b062987; Path=/; Domain=yotpo.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
expires: Fri, 02 Dec 2022 13:33:55 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
p.yotpo.com/i?e=se&se_ca=reviews&se_ac=loaded&se_la=review&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5MzcsInJldmlld19pZCI6W10sImNvdW50X3Jldmlld3MiOjB9&dtm=1669901633459&tid=053809&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
200 OK 35 B URL HTTP/2 p.yotpo.com/i?e=se&se_ca=reviews&se_ac=loaded&se_la=review&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5MzcsInJldmlld19pZCI6W10sImNvdW50X3Jldmlld3MiOjB9&dtm=1669901633459&tid=053809&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /i?e=se&se_ca=reviews&se_ac=loaded&se_la=review&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5MzcsInJldmlld19pZCI6W10sImNvdW50X3Jldmlld3MiOjB9&dtm=1669901633459&tid=053809&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5 HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 13:33:55 GMT
content-type: image/gif
content-length: 35
server: nginx
set-cookie: pixel=9b013ead-16b5-46c6-4a28-e7b7d8b6b9ae; Path=/; Domain=yotpo.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
expires: Fri, 02 Dec 2022 13:33:55 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
p.yotpo.com/i?e=se&se_ca=pictures_in_reviews&se_ac=loaded&se_la=media&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5MzcsImltYWdlc19pZCI6W10sImNvdW50X3BpY3R1cmVzIjowLCJ2aWRlb3NfaWQiOltdLCJjb3VudF92aWRlb3MiOjB9&dtm=1669901633443&tid=116693&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
200 OK 35 B URL HTTP/2 p.yotpo.com/i?e=se&se_ca=pictures_in_reviews&se_ac=loaded&se_la=media&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5MzcsImltYWdlc19pZCI6W10sImNvdW50X3BpY3R1cmVzIjowLCJ2aWRlb3NfaWQiOltdLCJjb3VudF92aWRlb3MiOjB9&dtm=1669901633443&tid=116693&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /i?e=se&se_ca=pictures_in_reviews&se_ac=loaded&se_la=media&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5MzcsImltYWdlc19pZCI6W10sImNvdW50X3BpY3R1cmVzIjowLCJ2aWRlb3NfaWQiOltdLCJjb3VudF92aWRlb3MiOjB9&dtm=1669901633443&tid=116693&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5 HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 13:33:55 GMT
content-type: image/gif
content-length: 35
server: nginx
set-cookie: pixel=6c1bf55f-45ab-4e87-424f-f52f8ace8fdc; Path=/; Domain=yotpo.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
expires: Fri, 02 Dec 2022 13:33:55 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
p.yotpo.com/i?e=se&se_ca=reviews&se_ac=loaded&se_la=no_reviews&se_pr=2022-10-06_07-58-33&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5MzcsImRhdGFfc291cmNlIjoiZGVmYXVsdCJ9&dtm=1669901633463&tid=951614&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
200 OK 35 B URL HTTP/2 p.yotpo.com/i?e=se&se_ca=reviews&se_ac=loaded&se_la=no_reviews&se_pr=2022-10-06_07-58-33&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5MzcsImRhdGFfc291cmNlIjoiZGVmYXVsdCJ9&dtm=1669901633463&tid=951614&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /i?e=se&se_ca=reviews&se_ac=loaded&se_la=no_reviews&se_pr=2022-10-06_07-58-33&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5MzcsImRhdGFfc291cmNlIjoiZGVmYXVsdCJ9&dtm=1669901633463&tid=951614&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5 HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 13:33:55 GMT
content-type: image/gif
content-length: 35
server: nginx
set-cookie: pixel=d8c04814-2dc4-4314-4b1c-840bb878fe08; Path=/; Domain=yotpo.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
expires: Fri, 02 Dec 2022 13:33:55 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash e737f83269c0db34cf49fe2ad7411abc
4ce14a276eb97a16258103a1761230eb1a9b7a81
1cb991f344bb9722a60b8f9b4bce157903d2f68a6fdcd4cb442d5bb82807edd6
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"e737f83269c0db34cf49fe2ad7411abc"
x-request-id: c3672d2238e189998275481727e78c62
x-runtime: 0.019412
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=10799
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=6
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash c82f2fd099f73ee421a3ec65b63a41d4
41e66d3c225eb334e625cb00e7284be6de5b29fa
d8b8e1fa7254422b48820dea0250e464c6f668283219644caab49bb35aa2a176
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"c82f2fd099f73ee421a3ec65b63a41d4"
x-request-id: 3764492db1679675ff1c058a4f4c5a70
x-runtime: 0.025908
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6485
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline
200 OK 148 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash be371d23a597de67bd09aa3f8bb8d53f
268f4040776589011ec13ad469ea8e50ab392be9
b9aa8bb0ec3ef2f615dac25d0da5ef2dda38c30fcb58f225680ba5aafe3f9c85
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"be371d23a597de67bd09aa3f8bb8d53f"
x-request-id: 6aa13675de6f3a07499d9b9fcd09d8df
x-runtime: 0.021537
access-control-allow-headers: *
content-length: 148
cache-control: public, max-age=6519
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash bada8a1438d859131fc28baa2d859057
b337dfd255c6e52b5f8fb38d7ec34370ff13fd2b
d9bdd195d1f8953cceb20356b9f220cfee55a1cf295f2d6c3f7afa24239ead0b
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"bada8a1438d859131fc28baa2d859057"
x-request-id: 084c315cdc4ae19603df3a256775d373
x-runtime: 0.076477
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=10766
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline
200 OK 334 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- HTML document, ASCII text, with very long lines (945), with no line terminators
Hash 2b34eedad05c51e1ef84ec7f896bb9cc
1f02e9f6a86cd02da343792127f389f73b0adcf3
097e63926f84be5cb8a8afa7b096ab7c7b6ce121f5e846dd1989d0a5449b383d
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"2b34eedad05c51e1ef84ec7f896bb9cc"
x-request-id: ada0c6db435a08b0d701b2ebbcf329c3
x-runtime: 0.043964
access-control-allow-headers: *
content-length: 334
cache-control: public, max-age=6574
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 4996c594807007006986795587cd5330
6b0fc7bc40e940446ed3c6caf8fd7c20939aba26
17c921aa5b0ec21597f6f7badcd818820e7dc2d48685e7a2889ddfe765699402
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"4996c594807007006986795587cd5330"
x-request-id: e0c7b1ad3bbd0621fdd743f47e6bf07e
x-runtime: 0.019665
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6567
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline
200 OK 762 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline
IP
ASN #1299 Telia Company AB
Hash 21a807bc17c8bd3d4f49399a55189f5a
ffde2f6bde72383230eea15f8634f9c9b61b03b4
658e0619ba0369419c3cb201acf8d87d1a1ae24cfb0055939b7905dac60aedec
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"544f9bcdbba9e8b24cb0318d54783f46"
x-request-id: aac51f343c22b386e21f09d1787c0ed9
x-runtime: 0.038177
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6491
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline
200 OK 148 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 2ab22a51e70f4566abac7aafabb30fb0
9f4e3f9d663f46f26f729f8a296414192a37adc6
be7600bf9eba4d8b6e37f0282c373b3d03c4e9c02c30d67b110a6c0fd5664ce7
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"2ab22a51e70f4566abac7aafabb30fb0"
x-request-id: 44b97520f4ba0df1082fb53796e3049b
x-runtime: 0.020784
access-control-allow-headers: *
content-length: 148
cache-control: public, max-age=6485
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c9035af0f9bb7c1f319285127be0e6a
175b3322e4accffc7ec8b02f4e9df4ec41d7f218
1439b0e2ee7b18fc9b32729ba7adbceaf0a570c4668141fab776d008a255c6d1
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"1c9035af0f9bb7c1f319285127be0e6a"
x-request-id: a7c53aa45e299686c4deb56932744335
x-runtime: 0.044462
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6557
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash a34e61e75fb037315aee3204d6d8b9a6
