Overview

URL rouonixon.com/4/3651170/
IP139.45.197.238
ASNRETN Limited
Location United Kingdom
Report completed2022-10-02 15:15:28 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-02 2 rouonixon.com/4/3651170/ Malware
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-10-02 2 ptauxofi.net Sinkholed


Files

No files detected



Passive DNS (46)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS ocsp.netsolssl.com (1) 8381 2012-05-20 21:51:49 UTC 2022-10-02 04:16:22 UTC 172.64.155.188
mnemonic passive DNS 11029147.fls.doubleclick.net (1) 0 2021-09-17 08:41:17 UTC 2022-10-02 13:10:29 UTC 142.250.74.70 Domain (doubleclick.net) ranked at: 2267
mnemonic passive DNS adservice.google.com (1) 76 2021-02-20 16:10:48 UTC 2022-10-02 10:40:37 UTC 142.250.74.34
mnemonic passive DNS adservice.google.no (1) 96969 2017-09-26 14:23:08 UTC 2022-10-02 05:26:20 UTC 142.250.74.34
mnemonic passive DNS www.facebook.com (1) 99 2017-01-30 05:00:00 UTC 2022-10-02 04:45:21 UTC 157.240.221.35
mnemonic passive DNS rouonixon.com (3) 0 2020-11-06 08:20:50 UTC 2022-10-02 04:35:16 UTC 139.45.197.238 Unknown ranking
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-02 08:03:17 UTC 18.165.201.80
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-02 04:45:21 UTC 34.117.237.239
mnemonic passive DNS ocsp.digicert.com (6) 86 2012-05-21 07:02:23 UTC 2022-10-02 10:21:36 UTC 93.184.220.29
mnemonic passive DNS bat.bing.com (3) 387 2014-04-08 09:23:16 UTC 2022-10-02 05:47:38 UTC 204.79.197.200
mnemonic passive DNS r3.o.lencr.org (9) 344 2020-12-02 08:52:13 UTC 2022-10-02 05:33:45 UTC 23.36.77.32
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-10-02 11:18:55 UTC 142.250.74.168
mnemonic passive DNS consent.cookiebot.com (2) 4972 2014-02-26 14:48:42 UTC 2022-10-02 05:28:18 UTC 104.84.152.64
mnemonic passive DNS ocsp.sectigo.com (5) 487 2018-12-17 11:31:55 UTC 2022-10-02 07:22:57 UTC 104.18.32.68
mnemonic passive DNS s3-eu-west-2.amazonaws.com (15) 0 2017-02-01 08:51:02 UTC 2022-10-02 07:09:36 UTC 52.95.144.45 Unknown ranking
mnemonic passive DNS www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-10-02 11:18:55 UTC 142.250.74.174
mnemonic passive DNS t.co (1) 569 2012-07-25 19:09:44 UTC 2022-10-02 11:37:30 UTC 104.244.42.69
mnemonic passive DNS googleads.g.doubleclick.net (1) 42 2021-02-20 15:43:32 UTC 2022-10-02 11:08:09 UTC 142.250.74.66
mnemonic passive DNS www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-10-02 11:18:55 UTC 142.250.74.3
mnemonic passive DNS my.rtmark.net (4) 9054 2017-08-22 14:11:49 UTC 2022-10-02 11:43:59 UTC 139.45.195.8
mnemonic passive DNS www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-10-02 10:10:07 UTC 142.250.74.164
mnemonic passive DNS analytics.twitter.com (1) 526 2013-04-10 19:53:18 UTC 2022-10-02 05:39:58 UTC 104.244.42.195
mnemonic passive DNS asia.adform.net (3) 40274 2015-03-12 00:50:54 UTC 2022-10-02 13:10:35 UTC 185.84.60.21
mnemonic passive DNS tracker.selectivv.com (3) 0 2020-06-03 14:52:39 UTC 2022-10-02 13:10:29 UTC 85.17.54.17 Unknown ranking
mnemonic passive DNS unphionetor.com (3) 54035 2022-02-11 12:53:49 UTC 2022-10-02 13:48:54 UTC 139.45.197.236
mnemonic passive DNS ptauxofi.net (1) 35628 2021-03-31 05:35:12 UTC 2022-10-02 12:17:21 UTC 139.45.197.250
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-02 10:20:02 UTC 44.240.140.78
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-02 05:30:03 UTC 34.120.237.76
mnemonic passive DNS go.ad2upapp.com (1) 566190 2016-06-11 11:42:08 UTC 2022-10-02 12:43:31 UTC 139.45.197.237
mnemonic passive DNS d3uayxmzbnco7f.cloudfront.net (53) 0 2021-05-21 21:25:44 UTC 2022-10-02 13:10:20 UTC 216.137.34.120 Unknown ranking
mnemonic passive DNS cdnjs.cloudflare.com (1) 235 2020-10-20 10:17:36 UTC 2022-10-02 06:52:02 UTC 104.17.25.14
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-02 05:00:42 UTC 108.156.28.95
mnemonic passive DNS ocsp.pki.goog (9) 175 2017-06-14 07:23:31 UTC 2022-10-02 05:01:45 UTC 142.250.74.3
mnemonic passive DNS ocsp.sca1b.amazontrust.com (4) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 108.138.212.113
mnemonic passive DNS connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2022-10-02 11:18:54 UTC 157.240.221.16
mnemonic passive DNS inv-dmp.admixer.net (1) 246841 2019-02-21 12:20:30 UTC 2022-10-02 13:10:32 UTC 146.0.227.110
mnemonic passive DNS stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-10-02 11:34:04 UTC 74.125.131.155
mnemonic passive DNS toapodazoay.com (2) 624090 2017-11-17 09:59:00 UTC 2022-10-02 12:43:29 UTC 139.45.197.151
mnemonic passive DNS go.deliverymodo.com (2) 672700 2016-07-21 09:52:46 UTC 2022-10-02 12:43:30 UTC 139.45.197.236
mnemonic passive DNS www.lyca-mobile.no (39) 0 2013-11-29 08:10:10 UTC 2022-10-02 13:10:20 UTC 3.120.43.17 Unknown ranking
mnemonic passive DNS s3-eu-central-1.amazonaws.com (10) 0 2014-12-06 15:23:14 UTC 2022-10-02 04:57:59 UTC 52.219.168.68 Unknown ranking
mnemonic passive DNS consentcdn.cookiebot.com (1) 5676 2018-05-23 05:13:43 UTC 2022-10-02 05:56:24 UTC 104.110.3.72
mnemonic passive DNS zerossl.ocsp.sectigo.com (2) 4049 2020-05-09 19:05:29 UTC 2022-10-02 06:33:45 UTC 172.64.155.188
mnemonic passive DNS static.ads-twitter.com (1) 614 2017-01-30 05:00:15 UTC 2022-10-02 06:21:36 UTC 151.101.84.157
mnemonic passive DNS cdn.admixer.net (2) 35810 2012-12-19 18:42:40 UTC 2022-10-02 13:10:21 UTC 92.223.97.97
mnemonic passive DNS s2.adform.net (1) 4693 2013-04-18 11:49:52 UTC 2022-10-02 05:00:26 UTC 37.157.6.234


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 139.45.197.238

Date UQ / IDS / BL URL IP
2022-12-08 16:00:42 +0000
0 - 0 - 1 rouonixon.com/4/4693266/ 139.45.197.238
2022-12-08 15:00:57 +0000
0 - 0 - 1 rouonixon.com/4/4406479/ 139.45.197.238
2022-12-08 14:13:46 +0000
0 - 0 - 1 rouonixon.com/4/5020335/ 139.45.197.238
2022-12-08 13:19:34 +0000
0 - 0 - 1 rouonixon.com/4/4934666/ 139.45.197.238
2022-12-08 12:14:04 +0000
0 - 0 - 3 viapawniarda.com/4/5318557/ 139.45.197.238

Last 5 reports on ASN: RETN Limited

Date UQ / IDS / BL URL IP
2022-12-08 16:22:10 +0000
0 - 0 - 2 phaveeghu.com/ 139.45.197.151
2022-12-08 16:21:53 +0000
0 - 0 - 4 zizoxozoox.com/ 139.45.197.151
2022-12-08 16:21:08 +0000
0 - 0 - 2 rareghoa.net/ 139.45.197.153
2022-12-08 16:16:55 +0000
0 - 0 - 2 ofslakotha.com/ 139.45.197.236
2022-12-08 16:11:50 +0000
0 - 0 - 3 c.prelandappslab.com/ 139.45.197.151

Last 5 reports on domain: rouonixon.com

Date UQ / IDS / BL URL IP
2022-12-08 16:00:42 +0000
0 - 0 - 1 rouonixon.com/4/4693266/ 139.45.197.238
2022-12-08 15:00:57 +0000
0 - 0 - 1 rouonixon.com/4/4406479/ 139.45.197.238
2022-12-08 14:13:46 +0000
0 - 0 - 1 rouonixon.com/4/5020335/ 139.45.197.238
2022-12-08 13:19:34 +0000
0 - 0 - 1 rouonixon.com/4/4934666/ 139.45.197.238
2022-12-08 07:28:37 +0000
0 - 0 - 1 rouonixon.com/4/4310039/ 139.45.197.238

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-11-20 23:58:19 +0000
0 - 0 - 3 ungroudonchan.com/4/5423637 139.45.197.238
2022-11-19 19:42:15 +0000
0 - 0 - 2 rouonixon.com/4/3714599/ 139.45.197.238
2022-11-18 18:13:44 +0000
0 - 0 - 2 goatrck.com/tracking.php 185.32.28.169
2022-11-15 08:09:50 +0000
0 - 0 - 2 sg.fliesopping.click/au/i14s22/aussie/ 139.59.241.112
2022-11-15 04:51:13 +0000
0 - 0 - 2 ungroudonchan.com/4/5423637?ymid=3QYMXUUEbAq3 (...) 139.45.197.238


JavaScript

Executed Scripts (120)


Executed Evals (1)

#1 JavaScript::Eval (size: 113, repeated: 1) - SHA256: 66dc56dec4f01235dfcd64ece4f32f77847bd747f1ded61e6c44911d6d0f9264

                                        (function() {
    return -1 < google_tag_manager["GTM-PNQZL82"].macro(2).indexOf("/Checkout/") ? null : document.referrer
})();
                                    

Executed Writes (0)



HTTP Transactions (211)


Request Response
                                        
                                            GET /4/3651170/ HTTP/1.1 
Host: rouonixon.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         139.45.197.238
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf8
                                        
Server: nginx
Date: Sun, 02 Oct 2022 15:15:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: e4b95ef6e5f8941362e8302e577c1ffa
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=9e417c183f34427b986ce1014c7951ab; expires=Mon, 02 Oct 2023 15:15:16 GMT; path=/ oaidts=1664723716; expires=Mon, 02 Oct 2023 15:15:16 GMT; path=/ syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5406)
Size:   2935
Md5:    ffe2e02ae5401f8f7d60cfceb02f7002
Sha1:   4141d9bb0650d93559d2bdaeeadfa24881429442
Sha256: 4c206e9a7cf5b2d32ca55d69ccb41d7309f78b7fe17b2a7ef85883bcfe69dd41

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         18.165.201.80
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 02 Oct 2022 15:03:11 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 65cbd6c4094454b31bc32d6426b92cf2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: GF-RXa-293QwCx9DBxPbYTYTfgM6aXe8I8bwnVObxfThLH-sTyovyg==
Age: 725


