costadelkasbah.blogspot.co.uk/search/label/Hezbollah%20Leader%20Tells%20Members%20to%20Be%20Ready%20for%20War
142.250.74.97 232 B URL costadelkasbah.blogspot.co.uk/search/label/Hezbollah%20Leader%20Tells%20Members%20to%20Be%20Ready%20for%20War
IP 142.250.74.97:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 10d3251bf96241abbc0ced446fcb665f
2c739f6e24c3cdc54e12205effa60bfbece52e55
d5b86eb7d993924309b2615e5b3d9b61862ae6cca1ff1cb5b4bbd9e900e05e7b
Analyzer Verdict Alert fortinet Malware
GET /search/label/Hezbollah%20Leader%20Tells%20Members%20to%20Be%20Ready%20for%20War HTTP/1.1
Host: costadelkasbah.blogspot.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Location: http://costadelkasbah.blogspot.com/search/label/Hezbollah%20Leader%20Tells%20Members%20to%20Be%20Ready%20for%20War
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sun, 09 Apr 2023 17:56:23 GMT
Expires: Sun, 09 Apr 2023 17:56:23 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 232
Server: GSE
fonts.googleapis.com/css?family=Open+Sans:700
142.250.74.106 597 B URL fonts.googleapis.com/css?family=Open+Sans:700
IP 142.250.74.106:0
Hash 3f321fb4d41564300e137128f58e35aa
cab8672024fe223c6e7269b31acd2b1efffbdd2c
3577eeae295b4422512d0d895423d6910e7c494f44e596f81c3e4d54128bd05e
GET /css?family=Open+Sans:700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sun, 09 Apr 2023 17:56:25 GMT
Date: Sun, 09 Apr 2023 17:56:25 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash a3644427874f03c99c9471b14037bb87
35cb85e3672efe78d79672da60b47cb3f1c6464a
d6bd4fc0aa999201808b3b3b5c402d67d87e296f824ee48c647731d7acab9776
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 9b344d91b039f9ccdd512f5b431b516d
001e60bde6a047b28e338818f4b92b9779c8a63e
8179817630b290197e5ebc0dbea3e065708fb56eb680a3409e44f712bd5c26dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash bb566a0dc2b24a4c04737ea028d2dc15
a32cd606fb918d21011dea617eb8436b72bdd95a
a2f6eefac6dbb121841e0f810d8181426a4861d75da8358fc6472ae5b3fd97f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
216.58.207.233 6.6 kB URL www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP 216.58.207.233:0
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 08 Apr 2023 17:05:12 GMT
expires: Sun, 07 Apr 2024 17:05:12 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 07 Apr 2023 23:56:41 GMT
content-type: text/css
vary: Accept-Encoding
age: 89473
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
syndication1.viraladnetwork.net/getad/
188.114.96.1 0 B URL syndication1.viraladnetwork.net/getad/
IP 188.114.96.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getad/ HTTP/1.1
Host: syndication1.viraladnetwork.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 09 Apr 2023 17:56:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 09 Apr 2023 18:56:25 GMT
Location: https://syndication1.viraladnetwork.net/getad/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dM1tGoUN1BfrBRinZFtT1Af6TY5RGc5iIm%2BAJsZCL2uQk7X7M%2B2cWhv1iRnNVNHrbcG6hNPzaWc%2F8VGGyIB%2BYu77lvH9JB9ILdcnLdpFq3TI9vsoswayFeXTopnPiwZVDDzSjR%2FmwleJZ1zwJj9WwUAJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b54a06958a3067b-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 0c3b0b20c5a2c7b818da43e38478e8f9
d4f4312a880db2ed8a860d539c97f048f8577203
b1d4370b03059fea7e74e1b4539c68422291ffb6bfccc018bbe4fa3d0576f76d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
142.250.74.170 33 kB URL ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
IP 142.250.74.170:0
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 18351732b1849ba758e98884e186b3c8
d735af8661eda41ff4ffbf76e6a284a0e2deb81c
bfac625d304d52e04f2caeb19266354749929c888ca09d3d1e3edcbb8770d0f0
GET /ajax/libs/jquery/1.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33333
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Apr 2023 18:05:12 GMT
expires: Sat, 06 Apr 2024 18:05:12 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 172273
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.js
142.250.74.170 73 kB URL ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.js
IP 142.250.74.170:0
Hash 1e01db4ab2bea3e8f46e89e276bc5b5f
83522d73119e24b1caa65f5bbe3e3f2cbf9ed1f2
4f00667f042d25968c95f21b90a3d3272928b5900b2e3137193be41e3e286595
GET /ajax/libs/jquery/1.7.1/jquery.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 72593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Apr 2023 18:05:50 GMT
expires: Sat, 06 Apr 2024 18:05:50 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 172235
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
costadelkasbah.blogspot.com/search/label/Hezbollah%20Leader%20Tells%20Members%20to%20Be%20Ready%20for%20War
142.250.74.97 67 kB URL costadelkasbah.blogspot.com/search/label/Hezbollah%20Leader%20Tells%20Members%20to%20Be%20Ready%20for%20War
IP 142.250.74.97:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (352)
Hash 6956bad0f31fff51dee357be7e788b23
638bc293419273d3e433cf229eb0ae6bb4aee094
87016c0b0042430e4636c042e3eba986d25ca2a5a34228d58eab03d9da3147fc
Analyzer Verdict Alert fortinet Malware
NIDS Severity Alert suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3
GET /search/label/Hezbollah%20Leader%20Tells%20Members%20to%20Be%20Ready%20for%20War HTTP/1.1
Host: costadelkasbah.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Sun, 09 Apr 2023 17:56:24 GMT
Date: Sun, 09 Apr 2023 17:56:24 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 20 Mar 2023 11:50:58 GMT
ETag: W/"2b5aa06f285d7567ebd10e98d97ed5c43a29650ead179cb1d5f8ea2435a7286f"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 67396
Server: GSE
2.bp.blogspot.com/-Rz7rYOB4ILM/UwBj5MX6WkI/AAAAAAAAAFU/KHY891iWQAQ/s1600/10_Comitia_Centuriata_FI+(1).jpg
142.250.74.161 3.0 kB URL 2.bp.blogspot.com/-Rz7rYOB4ILM/UwBj5MX6WkI/AAAAAAAAAFU/KHY891iWQAQ/s1600/10_Comitia_Centuriata_FI+(1).jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 85x85, components 3\012- data
Hash bc43f3735518cdc08c78958ababd7927
a5e3e0878555d325a41e01a5804f1b556f1d2f5d
be79e95aeabccc17e8b4453be1e90121a1f3262fdcc1743ae67f9eb10ebbd668
GET /-Rz7rYOB4ILM/UwBj5MX6WkI/AAAAAAAAAFU/KHY891iWQAQ/s1600/10_Comitia_Centuriata_FI+(1).jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="10_Comitia_Centuriata_FI (1).jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3006
X-XSS-Protection: 0
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v329"
Content-Type: image/jpeg
Vary: Origin
Age: 0
2.bp.blogspot.com/-CTFKAN8aYc4/Uv_u4D1hh5I/AAAAAAAAAE0/cbZHzghH_gg/s1600/159291557.png
142.250.74.161 11 kB URL 2.bp.blogspot.com/-CTFKAN8aYc4/Uv_u4D1hh5I/AAAAAAAAAE0/cbZHzghH_gg/s1600/159291557.png
IP 142.250.74.161:0
File type PNG image data, 85 x 85, 8-bit/color RGB, non-interlaced\012- data
Hash 3e075c9110b40cdaab42dc49f9ad141a
636735abee5244e4c80a0814e3b8809829906dbc
8733c9d56e26a9dd771b48faebb523bc8f060f56a7d48c1c64030827c3419604
GET /-CTFKAN8aYc4/Uv_u4D1hh5I/AAAAAAAAAE0/cbZHzghH_gg/s1600/159291557.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v4e"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="159291557.png"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 10839
X-XSS-Protection: 0
3.bp.blogspot.com/-0WxJzd3e19A/UwBjlpi3q2I/AAAAAAAAAFM/MAQKgoG3lgI/s1600/Louis-and-Louisa-Gregory1.png
142.250.74.161 5.0 kB URL 3.bp.blogspot.com/-0WxJzd3e19A/UwBjlpi3q2I/AAAAAAAAAFM/MAQKgoG3lgI/s1600/Louis-and-Louisa-Gregory1.png
IP 142.250.74.161:0
File type PNG image data, 85 x 85, 8-bit grayscale, non-interlaced\012- data
Hash 6c9ca69c5d19a0d3c7ed000e2d685638
bb1ae27f2460a2d4eec92e068ead202c9887f142
a190cd09b44e214f2f16671a36b49cf57f1c53a809e941aaec59a753c7a5ec81
GET /-0WxJzd3e19A/UwBjlpi3q2I/AAAAAAAAAFM/MAQKgoG3lgI/s1600/Louis-and-Louisa-Gregory1.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v54"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Louis-and-Louisa-Gregory1.png"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 4970
X-XSS-Protection: 0
3.bp.blogspot.com/-0wrhZ1yoWA4/UwBk7DV17vI/AAAAAAAAAFk/PreckVRI8Gc/s1600/featured17.jpg
142.250.74.161 3.5 kB URL 3.bp.blogspot.com/-0wrhZ1yoWA4/UwBk7DV17vI/AAAAAAAAAFk/PreckVRI8Gc/s1600/featured17.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 85x85, components 3\012- data
Hash 9432bd30a464b1b2c35334c7711b3125
a751f0b363492874fe785964a5e90bf14990dee9
e66dc0160bd3cc0bb0d76fa6273470900ade34bbf11c45154e2b92716d3e154f
GET /-0wrhZ1yoWA4/UwBk7DV17vI/AAAAAAAAAFk/PreckVRI8Gc/s1600/featured17.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v329"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="featured17.jpg"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 3506
X-XSS-Protection: 0
3.bp.blogspot.com/-M92SIZfG3Uw/UwBklwHDApI/AAAAAAAAAFc/mbS1L_9R3c4/s1600/featured-sport.jpg
142.250.74.161 7.4 kB URL 3.bp.blogspot.com/-M92SIZfG3Uw/UwBklwHDApI/AAAAAAAAAFc/mbS1L_9R3c4/s1600/featured-sport.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 85x85, components 3\012- data
Hash 1f2f00b7bf5a530268c2efe8dfe1be9d
372ea889e9e5cf4e096a8d5ba3b909bf408b13f0
795d7eb0ac2c23675ccd7e81969c7c3f09e80e3092a1da2e8ddbaf6425508589
GET /-M92SIZfG3Uw/UwBklwHDApI/AAAAAAAAAFc/mbS1L_9R3c4/s1600/featured-sport.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v329"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="featured-sport.jpg"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 7430
X-XSS-Protection: 0
4.bp.blogspot.com/-dy4P1L3OKgU/Uv_uBkIyYNI/AAAAAAAAAEs/31nGdL9g7GQ/s1600/6_185421660_FI+(2).jpg
142.250.74.161 3.4 kB URL 4.bp.blogspot.com/-dy4P1L3OKgU/Uv_uBkIyYNI/AAAAAAAAAEs/31nGdL9g7GQ/s1600/6_185421660_FI+(2).jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=Creepy glowing orb hovering over a woman sleeping in bed, software=Google], baseline, precision 8, 85x85, components 3\012- data
Hash 0ba87e92d6d0e1e7f64c3313ed56863b
cf05ddd5c31e0010cfea300424f1a4a10cb608d5
18f73a354aaa64acbfd27d5b74545434d5cc74313ab16ecb942cb9ae512d69da
GET /-dy4P1L3OKgU/Uv_uBkIyYNI/AAAAAAAAAEs/31nGdL9g7GQ/s1600/6_185421660_FI+(2).jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="6_185421660_FI (2).jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3429
X-XSS-Protection: 0
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v329"
Content-Type: image/jpeg
Vary: Origin
Age: 0
4.bp.blogspot.com/-zUI3dOxlEEw/Uv_tRnOBBCI/AAAAAAAAAEk/wD0fxgj2NQs/s1600/featured-civil-war+(1).jpg
142.250.74.161 5.8 kB URL 4.bp.blogspot.com/-zUI3dOxlEEw/Uv_tRnOBBCI/AAAAAAAAAEk/wD0fxgj2NQs/s1600/featured-civil-war+(1).jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=Civil War Cannon Firing, software=Google], baseline, precision 8, 85x85, components 3\012- data
Hash 58bb9b96c3127b02991c3b4b0c6bfa2d
ee455759546597d44c501ac127bf8306494c2484
e689abefe2e80860380fe3eccd5e46c327d5d2cad0be6d30849e679de18f5c4a
GET /-zUI3dOxlEEw/Uv_tRnOBBCI/AAAAAAAAAEk/wD0fxgj2NQs/s1600/featured-civil-war+(1).jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="featured-civil-war (1).jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5800
X-XSS-Protection: 0
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v329"
Content-Type: image/jpeg
Vary: Origin
Age: 0
4.bp.blogspot.com/-0wTkPdq_n9A/Uw4LZvqR2mI/AAAAAAAAAN4/yKZ9EjRJSSo/s1600/1.png
142.250.74.161 4.6 kB URL 4.bp.blogspot.com/-0wTkPdq_n9A/Uw4LZvqR2mI/AAAAAAAAAN4/yKZ9EjRJSSo/s1600/1.png
IP 142.250.74.161:0
File type PNG image data, 380 x 57, 8-bit/color RGBA, non-interlaced\012- data
Hash 30870adad9dbbd83ec1a13ef062486bc
cb1331b0e9e9c73cf6b326f60381f782ef7223ca
554a059294c61e6a8fe3bc6e2bfc7fc5c5e39776c09c0d738553ff27fa960cfe
GET /-0wTkPdq_n9A/Uw4LZvqR2mI/AAAAAAAAAN4/yKZ9EjRJSSo/s1600/1.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "vdf"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="1.png"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 4577
X-XSS-Protection: 0
1.bp.blogspot.com/-T-PC_9_N2o8/UwBmIRk9JdI/AAAAAAAAAF4/nvWUTjClVrI/s1600/featured-copy.jpg
142.250.74.161 6.6 kB URL 1.bp.blogspot.com/-T-PC_9_N2o8/UwBmIRk9JdI/AAAAAAAAAF4/nvWUTjClVrI/s1600/featured-copy.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=magic, software=Google], baseline, precision 8, 85x85, components 3\012- data
Hash 25943e8b84bcf80ad30c496fc9c35776
81968f4d8fadf2c9fb550a0cf603022fc71284b2
b7e3cef421dd0be5fb81445d7ccba3fb875689fc0e8e7143d836a1c0c12b2c0c
GET /-T-PC_9_N2o8/UwBmIRk9JdI/AAAAAAAAAF4/nvWUTjClVrI/s1600/featured-copy.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="featured-copy.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6557
X-XSS-Protection: 0
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v329"
Content-Type: image/jpeg
Vary: Origin
Age: 0
1.bp.blogspot.com/-RMtJaeN0oEs/UwBod0bEfKI/AAAAAAAAAGE/b9TDfjn8ze4/s1600/featured-west.jpg
142.250.74.161 3.6 kB URL 1.bp.blogspot.com/-RMtJaeN0oEs/UwBod0bEfKI/AAAAAAAAAGE/b9TDfjn8ze4/s1600/featured-west.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 85x85, components 3\012- data
Hash fd6fc20a1d240a6da8d2290b009341d7
6dfc8d78520cb84314abf66d17cf8bc7053b4ff0
aff3d8a39a826326c6ad8e057139a796644d7ee495b3190154452df7ca345a98
GET /-RMtJaeN0oEs/UwBod0bEfKI/AAAAAAAAAGE/b9TDfjn8ze4/s1600/featured-west.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v329"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="featured-west.jpg"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 3553
X-XSS-Protection: 0
1.bp.blogspot.com/--RNnYFOZnjA/Uv_vMHH8H7I/AAAAAAAAAE8/JK0MNeK13Q0/s1600/f12.jpg
142.250.74.161 7.6 kB URL 1.bp.blogspot.com/--RNnYFOZnjA/Uv_vMHH8H7I/AAAAAAAAAE8/JK0MNeK13Q0/s1600/f12.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 85x85, components 3\012- data
Hash 3700c10c24f26f76794cb08d4b7d654c
3899da45da20565239a9f5e77890abcffb394f83
fb4df2cfd73dd4f104b427b2b7a32f28bacf0749b2f85c79e3875dd271689331
GET /--RNnYFOZnjA/Uv_vMHH8H7I/AAAAAAAAAE8/JK0MNeK13Q0/s1600/f12.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="f12.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7633
X-XSS-Protection: 0
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v329"
Content-Type: image/jpeg
Vary: Origin
Age: 0
1.bp.blogspot.com/-yGK5WrOzMeQ/UwBl2nucW8I/AAAAAAAAAFw/zoVyyQYoz60/s1600/f12.jpg
142.250.74.161 7.6 kB URL 1.bp.blogspot.com/-yGK5WrOzMeQ/UwBl2nucW8I/AAAAAAAAAFw/zoVyyQYoz60/s1600/f12.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 85x85, components 3\012- data
Hash 3700c10c24f26f76794cb08d4b7d654c
3899da45da20565239a9f5e77890abcffb394f83
fb4df2cfd73dd4f104b427b2b7a32f28bacf0749b2f85c79e3875dd271689331
GET /-yGK5WrOzMeQ/UwBl2nucW8I/AAAAAAAAAFw/zoVyyQYoz60/s1600/f12.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="f12.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7633
X-XSS-Protection: 0
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v329"
Content-Type: image/jpeg
Vary: Origin
Age: 0
1.bp.blogspot.com/-ochHWeDw5ZI/UwBorQlh6cI/AAAAAAAAAGM/tX_vCXiSHjE/s1600/f9.jpg
142.250.74.161 7.3 kB URL 1.bp.blogspot.com/-ochHWeDw5ZI/UwBorQlh6cI/AAAAAAAAAGM/tX_vCXiSHjE/s1600/f9.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 85x85, components 3\012- data
Hash f64ddeb9a5b52e9398263c0753732af4
bfcf593ae96c8df55b768f82b34426fad741164c
32fb19f93f2ec2ee21637708386b9861fd0b1d98eb66054d9d5050639de45721
GET /-ochHWeDw5ZI/UwBorQlh6cI/AAAAAAAAAGM/tX_vCXiSHjE/s1600/f9.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v329"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="f9.jpg"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 7308
X-XSS-Protection: 0
www.gstatic.com/charts/loader.js
216.58.211.3 18 kB URL www.gstatic.com/charts/loader.js
IP 216.58.211.3:0
File type ASCII text, with very long lines (2186)
Hash 93d934aa2913a753b99aa2a8f56c4d89
2482aae88ab1a0d91818063efcfbacd90c57dfaf
9995fc9907d3dcbab47f4e4023cdf0660618b0b71c22be8fd079c25f3b5bd3bb
GET /charts/loader.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-credentials: true
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gviz
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gviz"
report-to: {"group":"gviz","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gviz"}]}
content-length: 18534
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 09 Apr 2023 17:09:26 GMT
expires: Sun, 09 Apr 2023 18:09:26 GMT
cache-control: public, max-age=3600