5fef7064e0d73fbc5569ebd4089646a937920a66
660a5a64b030c230c9008454ef6385490e254c955ef591d739e679e304389d5f
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"a34e61e75fb037315aee3204d6d8b9a6"
x-request-id: 2083ca0b884fc4d29f842283e77a8fa9
x-runtime: 0.020102
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6519
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/427413/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/427413/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 554fcf77f4a7003325ec00c393c380af
c8243b57e9e623ed9893398dcc1b442010ac8199
4db9a1327e90fdd3157252859847a63a5216ce3f0086f1c64e64f90d8fde4ee7
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/427413/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"554fcf77f4a7003325ec00c393c380af"
x-request-id: b489f0075d44d1cbb4fae353af30c1c1
x-runtime: 0.021756
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6550
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash b834c4a52bf1ecc33189b8c8e5230c1f
14354319fd3fae3de9632a61ab4813f620630415
a8c529a33975a7848fcbc2379911450604ea31b7a832205b1115f8eb12660783
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"b834c4a52bf1ecc33189b8c8e5230c1f"
x-request-id: 1e72db7eb5c6c729a1cf97d2b8a37114
x-runtime: 0.020835
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6495
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash e737f83269c0db34cf49fe2ad7411abc
4ce14a276eb97a16258103a1761230eb1a9b7a81
1cb991f344bb9722a60b8f9b4bce157903d2f68a6fdcd4cb442d5bb82807edd6
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"e737f83269c0db34cf49fe2ad7411abc"
x-request-id: c3672d2238e189998275481727e78c62
x-runtime: 0.019412
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=10799
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash c82f2fd099f73ee421a3ec65b63a41d4
41e66d3c225eb334e625cb00e7284be6de5b29fa
d8b8e1fa7254422b48820dea0250e464c6f668283219644caab49bb35aa2a176
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"c82f2fd099f73ee421a3ec65b63a41d4"
x-request-id: 3764492db1679675ff1c058a4f4c5a70
x-runtime: 0.025908
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6485
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:53:39 GMT
expires: Tue, 28 Nov 2023 18:53:39 GMT
cache-control: public, max-age=31536000
age: 240016
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline
200 OK 148 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash be371d23a597de67bd09aa3f8bb8d53f
268f4040776589011ec13ad469ea8e50ab392be9
b9aa8bb0ec3ef2f615dac25d0da5ef2dda38c30fcb58f225680ba5aafe3f9c85
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"be371d23a597de67bd09aa3f8bb8d53f"
x-request-id: 6aa13675de6f3a07499d9b9fcd09d8df
x-runtime: 0.021537
access-control-allow-headers: *
content-length: 148
cache-control: public, max-age=6519
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=19
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash bada8a1438d859131fc28baa2d859057
b337dfd255c6e52b5f8fb38d7ec34370ff13fd2b
d9bdd195d1f8953cceb20356b9f220cfee55a1cf295f2d6c3f7afa24239ead0b
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"bada8a1438d859131fc28baa2d859057"
x-request-id: 084c315cdc4ae19603df3a256775d373
x-runtime: 0.076477
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=10766
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline
200 OK 334 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- HTML document, ASCII text, with very long lines (945), with no line terminators
Hash 2b34eedad05c51e1ef84ec7f896bb9cc
1f02e9f6a86cd02da343792127f389f73b0adcf3
097e63926f84be5cb8a8afa7b096ab7c7b6ce121f5e846dd1989d0a5449b383d
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"2b34eedad05c51e1ef84ec7f896bb9cc"
x-request-id: ada0c6db435a08b0d701b2ebbcf329c3
x-runtime: 0.043964
access-control-allow-headers: *
content-length: 334
cache-control: public, max-age=6574
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 4996c594807007006986795587cd5330
6b0fc7bc40e940446ed3c6caf8fd7c20939aba26
17c921aa5b0ec21597f6f7badcd818820e7dc2d48685e7a2889ddfe765699402
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"4996c594807007006986795587cd5330"
x-request-id: e0c7b1ad3bbd0621fdd743f47e6bf07e
x-runtime: 0.019665
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6567
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 544f9bcdbba9e8b24cb0318d54783f46
feaf0d2bc1a84b96f2e1fc169c548fe46177e64f
92a54351891c6dcde438807948ab044450e9f5d7797eacd03b2ea406ac680f70
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"544f9bcdbba9e8b24cb0318d54783f46"
x-request-id: aac51f343c22b386e21f09d1787c0ed9
x-runtime: 0.038177
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6491
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline
200 OK 148 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 2ab22a51e70f4566abac7aafabb30fb0
9f4e3f9d663f46f26f729f8a296414192a37adc6
be7600bf9eba4d8b6e37f0282c373b3d03c4e9c02c30d67b110a6c0fd5664ce7
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"2ab22a51e70f4566abac7aafabb30fb0"
x-request-id: 44b97520f4ba0df1082fb53796e3049b
x-runtime: 0.020784
access-control-allow-headers: *
content-length: 148
cache-control: public, max-age=6485
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c9035af0f9bb7c1f319285127be0e6a
175b3322e4accffc7ec8b02f4e9df4ec41d7f218
1439b0e2ee7b18fc9b32729ba7adbceaf0a570c4668141fab776d008a255c6d1
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"1c9035af0f9bb7c1f319285127be0e6a"
x-request-id: a7c53aa45e299686c4deb56932744335
x-runtime: 0.044462
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6557
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=3
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash a34e61e75fb037315aee3204d6d8b9a6
5fef7064e0d73fbc5569ebd4089646a937920a66
660a5a64b030c230c9008454ef6385490e254c955ef591d739e679e304389d5f
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"a34e61e75fb037315aee3204d6d8b9a6"
x-request-id: 2083ca0b884fc4d29f842283e77a8fa9
x-runtime: 0.020102
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6519
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/427413/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/427413/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 554fcf77f4a7003325ec00c393c380af
c8243b57e9e623ed9893398dcc1b442010ac8199
4db9a1327e90fdd3157252859847a63a5216ce3f0086f1c64e64f90d8fde4ee7
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/427413/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"554fcf77f4a7003325ec00c393c380af"
x-request-id: b489f0075d44d1cbb4fae353af30c1c1
x-runtime: 0.021756
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6550
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash b834c4a52bf1ecc33189b8c8e5230c1f
14354319fd3fae3de9632a61ab4813f620630415
a8c529a33975a7848fcbc2379911450604ea31b7a832205b1115f8eb12660783
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"b834c4a52bf1ecc33189b8c8e5230c1f"
x-request-id: 1e72db7eb5c6c729a1cf97d2b8a37114
x-runtime: 0.020835
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6495
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash e737f83269c0db34cf49fe2ad7411abc
4ce14a276eb97a16258103a1761230eb1a9b7a81
1cb991f344bb9722a60b8f9b4bce157903d2f68a6fdcd4cb442d5bb82807edd6
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"e737f83269c0db34cf49fe2ad7411abc"
x-request-id: c3672d2238e189998275481727e78c62
x-runtime: 0.019412
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=10799
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
www.norli.no/101.6ec36b9c1161b9734ff8.js
200 OK 38 kB URL HTTP/2 www.norli.no/101.6ec36b9c1161b9734ff8.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash dba5f48794aeed6e0336a4514cedd6f3
bc54eef2b376e52d31a9caadc84c8eb3d91a75e2
c03a2eb52246385910cd885dd6cb32e0bf27f0e8d7a6926da113d007f5670b9d