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "763E2DADFDD286A51327CD2000CA335E30CD0B9B7267875D22CA33F7556BA200"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10274
Expires: Sun, 02 Oct 2022 18:06:30 GMT
Date: Sun, 02 Oct 2022 15:15:16 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         108.156.28.95
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 02 Oct 2022 03:33:17 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 0014cc5ed6f7d7422fe78da5a10aa120.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: OmJ0nqBNSra1l3K4uSj_c91erOIbAQBmMauAY6KV-xIZmeS5MUMlnw==
age: 42120
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 02 Oct 2022 15:15:16 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: rouonixon.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rouonixon.com/4/3651170/
Cookie: OAID=9e417c183f34427b986ce1014c7951ab; oaidts=1664723716

                                         
                                         139.45.197.238
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Sun, 02 Oct 2022 15:15:17 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 15:15:17 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 18:25:21 GMT
Expires: Thu, 06 Oct 2022 18:25:20 GMT
Etag: "dc78dc227b42d1d4967d64c81374693440bf3f4f"
Cache-Control: max-age=356402,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 753e647f6c160afe-OSL

                                        
                                            GET /img.gif?f=merge&userId=9e417c183f34427b986ce1014c7951ab HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://rouonixon.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         139.45.195.8
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 02 Oct 2022 15:15:17 GMT
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=9e417c183f34427b986ce1014c7951ab; expires=Mon, 02 Oct 2023 15:15:17 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            POST /?z=3651170&syncedCookie=true&rhd=false HTTP/1.1 
Host: rouonixon.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 427
Origin: http://rouonixon.com
Connection: keep-alive
Referer: http://rouonixon.com/afu.php?zoneid=3651170&var=3651170&rid=XLy92dzVdP3OnhMMAA_B4w%3D%3D&rhd=false
Cookie: OAID=9e417c183f34427b986ce1014c7951ab; oaidts=1664723716
Upgrade-Insecure-Requests: 1

                                         
                                         139.45.197.238
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Sun, 02 Oct 2022 15:15:17 GMT
Content-Length: 0
Connection: keep-alive
X-Trace-Id: bd83190ee6246adb3c60f4b82b1dace4
Link: <https://toapodazoay.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Referrer-Policy: no-referrer
Location: https://toapodazoay.com/?l=qCqekRDLtEBTXwP&s=600457391531897638&z=3651170&g=NO&svar=1664723717&ba=0&dm=0&ep=0&vi=0&vo=0&i18db=0&tr=default&svar=1664723717&ssk=93a7d9dc7854298dc3a27c6fa479f511&svarok=1&b=79056&oaid=9e417c183f34427b986ce1014c7951ab&rdk=rk3
Access-Control-Allow-Origin: http://rouonixon.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=9e417c183f34427b986ce1014c7951ab; expires=Mon, 02 Oct 2023 15:15:17 GMT; path=/ oaidts=1664723716; expires=Mon, 02 Oct 2023 15:15:17 GMT; path=/ syncedCookie=true; expires=Sun, 09 Oct 2022 15:15:17 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DB83808016E80AD54CB4803C7871DAD85E58DD0EEE718F26893335DE6A48BB49"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13055
Expires: Sun, 02 Oct 2022 18:52:52 GMT
Date: Sun, 02 Oct 2022 15:15:17 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         18.165.201.80
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Sun, 02 Oct 2022 14:32:55 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sun, 02 Oct 2022 14:32:53 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 19d5615c4d307c11803beb015d8f6562.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: lTeGFWqaZcHFY7M9FcZnLLCBw2JYO3TeWyggrDlc6YHOmuOwy4CL6g==
Age: 2544


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3997
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 15:15:17 GMT
Last-Modified: Sun, 02 Oct 2022 14:08:40 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A02D6FEF62BA6464204A25042119224783F8C6EB056BE210F432F974CFE95917"
Last-Modified: Fri, 30 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6190
Expires: Sun, 02 Oct 2022 16:58:27 GMT
Date: Sun, 02 Oct 2022 15:15:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1A539991901D161D60C687EC11B1DACCD6182C8ED91F73A4B779B1E2B03723DF"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6156
Expires: Sun, 02 Oct 2022 16:57:53 GMT
Date: Sun, 02 Oct 2022 15:15:17 GMT
Connection: keep-alive

                                        
                                            GET /vctx?t=56193 HTTP/1.1 
Host: unphionetor.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://toapodazoay.com
Connection: keep-alive
Referer: https://toapodazoay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         139.45.197.236
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
server: nginx
date: Sun, 02 Oct 2022 15:15:17 GMT
content-length: 72
access-control-allow-origin: https://toapodazoay.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 5f0e83e2edf23949abc83ee13af4a948
set-cookie: PRIT[56193]=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   72
Md5:    8e870800538968cb236e0416e02f529f
Sha1:   3f5c2426d988924ebe89d44c65c9c7acfe6ea029
Sha256: 8f1048de6be4ba0112d89caf09bd4a2c58c8972cc9592ee76c12ff0d0f487c38
                                        
                                            GET /pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=qCqekRDLtEBTXwP&z=3683319 HTTP/1.1 
Host: ptauxofi.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://toapodazoay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         139.45.197.250
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sun, 02 Oct 2022 15:15:17 GMT
last-modified: Tue, 27 Sep 2022 13:19:37 GMT
etag: W/"6332f869-1a5ed"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   40057
Md5:    f180b770897d6441bb79cb05ef5655b6
Sha1:   0a1ecab3bd50af2c0930f1ebadeb5ae449b52489
Sha256: 35ca5d4fa63b7895631bbe796dc91e83e0a76ba1a6d6b04c4c2962b7c1fb5a4e

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /fv.js?t=56193&cb=1466444518 HTTP/1.1 
Host: unphionetor.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://toapodazoay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         139.45.197.236
HTTP/2 200 OK
content-type: text/javascript; charset=utf8
                                        
server: nginx
date: Sun, 02 Oct 2022 15:15:17 GMT
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: e19ba725f036d2acdd7f3871676d8fbc
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5213), with no line terminators
Size:   2153
Md5:    0254fb1dad74628b7ad0f97d304fac92
Sha1:   35f7af13a08eb87023ec7df4d3c35c21b2cde79d
Sha256: 47fb6ce428ca80ea69b772e4f66e4e5c622a4005db601746033d04511bd27536
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: s5CsjriLlhnlQrpQXNgnNQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         44.240.140.78
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aV9/MWsoAVdfwUDAbtecuESDfms=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9456
Expires: Sun, 02 Oct 2022 17:52:55 GMT
Date: Sun, 02 Oct 2022 15:15:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9456
Expires: Sun, 02 Oct 2022 17:52:55 GMT
Date: Sun, 02 Oct 2022 15:15:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9456
Expires: Sun, 02 Oct 2022 17:52:55 GMT
Date: Sun, 02 Oct 2022 15:15:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9456
Expires: Sun, 02 Oct 2022 17:52:55 GMT
Date: Sun, 02 Oct 2022 15:15:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9456
Expires: Sun, 02 Oct 2022 17:52:55 GMT
Date: Sun, 02 Oct 2022 15:15:19 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11083
x-amzn-requestid: 53e2c961-bcc0-4977-8648-ee3c1aed9cde
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHRFWfIAMFhlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3c7-070212d7386d5efa1b4aa8d3;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Z1KmxHJh9QNfg5x0enkqOjbmiqHvg7nlQiMnuDuCRNWQUBFEiKELbw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:53:35 GMT
etag: "d63b6ba630736d32c364b0e6a369274b2389b7ff"
age: 62504
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11083
Md5:    edded48f558f739287a040151349ef67
Sha1:   d63b6ba630736d32c364b0e6a369274b2389b7ff
Sha256: 33b4a459df0ba7b36b907ba96d74e08660cc75640c42a5748b97d18ec2e9d533
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F589e050c-3794-45f2-a218-269b944ae739.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9600
x-amzn-requestid: e83a86d3-f5ab-4645-92df-4b2da3d4afa3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDgmFdlIAMFzQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2d0-48c3fa150800475c790b95bd;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: f1aqkuvCub_vq9gBDgA4VL8hNf16FXzXhQjSHC1yDLISm85uOqJF9w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:54:50 GMT
etag: "fa7e61b4f2864b8e51acb2cc887c15d5cb41ef38"
age: 62429
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9600
Md5:    11f2e40823827b62bca89d18ee279cb2
Sha1:   fa7e61b4f2864b8e51acb2cc887c15d5cb41ef38
Sha256: c7811cb947483a033f31ff1e93b813f1bbc49b03ed78fcedab2090c71e5c4d1f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 04:41:39 GMT
age: 38020
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc39a13bd-3549-4219-91ed-8b9a1d85dc34.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3341
x-amzn-requestid: d69d073f-a1ba-41ce-95d8-1fe70c5cc53f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZUF-3EDRoAMFdeg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6337e9f8-784d850d4f4e7b9813ee6450;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 07:19:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: mKFfcbYGDmEMap07BU596lB03xe3GrDMxLxvaB2561HZHzap7d4u9A==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 07:48:52 GMT
age: 26787
etag: "e57f2e3664de531629446f9a09bd03dcd47ef99f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3341
Md5:    4d4a90a40ab5ddf51e06128286a60b12
Sha1:   e57f2e3664de531629446f9a09bd03dcd47ef99f
Sha256: f3b79b91e554cc3e53a440a842bea695c4af41630ab98b414139f7964f0af93b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d657f8a-70bc-42c6-9aae-1127c4403047.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8602
x-amzn-requestid: 89329169-bc7a-46b1-85fc-20383a85cae8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDf9GxzoAMFg0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cc-27952f8357fa25c956b1cd72;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: YDfn3Xd8m6jaBrj_M9hs4dePku_eEhJbYv3NJSHjCdAWifhBkiKUhw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:53:38 GMT
age: 62501
etag: "5d3389a965cfa45dab2202d89b40264368674e8a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8602
Md5:    94d82ad8d70761f6ee1384b4183335f3
Sha1:   5d3389a965cfa45dab2202d89b40264368674e8a
Sha256: ad495dc0ede3bfcbaebfd3bf2eb55fc5596cd7643a539e030ccce0b8a3bcf8dd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd4280e4-6b15-45b7-9469-d13ba14c37db.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6871
x-amzn-requestid: e1fdb2ee-c0e7-4a0c-ae26-d968aef00503
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEIOGp2IAMFxSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ce-24b26a8048ffd84071a2ad57;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:30 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -svKnYBuiMSdWObzJyNah9TDIi6IuPP6VMzEJWmn0zxoZbFmwpzkJw==
via: 1.1 c07670802688417c8b871124c547eb0a.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:53:35 GMT
age: 62504
etag: "087521979efd5936416fd7f030779fa5725f0a8f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6871
Md5:    9dddb9d84a16a3004821d89836b83dc3
Sha1:   087521979efd5936416fd7f030779fa5725f0a8f
Sha256: a6251ac43958031d765b5743d43e14bc04b1e465bed81f757c3609ee6f2bea66
                                        
                                            GET /afu.php?id=792658&rt=1 HTTP/1.1 
Host: go.ad2upapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         139.45.197.237
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 02 Oct 2022 15:15:19 GMT
Content-Length: 138
Connection: keep-alive
Location: http://go.deliverymodo.com/afu.php?id=792658&rt=1
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   138
Md5:    aff950cab4c0265e21d401db15f1026d
Sha1:   f03e18461817f7a6546c8bf8fa8d686d7e30aca0
Sha256: 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
                                        
                                            GET /afu.php?id=792658&rt=1 HTTP/1.1 
Host: go.deliverymodo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         139.45.197.236
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf8
                                        