last-modified: Tue, 04 Apr 2023 17:52:30 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 2819
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.linkwithin.com/widget.js
3.19.188.212 162 B URL www.linkwithin.com/widget.js
IP 3.19.188.212:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 09 Apr 2023 17:56:25 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash bb566a0dc2b24a4c04737ea028d2dc15
a32cd606fb918d21011dea617eb8436b72bdd95a
a2f6eefac6dbb121841e0f810d8181426a4861d75da8358fc6472ae5b3fd97f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.linkwithin.com/pixel.png
3.19.188.212 83 B URL www.linkwithin.com/pixel.png
IP 3.19.188.212:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash ca1dba98f5e46c0e7a1549b3d8af9b93
37284bda145ed93cee64997e3d6688cae7d98468
88021da4a13d993a2c94e4d8ddc9bd98b34985d806371e71e0531b37b8a0e081
GET /pixel.png HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 09 Apr 2023 17:56:25 GMT
Content-Type: image/png
Content-Length: 83
Last-Modified: Thu, 18 Jun 2020 22:02:28 GMT
Connection: keep-alive
ETag: "5eebe474-53"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 9b344d91b039f9ccdd512f5b431b516d
001e60bde6a047b28e338818f4b92b9779c8a63e
8179817630b290197e5ebc0dbea3e065708fb56eb680a3409e44f712bd5c26dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 0c3b0b20c5a2c7b818da43e38478e8f9
d4f4312a880db2ed8a860d539c97f048f8577203
b1d4370b03059fea7e74e1b4539c68422291ffb6bfccc018bbe4fa3d0576f76d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh5.ggpht.com/-NotrqE0BQcU/U9ir2qySBVI/AAAAAAAAOy4/yWuqCmI3470/s72-c/%25255BUNSET%25255D.jpg
142.250.74.161 3.4 kB URL lh5.ggpht.com/-NotrqE0BQcU/U9ir2qySBVI/AAAAAAAAOy4/yWuqCmI3470/s72-c/%25255BUNSET%25255D.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google, copyright=Alicia Canter/ Observer], baseline, precision 8, 72x72, components 3\012- data
Hash 4b6a7d77ff85cc7e5740b85384a64209
0c5546d60ec5cb54c87b9f5c54b9b1ae9c82078e
38f915ef8869c1c876249e0338f5de133ddccd5cb0c6852342bff3c4eca7a734
GET /-NotrqE0BQcU/U9ir2qySBVI/AAAAAAAAOy4/yWuqCmI3470/s72-c/%25255BUNSET%25255D.jpg HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v7b27"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="[UNSET].jpg"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 3413
X-XSS-Protection: 0
costadelkasbah.blogspot.com/js/cookienotice.js
142.250.74.97 2.0 kB URL costadelkasbah.blogspot.com/js/cookienotice.js
IP 142.250.74.97:0
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Malware
GET /js/cookienotice.js HTTP/1.1
Host: costadelkasbah.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/search/label/Hezbollah%20Leader%20Tells%20Members%20to%20Be%20Ready%20for%20War
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Sun, 16 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sun, 09 Apr 2023 16:48:48 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
www.blogger.com/static/v1/widgets/3271249078-widgets.js
216.58.207.233 158 kB URL www.blogger.com/static/v1/widgets/3271249078-widgets.js
IP 216.58.207.233:0
File type ASCII text, with very long lines (2221)
Size 158 kB (157564 bytes)
Hash 1a9aaabb832cef36ecb9288a2c15dafe
47e300b5124e36ab761c1edc11f140fe69d9e0d2
0b6f83463ff272d6fc2f5164f8da91e9952a9b4a50a5298efb333e67102f1d50
GET /static/v1/widgets/3271249078-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.blogger.com
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 157564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 08 Apr 2023 23:54:28 GMT
expires: Sun, 07 Apr 2024 23:54:28 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 06 Apr 2023 18:57:31 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 64917
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2.bp.blogspot.com/-mCL3QpnB5rI/UwB331ruUII/AAAAAAAAALY/RvXCIqlvMCQ/s1600/arrow-double.png
142.250.74.161 348 B URL 2.bp.blogspot.com/-mCL3QpnB5rI/UwB331ruUII/AAAAAAAAALY/RvXCIqlvMCQ/s1600/arrow-double.png
IP 142.250.74.161:0
File type PNG image data, 9 x 7, 8-bit/color RGBA, non-interlaced\012- data
Hash 4cca8ca01c98aa9364fe5ce80c3c56b8
dda05df1ccb8afbfac662939ae8f0326b8ddeb99
799ee0bf5770f430f2bf21ab64230c5261db99f26463a95634a60947fb08785e
GET /-mCL3QpnB5rI/UwB331ruUII/AAAAAAAAALY/RvXCIqlvMCQ/s1600/arrow-double.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "vb7"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="arrow-double.png"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 348
X-XSS-Protection: 0
3.bp.blogspot.com/-rpMyL8YKKo8/UwB3So_VVGI/AAAAAAAAAK4/8F3Xn-g5Jo4/s1600/arrow-topnav.png
142.250.74.161 246 B URL 3.bp.blogspot.com/-rpMyL8YKKo8/UwB3So_VVGI/AAAAAAAAAK4/8F3Xn-g5Jo4/s1600/arrow-topnav.png
IP 142.250.74.161:0
File type PNG image data, 6 x 6, 8-bit/color RGBA, non-interlaced\012- data
Hash f9dffa8d6f180d317a4210b19f8533ad
c13090a697785fda2d3580bd8cfa220a6897b693
8eaaac8d2749c395a5db1751d0a7935de28ca17b0fd24c67a6c5f1e8a2cccdf3
GET /-rpMyL8YKKo8/UwB3So_VVGI/AAAAAAAAAK4/8F3Xn-g5Jo4/s1600/arrow-topnav.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="arrow-topnav.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 246
X-XSS-Protection: 0
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vaf"
Content-Type: image/png
Vary: Origin
Age: 0
4.bp.blogspot.com/-MigsI09kbfk/Uw4S0AM4toI/AAAAAAAAAOc/BiXVv3ZE_X8/s1600/icons-entertainment.png
142.250.74.161 2.0 kB URL 4.bp.blogspot.com/-MigsI09kbfk/Uw4S0AM4toI/AAAAAAAAAOc/BiXVv3ZE_X8/s1600/icons-entertainment.png
IP 142.250.74.161:0
File type PNG image data, 17 x 197, 8-bit/color RGBA, non-interlaced\012- data
Hash bec47f519e7c9ee427846aa4fdea819d
94dc27bd8e60d5a03de6ee1e15e06f024740d689
825e792aa48369afec6a73b770a96188a354cc110f610becf9fb5e2b311ec9f8
GET /-MigsI09kbfk/Uw4S0AM4toI/AAAAAAAAAOc/BiXVv3ZE_X8/s1600/icons-entertainment.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="icons-entertainment.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2035
X-XSS-Protection: 0
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "ve7"
Content-Type: image/png
Vary: Origin
Age: 0
2.bp.blogspot.com/---do8xCVBsM/Uw4T_FRWb4I/AAAAAAAAAOk/KKuoa1i_KSE/s1600/icons-weird.png
142.250.74.161 1.7 kB URL 2.bp.blogspot.com/---do8xCVBsM/Uw4T_FRWb4I/AAAAAAAAAOk/KKuoa1i_KSE/s1600/icons-weird.png
IP 142.250.74.161:0
File type PNG image data, 16 x 126, 8-bit/color RGBA, non-interlaced\012- data
Hash 37b95d3b828b36d401f517974b483249
62bc5ce9d16120a1074d6e95256f3b9c7922d7af
e95a1af2f574c065acde1d74c99b2a05132fd14336cf317b1622a3d362db07c8
GET /---do8xCVBsM/Uw4T_FRWb4I/AAAAAAAAAOk/KKuoa1i_KSE/s1600/icons-weird.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="icons-weird.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1674
X-XSS-Protection: 0
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vea"
Content-Type: image/png
Vary: Origin
Age: 0
3.bp.blogspot.com/-mPpIzGKUjS0/Uw4R6fZWUSI/AAAAAAAAAOM/mZk9_n6Juh4/s1600/icons-general.png
142.250.74.161 1.7 kB URL 3.bp.blogspot.com/-mPpIzGKUjS0/Uw4R6fZWUSI/AAAAAAAAAOM/mZk9_n6Juh4/s1600/icons-general.png
IP 142.250.74.161:0
File type PNG image data, 16 x 195, 8-bit/color RGBA, non-interlaced\012- data
Hash 0a09d60ea26200f181d1597c16b79804
550873cae40a393e4d02e3dbeede2a357f43eb8b
57dbf3a61e5d4fb5f33b245372e1e361aa2d4981dcc3ea34c271e1e214e06326
GET /-mPpIzGKUjS0/Uw4R6fZWUSI/AAAAAAAAAOM/mZk9_n6Juh4/s1600/icons-general.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "ve4"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="icons-general.png"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 1702
X-XSS-Protection: 0
cdn.widgetserver.com/syndication/subscriber/InsertWidget.js
173.255.194.134 157 B URL cdn.widgetserver.com/syndication/subscriber/InsertWidget.js
IP 173.255.194.134:0
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
GET /syndication/subscriber/InsertWidget.js HTTP/1.1
Host: cdn.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Sun, 09 Apr 2023 17:56:25 GMT
content-type: application/javascript
content-length: 157
last-modified: Tue, 10 Jan 2023 21:36:12 GMT
etag: "63bdda4c-9d"
accept-ranges: bytes
connection: close
1.bp.blogspot.com/-TVnm8xQTeAI/U7XWKoG9mLI/AAAAAAAAFjg/M37PDRBR21s/s72-c/mamading2.png
142.250.74.161 9.5 kB URL 1.bp.blogspot.com/-TVnm8xQTeAI/U7XWKoG9mLI/AAAAAAAAFjg/M37PDRBR21s/s72-c/mamading2.png
IP 142.250.74.161:0
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash f3095d0606a011ae1dd713d402797478
4325a46dbeca8c8a157127185947d9de48d4f8a2
c77bb2dc9697861f4123cdf6acdc6d3a79735bdd56b7fd3d8dc2887300b9998d
GET /-TVnm8xQTeAI/U7XWKoG9mLI/AAAAAAAAFjg/M37PDRBR21s/s72-c/mamading2.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v1639"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="mamading2.png"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 9545
X-XSS-Protection: 0
1.bp.blogspot.com/-ZiVqyMpFSkg/UwB3J8CnyxI/AAAAAAAAAKw/YpBAHyulM1o/s1600/social-white.png
142.250.74.161 1.4 kB URL 1.bp.blogspot.com/-ZiVqyMpFSkg/UwB3J8CnyxI/AAAAAAAAAKw/YpBAHyulM1o/s1600/social-white.png
IP 142.250.74.161:0
File type PNG image data, 19 x 169, 8-bit/color RGBA, non-interlaced\012- data
Hash 69188f994fb4f31493a2339b365e47c7
7fdc9edbdc3cab96be8317b6806052176fe18d33
da20d75f8329af4a24e82fbfbb8abb9a789b53260a69b8195c70517ff927ff4d
GET /-ZiVqyMpFSkg/UwB3J8CnyxI/AAAAAAAAAKw/YpBAHyulM1o/s1600/social-white.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="social-white.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1441
X-XSS-Protection: 0
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vad"
Content-Type: image/png
Vary: Origin
Age: 0
4.bp.blogspot.com/-7ccehtvmbDQ/Uw4gv7Tiq4I/AAAAAAAAAPQ/6h6jGzeTKNs/s1600/icons-society.png
142.250.74.161 1.2 kB URL 4.bp.blogspot.com/-7ccehtvmbDQ/Uw4gv7Tiq4I/AAAAAAAAAPQ/6h6jGzeTKNs/s1600/icons-society.png
IP 142.250.74.161:0
File type PNG image data, 17 x 127, 8-bit/color RGBA, non-interlaced\012- data
Hash c95420522d189523f4cc67444457536f
89037832648e095868ccf50c5fc7efeb2eeacf77
9802f193f7083314d1c9007cd5e1fa25c033e07da3d5e23f1d3a93c032dab762
GET /-7ccehtvmbDQ/Uw4gv7Tiq4I/AAAAAAAAAPQ/6h6jGzeTKNs/s1600/icons-society.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="icons-society.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1184
X-XSS-Protection: 0
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vf5"
Content-Type: image/png
Vary: Origin
Age: 0
1.bp.blogspot.com/-REmL1LMlOVE/Uw4gEpMMx7I/AAAAAAAAAPM/QehVTNbzfS4/s1600/icons-science.png
142.250.74.161 1.9 kB URL 1.bp.blogspot.com/-REmL1LMlOVE/Uw4gEpMMx7I/AAAAAAAAAPM/QehVTNbzfS4/s1600/icons-science.png
IP 142.250.74.161:0
File type PNG image data, 17 x 201, 8-bit/color RGBA, non-interlaced\012- data
Hash c73a0c21f8359b759426c5711a49997e
986646f5a2de45dbc051bcbc444089347e22b467
ef8c740df4582eccc352c853844b0fb240719e447cd7c3f81d1ad8c8b161d369
GET /-REmL1LMlOVE/Uw4gEpMMx7I/AAAAAAAAAPM/QehVTNbzfS4/s1600/icons-science.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "vf3"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="icons-science.png"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 1914
X-XSS-Protection: 0
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2
216.58.207.227 16 kB URL fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 16372, version 1.0\012- data
Hash e45478d4d6f15dafda1f25d9e0fb5fa1
52cb490cd0ee4442ede034085cda9652b206f91c
d1a17abb1a999842fe425e1a4ace9d90f9c18f3595c21a63d89f0611b90cfd72
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://costadelkasbah.blogspot.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 16372
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 04 Apr 2023 11:09:38 GMT
Expires: Wed, 03 Apr 2024 11:09:38 GMT
Cache-Control: public, max-age=31536000
Age: 456407
Last-Modified: Mon, 15 Aug 2022 18:14:45 GMT
Content-Type: font/woff2
4.bp.blogspot.com/-XtUffT0qJc4/UwB0hurZiRI/AAAAAAAAAJc/77epdg3A2KQ/s1600/search.png
142.250.74.161 525 B URL 4.bp.blogspot.com/-XtUffT0qJc4/UwB0hurZiRI/AAAAAAAAAJc/77epdg3A2KQ/s1600/search.png
IP 142.250.74.161:0
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash d979fa2ecc5f9f0d232fd7a12e40206d
ba251eab88103d79a0290418d347b07de4c1974f
6dc39d0aac2b90377f4813ecf4c2a824606db57e8b82e47518b17ea9c81edc63
GET /-XtUffT0qJc4/UwB0hurZiRI/AAAAAAAAAJc/77epdg3A2KQ/s1600/search.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="search.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 525
X-XSS-Protection: 0
Date: Sun, 09 Apr 2023 17:56:25 GMT
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v98"
Content-Type: image/png
Vary: Origin
Age: 0
4.bp.blogspot.com/-OALh-wow2yE/UwB3Dp_KyPI/AAAAAAAAAKo/LBhymajAYGc/s1600/email.png
142.250.74.161 349 B URL 4.bp.blogspot.com/-OALh-wow2yE/UwB3Dp_KyPI/AAAAAAAAAKo/LBhymajAYGc/s1600/email.png
IP 142.250.74.161:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 8e691cede0b41fe7798aa770f27e4a6d
8d9e9fff219d13a9221aceb96d0223933ffc90f0
6c903ae5f8351ba2d5aa2957b6ae7584b3d8c71ac6030c8bde05b3bb51578787
GET /-OALh-wow2yE/UwB3Dp_KyPI/AAAAAAAAAKo/LBhymajAYGc/s1600/email.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "vab"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="email.png"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 349
X-XSS-Protection: 0
4.bp.blogspot.com/-x7tqIxERbUc/UwB3Yx8cL2I/AAAAAAAAALA/ooqVA_H6jDo/s1600/social-white-horiz.png
142.250.74.161 613 B URL 4.bp.blogspot.com/-x7tqIxERbUc/UwB3Yx8cL2I/AAAAAAAAALA/ooqVA_H6jDo/s1600/social-white-horiz.png
IP 142.250.74.161:0
File type PNG image data, 35 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash d97bd80389415cd507f06f0056d750d6
89a5daa9b3bf7175cf56e1ee0ee25df9fc435498
c082b50d6f4de29e5e760f209ff32d4f67eb747974e95537716323192aed9882
GET /-x7tqIxERbUc/UwB3Yx8cL2I/AAAAAAAAALA/ooqVA_H6jDo/s1600/social-white-horiz.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "vb1"
Expires: Mon, 10 Apr 2023 17:56:25 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="social-white-horiz.png"
X-Content-Type-Options: nosniff
Date: Sun, 09 Apr 2023 17:56:25 GMT
Server: fife
Content-Length: 613
X-XSS-Protection: 0
dl.dropboxusercontent.com/u/137869302/TitilliumText25L003-webfont.woff
162.125.71.15 1.2 kB URL dl.dropboxusercontent.com/u/137869302/TitilliumText25L003-webfont.woff
IP 162.125.71.15:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (628)
Hash 9b6419564e2517bca5c02656ee34428a
82fa924ab283fdced730a5a01980bc16038a4ebc
7c3062f4433da04b86fb2a95156b3598d5e9e030494f9956755dcff563579a4a
GET /u/137869302/TitilliumText25L003-webfont.woff HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://costadelkasbah.blogspot.com
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-length: 1233
content-type: text/html
date: Sun, 09 Apr 2023 17:56:25 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: 2c8d98b038d84448ace0580b96f6dfe0
X-Firefox-Spdy: h2
syndication1.viraladnetwork.net/getad/
188.114.96.1 1.3 kB URL syndication1.viraladnetwork.net/getad/
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 94b44a2eebfd800dd2673028a2b2cfc4
124e430f1ec02a1f63055a28d8975e72b740bf0f
7b7b0ceac832b439e79608914be8894ee0972cb2052cc2ca6c549f3414e8ca9d
GET /getad/ HTTP/1.1
Host: syndication1.viraladnetwork.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://costadelkasbah.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Sun, 09 Apr 2023 17:56:25 GMT
content-type: text/html
cache-control: private, no-cache, max-age=0
pragma: no-cache
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J5iWDzOPs2AmRqV0C7K3zZs%2FmcdQ8pYrXDjYMkEkYWFNR3Zr2hgjbxYW%2Bw2KyFIDZXTTW%2FpjxQt2b%2Bw1J20T4Z0i4WFPDWuVNZiITZT1ayKlY6cBbXgr2ZBn8Iqu0Ob%2FoFH18cGt%2BJ%2FtSt%2BpuDSnzfB3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b54a06beb89b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
costadelkasbah.blogspot.com/feeds/posts/summary?max-results=0&alt=json-in-script&callback=feelingLucky
142.250.74.97 18 kB URL costadelkasbah.blogspot.com/feeds/posts/summary?max-results=0&alt=json-in-script&callback=feelingLucky
IP 142.250.74.97:0
File type Unicode text, UTF-8 text, with very long lines (46436)
Hash 1b663b2dd00227f68a8c2b97a867f2ea
c73d344d8713bcc31af83ede10bf9306a87540f8
2bd08a06ef97f5e6c6a5934375f298bc1562be689d3d503304ebbecdabe51bce
GET /feeds/posts/summary?max-results=0&alt=json-in-script&callback=feelingLucky HTTP/1.1