GET /101.6ec36b9c1161b9734ff8.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-10d5"
expires: Fri, 01 Dec 2023 13:33:53 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV
200 OK 160 B URL HTTP/2 staticw2.yotpo.com/batch/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with very long lines (311), with no line terminators
Hash 7c7b33279f79731bd5755ff4892a9db8
25d750983426d0fd050120deb96dcef700c60e8f
b0a74e8a7c1b98e21e1a0ee0083e8e280698fc9289ee738bc76a2a151ccd9baf
POST /batch/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 555
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"7c7b33279f79731bd5755ff4892a9db8"
x-request-id: 6acee5e6540380b445afb2cabb53f945
x-runtime: 0.036637
access-control-allow-headers: *
content-length: 160
cache-control: public, max-age=10780
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 980f31229421fd11df958496bea34502
648e03f048e6741beb1d4e10099b1429b79e4f00
887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 13:33:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
staticw2.yotpo.com/assets/yotpo-widget-font.woff?version=2022-10-06_07-58-33
200 OK 12 kB URL HTTP/2 staticw2.yotpo.com/assets/yotpo-widget-font.woff?version=2022-10-06_07-58-33
IP
ASN #1299 Telia Company AB
File type Web Open Font Format, TrueType, length 12288, version 1.0\012- data
Hash 652f1f8f7ffd92a8fc5b8b1ea66dcca3
e79b5a779aa32ecb953d7c182744653b577b6000
ded3cc824f7bd6d490d247ad247bc13cd3205f3dca15e6afa78610dc8a4d1143
GET /assets/yotpo-widget-font.woff?version=2022-10-06_07-58-33 HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://staticw2.yotpo.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 12288
last-modified: Fri, 18 Nov 2022 10:18:17 GMT
etag: "63775be9-3000"
accept-ranges: bytes
cache-control: max-age=604800
expires: Thu, 08 Dec 2022 13:33:55 GMT
date: Thu, 01 Dec 2022 13:33:55 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/rich_snippet
200 OK 65 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/rich_snippet
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash dd4c6825cb3449f7731d1ba3f32fbfd3
bb7e1c476889a8c1da3d0b83be3dafafc42935af
703fdccf00fdd7165b1757bb7456e810673edfc8a0081d643fb8f9b5397ed6d5
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/rich_snippet HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 306
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"dd4c6825cb3449f7731d1ba3f32fbfd3"
x-request-id: 88ebc0eb7ad7bfbd119b6c6c898600e2
x-runtime: 0.056849
access-control-allow-headers: *
content-length: 65
cache-control: public, max-age=10799
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/main_widget
200 OK 2.9 kB URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/main_widget
IP
ASN #1299 Telia Company AB
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (14943), with no line terminators
Hash 69937d44a0a6cfff388c74a5a6205ba7
a5aaea3911ae2062cd98910fced936c84b34842b
1ee4bb30d6981a84b8ff7e72da23a76b825226a17c663f1bfc98df942d02c43b
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/main_widget HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 278
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"69937d44a0a6cfff388c74a5a6205ba7"
x-request-id: dd3d005f4799e139d832714a1964764f
x-runtime: 0.067041
access-control-allow-headers: *
content-length: 2888
cache-control: public, max-age=3224
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/bottomline
200 OK 315 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with very long lines (930), with no line terminators
Hash dd4a1adea8b3bd6816af546edde2d847
5e11df067c077d6da1a9c0c5552d3337ff815dd4
823cd7e582c9c4a9bdfbdc884b995619c532d1320c1ae6387db9cd7694b0d301
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"dd4a1adea8b3bd6816af546edde2d847"
x-request-id: f774e28e5e9dab6acda12c8842e3f77c
x-runtime: 0.025268
access-control-allow-headers: *
content-length: 315
cache-control: public, max-age=3249
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/bottomline
200 OK 315 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with very long lines (930), with no line terminators
Hash dd4a1adea8b3bd6816af546edde2d847
5e11df067c077d6da1a9c0c5552d3337ff815dd4
823cd7e582c9c4a9bdfbdc884b995619c532d1320c1ae6387db9cd7694b0d301
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/14893/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"dd4a1adea8b3bd6816af546edde2d847"
x-request-id: f774e28e5e9dab6acda12c8842e3f77c
x-runtime: 0.025268
access-control-allow-headers: *
content-length: 315
cache-control: public, max-age=3249
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=15
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash b834c4a52bf1ecc33189b8c8e5230c1f
14354319fd3fae3de9632a61ab4813f620630415
a8c529a33975a7848fcbc2379911450604ea31b7a832205b1115f8eb12660783
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"b834c4a52bf1ecc33189b8c8e5230c1f"
x-request-id: 1e72db7eb5c6c729a1cf97d2b8a37114
x-runtime: 0.020835
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6495
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash e737f83269c0db34cf49fe2ad7411abc
4ce14a276eb97a16258103a1761230eb1a9b7a81
1cb991f344bb9722a60b8f9b4bce157903d2f68a6fdcd4cb442d5bb82807edd6
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"e737f83269c0db34cf49fe2ad7411abc"
x-request-id: c3672d2238e189998275481727e78c62
x-runtime: 0.019412
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=10799
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash c82f2fd099f73ee421a3ec65b63a41d4
41e66d3c225eb334e625cb00e7284be6de5b29fa
d8b8e1fa7254422b48820dea0250e464c6f668283219644caab49bb35aa2a176
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"c82f2fd099f73ee421a3ec65b63a41d4"
x-request-id: 3764492db1679675ff1c058a4f4c5a70
x-runtime: 0.025908
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6485
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline
200 OK 148 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash be371d23a597de67bd09aa3f8bb8d53f
268f4040776589011ec13ad469ea8e50ab392be9
b9aa8bb0ec3ef2f615dac25d0da5ef2dda38c30fcb58f225680ba5aafe3f9c85
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"be371d23a597de67bd09aa3f8bb8d53f"
x-request-id: 6aa13675de6f3a07499d9b9fcd09d8df
x-runtime: 0.021537
access-control-allow-headers: *
content-length: 148
cache-control: public, max-age=6519
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash bada8a1438d859131fc28baa2d859057
b337dfd255c6e52b5f8fb38d7ec34370ff13fd2b
d9bdd195d1f8953cceb20356b9f220cfee55a1cf295f2d6c3f7afa24239ead0b
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"bada8a1438d859131fc28baa2d859057"
x-request-id: 084c315cdc4ae19603df3a256775d373
x-runtime: 0.076477
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=10766
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline
200 OK 334 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- HTML document, ASCII text, with very long lines (945), with no line terminators
Hash 2b34eedad05c51e1ef84ec7f896bb9cc
1f02e9f6a86cd02da343792127f389f73b0adcf3
097e63926f84be5cb8a8afa7b096ab7c7b6ce121f5e846dd1989d0a5449b383d
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"2b34eedad05c51e1ef84ec7f896bb9cc"
x-request-id: ada0c6db435a08b0d701b2ebbcf329c3
x-runtime: 0.043964
access-control-allow-headers: *
content-length: 334
cache-control: public, max-age=6574
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 4996c594807007006986795587cd5330
6b0fc7bc40e940446ed3c6caf8fd7c20939aba26
17c921aa5b0ec21597f6f7badcd818820e7dc2d48685e7a2889ddfe765699402
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"4996c594807007006986795587cd5330"
x-request-id: e0c7b1ad3bbd0621fdd743f47e6bf07e
x-runtime: 0.019665
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6567
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=3
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 544f9bcdbba9e8b24cb0318d54783f46
feaf0d2bc1a84b96f2e1fc169c548fe46177e64f