Server: nginx
Date: Sun, 02 Oct 2022 15:15:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 010ff2e191d3415ed67e25901715e64b
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://www.lyca-mobile.no>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=88b11292478d42f79da58e383adcd720; expires=Mon, 02 Oct 2023 15:15:19 GMT; path=/ oaidts=1664723719; expires=Mon, 02 Oct 2023 15:15:19 GMT; path=/ syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   738
Md5:    98b70daf957cd3076f7501702e051f7d
Sha1:   7e3c70fb005d45bf3600f77b47b25bc8ff54aa87
Sha256: 051cb31f5f03c8cfef1f6b8afa3dbb27f3d58ea230e519ef7379b26cef0dede8
                                        
                                            POST /vb?t=56193&bid=79056&aid=600457391531897638&tp=2075 HTTP/1.1 
Host: unphionetor.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://toapodazoay.com
Connection: keep-alive
Referer: https://toapodazoay.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

                                         
                                         139.45.197.236
HTTP/2 204 No Content
                                        
server: nginx
date: Sun, 02 Oct 2022 15:15:19 GMT
access-control-allow-origin: https://toapodazoay.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 4e6af694ca1620f5876a251e06587e40
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: go.deliverymodo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=88b11292478d42f79da58e383adcd720; oaidts=1664723719

                                         
                                         139.45.197.236
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Sun, 02 Oct 2022 15:15:19 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 15:15:19 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 18:25:21 GMT
Expires: Thu, 06 Oct 2022 18:25:20 GMT
Etag: "dc78dc227b42d1d4967d64c81374693440bf3f4f"
Cache-Control: max-age=356400,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 753e648e2c730afe-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.netsolssl.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 15:15:19 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 13:06:10 GMT
Expires: Thu, 06 Oct 2022 13:06:09 GMT
Etag: "0e3282e0b6ecee74babb587a1083dfac0469a868"
Cache-Control: max-age=337249,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 753e648e48d4b515-OSL

                                        
                                            POST /img.gif?f=merge&userId=88b11292478d42f79da58e383adcd720 HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         139.45.195.8
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 02 Oct 2022 15:15:19 GMT
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=88b11292478d42f79da58e383adcd720; expires=Mon, 02 Oct 2023 15:15:19 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1 HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:19 GMT
Link: <https://www.lyca-mobile.no/nb/?p=170722>; rel=shortlink
Server: Apache
Set-Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; path=/; domain=.lyca-mobile.no; secure; HttpOnly;HttpOnly; Secure; SameSite=None;HttpOnly; Secure; SameSite=None;SameSite=None;Secure newsim_tab=0; expires=Sun, 02-Oct-2022 15:25:20 GMT; Max-Age=600; path=/;HttpOnly; Secure; SameSite=None;HttpOnly; Secure; SameSite=None;SameSite=None;Secure
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 31918
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1692), with CRLF, LF line terminators
Size:   31918
Md5:    dd191bbf84384888d25b4be62e3088e5
Sha1:   529b6cb56f96f48da6cde220491af4a4342effe1
Sha256: 8c0475e3a01a15684f46382b62dac678203829b1b47ce03fdb1847375adad512
                                        
                                            GET /wp-content/plugins/simple-sitemap/lib/assets/css/simple-sitemap.css HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:20 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1763
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   1763
Md5:    999af40135d16a152caaee08d90f72d8
Sha1:   7462b3f3d77148eb3601c302b182ba74265def75
Sha256: a67e5b0779241cd4c4d99b2b47e4ead0f0ce2cb2ab2a1fb5464d62f5a543dd3f
                                        
                                            GET /wp-content/plugins/email-subscribers/widget/es-widget.css HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:20 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:16 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 150
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   150
Md5:    641533dacb82a11aa947513a4892de5a
Sha1:   b77427d8626d847a80a762456f98beb3e64764b1
Sha256: a9316286d70257c135d2a0aacf0bf2bc6acba8c1b5e487c97086459c04849155
                                        
                                            GET /wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 645
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   645
Md5:    c98f02f1afd562a7288aa2dc828e6186
Sha1:   d0f42b73794b0d3ffb9e3eb2d79218d14c40dc88
Sha256: 9fb5a2a2bea5341dd17ec72403d66f0903278030092ae829fe6bb4e23e6af725
                                        
                                            GET /wp-content/themes/Divi-child/vendor/flat-icon/flaticon.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:43 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 06:22:02 GMT
Cache-Control: 2592000
ETag: W/"944296da525e8552632efd1dc0fd0480"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: SUR_2I-ReXLW_vKuZUO2r29J1FbDNMv2bZuRRMHbea1IkkPYY6c0Xg==
Age: 32000


--- Additional Info ---
Magic:  ASCII text, with very long lines (1000), with no line terminators
Size:   417
Md5:    5e5c8838d3f45e076213445010a63eb8
Sha1:   6aedac1cb54fd087ea16c8bae11c0687bef29ce8
Sha256: 653364905a7234231046bf7134bfb1d2f8f957e10463e74d636e4465bf1b8139
                                        
                                            GET /wp-content/themes/Divi-child/vendor/linear-icons/style.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 02 Oct 2022 06:22:02 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:44 GMT
ETag: W/"e93b8e4cf5dc750d2d02a5b9d19f9706"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: 2ZEWtXM7rle01BQ4wpfIUW-kYFBJcTZdkquyr_cGlB2XpFteLNK1pg==
Age: 32000


--- Additional Info ---
Magic:  ASCII text, with very long lines (7000), with no line terminators
Size:   1589
Md5:    963ca36a72fa02b071ef7fd37a19fb46
Sha1:   05ae58547b52e742a980ff1e6e6c1b812bef6f75
Sha256: 74fb03b5e021aa49586af226b8132bb7eb5e4367c23902d089f8df38a6f625cf
                                        
                                            GET /wp-includes/css/dist/block-library/style.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 02 Oct 2022 06:22:02 GMT
Last-Modified: Thu, 06 Aug 2020 03:32:13 GMT
ETag: W/"ff1e4526d778743bf4370b47ff17e7c7"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: vrMrFwIRSSl3x1_OddFt_hqPcRpP1vvnrpckjtIEy6YS0FmDWA4Ryg==
Age: 32000


--- Additional Info ---
Magic:  ASCII text
Size:   9310
Md5:    b7dd7f1e9d4db1ce651a260e2d2915d0
Sha1:   218d42b71dea7466739a747d122b1d93727a1da8
Sha256: 80895587e7ba64e37abc82e803957a754d3db2c303b1d8c31b5213bddaf06306
                                        
                                            GET /ajax/libs/bootstrap-datetimepicker/4.17.37/js/bootstrap-datetimepicker.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sun, 02 Oct 2022 15:15:21 GMT
content-length: 8256
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d8e-9443"
last-modified: Mon, 04 May 2020 16:06:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 841957
expires: Fri, 22 Sep 2023 15:15:21 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fj6y1RRNfJnfdZHS6wHdd5F3AYTrRFfXFweVDYmN4oVPnJ%2BTMhKbFQNqLyrOz9SlaaKWJQJd%2F0p23vDrFd2W%2FzQSok43h9%2BkNQb5Eow%2FSe4piei%2BmOWoFOGxt1hyYJWotjBt0dKg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 753e6498aa08b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (32010)
Size:   8256
Md5:    52b30dc893d14995df58d34ecc5a9f7f
Sha1:   e360fd76bd734011484ed559fd1780e31949353f
Sha256: eab9dfacfbbb59d341c72a7fe6dd9c12ea4e87f20ccf78bf13bd98ffeab243d4
                                        
                                            GET /wp-content/themes/Divi-child/css/student-style.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 966
Connection: keep-alive
Last-Modified: Thu, 18 Nov 2021 11:11:57 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 01 Oct 2022 19:57:08 GMT
ETag: "64eaec02b035ad1628a7890becee905c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8424840dfb521b34b0bba436441f1c36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: EHNeSXS01UTjgZjED-bFtejDMYdZUikOTnDc4vHCEL2n5_UBwnMEGw==
Age: 69494


--- Additional Info ---
Magic:  ASCII text, with CR line terminators
Size:   966
Md5:    64eaec02b035ad1628a7890becee905c
Sha1:   d9a7cd1dd7d3400c09e341e4bba580b80b0a41d9
Sha256: 370ce3c5280f78beb793f8773f3f74b225a2e54f35449df02aa8e181a4842255
                                        
                                            GET /wp-content/themes/Divi-child/vendor/line-awesome/css/line-awesome.min.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:44 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 07:30:56 GMT
Cache-Control: 2592000
ETag: W/"4334c8c70998d81bde3e6765828811a6"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 eee2eabf1d5db87be015bf39b123f234.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: pxvrDJAX006OxwpMZMA6cmkbdsoTdiOquC-DAvJHELOdzfKdrbBnvg==
Age: 27866


--- Additional Info ---
Magic:  ASCII text, with very long lines (27557)
Size:   6104
Md5:    bad301c5adb8e3a1f14e88e9cc5cb1ac
Sha1:   9a67b42d4164ac10ed861cc6445a6196354f9fc6
Sha256: 25a3f0a2cdadc277d0fc7c43c967591b2a18ddc6317e9024888abed1022c70ac
                                        
                                            GET /wp-content/themes/Divi-child/my-account.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 18 Nov 2021 11:11:57 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 07:30:56 GMT
ETag: W/"5e2d79452ec87ed86924ea2519c341ef"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: 0fQGVFiAeStPX7hjukQs5e3DhvwXpIGhTQ-FYVImJ5b8nnjubujK4g==
Age: 27866


--- Additional Info ---
Magic:  ASCII text, with very long lines (12687)
Size:   2728
Md5:    d3ff672944c1aeaee7b472e5d9f40edc
Sha1:   31a10749d5afe70dc04b53d5c35d8464c38bfda8
Sha256: 242a4532fe2f0579adea21357e6302a5b62d50b32e1f8a6ef9f11fa7722174dc
                                        
                                            GET /wp-content/themes/Divi/style.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:55 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 05:58:25 GMT
Cache-Control: 2592000
ETag: W/"817303872fd1f4d16b34fcd79ab7d2d3"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 71d62f2b54e1ac2dcda3d438900cc504.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: TrWh84ocmaIw4vCFI7-F72OQ-bQl7AHbFkqxIyzR4v9csqODsnVTUw==
Age: 33416


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   43529
Md5:    239f0cc79d35ec124f2e5014e7df3f7c
Sha1:   5e6351e63180312ecf4d84a6b161d5b892e8ddb0
Sha256: e2e8c9526ca636305e4042836cbafa5698893a0896db2ddf8361a0ba9011d2ac
                                        
                                            GET /wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.css HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 8384
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (2363)
Size:   8384
Md5:    211e9acb7b08468bf462f3cc35d58dba
Sha1:   30b16e5f18fb53e5536e1dff154a4288dea94c41
Sha256: a31c685f9330266e5b4a2fb4c7c6439f0550fefcdadebd2548f746387820359c
                                        
                                            GET /wp-content/plugins/custom-search-plugin/css/style.css HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 251
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   251
Md5:    90fe42aaed8e5c04b824b1ca3cf3ea34
Sha1:   737cfe50f07686fb94ca84b3e836ac7d85d425d9
Sha256: 2a50c1b8ad7b97eea3b52d13f8623eeffe389262e3eccfb676eaacd15619345b
                                        
                                            GET /wp-content/plugins/wp-store-locator/css/styles.css HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:57 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 4432
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   4432
Md5:    29d83f16ddcd51bb2d8e29cfa6f0d970
Sha1:   d8aa3982c0c288b37f78f81c34eabfd24bd6bf84
Sha256: 5d585c7bba79f48f5ceaca987c6b08fde3da899d8512e1bf13f81a747d8db56d
                                        