Host: costadelkasbah.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/search/label/Hezbollah%20Leader%20Tells%20Members%20to%20Be%20Ready%20for%20War
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"5871fd8216e2cbc0eec9c4508076d2127eb70411e46261581b96258e28c3cee6"
Date: Sun, 09 Apr 2023 17:56:25 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Sun, 09 Apr 2023 17:56:26 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Mon, 20 Mar 2023 11:50:58 GMT
Content-Encoding: gzip
Content-Length: 18064
X-Frame-Options: SAMEORIGIN
www.blogger.com/dyn-css/authorization.css?targetBlogID=6121623959249292430&zx=2c292bd6-ce6b-4a0a-9248-defea83de8e2
216.58.207.233 21 B URL www.blogger.com/dyn-css/authorization.css?targetBlogID=6121623959249292430&zx=2c292bd6-ce6b-4a0a-9248-defea83de8e2
IP 216.58.207.233:0
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=6121623959249292430&zx=2c292bd6-ce6b-4a0a-9248-defea83de8e2 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.blogger.com
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 09 Apr 2023 17:56:26 GMT
last-modified: Sun, 09 Apr 2023 17:56:26 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.linkwithin.com/widget.js
3.19.188.212 162 B URL www.linkwithin.com/widget.js
IP 3.19.188.212:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 09 Apr 2023 17:56:26 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
dl.dropboxusercontent.com/u/137869302/TitilliumText25L003-webfont.ttf
162.125.71.15 716 B URL dl.dropboxusercontent.com/u/137869302/TitilliumText25L003-webfont.ttf
IP 162.125.71.15:0
Hash 753350c1f16c96c44c8d1cc6865eb026
2578e4a7177ba76fb43de37e7cd0df2b8f5b76f9
0454da137196bd497533ce206a16d3e2da8617ed31ceadb5344c338515a96b1e
GET /u/137869302/TitilliumText25L003-webfont.ttf HTTP/1.1
Host: dl.dropboxusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://costadelkasbah.blogspot.com
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
date: Sun, 09 Apr 2023 17:56:25 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: 347f8224954f489b99b7f51bec513cb1
X-Firefox-Spdy: h2
cdn.widgetserver.com/
96.126.123.244 20 kB IP 96.126.123.244:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (50392)
Hash 8f71dde372e811c65cdc727a1151b4e3
882da8ff40d1b9a36998a16093933cbf22f731f8
360b19ff9311f12a47219d7f24220ab84d37e46d6dc0897d1ecda70a2902be8b
GET / HTTP/1.1
Host: cdn.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://costadelkasbah.blogspot.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Sun, 09 Apr 2023 17:56:27 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close
cdn.widgetserver.com/?gp=1&js=1&uuid=1681062987.0000498830&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jb3N0YWRlbGthc2JhaC5ibG9nc3BvdC5jb20vIiwgImFjY2VwdCI6ICJ0ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSxpbWFnZS9hdmlmLGltYWdlL3dlYnAsKi8qO3E9MC44In0=
45.79.19.196 0 B URL cdn.widgetserver.com/?gp=1&js=1&uuid=1681062987.0000498830&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jb3N0YWRlbGthc2JhaC5ibG9nc3BvdC5jb20vIiwgImFjY2VwdCI6ICJ0ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSxpbWFnZS9hdmlmLGltYWdlL3dlYnAsKi8qO3E9MC44In0=
IP 45.79.19.196:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?gp=1&js=1&uuid=1681062987.0000498830&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9jb3N0YWRlbGthc2JhaC5ibG9nc3BvdC5jb20vIiwgImFjY2VwdCI6ICJ0ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSxpbWFnZS9hdmlmLGltYWdlL3dlYnAsKi8qO3E9MC44In0= HTTP/1.1
Host: cdn.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn.widgetserver.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Sun, 09 Apr 2023 17:56:27 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www1.widgetserver.com/?tm=1&subid4=1681062987.0153660000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
referrer-policy: no-referrer
x-mtm-path: 4
x-mtm-prov: 1:5.74;70:0.00
x-mtm-rd: 0.33
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=WyJjZG4ud2lkZ2V0c2VydmVyLmNvbSIsImh0dHA6Ly93d3cxLndpZGdldHNlcnZlci5jb20vP3RtPTEmc3ViaWQ0PTE2ODEwNjI5ODcuMDE1MzY2MDAwMCZLVzE9RXVyb3BlJTIwRGVkaWNhdGVkJTIwU2VydmVycyZLVzI9Tm9yd2F5JTIwRGVkaWNhdGVkJTIwU2VydmVycyZLVzM9T3NsbyUyMENvdW50eSUyMERlZGljYXRlZCUyMFNlcnZlcnMmS1c0PU9zbG8lMjBEZWRpY2F0ZWQlMjBTZXJ2ZXJzJktXNT1DdXN0b20lMjBEZWRpY2F0ZWQlMjBTZXJ2ZXJzJnNlYXJjaGJveD0wJmJhY2tmaWxsPTAiLDEsIjIwMjMtMDQtMDkgMTc6NTY6MjciLDEsIjE2ODEwNjI5ODcuMDE1MzY2MDAwMCIsMSxudWxsLG51bGxd:1plZH9:TsHOS-Yhp7kAi02C9OY60k7p2q8; expires=Sun, 09-Apr-2023 18:56:27 GMT; Max-Age=3600; Path=/
connection: close
www1.widgetserver.com/?tm=1&subid4=1681062987.0153660000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
75.2.73.197 1.4 kB URL www1.widgetserver.com/?tm=1&subid4=1681062987.0153660000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
IP 75.2.73.197:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (441)
Hash 2c41804708f5a1daaf586aad5babdb48
039c3248290725fe213f30225ad6b710fa294e60
2e63400fb00a1aba2563bec9447e79d075da1859b2bc869dc1c2ee4378e4c0d2
GET /?tm=1&subid4=1681062987.0153660000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0 HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 17:56:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Redirect: zeropark_zeroclick
X-Buckets: bucket011
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_FbJSEtU2oVnYJDKE12UE7HKgkkITrZXx1rMkKBrjQq6pfN4xT05du8UCub29kjsW5snvKcZIoRaKjRk05pYL9g==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: widgetserver.com
X-Subdomain: www1
Content-Encoding: gzip
d38psrni17bvxu.cloudfront.net/scripts/js3.js
54.230.245.138 1.1 kB URL d38psrni17bvxu.cloudfront.net/scripts/js3.js
IP 54.230.245.138:0
File type ASCII text, with very long lines (468)
Hash a66b149a7ebc798955373415d683f32a
15ceaba8cfae8368600620ae97aa26ae7331d626
036c94653e84e6078c087abeb3ac8804491d27b27938839ae3df42b31e2238d9
GET /scripts/js3.js HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1096
Connection: keep-alive
Server: nginx
Date: Sun, 09 Apr 2023 04:13:01 GMT
Last-Modified: Mon, 23 Jan 2023 11:12:07 GMT
Accept-Ranges: bytes
ETag: "63ce6b87-448"
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MboEjFeoeSxX1JcRPkTqjTfyYrEzzduSAxQ3ApDHZObv4qaKMfpNIQ==
Age: 49407
www1.widgetserver.com/track.php?domain=widgetserver.com&toggle=browserjs&uid=MTY4MTA2Mjk4OC4xNzY2OmUzMzMyMTE2Njc3OGYyY2VjZWVkYWYyMjA1MGZiMjU2YjRhNGI3OWFjODE4M2ZmNmY1ZWEyZjUyYmFmYmNlMjU6NjQzMmZjNGMyYjFkOA%3D%3D
75.2.73.197 20 B URL www1.widgetserver.com/track.php?domain=widgetserver.com&toggle=browserjs&uid=MTY4MTA2Mjk4OC4xNzY2OmUzMzMyMTE2Njc3OGYyY2VjZWVkYWYyMjA1MGZiMjU2YjRhNGI3OWFjODE4M2ZmNmY1ZWEyZjUyYmFmYmNlMjU6NjQzMmZjNGMyYjFkOA%3D%3D
IP 75.2.73.197:0
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?domain=widgetserver.com&toggle=browserjs&uid=MTY4MTA2Mjk4OC4xNzY2OmUzMzMyMTE2Njc3OGYyY2VjZWVkYWYyMjA1MGZiMjU2YjRhNGI3OWFjODE4M2ZmNmY1ZWEyZjUyYmFmYmNlMjU6NjQzMmZjNGMyYjFkOA%3D%3D HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1681062987.0153660000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 17:56:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
www1.widgetserver.com/ls.php?t=6432fc4c&token=2bbe077403cfef3049b01c37788a1a3e3255fd2c
75.2.73.197 16 B URL www1.widgetserver.com/ls.php?t=6432fc4c&token=2bbe077403cfef3049b01c37788a1a3e3255fd2c
IP 75.2.73.197:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
GET /ls.php?t=6432fc4c&token=2bbe077403cfef3049b01c37788a1a3e3255fd2c HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1681062987.0153660000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 201 Created
Date: Sun, 09 Apr 2023 17:56:29 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 6432fc4d7d069108c132a85d
Charset: utf-8
Access-Control-Allow-Origin:
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_sqFIaUpvNdzYFFN0fC3EDJx/BVY/PYwlSwR8oBbkI6dIsmYI5FVE154fdFOObDfkBwLwcDkX7BVmeenIxIdijQ==
www1.widgetserver.com/favicon.ico
75.2.73.197 0 B URL www1.widgetserver.com/favicon.ico
IP 75.2.73.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1681062987.0153660000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 17:56:29 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
www1.widgetserver.com/track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=widgetserver.com&uid=MTY4MTA2Mjk4OC4xNzY2OmUzMzMyMTE2Njc3OGYyY2VjZWVkYWYyMjA1MGZiMjU2YjRhNGI3OWFjODE4M2ZmNmY1ZWEyZjUyYmFmYmNlMjU6NjQzMmZjNGMyYjFkOA%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2NDMyZmM0YzJiMWMyfHx8MTY4MTA2Mjk4OC40OTQ1fGJiNTg5OTBmNjc0NTQ0NjQ0MmMxNzk1YzVhYjc1MTAxYmQ2YzYxMWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qZ3hNRFl5T1RnM0xqQXhOVE0yTmpBd01EQWlmUT09fDJiYmUwNzc0MDNjZmVmMzA0OWIwMWMzNzc4OGExYTNlMzI1NWZkMmN8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&kw=&search=&pcat=&bucket=&clientID=&adtest=off
75.2.73.197 20 B URL www1.widgetserver.com/track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=widgetserver.com&uid=MTY4MTA2Mjk4OC4xNzY2OmUzMzMyMTE2Njc3OGYyY2VjZWVkYWYyMjA1MGZiMjU2YjRhNGI3OWFjODE4M2ZmNmY1ZWEyZjUyYmFmYmNlMjU6NjQzMmZjNGMyYjFkOA%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2NDMyZmM0YzJiMWMyfHx8MTY4MTA2Mjk4OC40OTQ1fGJiNTg5OTBmNjc0NTQ0NjQ0MmMxNzk1YzVhYjc1MTAxYmQ2YzYxMWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qZ3hNRFl5T1RnM0xqQXhOVE0yTmpBd01EQWlmUT09fDJiYmUwNzc0MDNjZmVmMzA0OWIwMWMzNzc4OGExYTNlMzI1NWZkMmN8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&kw=&search=&pcat=&bucket=&clientID=&adtest=off
IP 75.2.73.197:0
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /track.php?click=8bc5311fea51f5d88ad90580a49f43a22d8f5165&domain=widgetserver.com&uid=MTY4MTA2Mjk4OC4xNzY2OmUzMzMyMTE2Njc3OGYyY2VjZWVkYWYyMjA1MGZiMjU2YjRhNGI3OWFjODE4M2ZmNmY1ZWEyZjUyYmFmYmNlMjU6NjQzMmZjNGMyYjFkOA%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTF8fHx8fHw2NDMyZmM0YzJiMWMyfHx8MTY4MTA2Mjk4OC40OTQ1fGJiNTg5OTBmNjc0NTQ0NjQ0MmMxNzk1YzVhYjc1MTAxYmQ2YzYxMWN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fHx8MHwwfHwwfHx8MHwwfFcxMD18fDF8ZXlKemRXSnBaRFFpT2lJeE5qZ3hNRFl5T1RnM0xqQXhOVE0yTmpBd01EQWlmUT09fDJiYmUwNzc0MDNjZmVmMzA0OWIwMWMzNzc4OGExYTNlMzI1NWZkMmN8MHxkcC10ZWFtaW50ZXJuZXQxMl8zcGh8MHww&kw=&search=&pcat=&bucket=&clientID=&adtest=off HTTP/1.1
Host: www1.widgetserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/?tm=1&subid4=1681062987.0153660000&KW1=Europe%20Dedicated%20Servers&KW2=Norway%20Dedicated%20Servers&KW3=Oslo%20County%20Dedicated%20Servers&KW4=Oslo%20Dedicated%20Servers&KW5=Custom%20Dedicated%20Servers&searchbox=0&backfill=0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 17:56:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-View-Match: true
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip
ishku-wbq.com/zcvisitor/da278126-d6ff-11ed-bc1e-0a1bcc75778f/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
54.204.83.105 1.1 kB URL ishku-wbq.com/zcvisitor/da278126-d6ff-11ed-bc1e-0a1bcc75778f/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
IP 54.204.83.105:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2aad7d532e69308aeff8c25a1097bfc9
6414301b624bf472c78b777353b7d240f722b63a
25c8ff7362478f5b2c758a078d7da13ac785f5428a2fbe3af5d006629824f189
GET /zcvisitor/da278126-d6ff-11ed-bc1e-0a1bcc75778f/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51 HTTP/1.1
Host: ishku-wbq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.widgetserver.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Sun, 09 Apr 2023 17:56:29 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: BgOEwGWo
ishku-wbq.com/zcredirect?visitid=da278126-d6ff-11ed-bc1e-0a1bcc75778f&type=js&browserWidth=1152&browserHeight=901&iframeDetected=false&webdriverDetected=false
3.231.137.120 360 B URL ishku-wbq.com/zcredirect?visitid=da278126-d6ff-11ed-bc1e-0a1bcc75778f&type=js&browserWidth=1152&browserHeight=901&iframeDetected=false&webdriverDetected=false
IP 3.231.137.120:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d79b4c692ae05ad202e8732eb5f4442d
5e669020cc4d8b5ec1f4cfc689dc4319193e622a
ef378a437e5e718b04f46e5b7871b005b90b815d845ba862aa55660f824c9102
GET /zcredirect?visitid=da278126-d6ff-11ed-bc1e-0a1bcc75778f&type=js&browserWidth=1152&browserHeight=901&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: ishku-wbq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ishku-wbq.com/zcvisitor/da278126-d6ff-11ed-bc1e-0a1bcc75778f/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Sun, 09 Apr 2023 17:56:30 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: pTZyLxuj
ishku-wbq.com/favicon.ico
3.231.137.120 653 B URL ishku-wbq.com/favicon.ico
IP 3.231.137.120:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: ishku-wbq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ishku-wbq.com/zcredirect?visitid=da278126-d6ff-11ed-bc1e-0a1bcc75778f&type=js&browserWidth=1152&browserHeight=901&iframeDetected=false&webdriverDetected=false
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404
Date: Sun, 09 Apr 2023 17:56:30 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: SzQdrJRw
clever-redirect.com/s/r6?s=623619497&s2=lateritious-falcon&s3=papa-gob-1w6yeo6rq8
116.203.50.204 272 B URL clever-redirect.com/s/r6?s=623619497&s2=lateritious-falcon&s3=papa-gob-1w6yeo6rq8
IP 116.203.50.204:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 348be0112374c702aa2b61e28a5a7b74
cdcd1ba7cc7a7fe8972c96270e90ca71366bc91a
c4014d2eb71b4d3e2cd66ad9eb8a97f9326b368592a97cc30b30579e9671ac5b
GET /s/r6?s=623619497&s2=lateritious-falcon&s3=papa-gob-1w6yeo6rq8 HTTP/1.1
Host: clever-redirect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ishku-wbq.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 17:56:30 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
Set-Cookie: 7a0a12e12e654310ba35df611875ddc4=86c563ec85db6284a8ca435307d684b45ed020be4c710d8b122c4a2568a9ff1da%3A2%3A%7Bi%3A0%3Bs%3A32%3A%227a0a12e12e654310ba35df611875ddc4%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Mon, 10-Apr-2023 17:56:30 GMT; Max-Age=86400; path=/; HttpOnly
Referrer-Policy: no-referrer
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
clever-redirect.com/s/rc?l=b15e54a2a87a958c475cf1a181db3dd5
116.203.50.204 355 B URL clever-redirect.com/s/rc?l=b15e54a2a87a958c475cf1a181db3dd5
IP 116.203.50.204:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (355), with no line terminators
Hash 3789112ccc9a589d34b3413826c28b61
7b0a5fcb8dea914522350d09a1e58077382567b0
c7fccfb0cc9f94947e4a877b2b41e6d99d2a6ed055c97bddef26180706fdea0e
GET /s/rc?l=b15e54a2a87a958c475cf1a181db3dd5 HTTP/1.1
Host: clever-redirect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 7a0a12e12e654310ba35df611875ddc4=86c563ec85db6284a8ca435307d684b45ed020be4c710d8b122c4a2568a9ff1da%3A2%3A%7Bi%3A0%3Bs%3A32%3A%227a0a12e12e654310ba35df611875ddc4%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 17:56:30 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
Referrer-Policy: no-referrer
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
lookandfind.me/s/a?t=11&f=1&u=3353c145d72bc35c4b968ee361fe3a83&m=sporttema.no&s1=623619497&s2=lateritious-falcon&s3=papa-gob-1w6yeo6rq8&s5=ccv
5.9.110.29 412 B URL lookandfind.me/s/a?t=11&f=1&u=3353c145d72bc35c4b968ee361fe3a83&m=sporttema.no&s1=623619497&s2=lateritious-falcon&s3=papa-gob-1w6yeo6rq8&s5=ccv
IP 5.9.110.29:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document, ASCII text, with very long lines (412), with no line terminators
Hash affb9087fab13679691166ebfdabb388
6ffa68783880c9c26a46b986eb1f2b095df58509
0feaf9e8bca58f60ee2ba2d0f4513b4054be6d2211804f987177e9320227fe1d
GET /s/a?t=11&f=1&u=3353c145d72bc35c4b968ee361fe3a83&m=sporttema.no&s1=623619497&s2=lateritious-falcon&s3=papa-gob-1w6yeo6rq8&s5=ccv HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 17:56:30 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.17
Referrer-Policy: strict-origin-when-cross-origin
Access-Control-Allow-Origin: https://lookandfind.me
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
lookandfind.me/s/r?u=https%3A%2F%2Fwww.linkbux.com%2Ftrack%3Fpid%3DLB00002126%26mid%3D68124%26url%3Dhttps%253A%252F%252Fwww.sporttema.no%252F%26uid%3D35031f45ec1072bbed37b313328ed0c0&h=e89dd268597c432ff1172d6970bfd18f