92a54351891c6dcde438807948ab044450e9f5d7797eacd03b2ea406ac680f70
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"544f9bcdbba9e8b24cb0318d54783f46"
x-request-id: aac51f343c22b386e21f09d1787c0ed9
x-runtime: 0.038177
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6491
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=3
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline
200 OK 148 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 2ab22a51e70f4566abac7aafabb30fb0
9f4e3f9d663f46f26f729f8a296414192a37adc6
be7600bf9eba4d8b6e37f0282c373b3d03c4e9c02c30d67b110a6c0fd5664ce7
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"2ab22a51e70f4566abac7aafabb30fb0"
x-request-id: 44b97520f4ba0df1082fb53796e3049b
x-runtime: 0.020784
access-control-allow-headers: *
content-length: 148
cache-control: public, max-age=6485
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c9035af0f9bb7c1f319285127be0e6a
175b3322e4accffc7ec8b02f4e9df4ec41d7f218
1439b0e2ee7b18fc9b32729ba7adbceaf0a570c4668141fab776d008a255c6d1
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"1c9035af0f9bb7c1f319285127be0e6a"
x-request-id: a7c53aa45e299686c4deb56932744335
x-runtime: 0.044462
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6557
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash a34e61e75fb037315aee3204d6d8b9a6
5fef7064e0d73fbc5569ebd4089646a937920a66
660a5a64b030c230c9008454ef6385490e254c955ef591d739e679e304389d5f
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"a34e61e75fb037315aee3204d6d8b9a6"
x-request-id: 2083ca0b884fc4d29f842283e77a8fa9
x-runtime: 0.020102
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6519
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/427413/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/427413/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 554fcf77f4a7003325ec00c393c380af
c8243b57e9e623ed9893398dcc1b442010ac8199
4db9a1327e90fdd3157252859847a63a5216ce3f0086f1c64e64f90d8fde4ee7
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/427413/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"554fcf77f4a7003325ec00c393c380af"
x-request-id: b489f0075d44d1cbb4fae353af30c1c1
x-runtime: 0.021756
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6550
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash b834c4a52bf1ecc33189b8c8e5230c1f
14354319fd3fae3de9632a61ab4813f620630415
a8c529a33975a7848fcbc2379911450604ea31b7a832205b1115f8eb12660783
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"b834c4a52bf1ecc33189b8c8e5230c1f"
x-request-id: 1e72db7eb5c6c729a1cf97d2b8a37114
x-runtime: 0.020835
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6495
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash e737f83269c0db34cf49fe2ad7411abc
4ce14a276eb97a16258103a1761230eb1a9b7a81
1cb991f344bb9722a60b8f9b4bce157903d2f68a6fdcd4cb442d5bb82807edd6
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"e737f83269c0db34cf49fe2ad7411abc"
x-request-id: c3672d2238e189998275481727e78c62
x-runtime: 0.019412
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=10799
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash c82f2fd099f73ee421a3ec65b63a41d4
41e66d3c225eb334e625cb00e7284be6de5b29fa
d8b8e1fa7254422b48820dea0250e464c6f668283219644caab49bb35aa2a176
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"c82f2fd099f73ee421a3ec65b63a41d4"
x-request-id: 3764492db1679675ff1c058a4f4c5a70
x-runtime: 0.025908
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6485
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline
200 OK 148 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash be371d23a597de67bd09aa3f8bb8d53f
268f4040776589011ec13ad469ea8e50ab392be9
b9aa8bb0ec3ef2f615dac25d0da5ef2dda38c30fcb58f225680ba5aafe3f9c85
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/428961/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"be371d23a597de67bd09aa3f8bb8d53f"
x-request-id: 6aa13675de6f3a07499d9b9fcd09d8df
x-runtime: 0.021537
access-control-allow-headers: *
content-length: 148
cache-control: public, max-age=6519
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash bada8a1438d859131fc28baa2d859057
b337dfd255c6e52b5f8fb38d7ec34370ff13fd2b
d9bdd195d1f8953cceb20356b9f220cfee55a1cf295f2d6c3f7afa24239ead0b
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131472/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"bada8a1438d859131fc28baa2d859057"
x-request-id: 084c315cdc4ae19603df3a256775d373
x-runtime: 0.076477
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=10766
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline
200 OK 334 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- HTML document, ASCII text, with very long lines (945), with no line terminators
Hash 2b34eedad05c51e1ef84ec7f896bb9cc
1f02e9f6a86cd02da343792127f389f73b0adcf3
097e63926f84be5cb8a8afa7b096ab7c7b6ce121f5e846dd1989d0a5449b383d
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/16170/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"2b34eedad05c51e1ef84ec7f896bb9cc"
x-request-id: ada0c6db435a08b0d701b2ebbcf329c3
x-runtime: 0.043964
access-control-allow-headers: *
content-length: 334
cache-control: public, max-age=6574
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 4996c594807007006986795587cd5330
6b0fc7bc40e940446ed3c6caf8fd7c20939aba26
17c921aa5b0ec21597f6f7badcd818820e7dc2d48685e7a2889ddfe765699402
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/131819/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"4996c594807007006986795587cd5330"
x-request-id: e0c7b1ad3bbd0621fdd743f47e6bf07e
x-runtime: 0.019665
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6567
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 544f9bcdbba9e8b24cb0318d54783f46
feaf0d2bc1a84b96f2e1fc169c548fe46177e64f
92a54351891c6dcde438807948ab044450e9f5d7797eacd03b2ea406ac680f70
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/15933/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"544f9bcdbba9e8b24cb0318d54783f46"
x-request-id: aac51f343c22b386e21f09d1787c0ed9
x-runtime: 0.038177
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6491
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline
200 OK 148 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 2ab22a51e70f4566abac7aafabb30fb0
9f4e3f9d663f46f26f729f8a296414192a37adc6
be7600bf9eba4d8b6e37f0282c373b3d03c4e9c02c30d67b110a6c0fd5664ce7
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/190508/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"2ab22a51e70f4566abac7aafabb30fb0"
x-request-id: 44b97520f4ba0df1082fb53796e3049b
x-runtime: 0.020784
access-control-allow-headers: *
content-length: 148
cache-control: public, max-age=6485
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c9035af0f9bb7c1f319285127be0e6a
175b3322e4accffc7ec8b02f4e9df4ec41d7f218
1439b0e2ee7b18fc9b32729ba7adbceaf0a570c4668141fab776d008a255c6d1
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/109207/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"1c9035af0f9bb7c1f319285127be0e6a"
x-request-id: a7c53aa45e299686c4deb56932744335
x-runtime: 0.044462
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6557
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash a34e61e75fb037315aee3204d6d8b9a6
5fef7064e0d73fbc5569ebd4089646a937920a66
660a5a64b030c230c9008454ef6385490e254c955ef591d739e679e304389d5f
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/266998/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"a34e61e75fb037315aee3204d6d8b9a6"
x-request-id: 2083ca0b884fc4d29f842283e77a8fa9
x-runtime: 0.020102
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6519
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=5
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/427413/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/427413/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 554fcf77f4a7003325ec00c393c380af
c8243b57e9e623ed9893398dcc1b442010ac8199