                                            GET /wp-content/themes/Divi-child/vendor/font-awesome/css/font-awesome.min.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:43 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sat, 01 Oct 2022 19:57:08 GMT
Cache-Control: 2592000
ETag: W/"4f0c935c3631f777ea790a05a44c1744"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: fzm3FHSp4wsvZUEjT3GN515r5BhMxbpPf_T7L0fqP1uZikYli_URLw==
Age: 69494


--- Additional Info ---
Magic:  ASCII text, with very long lines (28877), with no line terminators
Size:   6562
Md5:    d020b66559892dac940e25edd7293857
Sha1:   c2d2ae21adcd24544f57e880ab6b404f98a3312c
Sha256: 2e9f92b2b828b0996fde2cf0f4f65a94c4665104a4dc669f30b23a1f36349b16
                                        
                                            GET /wp-content/themes/Divi-child/vendor/bootstrap/css/bootstrap.min.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 02 Oct 2022 06:22:02 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:42 GMT
ETag: W/"ac9de5b47373547a27390517f13fe21a"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: QaqiWw4N_pxZIletddA1bVKuE-_Db23eJbwSvj6cC6uZgMAaEm7uNg==
Age: 31999


--- Additional Info ---
Magic:  ASCII text, with very long lines (65371)
Size:   19686
Md5:    c4faa35a1b6dace4cc19783ff11128c3
Sha1:   67f1b97a5fecc3d73c4f8bed8f7a38f3811358ba
Sha256: 34b6837bdd8580d37aa8585b11d4186bd4559de12775fe0d68a3a9bc974faf49
                                        
                                            GET /wp-content/themes/Divi/epanel/shortcodes/css/shortcodes.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:49 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sat, 01 Oct 2022 19:57:08 GMT
Cache-Control: 2592000
ETag: W/"ea1a16f72cd2c8d66fdf5e8924f78eee"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: YsoC4xfQZh0H7lOuCBHbGh2vhhHuNMbNE2Y_MiGiXfmewACI9ZuOyw==
Age: 69494


--- Additional Info ---
Magic:  ASCII text, with very long lines (859)
Size:   5794
Md5:    2b49540cfd68caad557ec07fd3cb7be4
Sha1:   086bf648ae6cefcfb3bace0bcffe9819d3903c63
Sha256: 3117934c12c8469659819e8684924f510bc1e11c31c260ccf25056f61da407d5
                                        
                                            GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.css HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 552
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1756)
Size:   552
Md5:    cf85cdcf046f700267df1aaf104a2b39
Sha1:   852c3e9da0e745e68109819957b9ca45f4e55886
Sha256: 6f64c08cd674c507292ff081be79f54bb5bde34b90a25e2a619f4c7c0e1c421c
                                        
                                            GET /wp-content/plugins/wpml-translation-management/res/css/admin-bar-style.css HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:57 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 113
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   113
Md5:    8bd858d224c135ea74666d7f05df248e
Sha1:   5ef009ed8087ce73a4912d9749d7f041bc16961b
Sha256: 77e5f04f2f5d3a83c50b55652151182633e799d0daf2280c85e4650a0b06d8ab
                                        
                                            GET /wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 933
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   933
Md5:    cb13db3c09d0076dc19a1dbf520c7827
Sha1:   c01159a4163902f3dc824ffade25949d3a9a4097
Sha256: 039804219c46536ac7cdc83d30e672a0467df803c5348a5733e18a687dc828b1
                                        
                                            GET /wp-content/themes/Divi-child/css/countries.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:32 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 05:58:26 GMT
Cache-Control: 2592000
ETag: W/"31ec7a36deac6eda43f22dd60a421a40"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8424840dfb521b34b0bba436441f1c36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: xQhq9kpswSCf0hfzX6MgSOzO7ryCmg9sYrb5pedhuiD7no2OblNZPQ==
Age: 33416


--- Additional Info ---
Magic:  ASCII text, with very long lines (15687), with no line terminators
Size:   1599
Md5:    db2e0b2f0f8abd8de0ea50b3f1845b17
Sha1:   bc8ddfe06db11ad3acf8108730658cfdbb241617
Sha256: 733a3f392e76eb0751922823da5daa60f9259f832f8d7364a5ec6d666da91b91
                                        
                                            GET /wp-content/themes/Divi/epanel/shortcodes/css/shortcodes_responsive.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:49 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 07:51:05 GMT
Cache-Control: 2592000
ETag: W/"58f7be607923d9296d5628a2d7469422"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 71d62f2b54e1ac2dcda3d438900cc504.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: 4TjB1VtF0FbePc9BborYgJAWNr0FcA-LLwo-jxa314hPeYrNE5sAsQ==
Age: 26657


--- Additional Info ---
Magic:  ASCII text
Size:   821
Md5:    39586c05ed4972bad19bfa5961faa77a
Sha1:   492df4e0c5eba2050c7a2b1d1d95f713540ec22e
Sha256: dbceeae75dc6e2b92d179b238ef4ffbc2286bd84ea0309d6abd3f087309015aa
                                        
                                            GET /wp-content/themes/Divi/includes/builder/styles/magnific_popup.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:54 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 04:40:47 GMT
Cache-Control: 2592000
ETag: W/"6e30bbc36a055e4e39e3b1fe966ba0b2"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: h6uQ1dfxMAyBE-Kyoy6BJMTb3QQop4L0sdD5Ej6hOTmDjLv5L3kXCw==
Age: 38075


--- Additional Info ---
Magic:  ASCII text, with very long lines (311)
Size:   2033
Md5:    e530857d5e5c6c58a23a6f5891a1e05e
Sha1:   9a9021e356e30ffb3abca51f44aa10b1db3633ef
Sha256: 1fb2418b27303d07ac2c32dd282fbaa15f6945085f380f58d4160bd0b784873d
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:44 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 10:40:20 GMT
ETag: W/"6c57b762589f13ea5b3579ca5e6c369b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: UfsAd3_j0x0oF7Sc8Q1lW3pFSL2RwHqsybPj6bcjtbuJ-78m6bzMTQ==
Age: 16502


--- Additional Info ---
Magic:  ASCII text
Size:   7812
Md5:    cb4b9a92b4a9fe5e29aea366698b82ba
Sha1:   b09682f59671bed4f53b321a0081b4566eb216c2
Sha256: 7f69bbd7fdfe328bf5d7420ba67c45b42f19fa7712d674c5ad7676a5b640ab43
                                        
                                            GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:47 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 10:40:20 GMT
ETag: W/"96ff65c925bbaf3e4e7891a7ca1f2b1f"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8424840dfb521b34b0bba436441f1c36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: jCHGNcj_hXg0N7UWEENcQcvqWRg3IqulRUnFCvAcr_2aRqsTn2O27Q==
Age: 16502


--- Additional Info ---
Magic:  ASCII text, with very long lines (3706)
Size:   1819
Md5:    52e1a9b065ba39d28db010fd286ae204
Sha1:   da3f9265eac53855df786c6f4b8f813f7ac7fb29
Sha256: ef0cac6d41ec158c95903b585c5421f3c59e1677fe5943bdd50feb2288a2104f
                                        
                                            GET /wp-includes/js/jquery/jquery.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:44 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 08:27:09 GMT
ETag: W/"49edccea2e7ba985cadc9ba0531cbed1"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: TBSJHmJ9zw-OevlZTM88us02q0F5gAS82QCAYS0pBTl3H_AXB2jv-g==
Age: 24493


--- Additional Info ---
Magic:  ASCII text, with very long lines (31997)
Size:   33862
Md5:    2fa6225d647eb4273fef02d3626fe8d8
Sha1:   bf049f4123dffde94f7bddc6fefd778f29eefa1a
Sha256: 419c6aa72a8982d7dad2311f6f62210c670ce1f293cbeac9008a5e49c3a64152
                                        
                                            GET /wp-content/plugins/registration-portin-facility/public/css/registration_portin_facility-public.css HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Mon, 18 Oct 2021 05:15:42 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 5306
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1963)
Size:   5306
Md5:    724d0ef3e346ba677dd5987ce62cb5dc
Sha1:   e73088909d38fc9a932e679f3a4545297899f26e
Sha256: 0021049ab8e09b826fbef1cc74d8ce9794a2a9baa88a793e0773ac3e67f43073
                                        
                                            GET /wp-content/plugins/testimonialslider/css/jquery.bxslider.css HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 885
Connection: keep-alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (3002), with no line terminators
Size:   885
Md5:    3a8400b070b74650e9c7927466b226cf
Sha1:   7669a8def8bca883fbbceed367b8037f35fd1968
Sha256: 0d23aabe78d874edcef092bcc9611dd3c3e8656a03c58ad6e01d6d98ad9165ed
                                        
                                            GET /wp-content/plugins/sitepress-multilingual-cms/res/js/jquery.cookie.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1109
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   1109
Md5:    d2c9e62ba741c5dc1cd388f4cb4322c1
Sha1:   57ad65e2ffdb51d2751763b8bee9ad67f372e2a7
Sha256: 0ad3c73c3eaf52b9deb1941a12db921002dbfb2326ca007c6838d9a936a31b02
                                        
                                            GET /wp-includes/js/jquery/ui/mouse.min.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:45 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 07:30:56 GMT
ETag: W/"b317c4ccc9aa140339ad72fa27c77266"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: TJJJHW4TT1jD4CJIx644OM6WkoGFAtT4--MX0gdH7dB-22xKN8xv6g==
Age: 27866


--- Additional Info ---
Magic:  ASCII text, with very long lines (2927)
Size:   1018
Md5:    74ef4f5701d84662f65216914e4c46d5
Sha1:   781536f44fa7912d1c8efc854b35b5401643d614
Sha256: 9d7bf170212eb66ef5d8d7e49daa593e2b9c08fc0ce3476581195ac9e9fc59e4
                                        
                                            GET /wp-content/themes/Divi-child/js/countries.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 05:58:26 GMT
Cache-Control: 2592000
ETag: W/"41a7f1d63de5dc564de5d2e96ba33db8"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: _FO2qKM4W6Ord1zJ8P-M1g46yk8Q1glkKSdNwEMrMWQNbEsrZH-oMQ==
Age: 33416


--- Additional Info ---
Magic:  ASCII text, with very long lines (7323), with no line terminators
Size:   3420
Md5:    491d3e77e07d9019a0c88383c0def37c
Sha1:   c2045104226430ed0dc0175015c7de44cbf99b14
Sha256: 6d96a380bc00eb62b68eb56e0b66f260430f3aeb682416c1e2e1b48e06a47924
                                        
                                            GET /wp-includes/js/jquery/ui/sortable.min.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:47 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 05:58:26 GMT
ETag: W/"efa8171f2226a422003417095d8549dd"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: h66KrIIb8ifpo0iXjPVJvjbhsdPawdEGx1fTLj0hmcOtN3w3fPYWzQ==
Age: 33416


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (24670)
Size:   6479
Md5:    e639718faff21c9f92bfd32e6d67ac39
Sha1:   9e6c6166549c95a6d3977a689bcac4d3b3a67872
Sha256: 38407b2aad4a94c965422a2bc5ae63fd63cf81fae44549cc4fe3ddb52847bc0c
                                        
                                            GET /wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 155
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   155
Md5:    d3453f9d25d07fae0b6919f644988971
Sha1:   dba21fa483385a873ca38d99bf2433b77dd17fb0
Sha256: f0fa5140f70a19702bdf6bbf7d495857cadc158e12975983212a36068cab241d
                                        