5.9.110.29 326 B URL lookandfind.me/s/r?u=https%3A%2F%2Fwww.linkbux.com%2Ftrack%3Fpid%3DLB00002126%26mid%3D68124%26url%3Dhttps%253A%252F%252Fwww.sporttema.no%252F%26uid%3D35031f45ec1072bbed37b313328ed0c0&h=e89dd268597c432ff1172d6970bfd18f
IP 5.9.110.29:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (326), with no line terminators
Hash a8b2fe36a5a2611261d6852863996b4a
848c26daf6d73fe8c21a0f0a19c5d997629f9e3d
d231633494e443942a6218be28d65b9f284683674b87bbc6df5c8e55bdf8b301
GET /s/r?u=https%3A%2F%2Fwww.linkbux.com%2Ftrack%3Fpid%3DLB00002126%26mid%3D68124%26url%3Dhttps%253A%252F%252Fwww.sporttema.no%252F%26uid%3D35031f45ec1072bbed37b313328ed0c0&h=e89dd268597c432ff1172d6970bfd18f HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 09 Apr 2023 17:56:31 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.17
Referrer-Policy: strict-origin-when-cross-origin
Access-Control-Allow-Origin: https://lookandfind.me
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
api.yadore.com/v2/d?market=no&projectId=bKfEkwiMh6z8&url=https%3A%2F%2Fwww.sporttema.no%2F&placementId=lb-g21fkm-s-2126-1-35031f45ec1072bbed37b313328ed0c0
88.99.112.2 32 kB URL api.yadore.com/v2/d?market=no&projectId=bKfEkwiMh6z8&url=https%3A%2F%2Fwww.sporttema.no%2F&placementId=lb-g21fkm-s-2126-1-35031f45ec1072bbed37b313328ed0c0
IP 88.99.112.2:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12878)
Hash db9bc861247220517aa60d00dacf42b9
58a86dc3a46922f1991c3620cd564c68cb20a59e
1f7a7be757abf5edca1bdb9ae7335bda79f114c4ba0c6a07f4e47f2f5a50e236
GET /v2/d?market=no&projectId=bKfEkwiMh6z8&url=https%3A%2F%2Fwww.sporttema.no%2F&placementId=lb-g21fkm-s-2126-1-35031f45ec1072bbed37b313328ed0c0 HTTP/1.1
Host: api.yadore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.linkbux.com/track?pid=LB00002126&mid=68124&url=https://www.sporttema.no/&uid=35031f45ec1072bbed37b313328ed0c0
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
access-control-allow-credentials: true
access-control-allow-headers: Origin, Content-Type, Accept, API-Key
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: *
access-control-max-age: 86400
content-type: text/html; charset=UTF-8
date: Sun, 09 Apr 2023 17:56:32 GMT
location: https://api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Fwww.sporttema.no%2F&custom1=b3b0090c6fc2686ea340a42f5c55484479b205e0271ab3de9dd20ba652d6d3f1&custom2=bKfEkwiMh6z8&custom3=false
server: nginx
x-powered-by: PHP/8.0.28
X-Firefox-Spdy: h2
dd.kelkoogroup.net/tags.js
54.230.111.104 51 kB URL dd.kelkoogroup.net/tags.js
IP 54.230.111.104:0
File type ASCII text, with very long lines (65432)
Hash 71b0da6bfc88c667be35e7f7f4850826
a6bb4269d9d24f9e14bbd61711caa2d96d1a6701
6b148a8edcc849acf03205d6f15a75bc05a39e4cc0a01f99d30b36988379422d
GET /tags.js HTTP/1.1
Host: dd.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/
Connection: keep-alive
Cookie: kelkooID=a4c6295-18767299cb7-5624ae
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
content-length: 50613
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Fri, 07 Apr 2023 11:37:15 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 2a6277094357eb47f8dbeacb06ed96c2.cloudfront.net (CloudFront), 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
date: Sun, 09 Apr 2023 17:38:23 GMT
cache-control: max-age=3600, public
expires: Sun, 09 Apr 2023 18:38:23 GMT
etag: "3c6b7-5f8bd7263ce4f-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P2, OSL50-P1
x-amz-cf-id: L_83cGjIC6w2d_EaJoTMOfajV43a3saWmsORn8bVXFNCgjDP5dg7hw==
age: 1090
X-Firefox-Spdy: h2
status.thawte.com/
192.229.221.95 471 B IP 192.229.221.95:0
Hash e68272f7a700c6833848d9a2463081e8
0016edbe34e2b7abe393ce933ecb8e407f7edc77
d6fdf04e110b82c2db9dbb20969269c844ed0870204d682861f882a79bd774f8
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5967
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:33 GMT
Last-Modified: Sun, 09 Apr 2023 16:17:06 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
192.229.221.95 471 B IP 192.229.221.95:0
Hash 2190e646a986e1a5e4b2d2dc435bc0dc
90a0fe7402618c98bf20beb38bac4a87999a0035
c696c89585d13aa0efed03ed6910b2ba5d1cea0dad7607243347020fda193c18
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1879
Cache-Control: max-age=169530
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:33 GMT
Etag: "6432e834-1d7"
Expires: Tue, 11 Apr 2023 17:02:03 GMT
Last-Modified: Sun, 09 Apr 2023 16:30:44 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/fp?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a7878c8a2f45c43e559c9ae1e82ec6779ed3f90775e19a1a59603e5240e69ba39e87db896f326c5bcc0af24c9cd61925ddd7e0ff9bf3af2a33b7d47cf7ac03b0395e9b46a5f2ee93707771536902e771e9b707191cda717c5ef1260a12f4fab67e5928a27dcd0f4a210ef69a6a12803455d88eaa1117ae0dfd879b53aef762c4b3ac3703f1da75baa85567495ccca86530106466fcb312983f8ed69ca67a31124824f3242681106d1f1ba263675a4360cdd9cf9e88a54ce30cbce8822e265da234ce24f7f96e3b81cda8d107a6eb9aaa227bb2816bca2864730ce5e11257a4e720d1b4ac93b22919124ff5217b88c6ef3cb9255b6032d4ddf0f74d86fcc6c3582e936d9102ee8f0cecb2c8cae1adbcfc47ba39d5e814c469ef7abd7f57552e8af2
95.211.116.26 0 B URL no-go.kelkoogroup.net/fp?country=no&k=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
IP 95.211.116.26:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=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 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/
Content-Type: text/plain;charset=utf-8
Content-Length: 656
Origin: https://api.kelkoogroup.net
Connection: keep-alive
Cookie: kelkooID=a4c6295-18767299cb7-5624ae; _ga=GA1.2.40519163.1681062992; _gid=GA1.2.457914216.1681062992
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
leadId: 62A001GXKJK763WGGBKE6P0H97ZMFX
clickId: 107698149_1681062993079_24974759
country: no
Request-Time: PT0.003081S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Sun, 09 Apr 2023 17:56:33 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm
95.211.116.26303 See Other 0 B URL User Request GET HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm
IP 95.211.116.26:443
ASN #60781 LeaseWeb Netherlands B.V.
Certificate IssuerDigiCert Inc
Subject*.kelkoogroup.net
FingerprintC7:E1:73:AF:4B:2D:96:92:EC:E1:07:FF:5F:F4:76:D0:2F:7D:CF:30
ValidityThu, 25 Aug 2022 00:00:00 GMT - Mon, 25 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=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&url=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/
Connection: keep-alive
Cookie: kelkooID=a4c6295-18767299cb7-5624ae; _ga=GA1.2.40519163.1681062992; _gid=GA1.2.457914216.1681062992
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 303 See Other
leadId: 62A001GXKJK763WGGBKE6P0H97ZMFX
clickId: 107698149_1681062993079_24974759
country: no
Location: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=7wKhpikXNiZSkIrVr8~B1b3dmCGm6vlz7wSiwkQ3hMN5e5wmdfWKfhOCvO9ODJ1dS5N1-YQtWpyvPxsl6-tO6HlHqWcJLuN8YK6ehnTcEPZTmHd8Vm_~v7N-7STIAEjB; Max-Age=31536000; Expires=Mon, 08 Apr 2024 17:56:33 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
X-DataDome: protected
Request-Time: PT0.01135S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Sun, 09 Apr 2023 17:56:33 GMT
Content-Length: 0
www.sporttema.no/5.0.0.0/854/files/growl-notification/growl-notification.min.js
194.71.139.50200 OK 4.3 kB URL GET HTTP/2 www.sporttema.no/5.0.0.0/854/files/growl-notification/growl-notification.min.js
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type ASCII text, with very long lines (18155), with no line terminators
Hash 3998370ffb15a7dba7eba51a5fc3f81d
d1d090aa1aa6e5955265fecd92f1d23260a81639
937ae108253fce4f4e768cedfa6cdf67122724e73062375da10da06b4275fb79
GET /5.0.0.0/854/files/growl-notification/growl-notification.min.js HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
content-length: 4268
last-modified: Tue, 07 Mar 2023 14:32:08 GMT
etag: "46eb-5f65046be140b-gzip"
accept-ranges: bytes
expires: Thu, 04 May 2023 22:34:40 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=2592000
x-original-content-length: 18155
content-encoding: gzip
x-content-type-options: nosniff
content-type: application/javascript
X-Firefox-Spdy: h2
www.sporttema.no/1.0.1.0/2/1/component.js?m=63ca4a47af1c4
194.71.139.50200 OK 1.2 kB URL GET HTTP/2 www.sporttema.no/1.0.1.0/2/1/component.js?m=63ca4a47af1c4
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type ASCII text, with very long lines (1216)
Hash 3dd786e9a03ca49de63777665ef892be
905d44da675f58f323d3f20a65da44b5a8a5e728
fc4cab35fae034717d7ad7b17117a986f017faf4e13c4857fecf716209cb842e
GET /1.0.1.0/2/1/component.js?m=63ca4a47af1c4 HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
content-length: 1214
accept-ranges: bytes
x-original-content-length: 8801
vary: Accept-Encoding
content-encoding: gzip
etag: W/"PSA-aj-s69p46j1Ec"
expires: Sun, 07 May 2023 10:18:27 GMT
cache-control: max-age=2391712
x-content-type-options: nosniff
content-type: application/javascript
X-Firefox-Spdy: h2
www.sporttema.no/1.0.1.0/1/1/component.js?m=63ca4a47af1c4
194.71.139.50200 OK 4.4 kB URL GET HTTP/2 www.sporttema.no/1.0.1.0/1/1/component.js?m=63ca4a47af1c4
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type Unicode text, UTF-8 text, with very long lines (536)
Hash d8211f416fd43210d8a33805e7df0b33
679b6a561815be1dd8aa767b1796f48f14936677
f1606833a99edaf2a4ea33c24b87866609b20063de881b28853c06b31815dd6a
GET /1.0.1.0/1/1/component.js?m=63ca4a47af1c4 HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
content-length: 4438
last-modified: Tue, 07 Mar 2023 14:32:07 GMT
etag: "5987-5f65046b58877-gzip"
accept-ranges: bytes
expires: Tue, 25 Apr 2023 21:53:56 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=2592000
x-original-content-length: 22919
content-encoding: gzip
x-content-type-options: nosniff
content-type: application/javascript
X-Firefox-Spdy: h2
www.sporttema.no/5.0.0.0/854/files/growl-notification/light-theme.min.css
194.71.139.50 5.8 kB URL www.sporttema.no/5.0.0.0/854/files/growl-notification/light-theme.min.css
IP 194.71.139.50:0
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type ASCII text, with very long lines (12728), with no line terminators
Hash 2e7f1490acedf80269a9b633aa146a47
c1b667bf1848226b89a1f5ffadda18001398824b
52987bcf1b24ff1c6fc8f4d35d9a3beb3048055ae687d8a4d661aaa60ba23717
GET /5.0.0.0/854/files/growl-notification/light-theme.min.css HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
content-length: 5835
last-modified: Tue, 07 Mar 2023 14:32:08 GMT
etag: "31b8-5f65046bde52a-gzip"
accept-ranges: bytes
expires: Wed, 03 May 2023 21:58:06 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=2592000
x-original-content-length: 12728
content-encoding: gzip
x-content-type-options: nosniff
content-type: text/css
X-Firefox-Spdy: h2
www.sporttema.no/sd_css/master.css?m=63ca4a47af1c4
194.71.139.50 227 B URL www.sporttema.no/sd_css/master.css?m=63ca4a47af1c4
IP 194.71.139.50:0
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
Hash 955fe2207a15f70b6030aefd6cab05f8
97d85d90920f43d5d2cfe7791f0297c0e015f996
102f0f880568cdfeb72c9f4e3159a6ffec05e7280b67dd63efd6b0b1e505238d
GET /sd_css/master.css?m=63ca4a47af1c4 HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
content-length: 227
last-modified: Wed, 22 Mar 2023 13:33:01 GMT
etag: "1b6-5f77d32f6dbb6-gzip"
accept-ranges: bytes
expires: Sat, 22 Apr 2023 08:15:29 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=2592000
x-original-content-length: 438
content-encoding: gzip
x-content-type-options: nosniff
content-type: text/css
X-Firefox-Spdy: h2
www.sporttema.no/sd_css/sd.css?m=63ca4a47af1c4
194.71.139.50200 OK 2.4 kB URL GET HTTP/2 www.sporttema.no/sd_css/sd.css?m=63ca4a47af1c4
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type ASCII text, with very long lines (16496), with no line terminators
Hash 3e90cd793962c6780f75d219f5d83501
d5d5fea607835aa7b73711fa0d48da1b7b342b52
77a7b3ba13710d67392e5cff1a430da00b5f6f4ebf3d0e004e5244a53e0e0331
GET /sd_css/sd.css?m=63ca4a47af1c4 HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
content-length: 2447
last-modified: Tue, 07 Mar 2023 14:32:07 GMT
etag: "4070-5f65046ac9f22-gzip"
accept-ranges: bytes
expires: Sat, 22 Apr 2023 08:15:29 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=2592000
x-original-content-length: 16496
content-encoding: gzip
x-content-type-options: nosniff
content-type: text/css
X-Firefox-Spdy: h2
www.sporttema.no/1.0.1.0/2/1/this.css?m=63ca4a47af1c4
194.71.139.50200 OK 3.6 kB URL GET HTTP/2 www.sporttema.no/1.0.1.0/2/1/this.css?m=63ca4a47af1c4
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type ASCII text, with very long lines (22306), with no line terminators
Hash 9d78fcff842f72046fdd33d2cad0682c
5091664413056e1cf2c3f80c71161101c6319170
fc03a4a55aef8756b9eed6ef88b98b510a3a2cb9051fa53959d18d687a261de8
GET /1.0.1.0/2/1/this.css?m=63ca4a47af1c4 HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
content-length: 3608
last-modified: Tue, 07 Mar 2023 08:46:15 GMT
etag: "5722-5f64b71c97e8f-gzip"
accept-ranges: bytes
expires: Sat, 22 Apr 2023 18:14:08 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=2592000
x-original-content-length: 22306
content-encoding: gzip
x-content-type-options: nosniff
content-type: text/css
X-Firefox-Spdy: h2
www.sporttema.no/1.0.1.0/1/1/inherit.css?m=63ca4a47af1c4
194.71.139.50200 OK 8.2 kB URL GET HTTP/2 www.sporttema.no/1.0.1.0/1/1/inherit.css?m=63ca4a47af1c4
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type ASCII text, with very long lines (64798), with no line terminators
Hash 55931a655a37985b6da7a2d3d6b351ba
5ced828f50a6d5182e3770025566a3db2292ee4b
2dcf8317101dff3a1c203b14d9d10085addb62b2f8eae7d23e1b22ca8e430f1a
GET /1.0.1.0/1/1/inherit.css?m=63ca4a47af1c4 HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
content-length: 8178
last-modified: Tue, 07 Mar 2023 14:32:07 GMT
etag: "fd1e-5f65046b578d7-gzip"
accept-ranges: bytes
expires: Sat, 22 Apr 2023 12:36:25 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=2592000
x-original-content-length: 64798
content-encoding: gzip
x-content-type-options: nosniff
content-type: text/css
X-Firefox-Spdy: h2
www.sporttema.no/sd_css/custom.css?m=63ca4a47af1c4
194.71.139.50200 OK 1.0 kB URL GET HTTP/2 www.sporttema.no/sd_css/custom.css?m=63ca4a47af1c4
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type ASCII text, with very long lines (4599), with no line terminators
Hash 6ae76c7a0b2f3b7fdb87c48381a017da
d4bb0fdecfc0a52d7034681932f20750e424812b
b37d8dce9d6535a689b55a56d56798719b03451dfa86209967e74028130efd74
GET /sd_css/custom.css?m=63ca4a47af1c4 HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
content-length: 1048
last-modified: Tue, 07 Mar 2023 14:32:07 GMT
etag: "11f7-5f65046acaec2-gzip"
accept-ranges: bytes
expires: Sat, 22 Apr 2023 12:36:25 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=2592000
x-original-content-length: 4599
content-encoding: gzip
x-content-type-options: nosniff
content-type: text/css
X-Firefox-Spdy: h2
www.sporttema.no/sd_css,_master.css,qm==63ca4a47af1c4+sd_css,_sd.css,qm==63ca4a47af1c4+1.0.1.0,_2,_1,_this.css,qm==63ca4a47af1c4+1.0.1.0,_1,_1,_inherit.css,qm==63ca4a47af1c4+sd_css,_custom.css,qm==63ca4a47af1c4.pagespeed.cc.QJItZmH9Ox.css
194.71.139.50 14 kB URL www.sporttema.no/sd_css,_master.css,qm==63ca4a47af1c4+sd_css,_sd.css,qm==63ca4a47af1c4+1.0.1.0,_2,_1,_this.css,qm==63ca4a47af1c4+1.0.1.0,_1,_1,_inherit.css,qm==63ca4a47af1c4+sd_css,_custom.css,qm==63ca4a47af1c4.pagespeed.cc.QJItZmH9Ox.css
IP 194.71.139.50:0
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type ASCII text, with very long lines (65098)
Hash 5f6107aeedd42562e39889fb28f1ef2a
efe9c7592bfbf5703c376a2704232b23fa5e6e2f
204bde554ff4ad9d91158a47711e41ed8a3729fc28c025c24f808c3d40550cbf
GET /sd_css,_master.css,qm==63ca4a47af1c4+sd_css,_sd.css,qm==63ca4a47af1c4+1.0.1.0,_2,_1,_this.css,qm==63ca4a47af1c4+1.0.1.0,_1,_1,_inherit.css,qm==63ca4a47af1c4+sd_css,_custom.css,qm==63ca4a47af1c4.pagespeed.cc.QJItZmH9Ox.css HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
accept-ranges: bytes
expires: Tue, 02 Apr 2024 21:46:35 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Mon, 03 Apr 2023 21:46:35 GMT
x-original-content-length: 108637
vary: Accept-Encoding
content-encoding: gzip
content-length: 14215
content-type: text/css
X-Firefox-Spdy: h2