4db9a1327e90fdd3157252859847a63a5216ce3f0086f1c64e64f90d8fde4ee7
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/427413/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"554fcf77f4a7003325ec00c393c380af"
x-request-id: b489f0075d44d1cbb4fae353af30c1c1
x-runtime: 0.021756
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6550
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash b834c4a52bf1ecc33189b8c8e5230c1f
14354319fd3fae3de9632a61ab4813f620630415
a8c529a33975a7848fcbc2379911450604ea31b7a832205b1115f8eb12660783
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/199283/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"b834c4a52bf1ecc33189b8c8e5230c1f"
x-request-id: 1e72db7eb5c6c729a1cf97d2b8a37114
x-runtime: 0.020835
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6495
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash e737f83269c0db34cf49fe2ad7411abc
4ce14a276eb97a16258103a1761230eb1a9b7a81
1cb991f344bb9722a60b8f9b4bce157903d2f68a6fdcd4cb442d5bb82807edd6
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/96389/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 331
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"e737f83269c0db34cf49fe2ad7411abc"
x-request-id: c3672d2238e189998275481727e78c62
x-runtime: 0.019412
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=10799
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
200 OK 147 B URL HTTP/2 staticw2.yotpo.com/batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash c82f2fd099f73ee421a3ec65b63a41d4
41e66d3c225eb334e625cb00e7284be6de5b29fa
d8b8e1fa7254422b48820dea0250e464c6f668283219644caab49bb35aa2a176
POST /batch/app_key/QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV/domain_key/432877/widget/bottomline HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 333
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"c82f2fd099f73ee421a3ec65b63a41d4"
x-request-id: 3764492db1679675ff1c058a4f4c5a70
x-runtime: 0.025908
access-control-allow-headers: *
content-length: 147
cache-control: public, max-age=6485
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=4
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/9/7/9788241933653_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
200 OK 70 kB URL HTTP/2 www.norli.no/media/catalog/product/9/7/9788241933653_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 480x673, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2b7280c63315e8e05f99219ce1dbc005
a9bd53a3ea6820a91b4c86b3ece3eb0fb517e72d
df9ef43bb945a4afcfe8e58b492144eee415581e41d7cabb8e844d4eb312dad4
GET /media/catalog/product/9/7/9788241933653_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901633.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Wed, 05 Jan 2022 14:00:30 GMT
etag: W/"56fe9-17e2a8a8d05"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
staticw2.yotpo.com/sessions/sign_in_url
200 OK 189 B URL HTTP/2 staticw2.yotpo.com/sessions/sign_in_url
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 83f6ba84854b59b850aae6b45c75771f
741526238a586e8688d488d0c514cec507304bbd
c9624c73d400b33134a0829d4f1a608ca8aacb94864293efa174d18b637a7043
GET /sessions/sign_in_url HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
If-None-Match: W/"83f6ba84854b59b850aae6b45c75771f"
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"83f6ba84854b59b850aae6b45c75771f"
x-request-id: c2c7e126459bf496eb9d0eba002c984c
x-runtime: 0.001919
access-control-allow-headers: *
content-length: 189
cache-control: private, must-revalidate, max-age=0
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=REVALIDATE, edge; dur=411, origin; dur=102
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
staticw2.yotpo.com/sessions/sign_in_url
200 OK 189 B URL HTTP/2 staticw2.yotpo.com/sessions/sign_in_url
IP
ASN #1299 Telia Company AB
File type JSON data\012- , ASCII text, with no line terminators
Hash 83f6ba84854b59b850aae6b45c75771f
741526238a586e8688d488d0c514cec507304bbd
c9624c73d400b33134a0829d4f1a608ca8aacb94864293efa174d18b637a7043
GET /sessions/sign_in_url HTTP/1.1
Host: staticw2.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.norli.no
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
status: 200 OK
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"83f6ba84854b59b850aae6b45c75771f"
x-request-id: 0f9320ac2a8ff1881e9b0b83132f9c89
x-runtime: 0.001768
access-control-allow-headers: *
content-length: 189
cache-control: private, must-revalidate, max-age=0
date: Thu, 01 Dec 2022 13:33:55 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=REVALIDATE, edge; dur=31, origin; dur=102
env: PRODUCTION
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-origin: https://www.norli.no
X-Firefox-Spdy: h2
www.norli.no/117.637a07f0e7287fbdd9fa.js
200 OK 880 B URL HTTP/2 www.norli.no/117.637a07f0e7287fbdd9fa.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash de39c8d7b611a912caabd4c4ac5015b1
9967ba37809abfae4073b3dccb0cf786c37b0662
e8d5c1e7382565104a9a6867ded5672dc11c28787cb1888b53052a593b2bac89
GET /117.637a07f0e7287fbdd9fa.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901634.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:55 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-62b"
expires: Fri, 01 Dec 2023 13:33:55 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
p.yotpo.com/i?e=se&se_ca=star_rating&se_ac=shown&se_pr=14893&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901633561&tid=598040&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
200 OK 35 B URL HTTP/2 p.yotpo.com/i?e=se&se_ca=star_rating&se_ac=shown&se_pr=14893&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901633561&tid=598040&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /i?e=se&se_ca=star_rating&se_ac=shown&se_pr=14893&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901633561&tid=598040&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5 HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 13:33:55 GMT
content-type: image/gif
content-length: 35
server: nginx
set-cookie: pixel=d644387b-99a3-446e-5334-fe31d66920e7; Path=/; Domain=yotpo.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
expires: Fri, 02 Dec 2022 13:33:55 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
p.yotpo.com/i?e=se&se_ca=star_rating&se_ac=shown&se_pr=14893&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901633880&tid=561134&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
200 OK 35 B URL HTTP/2 p.yotpo.com/i?e=se&se_ca=star_rating&se_ac=shown&se_pr=14893&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901633880&tid=561134&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /i?e=se&se_ca=star_rating&se_ac=shown&se_pr=14893&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901633880&tid=561134&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5 HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 13:33:56 GMT
content-type: image/gif
content-length: 35
server: nginx
set-cookie: pixel=114bd8b6-251f-4d08-5713-c1d522dc552e; Path=/; Domain=yotpo.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
expires: Fri, 02 Dec 2022 13:33:55 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
p.yotpo.com/i?e=se&se_ca=star_rating&se_ac=shown&se_pr=14893&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901633695&tid=491295&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
200 OK 35 B URL HTTP/2 p.yotpo.com/i?e=se&se_ca=star_rating&se_ac=shown&se_pr=14893&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901633695&tid=491295&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /i?e=se&se_ca=star_rating&se_ac=shown&se_pr=14893&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901633695&tid=491295&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5 HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 13:33:56 GMT
content-type: image/gif
content-length: 35
server: nginx