                                            GET /wp-content/plugins/custom-search-plugin/js/script.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 506
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   506
Md5:    99ad164c48c30d4ea72bdb15d6efe582
Sha1:   f5186aa17398f4034199e9f58308fcf753dfe467
Sha256: 9fb201a9702f44e2d06fd910dc024bb0707badce77b09613754e3ff07038cee1
                                        
                                            GET /wp-content/themes/Divi-child/js/theme.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 02 Oct 2022 06:22:03 GMT
Last-Modified: Tue, 15 Feb 2022 04:49:45 GMT
ETag: W/"d056838fef7522c86d80206e3384d0d3"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8424840dfb521b34b0bba436441f1c36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: fenxRusTnHySkzEQUBDgxnAiKeaBdE8alyJ5hcyv_4r0BSZrpIuBfQ==
Age: 31999


--- Additional Info ---
Magic:  ASCII text, with very long lines (348)
Size:   12134
Md5:    08d2ed1e81b91f2bffc50614c1516b07
Sha1:   25e3d7688ea7e0dfa53fa056f2b1ae8dd75b961b
Sha256: b5869943441be4b02b6df620796d717a1bb4c989894126eb50865e8a23eb4d4e
                                        
                                            GET /wp-includes/js/jquery/ui/widget.min.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:47 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 08:27:09 GMT
ETag: W/"00dedd56324da186973a3b2cc5e8023c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 71d62f2b54e1ac2dcda3d438900cc504.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: Y8Yo8QvmYDlpHvIQuHefPPpZw_uC_X2WXKZbnMImFCLTPw0d_cXsUg==
Age: 24493


--- Additional Info ---
Magic:  ASCII text, with very long lines (6614)
Size:   2566
Md5:    5037f1411a7f3ad64087e583c6a16f75
Sha1:   9a912c67adf0275f11fce68fab075b2f9bbcb6d0
Sha256: 535696b88e931f34bcd3b8c13845888d13ec0a164fd15732160130d11697dd78
                                        
                                            GET /wp-content/themes/Divi-child/js/jquery.validate.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 05:58:26 GMT
Cache-Control: 2592000
ETag: W/"50d37feba6afb8e8ee322a7b7871550e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 eee2eabf1d5db87be015bf39b123f234.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: GRRAxO41_6C7hktru-TIxZvB9FBMZd2gA1TNXNhvRQ_LaGgFOPBgRQ==
Age: 33416


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (22821)
Size:   7414
Md5:    7a6a9570aad18294cb27a3bb9e30ae19
Sha1:   0a10bc0bd61c4a07ceb8ff6ddcf3133fe7c6eb96
Sha256: 6b2ec8c22802572202857b1f3451225e31e259018a71b52f608bd0afccaf36ca
                                        
                                            GET /wp-content/plugins/registration-portin-facility/vendor/moment.min.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 16804
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (51679), with no line terminators
Size:   16804
Md5:    174f71b5e532bbee86b7e51ed2d11a82
Sha1:   abbec602df1ebf647b88d18cbd1dd162d7f1f6ad
Sha256: 34084291d4c3f11af71b71f00c969a81380daa917e3e90ad1a08e836ced4e5f9
                                        
                                            GET /wp-content/plugins/registration-portin-facility/public/js/registration_portin_facility-public.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 3837
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   3837
Md5:    01179df43b1213ab1106977745e9b906
Sha1:   9e3ea134dd317bc273af92dc88c44d52a3e73e64
Sha256: 1afad8260106e543ae55da914750a910dcf8bcf16327589f1d9d9ef21713ef2d
                                        
                                            GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 383
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   383
Md5:    6c0ff919dd37f978ea0c1511f47c132c
Sha1:   86c6f73c7f81b5121d666d6968d7debd26c7ab17
Sha256: 790c5d96a9a9be889b5b7113a7b22868d8803355f7e215f8c7481945850b6de5
                                        
                                            GET /wp-content/themes/Divi-child/js/jquery.marquee.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 10:40:20 GMT
Cache-Control: 2592000
ETag: W/"a2ac3fef53d651ac8562f1412b28b359"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: R5p58azEL9JvR09A-xoZeyph3Zct_AgJHqwl7drmvDPXjfdXZlumkA==
Age: 16502


--- Additional Info ---
Magic:  ASCII text, with very long lines (1219)
Size:   2273
Md5:    8baaa88a7c512a4bed1b9dce3fd2b17d
Sha1:   cf1d581f7283682af4b9635970716d277ea2ff1b
Sha256: 6b0bae3be5b035e2dbcf39cb85ebe77669a7fdec22dd93ebff2eeef144ca8d9d
                                        
                                            GET /wp-content/themes/Divi-child/js/additional-methods.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:40 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 08:27:09 GMT
Cache-Control: 2592000
ETag: W/"074966e2db7e1caa07fd7d0bac25e844"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: gF4QoTpMJ4cEUw5mYCyKafzltsjodAQP4l1w457mLddUbtfm2er7hA==
Age: 24493


--- Additional Info ---
Magic:  Non-ISO extended-ASCII text, with very long lines (2940)
Size:   5906
Md5:    e725186c3abeb9e43c05d304036c3a9e
Sha1:   3a54fe954c0bd33f38e195f9b089277aa2b0120d
Sha256: 370f10f462fded2d63e235801e259e733343edae7b216a0f95659bd420c77fa5
                                        
                                            GET /wp-content/themes/Divi-child/js/selectize.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 04:40:47 GMT
Cache-Control: 2592000
ETag: W/"0941c2f6d545a74b27f2ccdbe7bdc931"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: 8oOwz_BcxPpGqT5BMMhvtn2wkdnEjdpODo7EdvNpl8Mq_LYl05vQ-g==
Age: 38075


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (3172)
Size:   17926
Md5:    74ae5bf2c72269a7eb3d263200db2a2c
Sha1:   a40f71c27e2faea223756bbc65a74c17bd3e4bb7
Sha256: 6220f0641a61e0ebd6d6ac158935b42b391fb302befae2c8be37bc25be9e7b20
                                        
                                            GET /wp-content/themes/Divi-child/js/lyca_login.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:57 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2926
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   2926
Md5:    139463c6855f901b3896c4958ef4392c
Sha1:   b0fb2a97f006267aae2924021731fe5527d8e2c7
Sha256: 2801af8987984312d4009ff3f665af9da6ad50faa59367fd9cb0405a03ab9fae
                                        
                                            GET /wp-content/plugins/testimonialslider/js/jquery.bxslider.min.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 4966
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (19040), with no line terminators
Size:   4966
Md5:    e85a20dd54c74b8868f84e0a6bba50ea
Sha1:   bada9d0db6d46c9ec2d9b8c62fbcab76abe79aa8
Sha256: 127606d08299d86a42cff2be53731e7f2b437d64331bb2ed94b974bafac0fab0
                                        
                                            GET /wp-content/themes/Divi-child/js/roaming_rates.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 15 Feb 2022 04:49:50 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 05:58:26 GMT
ETag: W/"456f0e734f90e7e3ccc2835bf708306d"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8424840dfb521b34b0bba436441f1c36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: zZ0yHm-OhUiw52__bZAxSLDepPDvpsyYZyvrQZNTINJ-OTNai8yZLw==
Age: 33416


--- Additional Info ---
Magic:  ASCII text
Size:   8428
Md5:    5afef7c4e7d76e952ccc58b5427743f1
Sha1:   3bcaa52a8b03034fa54145d5dd3d50877a28e807
Sha256: 6cba3c482797e442b7b2d8ce847696eceb45aef23c824e8879a4e12e10aab7da
                                        
                                            GET /wp-content/themes/Divi-child/js/register.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 20 Feb 2020 06:59:06 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 05:58:26 GMT
ETag: W/"a4c47e49f1b792925db5d2ee23d17942"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 71d62f2b54e1ac2dcda3d438900cc504.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: ajwlcTIkqPm5KqIc7zbJBXdhT3Z1q4u8P-TZ-0FwhbUvxD3cM8Gcfg==
Age: 33416


--- Additional Info ---
Magic:  ASCII text
Size:   2866
Md5:    3b0d22ac527844183062cfa86579fb72
Sha1:   8d2e3f52c975105356c5c6b8013600368f033bfb
Sha256: 90ccf3fbe24f20ba748beec85f62aa1300b6b28fb10b54f0bf2a19e1b6a5e0e4
                                        
                                            GET /wp-content/themes/Divi-child/js/bootstrap-datepicker.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:40 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 10:42:11 GMT
Cache-Control: 2592000
ETag: W/"8260533cc46428d9b49e3f137ef2efe7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 eee2eabf1d5db87be015bf39b123f234.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: 4yFcBLaffTTyjED31M386N4nXKo5gj60vCEOuvJbrhlzjUmH_jUd0g==
Age: 16391


--- Additional Info ---
Magic:  ASCII text, with very long lines (1634)
Size:   8005
Md5:    1c4d2f531a2d4dd63967dd66079fb668
Sha1:   117b1f6e705a8e009c73907c6f48f7bccd58b72b
Sha256: 13b50fe535a82e2da51473b7f55c0446f3c5ab093d5e9e30e91b6744897cba9b
                                        
                                            GET /wp-content/themes/Divi-child/js/bootstrap.min.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:40 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 04:40:47 GMT
Cache-Control: 2592000
ETag: W/"5869c96cc8f19086aee625d670d741f9"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: R3NYVjrZOIHbnqepLX_J7jeTGwNHQhvuKWcfjyE7ORAOP6XseNoITg==
Age: 38075


--- Additional Info ---
Magic:  ASCII text, with very long lines (32033)
Size:   9894
Md5:    38f9fe7cd87613e129976506e1e81560
Sha1:   e44c2bd83f842ccd2a38d58f3e467098dbc40505
Sha256: 832aed232097d8535128d3ca71bea6e6249de5dae6d1e5dae74a748407d48c77
                                        
                                            GET /wp-content/themes/Divi-child/js/custom_validate.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 391
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 02 Oct 2022 07:51:06 GMT
Cache-Control: 2592000
ETag: "9f4e4bb98cbc4c5fe6ddfc05c7c48095"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: 1SSYfPdkW1WxxmECo1nA7qzU7KRze5YDJtLRfQmNoYnHONGxxaNNfg==
Age: 26656


--- Additional Info ---
Magic:  ASCII text, with very long lines (391), with no line terminators
Size:   391
Md5:    9f4e4bb98cbc4c5fe6ddfc05c7c48095
Sha1:   e87b52374a265e471462e297fad51a39763f2d3b
Sha256: d48f2166d51e343d4d91b80bf04c970d3d10603d8a6fc5060a53b73c2a8b70cf
                                        
                                            GET /wp-content/themes/Divi-child/js/tab_custome_function.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 10:42:11 GMT
Cache-Control: 2592000
ETag: W/"5ad0eb623e462948f1ac5a7f6174f22a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: miOY3QAOD12g02ze6tXMk57Dyb33380PCL1BZiNy2wPJfhKhQbjtcg==
Age: 16391


--- Additional Info ---
Magic:  ASCII text, with very long lines (1045)
Size:   502
Md5:    11e20d40363bce4fdd284e0651fee720
Sha1:   e25bbb09de1a3d78c9f5d34ffed8d97466a7c9d8
Sha256: b7775936f1f0cbcc211a73fc13c956291ee58e6a6e576bb6c0ff4ef3c29504f9
                                        
                                            GET /wp-content/themes/Divi-child/js/custom-ajax-script.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 07:45:53 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 07:30:56 GMT
ETag: W/"2348f035e1ba7ad6b8df58dbbbd5818e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8424840dfb521b34b0bba436441f1c36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: KW8Z8sRv1uNFi7Q-i-s-96XkNylIezps1JICYLvXiXzxaIfEGYS-Vg==
Age: 27866