www.sporttema.no/5.0.0.0/854/files/growl-notification/light-theme.min.css.pagespeed.ce.5Pt7zQ_yJ9.css
194.71.139.50200 OK 5.8 kB URL GET HTTP/2 www.sporttema.no/5.0.0.0/854/files/growl-notification/light-theme.min.css.pagespeed.ce.5Pt7zQ_yJ9.css
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type ASCII text, with very long lines (12728), with no line terminators
Hash fe3df7ee29dc1869105075116a063703
b66fba7d1481eb939a4e69c8a623253a836007f2
eea6a4b98ace0ade14e9c38ac134479c26faf9337b0771faa33438e7fcda5908
GET /5.0.0.0/854/files/growl-notification/light-theme.min.css.pagespeed.ce.5Pt7zQ_yJ9.css HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
accept-ranges: bytes
x-original-content-length: 12728
last-modified: Tue, 07 Mar 2023 14:32:08 GMT
expires: Mon, 08 Apr 2024 17:56:34 GMT
cache-control: max-age=31536000
etag: W/"0-gzip"
vary: Accept-Encoding
content-encoding: gzip
content-length: 5835
content-type: text/css
X-Firefox-Spdy: h2
www.sporttema.no/5.0.0.0/854/files/growl-notification/growl-notification.min.js.pagespeed.ce.uwg3bWKhRb.js
194.71.139.50200 OK 4.3 kB URL GET HTTP/2 www.sporttema.no/5.0.0.0/854/files/growl-notification/growl-notification.min.js.pagespeed.ce.uwg3bWKhRb.js
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type ASCII text, with very long lines (18155), with no line terminators
Hash f43b9dd2583b2986dcba64a5d9a90021
9521b24519eec848f841c240e966077dd15e035d
3dc81d44d0eab25f4f13948fa098926a17b08e944e6a6c60b5fd64085d591876
GET /5.0.0.0/854/files/growl-notification/growl-notification.min.js.pagespeed.ce.uwg3bWKhRb.js HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
accept-ranges: bytes
x-original-content-length: 18155
last-modified: Tue, 07 Mar 2023 14:32:08 GMT
expires: Mon, 08 Apr 2024 17:56:34 GMT
cache-control: max-age=31536000
etag: W/"0-gzip"
vary: Accept-Encoding
content-encoding: gzip
content-length: 4268
content-type: application/javascript
X-Firefox-Spdy: h2
www.sporttema.no/1.0.1.0/1/1/component.js,qm=63ca4a47af1c4.pagespeed.ce.dlfznoPOFl.js
194.71.139.50200 OK 4.4 kB URL GET HTTP/2 www.sporttema.no/1.0.1.0/1/1/component.js,qm=63ca4a47af1c4.pagespeed.ce.dlfznoPOFl.js
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type Unicode text, UTF-8 text, with very long lines (536)
Hash 962bd7675bdb3f17476b97067c1dcc77
643b5ed5b66a02211e3ef5ceda838af71337a282
b99a47a60bb6c7183f0af206543338c2f788dbef80c9da50f7de685a97fdea18
GET /1.0.1.0/1/1/component.js,qm=63ca4a47af1c4.pagespeed.ce.dlfznoPOFl.js HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
accept-ranges: bytes
x-original-content-length: 22919
last-modified: Tue, 07 Mar 2023 14:32:07 GMT
expires: Mon, 08 Apr 2024 17:56:34 GMT
cache-control: max-age=31536000
etag: W/"0-gzip"
vary: Accept-Encoding
content-encoding: gzip
content-length: 4438
content-type: application/javascript
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.1/16816/cache/x16816_57015d769d92e30cd3911cac49c7326e.jpg.pagespeed.ic.3D82xFGyrN.webp
194.71.139.50200 OK 3.4 kB URL GET HTTP/2 www.sporttema.no/20.0.0.1/16816/cache/x16816_57015d769d92e30cd3911cac49c7326e.jpg.pagespeed.ic.3D82xFGyrN.webp
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 142x153, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dc3f36c451b2acd7610ad743403e27d4
8788f59b22ac1ad57154a4b76bdcdc3a1ff6043f
f0c0d1a627545f62c4dfac422ba5067397fa27b62e0e4f3f8776a7132b8d7d24
GET /20.0.0.1/16816/cache/x16816_57015d769d92e30cd3911cac49c7326e.jpg.pagespeed.ic.3D82xFGyrN.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.1/16816/cache/16816_57015d769d92e30cd3911cac49c7326e.jpg>; rel="canonical"
accept-ranges: bytes
expires: Mon, 08 Apr 2024 13:41:01 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sun, 09 Apr 2023 13:41:01 GMT
x-original-content-length: 11781
content-length: 3430
content-type: image/webp
X-Firefox-Spdy: h2
www.sporttema.no/dynamic_js.php,qm=6dd0006f1fee73a9c65a000251d89201.pagespeed.jm.OgwEmSkocX.js
194.71.139.50200 OK 5.9 kB URL GET HTTP/2 www.sporttema.no/dynamic_js.php,qm=6dd0006f1fee73a9c65a000251d89201.pagespeed.jm.OgwEmSkocX.js
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type ASCII text, with very long lines (962)
Hash aa35911249e585064a4a136f4284162f
bcd7cd7db8ab6835d95b8a4159c44cf3ce855b70
7b381b4a72e0131262a84b9b498b243daaf80030b317cc5d9b91c2820e5252e2
GET /dynamic_js.php,qm=6dd0006f1fee73a9c65a000251d89201.pagespeed.jm.OgwEmSkocX.js HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
expires: Mon, 08 Apr 2024 00:04:36 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sun, 09 Apr 2023 00:04:36 GMT
x-original-content-length: 28092
vary: Accept-Encoding
content-encoding: gzip
content-length: 5899
content-type: text/javascript; charset=UTF-8
X-Firefox-Spdy: h2
widget.trustpilot.com/bootstrap/v5/tp.widget.sync.bootstrap.min.js
143.204.55.80200 OK 712 B URL GET HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.sync.bootstrap.min.js
IP 143.204.55.80:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerAmazon
Subject*.trustpilot.com
FingerprintED:01:2E:50:4C:98:9B:F1:34:D7:8C:1E:93:45:E6:05:00:3C:47:86
ValidityThu, 02 Feb 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (1218)
Hash a148992a7b15dc7e6a9fa9d5e18e4368
8e4a5a0913a09aaa93313be6d24c3052d3718c39
42f1dad641e614b4bfb3524caf5b1ff69ee49f53dc56f0336bbfb44910b30120
GET /bootstrap/v5/tp.widget.sync.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 712
last-modified: Mon, 30 May 2022 14:38:03 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 09 Apr 2023 03:10:19 GMT
cache-control: max-age=86400
etag: "a148992a7b15dc7e6a9fa9d5e18e4368"
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qcXnhPS1rFBDcX0vbWOdE39Ghyr1hn6gd58ohVZwNSfB8LwbYh38YA==
age: 53176
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/Swiper/4.5.0/js/swiper.min.js
104.17.25.14 29 kB URL cdnjs.cloudflare.com/ajax/libs/Swiper/4.5.0/js/swiper.min.js
IP 104.17.25.14:0
File type ASCII text, with very long lines (65270)
Hash ee48f638fd293e1f8044ff4602081e07
7e933fdc62fc1294a2554d1912765efb3d27b743
eaa7fb7f8dbe2334a509c602844962fb309034aba8007d67afb87c80c5a78c32
GET /ajax/libs/Swiper/4.5.0/js/swiper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 28876
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf2-1f3be"
last-modified: Mon, 04 May 2020 16:04:02 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3460371
expires: Fri, 29 Mar 2024 17:56:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s9b7kIYmrj3GC0VdQYsX9Uc5EW26vzybX8GvfrQuFudReyf%2FZ%2FOwQiRiumszpcNj1uzFqhn72gX0lMnF2lnEgXBZ3b%2BwhTTmjFh2twk91CCrf3GkTBs%2FIxrLd661ORFOA9hQBGbd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7b54a0a2bc970b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash bb566a0dc2b24a4c04737ea028d2dc15
a32cd606fb918d21011dea617eb8436b72bdd95a
a2f6eefac6dbb121841e0f810d8181426a4861d75da8358fc6472ae5b3fd97f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash fde84dd401b98336fcfea5ea154e32fd
322f56641f2414185a298265e10377695fbf2cd5
f5900450f8c4c1f72fc0ebd10506e45ebe1bd11c3d812bfc6cc2b225db7d903a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
142.250.74.170200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
IP 142.250.74.170:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint77:43:87:91:D0:0A:64:BD:84:1C:9A:F5:10:86:8E:8E:04:F1:F9:A3
ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT
File type ASCII text, with very long lines (32058)
Hash fc3fc31e5e7c0933dc18e562c1c071bf
a44c31323f6bd29e583cc585036e6eb39f7014a6
ddad766fb94b23efeb5574cdedc5e8446d496fb91bd0b08cd80be212e001055d
GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30306
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 08 Apr 2023 10:08:38 GMT
expires: Sun, 07 Apr 2024 10:08:38 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 114476
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-374518-10
142.250.74.168200 OK 45 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-374518-10
IP 142.250.74.168:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint3C:0B:85:94:2A:86:0A:B3:D0:9E:43:A9:87:6A:FB:56:49:9F:F6:B8
ValidityMon, 20 Mar 2023 08:17:43 GMT - Mon, 12 Jun 2023 08:17:42 GMT
File type ASCII text, with very long lines (2206)
Hash b9760b7669345a282723ea2b507e65fd
60fecdcbc5b3e1a3dab0d438f80b8d5fd3af99e6
8ef1eb399cc316e053cb3172afd49076bb8f0c424a5a51a154e9f64312a37b92
GET /gtag/js?id=UA-374518-10 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 09 Apr 2023 17:56:34 GMT
expires: Sun, 09 Apr 2023 17:56:34 GMT
cache-control: private, max-age=900
last-modified: Sun, 09 Apr 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44940
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
143.204.55.80 6.1 kB URL widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP 143.204.55.80:0
Certificate IssuerAmazon
Subject*.trustpilot.com
FingerprintED:01:2E:50:4C:98:9B:F1:34:D7:8C:1E:93:45:E6:05:00:3C:47:86
ValidityThu, 02 Feb 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sun, 09 Apr 2023 01:27:04 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7vxieBXYXriT4mk2mxDzusbvKFHRFaGOww630PsXaympzP4IfilMKQ==
age: 59371
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/Swiper/4.5.0/css/swiper.min.css
104.17.25.14200 OK 2.6 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/Swiper/4.5.0/css/swiper.min.css
IP 104.17.25.14:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (19512)
Hash d6a74f512a44f5f6664afddf8a7c2bed
55d619ec1b98cfa37a85385566e82ffe37f4fefd
4466e56a6b9fa34fe1d452456f3280c73d98f669e41b02cb2eaf3afb79083f7e
GET /ajax/libs/Swiper/4.5.0/css/swiper.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: cdnjs.cloudflare.com
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
content-type: text/css; charset=utf-8
content-length: 2581
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf2-4d42"
last-modified: Mon, 04 May 2020 16:04:02 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 502911
expires: Fri, 29 Mar 2024 17:56:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z1BtsAGMctaXw1v6D6u7RmL6SL8HFaY4fBn2ajd5s3%2FiXrUeRSii8cSs2StmsOU%2FU4odMBlPyeQFiWMCGbi4KZ8Z0K8Q4NxD2OflssBnpOfAacEjIwwrf2mTCJBkcwFAMBGFTzE3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7b54a0a3db39b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 33aec5a6a26165f6104026c0dd599fc5
9ec1804ec89416bdf58e8735674e02b07cc231f2
b1d1d3c4e711f2dfbe75afc8bcfd8368fb69ee8720f684188744189fc25b8bdc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-PF89G4G
142.250.74.168200 OK 72 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PF89G4G
IP 142.250.74.168:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint3C:0B:85:94:2A:86:0A:B3:D0:9E:43:A9:87:6A:FB:56:49:9F:F6:B8
ValidityMon, 20 Mar 2023 08:17:43 GMT - Mon, 12 Jun 2023 08:17:42 GMT
File type ASCII text, with very long lines (7178)
Hash e449e88f361a55f691e8df2827e2a5a8
3e943d3c19ac1e6826eb728055ca3dfe813dcf9a
7c5b86416d4fcb8b50b192f101d9762ba000c9335f3985b6cee8e3fa51401dd3
GET /gtm.js?id=GTM-PF89G4G HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 09 Apr 2023 17:56:34 GMT
expires: Sun, 09 Apr 2023 17:56:34 GMT
cache-control: private, max-age=900
last-modified: Sun, 09 Apr 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72494
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.0/6374/cache/6374_899ed52a.png
194.71.139.50 1.4 kB URL www.sporttema.no/20.0.0.0/6374/cache/6374_899ed52a.png
IP 194.71.139.50:0
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type PNG image data, 239 x 35, 8-bit colormap, non-interlaced\012- data
Hash 95c09669f084de7db45a662afc082394
d22c9f2b1e00f9882861b0b42a668f389eae5ffe
8dce5d890720a4814adb5d09ec2de9df123fdafad7dc755a174a1212b95c7129
GET /20.0.0.0/6374/cache/6374_899ed52a.png HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
content-length: 1352
accept-ranges: bytes
x-original-content-length: 1365
etag: W/"PSA-aj-lcCWafCE3n"
expires: Tue, 09 May 2023 16:59:06 GMT
cache-control: max-age=2588551
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.1/17879/cache/x17879_16dadf22ba9102853128dc7f41c80c48.jpg.pagespeed.ic.vcgx9N1HWZ.webp
194.71.139.50 2.1 kB URL www.sporttema.no/20.0.0.1/17879/cache/x17879_16dadf22ba9102853128dc7f41c80c48.jpg.pagespeed.ic.vcgx9N1HWZ.webp
IP 194.71.139.50:0
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 142x142, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bdc831f4dd47599d7c19e1d2e30c5d4b
f4033f72ce28739cfede31b385f62ce918994d89
53bb1087dc3204f4a3f953c3a0f0dbba1e3e582d7ccb05f5817977dc914be22a
GET /20.0.0.1/17879/cache/x17879_16dadf22ba9102853128dc7f41c80c48.jpg.pagespeed.ic.vcgx9N1HWZ.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.1/17879/cache/17879_16dadf22ba9102853128dc7f41c80c48.jpg>; rel="canonical"
accept-ranges: bytes
expires: Mon, 08 Apr 2024 13:41:01 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sun, 09 Apr 2023 13:41:01 GMT
x-original-content-length: 6586
content-length: 2090
content-type: image/webp
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.1/17813/cache/x17813_b479815e5e2bb2c8ca9266d8eb8ddc71.jpg.pagespeed.ic.a7D_N8VaM1.webp
194.71.139.50200 OK 2.6 kB URL GET HTTP/2 www.sporttema.no/20.0.0.1/17813/cache/x17813_b479815e5e2bb2c8ca9266d8eb8ddc71.jpg.pagespeed.ic.a7D_N8VaM1.webp
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 142x152, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6bb0ff37c55a3359b916b80e80185bec
3a116be5112645819530c9c333d4dc5d55982b22
b3adfd66b7d2e99bf13bdf8c564d8f424df9a06ab4534988ecd02afd8acc5abd
GET /20.0.0.1/17813/cache/x17813_b479815e5e2bb2c8ca9266d8eb8ddc71.jpg.pagespeed.ic.a7D_N8VaM1.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.1/17813/cache/17813_b479815e5e2bb2c8ca9266d8eb8ddc71.jpg>; rel="canonical"
accept-ranges: bytes
expires: Mon, 08 Apr 2024 13:41:01 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sun, 09 Apr 2023 13:41:01 GMT
x-original-content-length: 7386
content-length: 2628
content-type: image/webp
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.1/17176/cache/x17176_f70f910379b33b9e15a8a6297182a1bb.jpg.pagespeed.ic.xyDVqqgB61.webp
194.71.139.50200 OK 2.4 kB URL GET HTTP/2 www.sporttema.no/20.0.0.1/17176/cache/x17176_f70f910379b33b9e15a8a6297182a1bb.jpg.pagespeed.ic.xyDVqqgB61.webp
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 142x142, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c720d5aaa801eb5f3d528839eb80ad76
38574de89dd29024dbb665522b3947288138ee00
a5c63b3dba2978d85c43a2ea8e56af3b0d6f58a8070fb6461a2998d9bf0c1dbb
GET /20.0.0.1/17176/cache/x17176_f70f910379b33b9e15a8a6297182a1bb.jpg.pagespeed.ic.xyDVqqgB61.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.1/17176/cache/17176_f70f910379b33b9e15a8a6297182a1bb.jpg>; rel="canonical"
accept-ranges: bytes
expires: Sun, 07 Apr 2024 10:25:24 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sat, 08 Apr 2023 10:25:24 GMT
x-original-content-length: 5816
content-length: 2404
content-type: image/webp
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.1/16704/cache/x16704_8dd174c0431e165b3724a31bea624598.jpg.pagespeed.ic.4N_bgCcl9b.webp
194.71.139.50200 OK 1.2 kB URL GET HTTP/2 www.sporttema.no/20.0.0.1/16704/cache/x16704_8dd174c0431e165b3724a31bea624598.jpg.pagespeed.ic.4N_bgCcl9b.webp
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 142x142, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e0dfdb802725f5b9b30a3c58219a3c5a
76a9729ee8b5ce54aa367f33d7ac2a544d211b4e
066db5eec50160a3093b8054b75d0886da415cbeb135eec15ef793417fb85d5c
GET /20.0.0.1/16704/cache/x16704_8dd174c0431e165b3724a31bea624598.jpg.pagespeed.ic.4N_bgCcl9b.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.1/16704/cache/16704_8dd174c0431e165b3724a31bea624598.jpg>; rel="canonical"
accept-ranges: bytes
expires: Mon, 08 Apr 2024 13:41:01 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sun, 09 Apr 2023 13:41:01 GMT
x-original-content-length: 3697
content-length: 1236
content-type: image/webp
X-Firefox-Spdy: h2
www.linkbux.com/track?pid=LB00002126&mid=68124&url=https://www.sporttema.no/&uid=35031f45ec1072bbed37b313328ed0c0
198.11.181.248 3.3 kB URL www.linkbux.com/track?pid=LB00002126&mid=68124&url=https://www.sporttema.no/&uid=35031f45ec1072bbed37b313328ed0c0
IP 198.11.181.248:0
ASN #45102 Alibaba US Technology Co., Ltd.