set-cookie: pixel=cebc1a97-7235-4d0f-4df7-d3ccfaafc30b; Path=/; Domain=yotpo.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
expires: Fri, 02 Dec 2022 13:33:55 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
www.norli.no/114.670bf7c8f779c13f0830.js
200 OK 204 B URL HTTP/2 www.norli.no/114.670bf7c8f779c13f0830.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash f17e3f1488b9510128e7e1012211aba6
82e7a255d30ecb71eb3d45a459209c1c492c042b
059fa68775d21cd621d8c91c8bc14db82618bf744e4664ae0ef74d53e695882a
GET /114.670bf7c8f779c13f0830.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901634.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:55 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-b7"
expires: Fri, 01 Dec 2023 13:33:55 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
p.yotpo.com/i?e=se&se_ca=star_rating&se_ac=shown&se_pr=14893&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901634281&tid=634925&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
200 OK 35 B URL HTTP/2 p.yotpo.com/i?e=se&se_ca=star_rating&se_ac=shown&se_pr=14893&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901634281&tid=634925&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /i?e=se&se_ca=star_rating&se_ac=shown&se_pr=14893&se_psk=14893&se_va=QSFDXLAAOErl2CWJhvO52Zo8TbgZ2GkBMFIh5VBV&cx=eyJwdl91dWlkIjo3MTg5NDY5Mzd9&dtm=1669901634281&tid=634925&vp=1280x939&ds=1268x2358&vid=1&duid=d52b7c06620b57e3&p=web&tv=js-0.13.2&fp=3963981668&aid=onsite_v2&lang=en-US&cs=UTF-8&tz=Etc%2FUTC&refr=https%3A%2F%2Fno-go.kelkoogroup.net%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49A09FF688F8E0C6B8784449C324348A9C13FCC5 HTTP/1.1
Host: p.yotpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 13:33:56 GMT
content-type: image/gif
content-length: 35
server: nginx
set-cookie: pixel=159fac39-8db2-4154-578e-96ee68627123; Path=/; Domain=yotpo.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None
expires: Fri, 02 Dec 2022 13:33:56 GMT
cache-control: max-age=86400, private
X-Firefox-Spdy: h2
www.norli.no/116.fb8acab20a20950ef3d4.js
200 OK 222 B URL HTTP/2 www.norli.no/116.fb8acab20a20950ef3d4.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 7de907cbac327048a02d88cba1e0dd67
5051f2fa51040739adf0b404e16ba0de90b2fae9
d5d7ca7fc4529ed23ab7b686881c71b30536df1fde6ecd1ddac40e03a2372fca
GET /116.fb8acab20a20950ef3d4.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901634.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:55 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-f8"
expires: Fri, 01 Dec 2023 13:33:55 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/graphql?query=query+getProductDetailForProductPage%28%24urlKey%3AString%21%24showSimilar%3ABoolean%3Dfalse%29%7Bproducts%28filter%3A%7Burl_key%3A%7Beq%3A%24urlKey%7D%7D%29%7Bitems%7Bid+...ProductDetailsFragment+...ProductDetailsCommonFragment+...ProductDetailsCustomFragment+__typename%7D__typename%7D%7Dfragment+ProductDetailsFragment+on+ProductInterface%7B__typename+categories%7Bid+__typename%7Did+media_gallery_entries%7Bid+label+position+disabled+file+__typename%7Dmeta_description+meta_title+name+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Dsku+image%7Burl+__typename%7Durl_key+url_suffix+canonical_url+...on+ConfigurableProduct%7Bconfigurable_options%7Battribute_code+attribute_id+id+label+values%7Buid+default_label+label+store_label+use_default_value+value_index+swatch_data%7B...on+ImageSwatchData%7Bthumbnail+__typename%7Dvalue+__typename%7D__typename%7D__typename%7Dvariants%7Battributes%7Bcode+value_index+__typename%7Dproduct%7Bonly_x_left_in_stock+id+media_gallery_entries%7Bid+disabled+file+label+position+__typename%7Dsku+stock_status+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7D__typename%7D__typename%7D__typename%7D%7Dfragment+ProductDetailsCommonFragment+on+ProductInterface%7Bshort_description%7Bhtml+__typename%7Dsmall_image%7Burl+__typename%7Dthumbnail%40include%28if%3A%24showSimilar%29%7Burl+__typename%7Dstock_status+similar_products%40include%28if%3A%24showSimilar%29%7Bid+sku+name+color+url_key+url_suffix+thumbnail%7Burl+__typename%7D__typename%7Dconvert_labels%7Bcss_class+label_image+title+color+__typename%7Dconvert_product_list_attributes%7Bcode+label+value+__typename%7Dbrand_info%7Btitle+url_key+__typename%7D__typename%7Dfragment+ProductDetailsCustomFragment+on+ProductInterface%7Bformat+format_value+authors%7Bauthor_id+name+url_key+__typename%7Davailability_date+available_for_click_and_send+available_for_pickup+bokbasen_reviews%7Breview_id+description+author+score+source+__typename%7Dcolor+color_value+editionreleaseyear+editionreleaseyear_value+id+is_audio+is_available_in_dds+is_ebook+is_salable+language+language_value+member_price+series+similar_products%40include%28if%3A%24showSimilar%29%7Bcolor+color_value+__typename%7Dstatus_msg_fallback+status_msg_netshop+stock_status+sub_title+type_of_product+type_of_product_value+url_key_master_category+__typename%7D&operationName=getProductDetailForProductPage&variables=%7B%22showSimilar%22%3Afalse%2C%22urlKey%22%3A%22spill-ordet-fanger%22%7D
200 OK 0 B URL HTTP/2 www.norli.no/graphql?query=query+getProductDetailForProductPage%28%24urlKey%3AString%21%24showSimilar%3ABoolean%3Dfalse%29%7Bproducts%28filter%3A%7Burl_key%3A%7Beq%3A%24urlKey%7D%7D%29%7Bitems%7Bid+...ProductDetailsFragment+...ProductDetailsCommonFragment+...ProductDetailsCustomFragment+__typename%7D__typename%7D%7Dfragment+ProductDetailsFragment+on+ProductInterface%7B__typename+categories%7Bid+__typename%7Did+media_gallery_entries%7Bid+label+position+disabled+file+__typename%7Dmeta_description+meta_title+name+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Dsku+image%7Burl+__typename%7Durl_key+url_suffix+canonical_url+...on+ConfigurableProduct%7Bconfigurable_options%7Battribute_code+attribute_id+id+label+values%7Buid+default_label+label+store_label+use_default_value+value_index+swatch_data%7B...on+ImageSwatchData%7Bthumbnail+__typename%7Dvalue+__typename%7D__typename%7D__typename%7Dvariants%7Battributes%7Bcode+value_index+__typename%7Dproduct%7Bonly_x_left_in_stock+id+media_gallery_entries%7Bid+disabled+file+label+position+__typename%7Dsku+stock_status+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7D__typename%7D__typename%7D__typename%7D%7Dfragment+ProductDetailsCommonFragment+on+ProductInterface%7Bshort_description%7Bhtml+__typename%7Dsmall_image%7Burl+__typename%7Dthumbnail%40include%28if%3A%24showSimilar%29%7Burl+__typename%7Dstock_status+similar_products%40include%28if%3A%24showSimilar%29%7Bid+sku+name+color+url_key+url_suffix+thumbnail%7Burl+__typename%7D__typename%7Dconvert_labels%7Bcss_class+label_image+title+color+__typename%7Dconvert_product_list_attributes%7Bcode+label+value+__typename%7Dbrand_info%7Btitle+url_key+__typename%7D__typename%7Dfragment+ProductDetailsCustomFragment+on+ProductInterface%7Bformat+format_value+authors%7Bauthor_id+name+url_key+__typename%7Davailability_date+available_for_click_and_send+available_for_pickup+bokbasen_reviews%7Breview_id+description+author+score+source+__typename%7Dcolor+color_value+editionreleaseyear+editionreleaseyear_value+id+is_audio+is_available_in_dds+is_ebook+is_salable+language+language_value+member_price+series+similar_products%40include%28if%3A%24showSimilar%29%7Bcolor+color_value+__typename%7Dstatus_msg_fallback+status_msg_netshop+stock_status+sub_title+type_of_product+type_of_product_value+url_key_master_category+__typename%7D&operationName=getProductDetailForProductPage&variables=%7B%22showSimilar%22%3Afalse%2C%22urlKey%22%3A%22spill-ordet-fanger%22%7D
IP
ASN #14061 DIGITALOCEAN-ASN