--- Additional Info ---
Magic:  ASCII text, with very long lines (507)
Size:   6401
Md5:    1809b9df369bb75559f87d05970510cd
Sha1:   2e0b2a937c8ffd7ce4de29557613729d1fe91692
Sha256: 3e1040c015ca2cf5b6055af5415c577d40ccb867d0f3467f48a4d8325bc4e091
                                        
                                            GET /wp-content/themes/Divi-child/js/nc_ajax_script.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 02 Oct 2022 06:17:30 GMT
Last-Modified: Thu, 05 May 2022 06:47:46 GMT
ETag: W/"9353377fb1b76e466a7ac26634defc75"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 71d62f2b54e1ac2dcda3d438900cc504.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: 5Z9lVOJD_U8TUr98KczPab_o0bbZ8fXOHVOvK-8W_sFJI610RMsOKw==
Age: 32272


--- Additional Info ---
Magic:  ASCII text
Size:   7104
Md5:    1efbbde232a27abc33746d91fc3a61b8
Sha1:   6f8c2de0ab89698f2e46306535b39373ee6d017f
Sha256: 7bc3df63e38c835dc0817d8a5df82a1869a610735c07e0dea3a93fb197b66d45
                                        
                                            GET /wp-includes/js/wp-embed.js HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:49 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 05:58:26 GMT
ETag: W/"23e24e824f384c5eb11e73576b4ac93c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 eee2eabf1d5db87be015bf39b123f234.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: MVtxYDg4JObwxia5jwCCJfGOzxLa4V0civz1391lWyuqwhV2-wYveg==
Age: 33416


--- Additional Info ---
Magic:  ASCII text
Size:   1278
Md5:    9c885d01cafd053718bf59057f5d0c2c
Sha1:   58a85948d7c2cbac8b3537de90ba34aef817641a
Sha256: 89ae7bcd725b32e777a2e2eb8b1dce1d64d3a99619700b4a16ca7a04cc99fbf5
                                        
                                            GET /wp-content/themes/Divi/includes/builder/scripts/frontend-builder-global-functions.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2477
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   2477
Md5:    9d72b69bced27d34ea9ed566ecd17462
Sha1:   3649a5d95346ab4c1a5d5da15ecf8e05ab8ba9ed
Sha256: 4ac3bc0988ec7ebf426c9e152daf84e76eea339bc79a92981695bdaca5ed809e
                                        
                                            GET /wp-content/themes/Divi-child/js/personal-details.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:57 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1052
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   1052
Md5:    1be41f82152e3a9f3dfb3765d314e9a1
Sha1:   50f7c3ad307d0cedf238b0e373116943dd0e0d30
Sha256: 8c4b153673568490f76767839493b7011d1fc1befc88025df6c1a9f6b58dc747
                                        
                                            GET /wp-content/themes/Divi-child/css/datepicker.min.css HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1895
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (15319), with no line terminators
Size:   1895
Md5:    0cd6045269849e0f5ef595828d512ae4
Sha1:   35fa424ca6bfb09fa6b66d99edc3a22a7bda8f05
Sha256: 5b007aa8be84adf6a8a09166efcb085efdf4e252a834b13908a0d58708fa290b
                                        
                                            GET /wp-content/plugins/email-subscribers/widget/es-widget.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:16 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1182
Connection: keep-alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (1311)
Size:   1182
Md5:    59066978220b7f1b7b925b47ff5e46ab
Sha1:   bab1c3c14f4b9649864cb46c1c96250ccdc95024
Sha256: 5fcbd0de5e51104006331763dcf23084505ea9d876e0904815e603e5e0230e90
                                        
                                            GET /wp-content/plugins/email-subscribers/widget/es-widget-page.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:16 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1229
Connection: keep-alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (1362)
Size:   1229
Md5:    6bccf039385dadace241e9d47cdc2a0b
Sha1:   5cd85d67c6422cedfb4f5ac10df547928d37f7fb
Sha256: c27abc361c9a25a87199ebfd36119491c278a33c46bbf06aff3c15d2a9560e0e
                                        
                                            GET /wp-content/plugins/lyca-marketing/assets/js/marketing-script.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Wed, 05 Jan 2022 02:41:28 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 893
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   893
Md5:    81ac1712537559cdec808b954a7490d8
Sha1:   33f1f5ea6a334887020b71577c72953afda05148
Sha256: 30aabbaab74bd6f87cefb998ef1d09a36cb7f36d5c7ddd4bf519ba1059494e8f
                                        
                                            GET /wp-content/plugins/lyca-marketing/assets/js/jquery.lazy.min.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2331
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (4890)
Size:   2331
Md5:    a6cc20d3609181f768dc325025b32715
Sha1:   3911e55e11ce33370a2ec382aafb2447cdffc740
Sha256: c676fc1d198ec9437a42cbfa639bf2bb95cd4502e49e897c922855e4d3d29bd4
                                        
                                            GET /wp-content/plugins/registration-portin-facility/public/js/messages_nb.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 362
Connection: keep-alive


--- Additional Info ---
Magic:  CSV text\012- , ASCII text
Size:   362
Md5:    a3f9d76a09b85913450b9ad5df628548
Sha1:   3f68b62b063a8b102beeafd5fe478843dcdff423
Sha256: 3c64bb2a6ed3fcdc22fec1c1840b6327cdf9f7cc92a53ef302bca6166c61bdc2
                                        
                                            GET /wp-content/themes/Divi/includes/builder/scripts/jquery.mobile.custom.min.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2872
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (7687)
Size:   2872
Md5:    a7bc9bd6d7a143a13d7072ee406c8692
Sha1:   42a46eca1ae6c1b50602917cc52b4b61e13f24f7
Sha256: 63b52e7a859b8943c2d1255b30e1d3b8fa262285797a69098def3967d112ad5b
                                        
                                            GET /wp-content/themes/Divi/js/custom.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 11702
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (372)
Size:   11702
Md5:    fc1ad29248d5c0b974cca2d3687eadd1
Sha1:   854c8b173575abe5b2da21b079276788c31149ae
Sha256: cef043ceda82b48795b26c0873caaeebbc5bbe7c3aa3d1bfd9339dd7010a208f
                                        
                                            GET /wp-content/themes/Divi/includes/builder/scripts/jquery.fitvids.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1298
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   1298
Md5:    31bd6f103266422712d7f21fd221259c
Sha1:   478fe2a563f8edd20468c878ad0c8dabcc506159
Sha256: 4f7cd006453252967505df8f72f72333de4ba5b2734773aaeca3f250fcf0b5e1
                                        
                                            GET /wp-content/themes/Divi/includes/builder/scripts/waypoints.min.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2698
Connection: keep-alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (8668)
Size:   2698
Md5:    f7d4b6ef09365ba331dda4e3648c05fc
Sha1:   f852f915b87c84eb1c3590829e8d9f5c97fbe620
Sha256: 61e3dba589d367496e409a346677b89db66ee134e7370f06a8629ce0492eb6c6
                                        
                                            GET /wp-content/themes/Divi/includes/builder/scripts/jquery.magnific-popup.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:19:17 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 8382
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (21123)
Size:   8382
Md5:    dc28e6a88fd9930fed07d0de45b3a0ea
Sha1:   6181203be9d6e425d138533edaf3121c1a1968b1
Sha256: 497c6f92880fe8e1e12aff1c833910958d7b46379980da1ded707c39a2ca33ee
                                        
                                            GET /wp-content/plugins/email-subscribers/widget/es-widget-customize.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1657
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   1657
Md5:    e5c46c336e35e9bd8dbf55e4d0fc96c4
Sha1:   e4c2bc6c99aade340b1c1484096c79a970b3f019
Sha256: 544db6899780bebc6a30b6e86f3c89023f2b67b9ad9509258739b5005d16c000
                                        
                                            GET /wp-content/plugins/lyca_cart/resources/functions.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 29 Sep 2022 10:37:11 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 5698
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   5698
Md5:    b9ac12921009f1f1dbfedd0490977909
Sha1:   185eccf2caf963e90a9c38ed91631dfbc01f10c4
Sha256: 7cbef667cc2558cdf293a423c6e37d899ef8710e599d6abc8f660fb8bbc9e710
                                        
                                            GET /wp-content/themes/Divi-child/js/forget-password.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 05 May 2022 06:42:29 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 1287
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (359)
Size:   1287
Md5:    d9496518c9ca0e9e5de95991baffb89f
Sha1:   175543365d682ab41f7ec04640a5bd7a49312998
Sha256: d224f7efdd43321dbd29ab5d128a5ab30e8eaca50879978ddbdb68a85647dafa
                                        
                                            GET /wp-content/plugins/rocket-lazy-load/assets/js/12.0/lazyload.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 3633
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (351)
Size:   3633
Md5:    b53e31a064849939c6a41bb35108dbbe
Sha1:   6153863799c6e67ee3b6340ffca9574ebd995b31
Sha256: 790d3da167b670f0ba09a9f30368be07cdaeffc32f9cd79648be9c892c78fcd8
                                        
                                            GET /gtm.js?id=GTM-PNQZL82 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Oct 2022 15:15:21 GMT
expires: Sun, 02 Oct 2022 15:15:21 GMT
cache-control: private, max-age=900
last-modified: Sun, 02 Oct 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 87949
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (40170)
Size:   87949
Md5:    4ff5c15fa2edb102c285e3d4a4953ab2
Sha1:   eab61b25dfb6bd3b616457592e9eb46ec2e39210
Sha256: 1f33a881f63ab8ccdd356a4617af4f934c6abe86394a9d0290452d20b56c38ec
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 15:15:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05101008/logo-new-br.svg HTTP/1.1 
Host: s3-eu-central-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.219.168.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
x-amz-id-2: hkAIQ3Yt3HDH4A8sC5Hf+2OhC5RCypDpO4EI1LJibqpRn8D9qVzFrkfasIM+tj3OO2lzsR+IjrI=
x-amz-request-id: JJZF1H73M33Y7W48
Date: Sun, 02 Oct 2022 15:15:22 GMT
Last-Modified: Thu, 06 Jan 2022 06:57:00 GMT
ETag: "600e6fd78377375dfc3cc9b9dadbfdfa"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 3871


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3871), with no line terminators
Size:   3871
Md5:    600e6fd78377375dfc3cc9b9dadbfdfa
Sha1:   e3bb1098f191d2f9bc63a6402f5ae40d80edcd2c
Sha256: b5260409c7187bbfd8d84eccf7bf1ccf96644798946c228af252775f7cb0cc13
                                        
                                            GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/08/30120503/germ-one.svg HTTP/1.1 
Host: s3-eu-central-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.219.168.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
x-amz-id-2: LnvFg6KDrJLAwKzI6fuf/WPX+1shezxio4jZZh3hi7fvp1skyvajiMlikV0N6ORPQ//qh3rZnQQ=
x-amz-request-id: JJZD2F6GEVYCNST5
Date: Sun, 02 Oct 2022 15:15:22 GMT
Last-Modified: Thu, 30 Aug 2018 12:03:58 GMT
ETag: "27398d9974a03682bca55a5d1c83cfc0"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Fri, 30 Aug 2019 12:05:03 GMT
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 2016


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   2016
Md5:    27398d9974a03682bca55a5d1c83cfc0
Sha1:   011509bac7ec598f0ba6ff215d92487fc8965bac
Sha256: 28a2f89175ec3599ef375767ea6996f5bb73d38e5a54025deb7f0370505c382f
                                        