Hash 33dfc1fd286b193bc1ecde0dcc341448
f86c0e2b865b68c3380d29dcbc980bb98ce250d7
054ed8c00734dba0b34f1d5652e28d27399d8a1ced45212b67fd03c0ec1fd9b6
GET /track?pid=LB00002126&mid=68124&url=https://www.sporttema.no/&uid=35031f45ec1072bbed37b313328ed0c0 HTTP/1.1
Host: www.linkbux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:32 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: discuz_2132_saltkey=1kW9umgy; expires=Tue, 09-May-2023 17:56:32 GMT; Max-Age=2592000; path=/; httponly
discuz_2132_lang=en; path=/
discuz_2132_lang=en; path=/
content-encoding: gzip
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.0/7227/cache/x7227_a1089d2906b53c00e941c2fe3b203aed.jpg.pagespeed.ic.-026CUZ-Rv.webp
194.71.139.50 1.8 kB URL www.sporttema.no/20.0.0.0/7227/cache/x7227_a1089d2906b53c00e941c2fe3b203aed.jpg.pagespeed.ic.-026CUZ-Rv.webp
IP 194.71.139.50:0
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 142x108, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fb4dba09467e46f7f78add1831e0859a
0b94e5dbf790904c5136121d6a1432bb7a27f300
1b2dd3f289ab34bcd3c5b7933c43ee15973e90a8dbd4a3d4d78a1bb387d252d9
GET /20.0.0.0/7227/cache/x7227_a1089d2906b53c00e941c2fe3b203aed.jpg.pagespeed.ic.-026CUZ-Rv.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.0/7227/cache/7227_a1089d2906b53c00e941c2fe3b203aed.jpg>; rel="canonical"
accept-ranges: bytes
expires: Mon, 08 Apr 2024 13:41:01 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sun, 09 Apr 2023 13:41:01 GMT
x-original-content-length: 6570
content-length: 1844
content-type: image/webp
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.0/6828/cache/x6828_5317127c2f27120793bf837571e9f4d5.jpg.pagespeed.ic.bMsAnFEnKX.webp
194.71.139.50200 OK 1.7 kB URL GET HTTP/2 www.sporttema.no/20.0.0.0/6828/cache/x6828_5317127c2f27120793bf837571e9f4d5.jpg.pagespeed.ic.bMsAnFEnKX.webp
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 142x139, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6ccb009c5127297b7a07ed13c3dbbac5
77486798b55d0fff8e63fbc97b2dc625fcf74dfc
6304dca8e1fc109515982b4fd6923d08d1d08c5e501a26d3f76b0c36d187b67c
GET /20.0.0.0/6828/cache/x6828_5317127c2f27120793bf837571e9f4d5.jpg.pagespeed.ic.bMsAnFEnKX.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.0/6828/cache/6828_5317127c2f27120793bf837571e9f4d5.jpg>; rel="canonical"
accept-ranges: bytes
expires: Mon, 08 Apr 2024 09:33:57 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sun, 09 Apr 2023 09:33:57 GMT
x-original-content-length: 6831
content-length: 1674
content-type: image/webp
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.0/6915/cache/x6915_d312e503f230dc7f04a7a4a367ac88ae.jpg.pagespeed.ic.r2kUrs4KTc.webp
194.71.139.50200 OK 2.4 kB URL GET HTTP/2 www.sporttema.no/20.0.0.0/6915/cache/x6915_d312e503f230dc7f04a7a4a367ac88ae.jpg.pagespeed.ic.r2kUrs4KTc.webp
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 142x95, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash af6914aece0a4dc408a24248f4eb9816
daddd8f67cb2e716e79640af8ae7a6ff708e336d
50272449ca753bffb213d8131bd9214ffe287c156518ba5e9b0b2e8b8a1ac41d
GET /20.0.0.0/6915/cache/x6915_d312e503f230dc7f04a7a4a367ac88ae.jpg.pagespeed.ic.r2kUrs4KTc.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.0/6915/cache/6915_d312e503f230dc7f04a7a4a367ac88ae.jpg>; rel="canonical"
accept-ranges: bytes
expires: Mon, 08 Apr 2024 13:41:01 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sun, 09 Apr 2023 13:41:01 GMT
x-original-content-length: 6850
content-length: 2446
content-type: image/webp
X-Firefox-Spdy: h2
www.sporttema.no/favicon.ico
194.71.139.50200 OK 2.2 kB URL GET HTTP/2 www.sporttema.no/favicon.ico
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type MS Windows icon resource - 1 icon, 32x32\012- data
Hash 8416bbf55ca2c55fb5f99410864a85eb
e4c39b5a87ab257c3bd23ff623ec4c06b9206b3d
bb86c4ea2c181b9a12212975df4f0a615fa83d2c4ffbd2ff2c10554c64946a20
GET /favicon.ico HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
last-modified: Wed, 21 Mar 2012 13:51:32 GMT
etag: "8be-4bbc116c60100"
accept-ranges: bytes
content-length: 2238
cache-control: max-age=30, s-maxage=10
expires: Sun, 09 Apr 2023 17:57:04 GMT
vary: User-Agent,Accept-Encoding
content-type: image/vnd.microsoft.icon
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.0/6915/cache/x6915_54ec13766401fa11422321bfe25087f1.jpg.pagespeed.ic.1s1nCkjtcj.webp
194.71.139.50 3.5 kB URL www.sporttema.no/20.0.0.0/6915/cache/x6915_54ec13766401fa11422321bfe25087f1.jpg.pagespeed.ic.1s1nCkjtcj.webp
IP 194.71.139.50:0
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x128, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d6cd670a48ed72357d6699fd090e9ab8
bdeb74b416889efb48c2c045079797fba5205ea5
494463a3f167e07ee1a69004a8773d8094b969a07602d5f6a526a20111d250e5
GET /20.0.0.0/6915/cache/x6915_54ec13766401fa11422321bfe25087f1.jpg.pagespeed.ic.1s1nCkjtcj.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.0/6915/cache/6915_54ec13766401fa11422321bfe25087f1.jpg>; rel="canonical"
accept-ranges: bytes
expires: Mon, 08 Apr 2024 17:52:29 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sun, 09 Apr 2023 17:52:29 GMT
x-original-content-length: 10611
content-length: 3526
content-type: image/webp
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.0/9847/cache/x9847_4864efc405628003ca63dde5b3cdaee1.jpg.pagespeed.ic.olOHZ_Z2oi.webp
194.71.139.50 3.7 kB URL www.sporttema.no/20.0.0.0/9847/cache/x9847_4864efc405628003ca63dde5b3cdaee1.jpg.pagespeed.ic.olOHZ_Z2oi.webp
IP 194.71.139.50:0
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a2538767f676a220f316ac6ebbd1ea60
018a1d56dbdaa196787417fdadbf82d529293401
d98306b1903e0facc1fd0c3834628d55788cfe49ac73732e08bf91930094e171
GET /20.0.0.0/9847/cache/x9847_4864efc405628003ca63dde5b3cdaee1.jpg.pagespeed.ic.olOHZ_Z2oi.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.0/9847/cache/9847_4864efc405628003ca63dde5b3cdaee1.jpg>; rel="canonical"
accept-ranges: bytes
expires: Sun, 07 Apr 2024 13:33:00 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sat, 08 Apr 2023 13:33:00 GMT
x-original-content-length: 13145
content-length: 3732
content-type: image/webp
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.0/9850/cache/x9850_53b47b8e36fb5712705e8fbdf9a74769.jpg.pagespeed.ic.CbuH-4oxIl.webp
194.71.139.50 2.2 kB URL www.sporttema.no/20.0.0.0/9850/cache/x9850_53b47b8e36fb5712705e8fbdf9a74769.jpg.pagespeed.ic.CbuH-4oxIl.webp
IP 194.71.139.50:0
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 09bb87fb8a31225c91cd76fb0ce0c024
d2b850e95285b2b609e0e560d7d4359e2b7c2dc9
5c6f4d968f2f4c4eff6768d43d872b480f040daa3c07b34be65c35422375ed9b
GET /20.0.0.0/9850/cache/x9850_53b47b8e36fb5712705e8fbdf9a74769.jpg.pagespeed.ic.CbuH-4oxIl.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.0/9850/cache/9850_53b47b8e36fb5712705e8fbdf9a74769.jpg>; rel="canonical"
accept-ranges: bytes
expires: Sun, 07 Apr 2024 19:03:17 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sat, 08 Apr 2023 19:03:17 GMT
x-original-content-length: 6816
content-length: 2242
content-type: image/webp
X-Firefox-Spdy: h2
www.sporttema.no/20.0.0.1/17916/cache/x17916_a80d04b82294644abf3f917f4cd0cec1.jpg.pagespeed.ic.X921ojme6j.webp
194.71.139.50200 OK 3.5 kB URL GET HTTP/2 www.sporttema.no/20.0.0.1/17916/cache/x17916_a80d04b82294644abf3f917f4cd0cec1.jpg.pagespeed.ic.X921ojme6j.webp
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5fddb5a2399eea3ceff91f0a172ee912
86da906b66b4e7efcd403a59d2f4504f7e3f829f
3886bfc70a604b2f8b4fe89e49cd6519370b4262acd6f8a72f8f3488bfd93fe1
GET /20.0.0.1/17916/cache/x17916_a80d04b82294644abf3f917f4cd0cec1.jpg.pagespeed.ic.X921ojme6j.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.1/17916/cache/17916_a80d04b82294644abf3f917f4cd0cec1.jpg>; rel="canonical"
accept-ranges: bytes
expires: Mon, 08 Apr 2024 17:52:29 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sun, 09 Apr 2023 17:52:29 GMT
x-original-content-length: 10631
content-length: 3466
content-type: image/webp
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 0c3b0b20c5a2c7b818da43e38478e8f9
d4f4312a880db2ed8a860d539c97f048f8577203
b1d4370b03059fea7e74e1b4539c68422291ffb6bfccc018bbe4fa3d0576f76d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 0c3b0b20c5a2c7b818da43e38478e8f9
d4f4312a880db2ed8a860d539c97f048f8577203
b1d4370b03059fea7e74e1b4539c68422291ffb6bfccc018bbe4fa3d0576f76d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 5858994986d7875635b9d6c8e9da2eb6
8b9580b269b58d4a6776f9d3d0fc4dfb27dc251b
caee8e61df5d29ac533e2158e0efe056b384957dc2f60c755168aae60fcb159d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2
216.58.207.227200 OK 30 kB URL GET HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2
IP 216.58.207.227:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint76:06:6A:AA:FB:72:F8:BA:90:67:2F:91:97:14:FB:68:D0:65:E9:22
ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT
File type Web Open Font Format (Version 2), TrueType, length 29752, version 1.0\012- data
Hash ab1fc8621287e4ea9319a3136812cf80
fb4ed2e52e2a8d7ac50a7618a0c2ea5507a24ef3
7c00752ce82d6abaed0b9766d35b906b16675facdbe24115b410d1fab975effa
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.sporttema.no
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Apr 2023 10:34:52 GMT
expires: Wed, 03 Apr 2024 10:34:52 GMT
cache-control: public, max-age=31536000
age: 458502
last-modified: Wed, 27 Apr 2022 17:05:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=7c2d9e775b
172.64.169.22 52 kB URL ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=7c2d9e775b
IP 172.64.169.22:0
File type ASCII text, with very long lines (60130)
Hash db8df516feedad700aa49e5013943e11
daa89f6695ecbe32a2e070df3587d941349e6fb0
93de68d245460a714aa7d2d4dfbb15dfa3c4f39474b9dad8044602196eee2bce
GET /releases/v5.15.4/css/free.min.css?token=7c2d9e775b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.sporttema.no/
Origin: https://www.sporttema.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2dd59b0ea355cb92a87e9e385032622a.cloudfront.net (CloudFront)
x-amz-cf-pop: JFK50-P8
x-amz-cf-id: jAIez3nAEwuYw7p3nTE409F9JsGyWcRqCRk1k-RvVbx2BgQ5N2BBnw==
age: 2096285
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3zX5EjpjUayfjlai3ae6hT4WGB8ueQiH1sqMGKJgqcsuHnfYLi5KL3mDCSXsSVUCa1WIUobzYk2pn0BJNna%2BnDuAYO87suTkbH0Fov6W2LuSCERn8%2FCVNrmOa2YgO4YcS2uPFpwbkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b54a0a47b3e8924-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
216.58.207.227 35 kB URL fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data
Hash 0e8eefb4549a2edf26c560cb9845952e
8d0b1718aacad934fd0043c87cbc54aa091396bf
7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.sporttema.no
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 09 Apr 2023 15:02:46 GMT
expires: Mon, 08 Apr 2024 15:02:46 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
age: 10428
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.sporttema.no/sd_function/update.php?site=1
194.71.139.50200 OK 0 B URL GET HTTP/2 www.sporttema.no/sd_function/update.php?site=1
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sd_function/update.php?site=1 HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
set-cookie: sitedirect_shopcart_1=a%3A0%3A%7B%7D; expires=Tue, 09-May-2023 17:56:34 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=strict
vary: User-Agent,Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, max-age=0, no-cache, s-maxage=10
content-length: 0
content-type: text/html; charset=UTF-8
X-Firefox-Spdy: h2
www.sporttema.no/mod_pagespeed_beacon?url=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm
194.71.139.50204 No Content 0 B URL POST HTTP/2 www.sporttema.no/mod_pagespeed_beacon?url=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mod_pagespeed_beacon?url=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 170
Origin: https://www.sporttema.no
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4; sitedirect_shopcart_1=a%3A0%3A%7B%7D; _gcl_au=1.1.692763118.1681062995
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
cache-control: max-age=0, no-cache, max-age=30
expires: Sun, 09 Apr 2023 17:57:04 GMT
X-Firefox-Spdy: h2
adtr.io/jsTag?ap=1059882004
143.204.55.47 12 kB URL adtr.io/jsTag?ap=1059882004
IP 143.204.55.47:0
File type ASCII text, with very long lines (11695), with no line terminators
Hash 596f781aa2a5fd46d05aab6aebb342c3
be38004fbb1e899367fb2aa910cb6270ee185a64
6e4436aefaccbfe6dc491d12612be9a4ea77b71528eb1f34828eb0275b6223e8
GET /jsTag?ap=1059882004 HTTP/1.1
Host: adtr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript;charset=UTF-8
content-length: 11695
access-control-allow-origin: *
x-traceid: 5e979700-466f-465e-b7b9-193c8c5ad287
date: Sun, 09 Apr 2023 17:29:26 GMT
cache-control: max-age=10800, s-maxage=1800
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lpvR6_jPIAa4xV7qrM9cJhPZVzX_YAVuJpRJck7r41TAup_eXaZ32Q==
age: 1629
X-Firefox-Spdy: h2
s.kk-resources.com/leadtag.js
143.204.55.7200 OK 2.6 kB URL GET HTTP/1.1 s.kk-resources.com/leadtag.js
IP 143.204.55.7:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerAmazon
Subjects.kk-resources.com
Fingerprint51:0B:BC:16:98:27:28:8D:16:17:97:FC:89:6A:7F:1C:A1:4E:58:8C
ValidityWed, 22 Feb 2023 00:00:00 GMT - Mon, 07 Aug 2023 23:59:59 GMT
File type C source, ASCII text, with very long lines (6988)
Hash 451cbed513c586c489e0871f9fd9ebf5
274ee82e54a6afb6a3fb19d06a955412f60c87fc
5cb763e2d2e259ee43696720a1311a6929982a5c9ab63be3f9d67de55ff82602
GET /leadtag.js HTTP/1.1
Host: s.kk-resources.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Content-Length: 2608
Connection: keep-alive
X-Gravitee-Transaction-Id: 7cad29a2-162b-4db9-ad29-a2162b9db9b0
X-Gravitee-Request-Id: 7cad29a2-162b-4db9-ad29-a2162b9db9b0
ETag: "dc1de92a0d16cf8cbe341111a7ff6547fbb7be2b"
Request-Time: 9
Accept-Ranges: bytes
Cache-Control: public, max-age=3600
Last-Modified: Mon, 27 Mar 2023 12:43:48 GMT
Content-Encoding: gzip
Date: Sun, 09 Apr 2023 17:54:47 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0GfsqLxTJUWgd-qFU1BPGslYso7x34kUvPQhNme30Xr6d49SXMyu-Q==
Age: 108
ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
172.64.169.22200 OK 78 kB URL GET HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
IP 172.64.169.22:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint49:14:F2:7A:2C:AE:36:01:38:B7:F7:3D:DB:44:3E:3F:5C:FB:6B:15
ValidityFri, 12 Aug 2022 00:00:00 GMT - Sat, 12 Aug 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 78168, version 331.-31196\012- data
Hash a9fd1225fb2cd32320e2b931dca01089
44ec5c6a868b4ce62350d9f040ed8e18f7a1d128
c5dd43f53f3af822cbf17b1fb75f46192cdbd51724f277acf6cf0dacb3fd57e7
GET /releases/v5.15.4/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.sporttema.no
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
content-type: font/woff2
content-length: 78168
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:58:24 GMT
etag: "a9fd1225fb2cd32320e2b931dca01089"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 7c10de2006b7b1d4ae37bbcf905eecd6.cloudfront.net (CloudFront)
x-amz-cf-pop: JFK50-P8
x-amz-cf-id: 2OW2FGwdPjjkP3Zvp_RX0MSu4rDlO_C8UvL0SvJDuZ7xIWZv2Qp5uw==
age: 2096284
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2J8gtH7mNRSVwgHtvrmM1ju8GGX%2Fj%2Bpr2gsEsssEPGKCP%2FpsFT7YbY%2BXkYIiClsbrm%2BmvPcjUx5KCKFl%2FG90TE3XsEETg9AGE9TLvdy0LzORSkPnLuiAIFAnxGNzLEuFm6%2BHPMW%2FPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b54a0a68e568924-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-833441087&l=dataLayer&cx=c
142.250.74.168200 OK 52 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=AW-833441087&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint3C:0B:85:94:2A:86:0A:B3:D0:9E:43:A9:87:6A:FB:56:49:9F:F6:B8
ValidityMon, 20 Mar 2023 08:17:43 GMT - Mon, 12 Jun 2023 08:17:42 GMT
File type ASCII text, with very long lines (2206)
Hash 714680d41f2306d7fdd30428fd0ca81e
b61b31fc61846a16135e037df80fa3377a5c8dbb
a06fe3e15b5a60dbee08bf04298c365638898ce6d2ae4453bcae7e0e5e363b96
GET /gtag/js?id=AW-833441087&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.googletagmanager.com
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 09 Apr 2023 17:56:35 GMT
expires: Sun, 09 Apr 2023 17:56:35 GMT
cache-control: private, max-age=900
last-modified: Sun, 09 Apr 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51771
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=AW-833441087
142.250.74.168200 OK 52 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=AW-833441087
IP 142.250.74.168:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint3C:0B:85:94:2A:86:0A:B3:D0:9E:43:A9:87:6A:FB:56:49:9F:F6:B8
ValidityMon, 20 Mar 2023 08:17:43 GMT - Mon, 12 Jun 2023 08:17:42 GMT
File type ASCII text, with very long lines (2206)
Hash 4202355b1dfb1526771b4a502b6a2f9d
ba8ef85cf7ba216e6d6c1fc30f8e99996c8dd450
0b9b85c7b766e3fe516fec751279c38cf10393b63e31cd51568b42d19695dab8
GET /gtag/js?id=AW-833441087 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.googletagmanager.com
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 09 Apr 2023 17:56:35 GMT
expires: Sun, 09 Apr 2023 17:56:35 GMT
cache-control: private, max-age=900
last-modified: Sun, 09 Apr 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51680
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
sporttema.ladesk.com/scripts/track.js
91.201.28.203200 OK 13 kB URL GET HTTP/2 sporttema.ladesk.com/scripts/track.js
IP 91.201.28.203:443
ASN #203480 Quality Unit, s.r.o.