GET /graphql?query=query+getProductDetailForProductPage%28%24urlKey%3AString%21%24showSimilar%3ABoolean%3Dfalse%29%7Bproducts%28filter%3A%7Burl_key%3A%7Beq%3A%24urlKey%7D%7D%29%7Bitems%7Bid+...ProductDetailsFragment+...ProductDetailsCommonFragment+...ProductDetailsCustomFragment+__typename%7D__typename%7D%7Dfragment+ProductDetailsFragment+on+ProductInterface%7B__typename+categories%7Bid+__typename%7Did+media_gallery_entries%7Bid+label+position+disabled+file+__typename%7Dmeta_description+meta_title+name+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7Dsku+image%7Burl+__typename%7Durl_key+url_suffix+canonical_url+...on+ConfigurableProduct%7Bconfigurable_options%7Battribute_code+attribute_id+id+label+values%7Buid+default_label+label+store_label+use_default_value+value_index+swatch_data%7B...on+ImageSwatchData%7Bthumbnail+__typename%7Dvalue+__typename%7D__typename%7D__typename%7Dvariants%7Battributes%7Bcode+value_index+__typename%7Dproduct%7Bonly_x_left_in_stock+id+media_gallery_entries%7Bid+disabled+file+label+position+__typename%7Dsku+stock_status+price_range%7Bminimum_price%7Bfinal_price%7Bcurrency+value+__typename%7Dregular_price%7Bcurrency+value+__typename%7D__typename%7D__typename%7D__typename%7D__typename%7D__typename%7D%7Dfragment+ProductDetailsCommonFragment+on+ProductInterface%7Bshort_description%7Bhtml+__typename%7Dsmall_image%7Burl+__typename%7Dthumbnail%40include%28if%3A%24showSimilar%29%7Burl+__typename%7Dstock_status+similar_products%40include%28if%3A%24showSimilar%29%7Bid+sku+name+color+url_key+url_suffix+thumbnail%7Burl+__typename%7D__typename%7Dconvert_labels%7Bcss_class+label_image+title+color+__typename%7Dconvert_product_list_attributes%7Bcode+label+value+__typename%7Dbrand_info%7Btitle+url_key+__typename%7D__typename%7Dfragment+ProductDetailsCustomFragment+on+ProductInterface%7Bformat+format_value+authors%7Bauthor_id+name+url_key+__typename%7Davailability_date+available_for_click_and_send+available_for_pickup+bokbasen_reviews%7Breview_id+description+author+score+source+__typename%7Dcolor+color_value+editionreleaseyear+editionreleaseyear_value+id+is_audio+is_available_in_dds+is_ebook+is_salable+language+language_value+member_price+series+similar_products%40include%28if%3A%24showSimilar%29%7Bcolor+color_value+__typename%7Dstatus_msg_fallback+status_msg_netshop+stock_status+sub_title+type_of_product+type_of_product_value+url_key_master_category+__typename%7D&operationName=getProductDetailForProductPage&variables=%7B%22showSimilar%22%3Afalse%2C%22urlKey%22%3A%22spill-ordet-fanger%22%7D HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
content-type: application/json
authorization:
store: pwa
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: application/json
vary: Accept-Encoding, Origin
content-encoding: gzip
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
X-Firefox-Spdy: h2
www.norli.no/62.f78fc2a718b6aeb1d97f.js
200 OK 0 B URL HTTP/2 www.norli.no/62.f78fc2a718b6aeb1d97f.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /62.f78fc2a718b6aeb1d97f.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901634.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:56 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-29ef2"
expires: Fri, 01 Dec 2023 13:33:56 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/118.280d63b6bb41ff58c355.js
200 OK 0 B URL HTTP/2 www.norli.no/118.280d63b6bb41ff58c355.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /118.280d63b6bb41ff58c355.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901634.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:55 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-2a4"
expires: Fri, 01 Dec 2023 13:33:55 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/5/0/5010993437641_1_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
200 OK 0 B URL HTTP/2 www.norli.no/media/catalog/product/5/0/5010993437641_1_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
GET /media/catalog/product/5/0/5010993437641_1_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901633.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Fri, 08 Apr 2022 11:00:12 GMT
etag: W/"76de8-18008d4e866"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/4/0/4005556167722_2.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
200 OK 0 B URL HTTP/2 www.norli.no/media/catalog/product/4/0/4005556167722_2.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
GET /media/catalog/product/4/0/4005556167722_2.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901633.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Fri, 22 Oct 2021 11:01:30 GMT
etag: W/"27570-17ca7a9b84d"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/5/7/5702017161839_7.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
200 OK 0 B URL HTTP/2 www.norli.no/media/catalog/product/5/7/5702017161839_7.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
GET /media/catalog/product/5/7/5702017161839_7.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901633.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Mon, 08 Aug 2022 11:40:24 GMT
etag: W/"1b6d8-1827d418de8"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
www.norli.no/vendors.4c27efb529a36a7be485.js
200 OK 0 B URL HTTP/2 www.norli.no/vendors.4c27efb529a36a7be485.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /vendors.4c27efb529a36a7be485.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:50 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-5f30a"
expires: Fri, 01 Dec 2023 13:33:50 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/FindStoresSlideInTrigger.15213a207b7614375272.js
200 OK 0 B URL HTTP/2 www.norli.no/FindStoresSlideInTrigger.15213a207b7614375272.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /FindStoresSlideInTrigger.15213a207b7614375272.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-9ae4"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/7.334cbb6d620f5af52a6b.js
200 OK 0 B URL HTTP/2 www.norli.no/7.334cbb6d620f5af52a6b.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /7.334cbb6d620f5af52a6b.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-4cd3"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/AccountMenu.259eabd6800d977451dd.js
200 OK 0 B URL HTTP/2 www.norli.no/AccountMenu.259eabd6800d977451dd.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /AccountMenu.259eabd6800d977451dd.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-5632"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/120.552f642c2554e0c6b38e.js
200 OK 0 B URL HTTP/2 www.norli.no/120.552f642c2554e0c6b38e.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /120.552f642c2554e0c6b38e.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901634.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:56 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-54960"
expires: Fri, 01 Dec 2023 13:33:56 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/7/0/7090033001276_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
200 OK 0 B URL HTTP/2 www.norli.no/media/catalog/product/7/0/7090033001276_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
GET /media/catalog/product/7/0/7090033001276_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901633.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Fri, 08 Apr 2022 12:40:13 GMT
etag: W/"21795-18009307a37"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
www.norli.no/19.4553dbdb1697d98d5e81.js
200 OK 0 B URL HTTP/2 www.norli.no/19.4553dbdb1697d98d5e81.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /19.4553dbdb1697d98d5e81.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-170c2"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-eu.dynamicyield.com/api/9878366/api_dynamic.js
200 OK 0 B URL HTTP/2 cdn-eu.dynamicyield.com/api/9878366/api_dynamic.js
IP
GET /api/9878366/api_dynamic.js HTTP/1.1
Host: cdn-eu.dynamicyield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Wed, 30 Nov 2022 13:50:01 GMT
server: DYCDN
content-encoding: gzip
date: Thu, 01 Dec 2022 13:33:51 GMT
cache-control: max-age=30
etag: W/"8a5574beaf9708634c830bcedccdcaf2"
vary: Accept-Encoding
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
age: 12