                                            GET /wp-content/themes/Divi-child/fonts/RobotoCondensed-Regular.ttf HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/vnd.ms-opentype
                                        
Content-Length: 170284
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:32 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 02 Oct 2022 07:51:07 GMT
Cache-Control: 2592000
ETag: "a5a6b71255dc832da585d5c94fa1a115"
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 cbacf5aa8c3f4eb54c61c0a348347df4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: OsiM_hBvwwJ7XPtCQhroCwkswVu1LXp0tFEJZI4gMxoKVoS6-RE4rQ==
Age: 26655


--- Additional Info ---
Magic:  TrueType Font data, 18 tables, 1st "GDEF", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.Roboto CondensedRegularVersion 2.137; 2017RobotoC\012- data
Size:   170284
Md5:    a5a6b71255dc832da585d5c94fa1a115
Sha1:   6a632e0244ae68e70aeb8c8a5d3b360e1648712b
Sha256: 6a2cfb7e61dd09d77526fd314b256894094f96e3a6f3149d9f8000c1132ef4b8
                                        
                                            GET /wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.js HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:56 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
transfer-encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   21780
Md5:    03e91f122aa5fd425abbe23c85546eb0
Sha1:   c87a3db06c5db4e75e639382f174eafa439aeb27
Sha256: 296945e5922e764eef17b1b4a3ee3e60dc202b3c7f074150b62158915bf74e33
                                        
                                            GET /wp-content/themes/Divi-child/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Content-Length: 71896
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:43 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 02 Oct 2022 07:51:07 GMT
Cache-Control: 2592000
ETag: "e6cf7c6ec7c2d6f670ae9d762604cb0b"
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 16ddb516eb340cc6c204abda31318bf8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: pJCsyiKiUnkE4fnhpzvOymrHSj3GacDK94t5uwefZSdszi-c8spiKw==
Age: 26655


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Size:   71896
Md5:    e6cf7c6ec7c2d6f670ae9d762604cb0b
Sha1:   97e438cc545714309882fbceadbf344fcaddcec5
Sha256: 7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
                                        
                                            GET /lycamobilespain-website/lycamobile-es-cms/wp-content/uploads/2018/06/25105546/activate-your-sim.svg HTTP/1.1 
Host: s3-eu-central-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.219.168.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
x-amz-id-2: l4GScqiUxgTkgzlyqOFh9xEGUCLcbpHj0FOuXx3E1wgWDcgw7Pc1GZWC2caElaCP4/9Iua7ddMM=
x-amz-request-id: JJZESE8KD6XC4AV9
Date: Sun, 02 Oct 2022 15:15:22 GMT
Last-Modified: Mon, 16 Jul 2018 16:00:42 GMT
ETag: "f6081e075c11d4ee9be3b614cdcab433"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 1914


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1914), with no line terminators
Size:   1914
Md5:    f6081e075c11d4ee9be3b614cdcab433
Sha1:   5b46fc85e5698f59567f0446251f52e1207e8d72
Sha256: 6369d8666187a0119acd2ad3f3bff8472f2cc720649cfa8966fc23719078dd39
                                        
                                            GET /wp-content/themes/Divi-child/style.css HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 15 Jul 2022 07:16:49 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 05:58:26 GMT
ETag: W/"07571e83ac07033388dffa6b348bc459"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 eee2eabf1d5db87be015bf39b123f234.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: 8YsrzGcK51mT-6osaI1J8mU_DeZkg9C_N1IcPdhcM0_-w4J8ofRzbA==
Age: 33416


--- Additional Info ---
Magic:  data
Size:   169800
Md5:    36b5da0333389306669655a13f2209ad
Sha1:   8354979a1c3d7911df925e3b57d8c99398d54020
Sha256: 03b4e8042b9af4bf3349428fa734ed583f2d5d83287e1f42cf4d514c909146ef
                                        
                                            GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/06075441/thumbnail_livechat-home-new.png HTTP/1.1 
Host: s3-eu-central-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.219.168.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: MLFnNzqzO5YjtVSKIgTkExHXXspAcGGs6/e8s5lRdULOlz/JoukxLwIxCze3N+ypk7Zy3fMnzDw=
x-amz-request-id: JJZ7BVN89HPHAV7X
Date: Sun, 02 Oct 2022 15:15:22 GMT
Last-Modified: Wed, 06 Oct 2021 07:51:37 GMT
ETag: "997934aedeaea00686b8b3ddae955e3f"
Cache-Control: max-age=31536000
Expires: Thu, 06 Oct 2022 07:54:41 GMT
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 4589


--- Additional Info ---
Magic:  PNG image data, 169 x 101, 8-bit/color RGBA, non-interlaced\012- data
Size:   4589
Md5:    997934aedeaea00686b8b3ddae955e3f
Sha1:   6f1ab00c2308c25108bd68368cbacfc6410bdc43
Sha256: d9d42de448b8e9c5ba116ccd270456367179a295167174953421fafafb5a932b
                                        
                                            GET /wp-content/themes/Divi/core/admin/fonts/modules.ttf HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: application/vnd.ms-opentype
                                        
Content-Length: 82920
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 02 Oct 2022 08:04:17 GMT
Cache-Control: 2592000
ETag: "87a9fcfa516cd7576d52480b0bb21dae"
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 16ddb516eb340cc6c204abda31318bf8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: wfhfCezBD44Asd5g78cp0g__l1aYE0ywo8vf30z4W45FxW8GU8Xlqg==
Age: 25865


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, modules \012- data
Size:   82920
Md5:    87a9fcfa516cd7576d52480b0bb21dae
Sha1:   7b2b31c6f1e91d53b76daad7fedea802592e4da4
Sha256: c683211e591f2048ec4a840586e4f849894c8a57c147f23d7b5652d61c1260e2
                                        
                                            GET /wp-content/themes/Divi-child/img/roaming.svg HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:38 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 09:31:48 GMT
Cache-Control: 2592000
ETag: W/"babdb0858ab2d63fb92348873cb8ddba"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: yLqBp9qo_MDbpr4nKxaw1QNcQiyiD2W0v1c9KqNgAcfZpph4ZVboeg==
Age: 20614


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1180
Md5:    85a478244d79ab2a1e7caa74f73e89f7
Sha1:   eb1209457084c01a4a6685a268d4e495ea67a5d0
Sha256: cab3eb0e16aec816bf8f738a6fbe7de33f67f2703c00fd13213385314f497f60
                                        
                                            GET /wp-content/themes/Divi-child/img/buy-bundles.svg HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:33 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 08:35:54 GMT
Cache-Control: 2592000
ETag: W/"5fb98b5d9331ffac000aa38ccddcc058"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 71d62f2b54e1ac2dcda3d438900cc504.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: __0-3WZEAi6Skt-EkvwVQHGASjrqatKtR41Lu4j4SW1fHgD4xLVABg==
Age: 23968


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   525
Md5:    089df5ad1f13ed4a67ba8ed563f2fb7a
Sha1:   49a349c8d3912f6c9ef5db1519a76519f890b934
Sha256: 0064959abecb0e9b2ec31a3ef0e7560bcc6ecd0dc246374e49dd674ae6e510b6
                                        
                                            GET /wp-content/themes/Divi-child/img/quick-topup.svg HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Content-Length: 794
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:38 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 02 Oct 2022 09:31:48 GMT
Cache-Control: 2592000
ETag: "cf1e3a7aa04f38e1620d798558f2d606"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 eee2eabf1d5db87be015bf39b123f234.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: RY3cXS1YBTOmH56QO7eQ7T5jPiKDqyS_TFeAFgHWB6RaJrlg3oF4bg==
Age: 20614


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (568)
Size:   794
Md5:    cf1e3a7aa04f38e1620d798558f2d606
Sha1:   2c9ad3c5756a3992d80838aea679b7d13fe2e17b
Sha256: aa9f77e1ebcb1a541bf88994cecc556f52cf27c8176ee8ae14789f38ff55de84
                                        
                                            GET /wp-content/themes/Divi-child/img/store-locator.svg HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Content-Length: 958
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:39 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 02 Oct 2022 08:35:54 GMT
Cache-Control: 2592000
ETag: "e21443e37ca744aa7d29d2829b46591a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: 0JYt3pAlEzMOPZYzRScp3caMOdtjOo30nq96qwLQjrzu0nkJ9YgttQ==
Age: 23968


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   958
Md5:    e21443e37ca744aa7d29d2829b46591a
Sha1:   ca3158f56f1c6e1de9564583c398e78d097ed4c4
Sha256: d07b478885d58c759e9494a4756dbec42b616fc46a14d5b5eed6bbc0dae35352
                                        
                                            GET /wp-content/themes/Divi-child/img/international-1.svg HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:37 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 13:19:42 GMT
Cache-Control: 2592000
ETag: W/"5056ce6c6883a123509cb1cca4031429"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: qt4JiwmsIYjfbijeXU3QYsABoCdPeU0VIoVc10zTKfHhlLrY1IigEQ==
Age: 6940


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   2027
Md5:    2a73dee84801916ccaf181a67f0cf100
Sha1:   a4a6badc23560c4d77573c5132391b8d2f1d7858
Sha256: 8b046210225c7482a2e232ec17ad9c3364825c275976ba6beb33bdb904b91c78
                                        
                                            GET /wp-content/uploads/json_uploads/errorhandle.json HTTP/1.1 
Host: www.lyca-mobile.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-m/?utm_source=Selectivv&utm_medium=banner&utm_campaign=NOR22070001&utm_term=P5&user_id={clickid}&cmpid=6136008&rtkcid={clickid}&rdk=rk1
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=4to81pb7bub07sooavo00qlenr; newsim_tab=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         3.120.43.17
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Date: Sun, 02 Oct 2022 15:15:21 GMT
Last-Modified: Thu, 17 Jun 2021 16:25:58 GMT
Server: Apache
Strict-Transport-Security: max-age=300; includeSubdomains;
Vary: User-Agent,X-Forwarded-Proto
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 4099
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (1442)
Size:   4099
Md5:    9c8e140cc95739dfbfa7e6bb132e890c
Sha1:   6995f8ca8d9fb5a68cd8fae4460502bc73fa2c92
Sha256: 3906c7164353e4321efbc4637888bd17c95938e6329f2df1f19c444350f7bbad
                                        
                                            GET /wp-content/themes/Divi-child/img/faq.svg HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:36 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 13:19:42 GMT
Cache-Control: 2592000
ETag: W/"6f426cc5e8b051ff22516894f385ff7b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8424840dfb521b34b0bba436441f1c36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: KQSWiUMs5I1NAm56s-_U3FxHDs_BLP4_-iPb3p8EyTRyfsd5hRAQiw==
Age: 6940


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   790
Md5:    c152dd07a1a6fe2c15c74ff8423d8879
Sha1:   9f6ef66fa5eeac1d136953629cb1d81a31465583
Sha256: 732e219e66185a10753310a8133f101e6608fb0fb5eb956130e836359a2a869d
                                        
                                            GET /wp-content/themes/Divi-child/img/favicon.ico HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Content-Length: 1150
Connection: keep-alive
Last-Modified: Mon, 18 Oct 2021 07:31:03 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 02 Oct 2022 07:32:19 GMT
ETag: "2eed3e79d00bb4bc002d5cff16db207b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 eee2eabf1d5db87be015bf39b123f234.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: AYloXJD8RB01EETywlgFIDARBB3lXeRBQtVejyat8RGB7G15QIkGfQ==
Age: 27783


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    2eed3e79d00bb4bc002d5cff16db207b
Sha1:   dc4cdaf71a4d8fa44eabfe5530403988de1d2bf8
Sha256: 0ed56bfe2a738fc69afc0c991d8c65abe9f5a2204c9a44fa0570e5bd8e47466f
                                        