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectladesk.com
FingerprintB0:3F:B6:E3:7A:38:3F:A4:25:9F:1E:A8:37:B7:50:43:B0:A3:FD:A8
ValidityFri, 24 Feb 2023 10:16:28 GMT - Thu, 25 May 2023 10:16:27 GMT
File type ASCII text, with very long lines (50305), with no line terminators
Hash ba90f43d3e448f0b7384a9e54592221b
53eb0fa1914733e311a7da36dd251f97939d2d1e
bed067c11fbc377217b4cf040217e85bfb4d19c905ef23afe81f4ca65fd0487b
GET /scripts/track.js HTTP/1.1
Host: sporttema.ladesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 09 Apr 2023 17:56:35 GMT
content-type: application/javascript
content-length: 13036
last-modified: Tue, 14 Mar 2023 14:18:04 GMT
cache-control: max-age=300, public
expires: Sun, 09 Apr 2023 23:54:32 GMT
x-srv: 7
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"c481-5f6dce54fbf00"
x-varnish: 16857941 15328206
age: 122
vary: Accept-Encoding
via: 1.1 varnish (3.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
31.13.72.12 28 kB URL GET connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerDigiCert Inc
Subject*.facebook.com
FingerprintE4:E4:73:A3:C4:45:61:B6:D5:02:63:DC:B1:3E:B0:C4:FD:E3:D6:65
ValidityTue, 17 Jan 2023 00:00:00 GMT - Mon, 17 Apr 2023 23:59:59 GMT
File type ASCII text, with very long lines (64347)
Hash 7716e124e19760049484d1bcde4a8af2
51d50c9e9b7fc658c1316d1844418cee0baffa2a
fa7968a9a888e1a6dc6ac6126b8edd6e73974c2b0629f669bfb74916f0e7d534
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: oiCLCFXEdAJbDScyYJ8+9xgKQJ4XP8XYvgWkNvjGIJmG+iBNNN4dfYkb2q2EaTE9nUMu2JO8y/TVbqkG3yxPGw==
content-length: 27909
x-fb-trip-id: 1904183273
date: Sun, 09 Apr 2023 17:56:35 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
bat.bing.com/bat.js
204.79.197.200 12 kB IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (40607), with no line terminators
Hash 04651bf0c51742f9007b1ae2b4486dee
6ffc71fcb5db1cf0283b60150a62f2c219ac3dbd
5d7392c44731e52810337eb1a3eb3ae1ffab31b8f8d55daba20d658701604666
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11894
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 16 Feb 2023 18:31:53 GMT
accept-ranges: bytes
etag: "8072cff03442d91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9C38A8B1DFCC466AA72D04A63C59D0EB Ref B: OSL30EDGE0406 Ref C: 2023-04-09T17:56:35Z
date: Sun, 09 Apr 2023 17:56:34 GMT
X-Firefox-Spdy: h2
status.thawte.com/
192.229.221.95 471 B IP 192.229.221.95:0
Hash 2190e646a986e1a5e4b2d2dc435bc0dc
90a0fe7402618c98bf20beb38bac4a87999a0035
c696c89585d13aa0efed03ed6910b2ba5d1cea0dad7607243347020fda193c18
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1093
Cache-Control: max-age=168742
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:35 GMT
Etag: "6432e834-1d7"
Expires: Tue, 11 Apr 2023 16:48:57 GMT
Last-Modified: Sun, 09 Apr 2023 16:30:44 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
192.229.221.95 471 B IP 192.229.221.95:0
Hash 2190e646a986e1a5e4b2d2dc435bc0dc
90a0fe7402618c98bf20beb38bac4a87999a0035
c696c89585d13aa0efed03ed6910b2ba5d1cea0dad7607243347020fda193c18
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1093
Cache-Control: max-age=168742
Content-Type: application/ocsp-response
Date: Sun, 09 Apr 2023 17:56:35 GMT
Etag: "6432e834-1d7"
Expires: Tue, 11 Apr 2023 16:48:57 GMT
Last-Modified: Sun, 09 Apr 2023 16:30:44 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
s.kelkoogroup.net/k.gif
185.60.164.26200 OK 0 B IP 185.60.164.26:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerDigiCert Inc
Subject*.kelkoogroup.net
FingerprintC7:E1:73:AF:4B:2D:96:92:EC:E1:07:FF:5F:F4:76:D0:2F:7D:CF:30
ValidityThu, 25 Aug 2022 00:00:00 GMT - Mon, 25 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /k.gif HTTP/1.1
Host: s.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: etag
Referer: https://www.sporttema.no/
Origin: https://www.sporttema.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-Gravitee-Transaction-Id: 40fde4f3-96f1-4f64-bde4-f396f15f643d
X-Gravitee-Request-Id: 40fde4f3-96f1-4f64-bde4-f396f15f643d
Vary: Origin
Access-Control-Max-Age: 3600
Access-Control-Allow-Origin: https://www.sporttema.no
Access-Control-Allow-Headers: etag
Access-Control-Allow-Methods: GET
Access-Control-Allow-Credentials: true
Date: Sun, 09 Apr 2023 17:56:35 GMT
content-length: 0
sporttema.ladesk.com/scripts/generateWidget.php?v=5.37.2.18&t=1681042543&cwid=2d2a5c01&cwrt=C&pt=Treningsutstyr%2C%20crosstrainer%2C%20trimsykkel%20-%20kj%C3%B8p%20hos%20Sporttema&ref=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm
91.201.28.203200 OK 7.2 kB URL GET HTTP/2 sporttema.ladesk.com/scripts/generateWidget.php?v=5.37.2.18&t=1681042543&cwid=2d2a5c01&cwrt=C&pt=Treningsutstyr%2C%20crosstrainer%2C%20trimsykkel%20-%20kj%C3%B8p%20hos%20Sporttema&ref=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm
IP 91.201.28.203:443
ASN #203480 Quality Unit, s.r.o.
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectladesk.com
FingerprintB0:3F:B6:E3:7A:38:3F:A4:25:9F:1E:A8:37:B7:50:43:B0:A3:FD:A8
ValidityFri, 24 Feb 2023 10:16:28 GMT - Thu, 25 May 2023 10:16:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2102)
Hash 6ac60b63ec1bd4e5d2eb14701c35ae4a
f3416ac9db6a8ce6c93f9e59c039895b6398bf11
598f70cc9e56ec126176f197a13cf3c51b3d66b55bc194f71ccf440001c7a791
GET /scripts/generateWidget.php?v=5.37.2.18&t=1681042543&cwid=2d2a5c01&cwrt=C&pt=Treningsutstyr%2C%20crosstrainer%2C%20trimsykkel%20-%20kj%C3%B8p%20hos%20Sporttema&ref=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm HTTP/1.1
Host: sporttema.ladesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 09 Apr 2023 17:56:35 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=31536000, public
expires: Mon, 01 Jan 2024 08:00:00 GMT
last-modified: Tue, 01 Jan 2008 08:00:00 GMT
x-srv: 6
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 17377003
age: 0
vary: Accept-Encoding
via: 1.1 varnish (3.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
s.kelkoogroup.net/k.gif
185.60.164.26200 OK 43 B IP 185.60.164.26:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerDigiCert Inc
Subject*.kelkoogroup.net
FingerprintC7:E1:73:AF:4B:2D:96:92:EC:E1:07:FF:5F:F4:76:D0:2F:7D:CF:30
ValidityThu, 25 Aug 2022 00:00:00 GMT - Mon, 25 Sep 2023 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /k.gif HTTP/1.1
Host: s.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
ETag: a2Vsa29vSWQ9YTRjNjI5NS0xODc2NzI5OWNiNy01NjI0YWU=
Origin: https://www.sporttema.no
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-Gravitee-Transaction-Id: 9c8fa65e-2859-4be9-8fa6-5e28593be90d
X-Gravitee-Request-Id: 9c8fa65e-2859-4be9-8fa6-5e28593be90d
ETag: a2Vsa29vSWQ9YTRjNjI5NS0xODc2NzI5OWNiNy01NjI0YWU=
Vary: *,Origin
Pragma: no-cache
Expires: 0
Request-Time: 0
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate
Last-Modified: Fri, 01 Jan 2010 00:00:00 GMT
Access-Control-Allow-Origin: https://www.sporttema.no
Access-Control-Expose-Headers: ETag
Access-Control-Allow-Credentials: true
Date: Sun, 09 Apr 2023 17:56:35 GMT
Content-Type: image/gif
content-length: 43
sporttema.ladesk.com/themes/contact/modern/contact.css?v=5.37.2.18
91.201.28.203 38 kB URL sporttema.ladesk.com/themes/contact/modern/contact.css?v=5.37.2.18
IP 91.201.28.203:0
ASN #203480 Quality Unit, s.r.o.
Certificate IssuerLet's Encrypt
Subjectladesk.com
FingerprintB0:3F:B6:E3:7A:38:3F:A4:25:9F:1E:A8:37:B7:50:43:B0:A3:FD:A8
ValidityFri, 24 Feb 2023 10:16:28 GMT - Thu, 25 May 2023 10:16:27 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 47f8fca3368195cff6910d98f5a96a23
629aa5c8bf314bc114d24dc7c888eb003422aa84
ff45be69032e6df896e45eb392265955f435f77bce021c507e58e8388e8ce83f
GET /themes/contact/modern/contact.css?v=5.37.2.18 HTTP/1.1
Host: sporttema.ladesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 09 Apr 2023 17:56:35 GMT
content-type: text/css
content-length: 37504
etag: "19b18-5f6dce5e85580"
expires: Sun, 16 Apr 2023 17:55:19 GMT
cache-control: max-age=604800
last-modified: Tue, 14 Mar 2023 14:18:14 GMT
x-srv: 1
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 17311672 16768749
age: 76
vary: Accept-Encoding
via: 1.1 varnish (3.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
connect.facebook.net/signals/config/182846098933006?v=2.9.100&r=stable
31.13.72.12200 OK 110 kB URL GET HTTP/3 connect.facebook.net/signals/config/182846098933006?v=2.9.100&r=stable
IP 31.13.72.12:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerDigiCert Inc
Subject*.facebook.com
FingerprintE4:E4:73:A3:C4:45:61:B6:D5:02:63:DC:B1:3E:B0:C4:FD:E3:D6:65
ValidityTue, 17 Jan 2023 00:00:00 GMT - Mon, 17 Apr 2023 23:59:59 GMT
File type ASCII text, with very long lines (64471)
Size 110 kB (110300 bytes)
Hash f1268f9afda25e268341bd72e520f2eb
8f563d19d2c266e22690608f6026687c00a4c067
6aaf9a488e0034a4bc3cffd2eee8cb11d6fbbca70863790883a9625830885bb2
GET /signals/config/182846098933006?v=2.9.100&r=stable HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: connect.facebook.net
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: cypPft6ugaOc+Tp0cA7BLD4tGdY1IVvhrr0kZYr9SetIogGib/hDVK6g+LI1jJhE+P65+DDY7mUUBSfWe1K4Jg==
content-length: 110300
date: Sun, 09 Apr 2023 17:56:35 GMT
alt-svc: h3=":443"; ma=86400
priority: u=3,i
bat.bing.com/action/0?ti=148026924&tm=gtm002&Ver=2&mid=94ce4e13-d3ff-4493-8cd9-26d2f4d1a729&sid=de6d9af0d6ff11eda41d49184b65f85b&vid=de6dcb00d6ff11ed8271e1950b8c9ce2&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Treningsutstyr,%20crosstrainer,%20trimsykkel%20-%20kj%C3%B8p%20hos%20Sporttema&kw=treningsutstyr,%20tredem%C3%B8lle,%20stepmaskin,%20romaskin,%20trimsykkel,%20multiapparat,%20crosstrainer&p=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm&r=https%3A%2F%2Fapi.kelkoogroup.net%2F<=1462&evt=pageLoad&sv=1&rn=726517
204.79.197.200204 No Content 0 B URL GET HTTP/2 bat.bing.com/action/0?ti=148026924&tm=gtm002&Ver=2&mid=94ce4e13-d3ff-4493-8cd9-26d2f4d1a729&sid=de6d9af0d6ff11eda41d49184b65f85b&vid=de6dcb00d6ff11ed8271e1950b8c9ce2&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Treningsutstyr,%20crosstrainer,%20trimsykkel%20-%20kj%C3%B8p%20hos%20Sporttema&kw=treningsutstyr,%20tredem%C3%B8lle,%20stepmaskin,%20romaskin,%20trimsykkel,%20multiapparat,%20crosstrainer&p=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm&r=https%3A%2F%2Fapi.kelkoogroup.net%2F<=1462&evt=pageLoad&sv=1&rn=726517
IP 204.79.197.200:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintC6:94:6C:D5:87:F6:E9:11:E4:40:13:7F:80:49:D3:4C:A0:04:89:C7
ValidityThu, 16 Feb 2023 03:47:45 GMT - Wed, 16 Aug 2023 03:47:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=148026924&tm=gtm002&Ver=2&mid=94ce4e13-d3ff-4493-8cd9-26d2f4d1a729&sid=de6d9af0d6ff11eda41d49184b65f85b&vid=de6dcb00d6ff11ed8271e1950b8c9ce2&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Treningsutstyr,%20crosstrainer,%20trimsykkel%20-%20kj%C3%B8p%20hos%20Sporttema&kw=treningsutstyr,%20tredem%C3%B8lle,%20stepmaskin,%20romaskin,%20trimsykkel,%20multiapparat,%20crosstrainer&p=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm&r=https%3A%2F%2Fapi.kelkoogroup.net%2F<=1462&evt=pageLoad&sv=1&rn=726517 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=354E994B5BEA6CAA31C98BA55ABD6D0C; domain=.bing.com; expires=Fri, 03-May-2024 17:56:35 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 08A3CA233EAE429C980485132CCC5CA6 Ref B: OSL30EDGE0406 Ref C: 2023-04-09T17:56:35Z
date: Sun, 09 Apr 2023 17:56:35 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/148026924.js
204.79.197.200200 OK 1.5 kB URL GET HTTP/2 bat.bing.com/p/action/148026924.js
IP 204.79.197.200:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintC6:94:6C:D5:87:F6:E9:11:E4:40:13:7F:80:49:D3:4C:A0:04:89:C7
ValidityThu, 16 Feb 2023 03:47:45 GMT - Wed, 16 Aug 2023 03:47:45 GMT
File type ASCII text, with CRLF line terminators
Hash 766b82e28fed69895872b942d71bf2bf
015d65ca5f2faa64f19c58d6b4fee01238e2a580
810f79f65b8414606d337b009c8120b7809003d73c3dee70c0e28886a875d04b
GET /p/action/148026924.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 1497
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8312DE97639045A3BE4DF98766B39683 Ref B: OSL30EDGE0406 Ref C: 2023-04-09T17:56:35Z
date: Sun, 09 Apr 2023 17:56:35 GMT
X-Firefox-Spdy: h2
sporttema.ladesk.com/scripts/static/webpack/liveagent-common-bundle/stringutils-42edb97e83224380ff39.esm.js
91.201.28.203 85 kB URL sporttema.ladesk.com/scripts/static/webpack/liveagent-common-bundle/stringutils-42edb97e83224380ff39.esm.js
IP 91.201.28.203:0
ASN #203480 Quality Unit, s.r.o.
Certificate IssuerLet's Encrypt
Subjectladesk.com
FingerprintB0:3F:B6:E3:7A:38:3F:A4:25:9F:1E:A8:37:B7:50:43:B0:A3:FD:A8
ValidityFri, 24 Feb 2023 10:16:28 GMT - Thu, 25 May 2023 10:16:27 GMT
Hash ef05fd3f956f53dba45cb65dbb42c5df
cc29ea5b66f7e0a50564554f7d39899ee3400379
353ce27b97d3cdb04a861dcd1f5ce25a1438dba0e4aaf08e83d929579e729632
GET /scripts/static/webpack/liveagent-common-bundle/stringutils-42edb97e83224380ff39.esm.js HTTP/1.1
Host: sporttema.ladesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 09 Apr 2023 17:56:35 GMT
content-type: application/javascript
last-modified: Tue, 14 Mar 2023 14:18:00 GMT
cache-control: max-age=21600
expires: Sun, 09 Apr 2023 23:56:35 GMT
x-srv: 2
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"326a4-5f6dce512b600"
x-varnish: 17218066
age: 0
vary: Accept-Encoding
via: 1.1 varnish (3.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
sporttema.ladesk.com/themes/contact/_common_templates/img/form-cross-black.svg
91.201.28.203 246 B URL sporttema.ladesk.com/themes/contact/_common_templates/img/form-cross-black.svg
IP 91.201.28.203:0
ASN #203480 Quality Unit, s.r.o.
Certificate IssuerLet's Encrypt
Subjectladesk.com
FingerprintB0:3F:B6:E3:7A:38:3F:A4:25:9F:1E:A8:37:B7:50:43:B0:A3:FD:A8
ValidityFri, 24 Feb 2023 10:16:28 GMT - Thu, 25 May 2023 10:16:27 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (362), with no line terminators
Hash 41f401e0276d1daccfe44c9d4e595df3
170b980b87e3d8fdf21cb55583d88776814ee926
61718ff56493b021595bb1b528bf290501f6bcb4c581d9f9daeb988bca566b48
GET /themes/contact/_common_templates/img/form-cross-black.svg HTTP/1.1
Host: sporttema.ladesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 09 Apr 2023 17:56:36 GMT
content-type: image/svg+xml
content-length: 246
etag: "16a-5f6dce5e85580"
expires: Sun, 16 Apr 2023 17:53:48 GMT
cache-control: max-age=604800
last-modified: Tue, 14 Mar 2023 14:18:14 GMT
x-srv: 8
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 16769191 16377799
age: 168
vary: Accept-Encoding
via: 1.1 varnish (3.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
sporttema.ladesk.com/scripts/file.php?view=Y&file=ddb53af89832fdbe6ba503410de22b50
91.201.28.203 38 B URL sporttema.ladesk.com/scripts/file.php?view=Y&file=ddb53af89832fdbe6ba503410de22b50
IP 91.201.28.203:0
ASN #203480 Quality Unit, s.r.o.
Certificate IssuerLet's Encrypt
Subjectladesk.com
FingerprintB0:3F:B6:E3:7A:38:3F:A4:25:9F:1E:A8:37:B7:50:43:B0:A3:FD:A8
ValidityFri, 24 Feb 2023 10:16:28 GMT - Thu, 25 May 2023 10:16:27 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 142x95, Scaling: [none]x[none], YUV color, decoders should clamp\012- data, ASCII text, with no line terminators
Hash 797431f8990bf9488800145084f35912
125955105861475ea30d05f1465cd84be02ac300
ae17e7a36f7475a004237498bfcebc251f0c5d58899fb3aac7c2b57faf3a6543
GET /scripts/file.php?view=Y&file=ddb53af89832fdbe6ba503410de22b50 HTTP/1.1
Host: sporttema.ladesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 500 Internal Server Error
server: nginx
date: Sun, 09 Apr 2023 17:56:36 GMT
content-type: text/html; charset=UTF-8
content-length: 38
cache-control: max-age=120
expires: Sun, 09 Apr 2023 17:58:35 GMT
x-srv: 7
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 15885814
age: 0
vary: Accept-Encoding
via: 1.1 varnish (3.lb-app.la.ws-eu)
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=182846098933006&ev=PageView&dl=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm&rl=https%3A%2F%2Fapi.kelkoogroup.net%2F&if=false&ts=1681062995684&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1681062995683.613692873&it=1681062995389&coo=false&rqm=GET
157.240.247.35 0 B URL www.facebook.com/tr/?id=182846098933006&ev=PageView&dl=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm&rl=https%3A%2F%2Fapi.kelkoogroup.net%2F&if=false&ts=1681062995684&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1681062995683.613692873&it=1681062995389&coo=false&rqm=GET
IP 157.240.247.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=182846098933006&ev=PageView&dl=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm&rl=https%3A%2F%2Fapi.kelkoogroup.net%2F&if=false&ts=1681062995684&sw=1280&sh=1024&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1681062995683.613692873&it=1681062995389&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 09 Apr 2023 17:56:36 GMT
X-Firefox-Spdy: h2
1-vbus-eu.ladesk.com/5_37_2_18/static/webpack/js_bundle/postmessage_bundle.js
91.201.28.221200 OK 2.1 kB URL GET HTTP/2 1-vbus-eu.ladesk.com/5_37_2_18/static/webpack/js_bundle/postmessage_bundle.js
IP 91.201.28.221:443
ASN #203480 Quality Unit, s.r.o.