link: <//st.dynamicyield.com>; rel="dns-prefetch", <//st.dynamicyield.com>; rel="preconnect", <//rcom.dynamicyield.com>; rel="dns-prefetch", <//rcom.dynamicyield.com>; rel="preconnect", <//async-px.dynamicyield.com>; rel="dns-prefetch", <//async-px.dynamicyield.com>; rel="preconnect"
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Qh0nBDAFv-hZavKS4tZ3lEaVMXf8Cky1ksx3_A_DmoC8fhLKUFk5Mw==
X-Firefox-Spdy: h2
www.norli.no/buildid.json?1669901629091
200 OK 0 B URL HTTP/2 www.norli.no/buildid.json?1669901629091
IP
ASN #14061 DIGITALOCEAN-ASN
GET /buildid.json?1669901629091 HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:50 GMT
content-type: application/json
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-14"
expires: Fri, 01 Dec 2023 13:33:50 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/WishlistSlideInTrigger.5a7f560ba925460945bf.js
200 OK 0 B URL HTTP/2 www.norli.no/WishlistSlideInTrigger.5a7f560ba925460945bf.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /WishlistSlideInTrigger.5a7f560ba925460945bf.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-c2a"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/5.ada4504a5422406b1bca.js
200 OK 0 B URL HTTP/2 www.norli.no/5.ada4504a5422406b1bca.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /5.ada4504a5422406b1bca.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-4b1f"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/RootCmp_PRODUCT__default.269b0f92e45f40958665.js
200 OK 0 B URL HTTP/2 www.norli.no/RootCmp_PRODUCT__default.269b0f92e45f40958665.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /RootCmp_PRODUCT__default.269b0f92e45f40958665.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:52 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-27b4"
expires: Fri, 01 Dec 2023 13:33:52 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/9/7/9788284570099_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
200 OK 0 B URL HTTP/2 www.norli.no/media/catalog/product/9/7/9788284570099_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
GET /media/catalog/product/9/7/9788284570099_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901633.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Thu, 06 Oct 2022 23:48:06 GMT
etag: W/"4da27-183afb2fe0f"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
www.norli.no/sw.js
200 OK 0 B IP
ASN #14061 DIGITALOCEAN-ASN
GET /sw.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-c6fe"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/logo-xbq.svg
200 OK 0 B URL HTTP/2 www.norli.no/logo-xbq.svg
IP
ASN #14061 DIGITALOCEAN-ASN
GET /logo-xbq.svg HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=76c9c11c0e79487adea041486a50b77d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: image/svg+xml
last-modified: Wed, 12 Oct 2022 06:55:27 GMT
vary: Accept-Encoding
etag: W/"634664df-970"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/100.9809e6a21e806dc06472.js
200 OK 0 B URL HTTP/2 www.norli.no/100.9809e6a21e806dc06472.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /100.9809e6a21e806dc06472.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-abf"
expires: Fri, 01 Dec 2023 13:33:53 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/18.b2fa8efd79617952b745.js
200 OK 0 B URL HTTP/2 www.norli.no/18.b2fa8efd79617952b745.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /18.b2fa8efd79617952b745.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901634.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:56 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-520c"
expires: Fri, 01 Dec 2023 13:33:56 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/client.b2eadc63a6442ab5768e.js
200 OK 0 B URL HTTP/2 www.norli.no/client.b2eadc63a6442ab5768e.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /client.b2eadc63a6442ab5768e.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:50 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-18cbcd"
expires: Fri, 01 Dec 2023 13:33:50 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/6/4/6430031712940.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
200 OK 0 B URL HTTP/2 www.norli.no/media/catalog/product/6/4/6430031712940.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
GET /media/catalog/product/6/4/6430031712940.jpg?auto=webp&format=pjpg&width=80&height=100&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:53 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Wed, 26 Sep 2018 13:45:05 GMT
etag: W/"3bbf-166162044be"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
www.norli.no/115.2ce296f6d27791c81dab.js
200 OK 0 B URL HTTP/2 www.norli.no/115.2ce296f6d27791c81dab.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /115.2ce296f6d27791c81dab.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.norli.no/sw.js
Connection: keep-alive
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901634.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:55 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-fe"
expires: Fri, 01 Dec 2023 13:33:55 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/NavigationDesktop.40ace1ebc1e1fda68630.js
200 OK 0 B URL HTTP/2 www.norli.no/NavigationDesktop.40ace1ebc1e1fda68630.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /NavigationDesktop.40ace1ebc1e1fda68630.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-99c7"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/17.6ef22062d43168ab95e8.js
200 OK 0 B URL HTTP/2 www.norli.no/17.6ef22062d43168ab95e8.js
IP
ASN #14061 DIGITALOCEAN-ASN
GET /17.6ef22062d43168ab95e8.js HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 08:14:53 GMT
vary: Accept-Encoding
etag: W/"6388627d-9299"
expires: Fri, 01 Dec 2023 13:33:51 GMT
cache-control: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.norli.no/media/catalog/product/7/0/7090033004147_1_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
200 OK 0 B URL HTTP/2 www.norli.no/media/catalog/product/7/0/7090033004147_1_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover
IP
ASN #14061 DIGITALOCEAN-ASN
GET /media/catalog/product/7/0/7090033004147_1_1.jpg?auto=webp&format=pjpg&width=480&height=600&fit=cover HTTP/1.1
Host: www.norli.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.norli.no/spill-og-puslespill/spill/familiespill/spill-ordet-fanger?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5
Cookie: _gcl_au=1.1.884175602.1669901629; acceptCookieGroups=null; PHPSESSID=41e2b14cbcd1f667a8a76c56cc66df59; private_content_version=15246b48164c115b2914358dae7f1da9; _dyjsession=ibbr8d1a27pdi1uektkr2o3ke99qbvef; dy_fs_page=www.norli.no%2Fspill-og-puslespill%2Fspill%2Ffamiliespill%2Fspill-ordet-fanger%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D49a09ff688f8e0c6b8784449c324348a9c13fcc5; _dy_csc_ses=ibbr8d1a27pdi1uektkr2o3ke99qbvef; at_gd=49A09FF688F8E0C6B8784449C324348A9C13FCC5; _fbp=fb.1.1669901630544.1961874988; _hjSessionUser_1500324=eyJpZCI6IjFkYWY0NzA3LTY4OTQtNTJlZC1hYWNjLTI2YTU5YzU0MDE1OCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1MDQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_1500324=eyJpZCI6IjM0ODhkNDQ3LWU3OTgtNDQ5NS05OWFjLWZlNzM1MmM4ZGUzNCIsImNyZWF0ZWQiOjE2Njk5MDE2MzA1NzUsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=1; _dy_c_exps=; _dy_soct=1072425.1197459.1669901632; _dycnst=dg; _dyid=-5692549033973207743; _dyfs=1669901632510; _dycst=dk.w.f.ms.; _dy_geo=NO.EU.NO_.NO__; _dy_df_geo=Norway..; _dy_toffset=1; _sp_id.1c4f=d52b7c06620b57e3.1669901633.1.1669901633.1669901633; _sp_ses.1c4f=*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 13:33:54 GMT
content-type: image/webp
x-powered-by: Express
last-modified: Fri, 08 Apr 2022 09:20:13 GMT
etag: W/"2afe7-18008796021"
vary: Accept
x-optimized: hastily
x-proxy-cache: HIT
cache-control: max-age=7776000, public
X-Firefox-Spdy: h2
37.48.65.151
34.120.237.76
93.184.220.29
78.46.197.88
2.23.139.120
104.18.21.226
23.33.119.27