                                            GET /wp-content/themes/Divi-child/img/contactus.svg HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:36 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 13:19:42 GMT
Cache-Control: 2592000
ETag: W/"be5d61340a17d803b181cf8d2cee077c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 71d62f2b54e1ac2dcda3d438900cc504.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: mwUeroLkI7_5u6SX1zXBCuMpsSPJRuCSzrclXLPjU6WjBLfeVXhcpg==
Age: 6940


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   646
Md5:    b127a283d70bf1c4ecbfab932da2aa69
Sha1:   90be95e05ee092b3b78059ec4d8451468c0f3b64
Sha256: 9d9ef67ed9cdf2eae32c4f8ffb5a1c154501573a36d37bfd0ca910e1e8ae5ca2
                                        
                                            GET /wp-content/themes/Divi-child/img/mobile-settings.svg HTTP/1.1 
Host: d3uayxmzbnco7f.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         216.137.34.120
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:37 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 13:19:43 GMT
Cache-Control: 2592000
ETag: W/"94e63e235909be075a2884c96906c941"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c1164d25e78eb0e6f31a8f9e96b5dc72.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P2
X-Amz-Cf-Id: oteVwemDjbKovyS19HdoqyL3dDbMTED-MWw6CUzq55S6jXvydVolxg==
Age: 6939


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1237
Md5:    3b9d0b16e49f983feb68c71c0c435ec4
Sha1:   e6d82cd2b529e1ec219aa8503080b5815a3d271f
Sha256: 9e17a9e0e46f86caaac0774b886dce68c39a3de44469efb7088200e449343d22
                                        
                                            GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102139/header-fb-new.svg HTTP/1.1 
Host: s3-eu-central-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.219.168.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
x-amz-id-2: knjG7/Dar94j/zPXjDxz6JMK2st0D4UgxKlJzQWngn3E47nDrlFgzWpus/8Y2pUuYAYDlbFiAy0=
x-amz-request-id: 4E20X85V5YR9MQV7
Date: Sun, 02 Oct 2022 15:15:23 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:37 GMT
ETag: "852b81efbbae0dcfd857f87d6c98189a"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:39 GMT
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 8393


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (11262)
Size:   8393
Md5:    852b81efbbae0dcfd857f87d6c98189a
Sha1:   d8022ff32daac638cb94b4bd15ec7e7891eaefcb
Sha256: 58480bbcf53220a5a596bebc793c65cd7a22b77f49e4329c0f5f7c8ed8da125a
                                        
                                            GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102144/header-twitter-new.svg HTTP/1.1 
Host: s3-eu-central-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.219.168.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
x-amz-id-2: IsxbuHOryXkETxgdAWhsTJkOhCqfsPVZbfIkE93BgIkF5iQjWrfZCVfDMEagd8733S3AJtAaYUM=
x-amz-request-id: 4E22X6D4CZ7GPXEA
Date: Sun, 02 Oct 2022 15:15:23 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:42 GMT
ETag: "1b0607b1b648a1f756b1419bbbfaacd9"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:44 GMT
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 15288


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (20393)
Size:   15288
Md5:    1b0607b1b648a1f756b1419bbbfaacd9
Sha1:   fd5d74112b7172baffc62e024b91f398f0d280cd
Sha256: 2fedb7c9aad7c7e9473f4ce37fe4ffb0f23ed83dbc188a14aad73de5e858e542
                                        
                                            GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102142/header-insta-new.svg HTTP/1.1 
Host: s3-eu-central-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.219.168.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
x-amz-id-2: jXnQMzlat6hDq0gENXZ5was0+aEKYzEUqceZBoGwfaHOlbob/uR/+MfOMiSltSUR5riUt4kf6tc=
x-amz-request-id: 4E2A2AHKMW9A7WHK
Date: Sun, 02 Oct 2022 15:15:23 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:40 GMT
ETag: "9a55d81cd439e49798109bd463dd1f1b"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:42 GMT
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 17998


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (23958)
Size:   17998
Md5:    9a55d81cd439e49798109bd463dd1f1b
Sha1:   1afef555c1541124cc9b6c85ae258a72b6818ec1
Sha256: 61f9f838ab4dd5a633b7ae5329af4d2acae8045d2e0e667fd73a3f116b00dab6
                                        
                                            GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/11065021/european-union_new.svg HTTP/1.1 
Host: s3-eu-central-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.219.168.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
x-amz-id-2: 7ej/uQYlIF+Y17TAlnuyqb2kJVfm0BkOFnw7sKMqkCo0zTFIcOsqghKnB77KVtR+g0JblCxRDmI=
x-amz-request-id: 4E26R1PV6TN1D1AM
Date: Sun, 02 Oct 2022 15:15:23 GMT
Last-Modified: Mon, 11 Oct 2021 06:50:14 GMT
ETag: "300ca84c801a3dff40b9f85bd024669a"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Tue, 11 Oct 2022 06:50:21 GMT
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 726


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2193), with no line terminators
Size:   726
Md5:    300ca84c801a3dff40b9f85bd024669a
Sha1:   d6a6b760a33b8db7e552cb63ad7ca064ef4fae70
Sha256: 9de40f884583d6bc5bbd40bd5b74d0b20c853538aa6a3fabf4144c23ef674983
                                        
                                            GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102146/header-youtube-new.svg HTTP/1.1 
Host: s3-eu-central-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.219.168.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
x-amz-id-2: /csu4ArwxG7A7pPD9ujlMm+thpHRSek4y0HhvXSysBwMm+OePrfzndVGLXSebFipkcIn8mHXh8k=
x-amz-request-id: 4E21E5YS2GZT7107
Date: Sun, 02 Oct 2022 15:15:23 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:44 GMT
ETag: "74d50291fad9e577ecbde522f9882145"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:46 GMT
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 18504


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (24655)
Size:   18504
Md5:    74d50291fad9e577ecbde522f9882145
Sha1:   7dcf477169f8d5a1d0ee5dd970c10da54cde13f1
Sha256: a9fc0811ec1d0594b50275f6bb1e275a61144d25f8885333fd5172d34b7f8655
                                        
                                            GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/07072809/breadcrumb_newbrand_be.png HTTP/1.1 
Host: s3-eu-central-1.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.219.168.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: rza1P99lJIUEpA2D5wlV6FBL3UuPry7fTczXrIgCTYXGPCcNjHAyEJqvaxMJhVoAoZKy/FOiirs=
x-amz-request-id: 4E2CRCMV55ZP4QFQ
Date: Sun, 02 Oct 2022 15:15:23 GMT
Last-Modified: Thu, 07 Oct 2021 07:25:03 GMT
ETag: "ad2b8da460e7f9706da7008773b132b3"
Cache-Control: max-age=31536000
Expires: Fri, 07 Oct 2022 07:28:09 GMT
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 23600


--- Additional Info ---
Magic:  PNG image data, 1920 x 140, 8-bit/color RGB, non-interlaced\012- data
Size:   23600
Md5:    ad2b8da460e7f9706da7008773b132b3
Sha1:   5f7ddfbb68f26ba1fb5f0769dca8f88bc01d7829
Sha256: a55b84d8174fc43917cae9c623df2b1758d7c05493b0881252a55ca87dcfdbf0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         108.138.212.113
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 15:15:22 GMT
Last-Modified: Sun, 02 Oct 2022 13:51:01 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 6fa047d03f6ff664c45c23f0975fa9a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P3
X-Amz-Cf-Id: WIOrG_Sn8f0atNGM3VXA-aA1AGpEgQQmhC7OS1XI7LNl6peX6FnWOA==
Age: 5061

                                        
                                            GET /uc.js HTTP/1.1 
Host: consent.cookiebot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.84.152.64
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: gzip
last-modified: Tue, 20 Sep 2022 10:43:50 GMT
accept-ranges: bytes
etag: "1441fadeddccd81:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 31445
cache-control: public, max-age=725
expires: Sun, 02 Oct 2022 15:27:27 GMT
date: Sun, 02 Oct 2022 15:15:22 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Size:   31445
Md5:    1f7f6b319b01271a5c96673234d1997d
Sha1:   217522b7111ec672fcc593c5fcd9f6688e96241c
Sha256: c22fe53aab4bcf40528aa983600a7580140b22624da715018aa274750bbfd84c
                                        
                                            GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05104722/Belgium1.png HTTP/1.1 
Host: s3-eu-west-2.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.95.144.45
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: C+zbuLzsXlMlJSp7QL9EAXDL62lykeLJleJd/uTm6fS+Zah7GWKXLYC0/JAxjR5Ie+Fv5vepvFM=
x-amz-request-id: 4E27ESD3NSBRWVE4
Date: Sun, 02 Oct 2022 15:15:23 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:28 GMT
ETag: "05b0430105aa244028af3d4812cfa862"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 10:47:22 GMT
x-amz-version-id: xPo84QQnS78MMDy3NywneivcwR8deWQC
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 3134


--- Additional Info ---
Magic:  PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Size:   3134
Md5:    05b0430105aa244028af3d4812cfa862
Sha1:   9eab0b05bd6168d57cce062705562be4feb82f6f
Sha256: 58c034ac6bd3419e05ea16f2ebfbc4682fb594f29a4e2d5d794bcfec5b0993fb
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 15:15:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05135311/Norway1.png HTTP/1.1 
Host: s3-eu-west-2.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.95.144.45
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: FsDqgHUJWteCbX9U2orGM2ino3mduawmVkePyesTxkLcTBNa7lKbAreWRNl6j39oGoy6DTnHdhg=
x-amz-request-id: 4E21TMCXEFP2PPSC
Date: Sun, 02 Oct 2022 15:15:23 GMT
Last-Modified: Wed, 14 Jul 2021 12:09:56 GMT
ETag: "9021ba1b169c443fcf1ef4205c66746b"
x-amz-version-id: U31NsyBZvHkqDUS_Ugic5SNoLOgwf_dQ
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 3056


--- Additional Info ---
Magic:  PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Size:   3056
Md5:    9021ba1b169c443fcf1ef4205c66746b
Sha1:   57b448f98b746fdd70b85c2c3db3a692c59ed4e9
Sha256: 29be706a53e4348fc185d63ce98c4747e517c1371e9806be940e13637eeed375
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         108.138.212.113
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 15:15:22 GMT
Last-Modified: Sun, 02 Oct 2022 14:20:03 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 ce3edb24525b5cd14ad82bbb2327e8a4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-P3
X-Amz-Cf-Id: MjLRrtWBTLnwPtmm2u1mmtUb7IKry9O8PIPrKPHn8JXcM5Nk-RZSqw==
Age: 3319

                                        
                                            GET /activityi;src=11029147;type=invmedia;cat=nolyc0;ord=2739333332976;gtm=2wg9s0;auiddc=482800386.1664723722;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-m%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DNOR22070001%26utm_term%3DP5%26user_id%3D%7Bclickid%7D%26cmpid%3D6136008%26rtkcid%3D%7Bclickid%7D%26rdk%3Drk1? HTTP/1.1 
Host: 11029147.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.70
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 02 Oct 2022 15:15:22 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 470
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 02-Oct-2022 15:30:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (653), with no line terminators
Size:   470
Md5:    1d6c87d857e64a3fe030268be67b6963
Sha1:   cac2f3ae7c3a1e051064aebb8fddbc921a6de8ca
Sha256: 4e1d962a0e13b4dfbaf6f9b0817e12d8cecb033b7da11aadf4a4f2ae4a48f5f1
                                        
                                            GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112045/France1.png HTTP/1.1 
Host: s3-eu-west-2.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site