Requested by https://1-vbus-eu.ladesk.com/5_37_2_18/scripts/lib/bus.html?v=5.37.2.18#%7B%22location%22%3A%22https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm%22%2C%22b%22%3A%227dss95kd8bfisrmwtrmib9kav22e5%22%2C%22t%22%3A%22u172753_fc0f%22%7D
Certificate IssuerLet's Encrypt
Subjectladesk.com
FingerprintB0:3F:B6:E3:7A:38:3F:A4:25:9F:1E:A8:37:B7:50:43:B0:A3:FD:A8
ValidityFri, 24 Feb 2023 10:16:28 GMT - Thu, 25 May 2023 10:16:27 GMT
File type ASCII text, with very long lines (2090), with no line terminators
Hash 73456dad83c5e8c13a018d7eccef4160
d23f0b6ad3088e76121286f678ea840e5d9068af
faa8e9370329c0b337f2c2dbbac451c8a5444d45f742f9acec42465452a87eb3
GET /5_37_2_18/static/webpack/js_bundle/postmessage_bundle.js HTTP/1.1
Host: 1-vbus-eu.ladesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1-vbus-eu.ladesk.com/5_37_2_18/scripts/lib/bus.html?v=5.37.2.18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 09 Apr 2023 17:56:36 GMT
content-type: application/javascript
content-length: 2090
last-modified: Tue, 14 Mar 2023 14:18:00 GMT
etag: "64108218-82a"
accept-ranges: bytes
X-Firefox-Spdy: h2
1-vbus-eu.ladesk.com/5_37_2_18/static/webpack/js_bundle/pushstream_bundle.js
91.201.28.221 21 kB URL GET 1-vbus-eu.ladesk.com/5_37_2_18/static/webpack/js_bundle/pushstream_bundle.js
IP 91.201.28.221:0
ASN #203480 Quality Unit, s.r.o.
Requested by https://1-vbus-eu.ladesk.com/5_37_2_18/scripts/lib/bus.html?v=5.37.2.18#%7B%22location%22%3A%22https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm%22%2C%22b%22%3A%227dss95kd8bfisrmwtrmib9kav22e5%22%2C%22t%22%3A%22u172753_fc0f%22%7D
Certificate IssuerLet's Encrypt
Subjectladesk.com
FingerprintB0:3F:B6:E3:7A:38:3F:A4:25:9F:1E:A8:37:B7:50:43:B0:A3:FD:A8
ValidityFri, 24 Feb 2023 10:16:28 GMT - Thu, 25 May 2023 10:16:27 GMT
File type ASCII text, with very long lines (20688), with no line terminators
Hash a8a7ebee1d37f0cebaafc9513baac1bb
7cf3bd16190a3ca785084d19d9623fa6cfe5d22d
ab1f85d6560124d8d3d99ab7fd875a5c2ff35da42f7d9c8c138e08dd198298f2
GET /5_37_2_18/static/webpack/js_bundle/pushstream_bundle.js HTTP/1.1
Host: 1-vbus-eu.ladesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1-vbus-eu.ladesk.com/5_37_2_18/scripts/lib/bus.html?v=5.37.2.18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 09 Apr 2023 17:56:36 GMT
content-type: application/javascript
content-length: 20688
last-modified: Tue, 14 Mar 2023 14:18:00 GMT
etag: "64108218-50d0"
accept-ranges: bytes
X-Firefox-Spdy: h2
1-vbus-eu.ladesk.com/5_37_2_18/static/webpack/js_bundle/bus_bundle.js
91.201.28.221200 OK 2.3 kB URL GET HTTP/2 1-vbus-eu.ladesk.com/5_37_2_18/static/webpack/js_bundle/bus_bundle.js
IP 91.201.28.221:443
ASN #203480 Quality Unit, s.r.o.
Requested by https://1-vbus-eu.ladesk.com/5_37_2_18/scripts/lib/bus.html?v=5.37.2.18#%7B%22location%22%3A%22https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm%22%2C%22b%22%3A%227dss95kd8bfisrmwtrmib9kav22e5%22%2C%22t%22%3A%22u172753_fc0f%22%7D
Certificate IssuerLet's Encrypt
Subjectladesk.com
FingerprintB0:3F:B6:E3:7A:38:3F:A4:25:9F:1E:A8:37:B7:50:43:B0:A3:FD:A8
ValidityFri, 24 Feb 2023 10:16:28 GMT - Thu, 25 May 2023 10:16:27 GMT
File type C source, ASCII text, with very long lines (2250), with no line terminators
Hash 5bfaf8422b5b3675ac7afa75fc7ad99c
815972aad12fe88c843f38a04ac23c2eee204769
2df69b6b5eabdfc3a041b51249904b1f2355bd5a3635be0ff03750df349fab24
GET /5_37_2_18/static/webpack/js_bundle/bus_bundle.js HTTP/1.1
Host: 1-vbus-eu.ladesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1-vbus-eu.ladesk.com/5_37_2_18/scripts/lib/bus.html?v=5.37.2.18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 09 Apr 2023 17:56:36 GMT
content-type: application/javascript
content-length: 2250
last-modified: Tue, 14 Mar 2023 14:18:00 GMT
etag: "64108218-8ca"
accept-ranges: bytes
X-Firefox-Spdy: h2
1-vbus-eu.ladesk.com/5_37_2_18/u172753_fc0f/7dss95kd8bfisrmwtrmib9kav22e5/event/lp/v2?channels=1dcbe97985_vb_7nokppmkkoi3472bmtyqgxikozpst&tag=0&time=Sun%2C%2009%20Apr%202023%2013%3A46%3A35%20GMT&eventid=&_=1681062995918
91.201.28.221 0 B URL 1-vbus-eu.ladesk.com/5_37_2_18/u172753_fc0f/7dss95kd8bfisrmwtrmib9kav22e5/event/lp/v2?channels=1dcbe97985_vb_7nokppmkkoi3472bmtyqgxikozpst&tag=0&time=Sun%2C%2009%20Apr%202023%2013%3A46%3A35%20GMT&eventid=&_=1681062995918
IP 91.201.28.221:0
ASN #203480 Quality Unit, s.r.o.
Certificate IssuerLet's Encrypt
Subjectladesk.com
FingerprintB0:3F:B6:E3:7A:38:3F:A4:25:9F:1E:A8:37:B7:50:43:B0:A3:FD:A8
ValidityFri, 24 Feb 2023 10:16:28 GMT - Thu, 25 May 2023 10:16:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /5_37_2_18/u172753_fc0f/7dss95kd8bfisrmwtrmib9kav22e5/event/lp/v2?channels=1dcbe97985_vb_7nokppmkkoi3472bmtyqgxikozpst&tag=0&time=Sun%2C%2009%20Apr%202023%2013%3A46%3A35%20GMT&eventid=&_=1681062995918 HTTP/1.1
Host: 1-vbus-eu.ladesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1-vbus-eu.ladesk.com/5_37_2_18/scripts/lib/bus.html?v=5.37.2.18
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 304 Not Modified
server: nginx
date: Sun, 09 Apr 2023 17:56:36 GMT
content-type: application/octet-stream
content-length: 0
last-modified: Sun, 09 Apr 2023 13:46:35 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, no-store, must-revalidate
etag: W/0
X-Firefox-Spdy: h2
sporttema.ladesk.com/scripts/static/webpack/liveagent-common-bundle/bundle-ac57b370c29b21849aef.esm.js
91.201.28.203 2.5 kB URL sporttema.ladesk.com/scripts/static/webpack/liveagent-common-bundle/bundle-ac57b370c29b21849aef.esm.js
IP 91.201.28.203:0
ASN #203480 Quality Unit, s.r.o.
Certificate IssuerLet's Encrypt
Subjectladesk.com
FingerprintB0:3F:B6:E3:7A:38:3F:A4:25:9F:1E:A8:37:B7:50:43:B0:A3:FD:A8
ValidityFri, 24 Feb 2023 10:16:28 GMT - Thu, 25 May 2023 10:16:27 GMT
Hash 319db8ac5553e5c27badbee0b4997603
d4a2a146bc22064ca9962dbfc9d732ce32ecff41
f16b6e41e3e36c02a450bfb785769433b5665823daaf28bf6d4c94b1299471d2
GET /scripts/static/webpack/liveagent-common-bundle/bundle-ac57b370c29b21849aef.esm.js HTTP/1.1
Host: sporttema.ladesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 09 Apr 2023 17:56:35 GMT
content-type: application/javascript
last-modified: Tue, 14 Mar 2023 14:18:00 GMT
cache-control: max-age=21600
expires: Sun, 09 Apr 2023 23:56:35 GMT
x-srv: 6
x-content-type-options: nosniff
content-encoding: gzip
etag: W/"ea7-5f6dce512b600"
x-varnish: 16857957
age: 0
vary: Accept-Encoding
via: 1.1 varnish (3.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
c.bing.com/c.gif?ctsa=mr&CtsSyncId=4DB196D14E82431AA1DA094B3B4AD192&RedC=c.clarity.ms&MXFR=3C721DFD17A166D3135A0F1313A168F1
204.79.197.200302 Found 0 B URL GET HTTP/2 c.bing.com/c.gif?ctsa=mr&CtsSyncId=4DB196D14E82431AA1DA094B3B4AD192&RedC=c.clarity.ms&MXFR=3C721DFD17A166D3135A0F1313A168F1
IP 204.79.197.200:443
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintC6:94:6C:D5:87:F6:E9:11:E4:40:13:7F:80:49:D3:4C:A0:04:89:C7
ValidityThu, 16 Feb 2023 03:47:45 GMT - Wed, 16 Aug 2023 03:47:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?ctsa=mr&CtsSyncId=4DB196D14E82431AA1DA094B3B4AD192&RedC=c.clarity.ms&MXFR=3C721DFD17A166D3135A0F1313A168F1 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.sporttema.no/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=4DB196D14E82431AA1DA094B3B4AD192&MUID=0ADBC9B1E34369AD3A9ADB5FE21468C8
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: MUID=0ADBC9B1E34369AD3A9ADB5FE21468C8; domain=.bing.com; expires=Fri, 03-May-2024 17:56:36 GMT; path=/; SameSite=None; Secure; Priority=High;
MR=0; domain=c.bing.com; expires=Sun, 16-Apr-2023 17:56:36 GMT; path=/; SameSite=None; Secure;
SRM_B=0ADBC9B1E34369AD3A9ADB5FE21468C8; domain=c.bing.com; expires=Fri, 03-May-2024 17:56:36 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D271B2FD387F465B96F432529BC78EF8 Ref B: OSL30EDGE0406 Ref C: 2023-04-09T17:56:36Z
date: Sun, 09 Apr 2023 17:56:35 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=4DB196D14E82431AA1DA094B3B4AD192&MUID=0ADBC9B1E34369AD3A9ADB5FE21468C8
68.219.88.97200 OK 42 B URL GET HTTP/2 c.clarity.ms/c.gif?ctsa=mr&CtsSyncId=4DB196D14E82431AA1DA094B3B4AD192&MUID=0ADBC9B1E34369AD3A9ADB5FE21468C8
IP 68.219.88.97:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerMicrosoft Corporation
Subjectc.msn.com
Fingerprint95:8C:38:A5:48:02:4E:A3:AB:97:92:86:83:BA:3E:B0:B3:CE:73:94
ValidityMon, 25 Jul 2022 20:35:56 GMT - Thu, 20 Jul 2023 20:35:56 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?ctsa=mr&CtsSyncId=4DB196D14E82431AA1DA094B3B4AD192&MUID=0ADBC9B1E34369AD3A9ADB5FE21468C8 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.sporttema.no/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 16 Mar 2023 17:16:22 GMT
accept-ranges: bytes
etag: "c4b6d572b58d91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Sun, 09-Apr-2023 18:06:36 GMT; path=/; SameSite=None; Secure;
date: Sun, 09 Apr 2023 17:56:36 GMT
content-length: 42
X-Firefox-Spdy: h2
oneocsp.microsoft.com/ocsp
204.79.197.203 1.8 kB URL oneocsp.microsoft.com/ocsp
IP 204.79.197.203:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 9e39123fd2b34d2e41531d87fdcc7efa
c2e92b5eaa733c841b43465a4e7946cc4a195fe9
7ce952fdbc86784908b80edd74a1b7b516423671f35048873ee704b051d48b05
POST /ocsp HTTP/1.1
Host: oneocsp.microsoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Length: 1777
Content-Type: application/ocsp-response
Expires: Tue, 18 Apr 2023 21:28:23 GMT
Last-Modified: Sat, 08 Apr 2023 21:08:23 GMT
ETag: "7ce952fdbc86784908b80edd74a1b7b516423671f35048873ee704b051d48b05"
X-Powered-By: ASP.NET
x-content-type-options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: BEFF0927D7A94BE5BE999D30F1F14057 Ref B: OSL30EDGE0310 Ref C: 2023-04-09T17:56:36Z
Date: Sun, 09 Apr 2023 17:56:36 GMT
y.clarity.ms/collect
104.211.35.148 0 B IP 104.211.35.148:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1375
Origin: https://www.sporttema.no
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 09 Apr 2023 17:56:36 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.sporttema.no
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
www.facebook.com/tr/?id=182846098933006&ev=Microdata&dl=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm&rl=https%3A%2F%2Fapi.kelkoogroup.net%2F&if=false&ts=1681062997198&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Treningsutstyr%2C%20crosstrainer%2C%20trimsykkel%20-%20kj%C3%B8p%20hos%20Sporttema%22%2C%22meta%3Akeywords%22%3A%22treningsutstyr%2C%20tredem%C3%B8lle%2C%20stepmaskin%2C%20romaskin%2C%20trimsykkel%2C%20multiapparat%2C%20crosstrainer%22%2C%22meta%3Adescription%22%3A%22Hos%20Sporttema%20finner%20du%20treningsapparater%20og%20treningsutstyr%20som%20bl.a%20tredem%C3%B8lle%2C%20stepmaskin%2C%20romaskin%2C%20trimsykkel%2C%20multiapparat%2C%20crosstrainer.%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=2.9.100&r=stable&ec=1&o=30&fbp=fb.1.1681062995683.613692873&it=1681062995389&coo=false&es=automatic&tm=3&rqm=GET
157.240.247.35 0 B URL www.facebook.com/tr/?id=182846098933006&ev=Microdata&dl=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm&rl=https%3A%2F%2Fapi.kelkoogroup.net%2F&if=false&ts=1681062997198&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Treningsutstyr%2C%20crosstrainer%2C%20trimsykkel%20-%20kj%C3%B8p%20hos%20Sporttema%22%2C%22meta%3Akeywords%22%3A%22treningsutstyr%2C%20tredem%C3%B8lle%2C%20stepmaskin%2C%20romaskin%2C%20trimsykkel%2C%20multiapparat%2C%20crosstrainer%22%2C%22meta%3Adescription%22%3A%22Hos%20Sporttema%20finner%20du%20treningsapparater%20og%20treningsutstyr%20som%20bl.a%20tredem%C3%B8lle%2C%20stepmaskin%2C%20romaskin%2C%20trimsykkel%2C%20multiapparat%2C%20crosstrainer.%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=2.9.100&r=stable&ec=1&o=30&fbp=fb.1.1681062995683.613692873&it=1681062995389&coo=false&es=automatic&tm=3&rqm=GET
IP 157.240.247.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=182846098933006&ev=Microdata&dl=https%3A%2F%2Fwww.sporttema.no%2F%3Fkk%3Da4c6295-18767299cb7-5624ae%26utm_source%3Dkelkoono%26utm_medium%3Dcpc%26utm_campaign%3Dkelkooclick%26utm_term%3DPUSLEMATTER%2BBUDO-NORD%2B%2BSvart%252FGr%25C3%25A5%2B40%2Bmm&rl=https%3A%2F%2Fapi.kelkoogroup.net%2F&if=false&ts=1681062997198&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Treningsutstyr%2C%20crosstrainer%2C%20trimsykkel%20-%20kj%C3%B8p%20hos%20Sporttema%22%2C%22meta%3Akeywords%22%3A%22treningsutstyr%2C%20tredem%C3%B8lle%2C%20stepmaskin%2C%20romaskin%2C%20trimsykkel%2C%20multiapparat%2C%20crosstrainer%22%2C%22meta%3Adescription%22%3A%22Hos%20Sporttema%20finner%20du%20treningsapparater%20og%20treningsutstyr%20som%20bl.a%20tredem%C3%B8lle%2C%20stepmaskin%2C%20romaskin%2C%20trimsykkel%2C%20multiapparat%2C%20crosstrainer.%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&v=2.9.100&r=stable&ec=1&o=30&fbp=fb.1.1681062995683.613692873&it=1681062995389&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.facebook.com
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
priority: u=6
date: Sun, 09 Apr 2023 17:56:37 GMT
y.clarity.ms/collect
104.211.35.148 0 B IP 104.211.35.148:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: y.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 349168
Origin: https://www.sporttema.no
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 09 Apr 2023 17:56:37 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.sporttema.no
Vary: Origin
Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0
www.sporttema.no/20.0.0.1/16613/cache/x16613_61fcdcaf94213741f3759e7d18c5c9fc.jpg.pagespeed.ic.a-ZVlaEaAH.webp
194.71.139.50200 OK 2.8 kB URL GET HTTP/2 www.sporttema.no/20.0.0.1/16613/cache/x16613_61fcdcaf94213741f3759e7d18c5c9fc.jpg.pagespeed.ic.a-ZVlaEaAH.webp
IP 194.71.139.50:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerLet's Encrypt
Subjectsporttema.dk
FingerprintAB:06:32:6D:F6:50:D0:8F:0A:78:E5:D7:53:76:7C:2A:AA:96:59:45
ValidityWed, 29 Mar 2023 23:08:22 GMT - Tue, 27 Jun 2023 23:08:21 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 142x154, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6be65595a11a0070720a92143f0a67f0
ac9954019f352a9f2c156abe85daceedf94b9fd0
545a2b3c4d7752e0216174fadc8e3be1f89f337337141a7ba0f4cbcc0b83e530
GET /20.0.0.1/16613/cache/x16613_61fcdcaf94213741f3759e7d18c5c9fc.jpg.pagespeed.ic.a-ZVlaEaAH.webp HTTP/1.1
Host: www.sporttema.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Cookie: PHPSESSID=ce4hfget6efsnikpet78pm6tr4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
server: Apache
link: <https://www.sporttema.no/20.0.0.1/16613/cache/16613_61fcdcaf94213741f3759e7d18c5c9fc.jpg>; rel="canonical"
accept-ranges: bytes
expires: Mon, 08 Apr 2024 13:41:01 GMT
cache-control: max-age=31536000
etag: W/"0"
last-modified: Sun, 09 Apr 2023 13:41:01 GMT
x-original-content-length: 8749
content-length: 2818
content-type: image/webp
X-Firefox-Spdy: h2
kit.fontawesome.com/7c2d9e775b.js
104.18.22.52200 OK 12 kB URL GET HTTP/2 kit.fontawesome.com/7c2d9e775b.js
IP 104.18.22.52:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E
ValidityTue, 22 Nov 2022 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (11018)
Hash 916daef3207a1b406347d20b5efc3740
d91851b7831b05935e1b838e42f5c6a8866721e4
f88f7fae9af3772b923f0a36c59b367d3615876787c89fad18d21f310ecedec9
GET /7c2d9e775b.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.sporttema.no
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 09 Apr 2023 17:56:34 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F1BUIILoidBMBtIADchD
cf-cache-status: HIT
age: 7
server: cloudflare
cf-ray: 7b54a0a2a9740b02-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
68.219.88.97302 Found 42 B IP 68.219.88.97:443
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerMicrosoft Corporation
Subjectc.msn.com
Fingerprint95:8C:38:A5:48:02:4E:A3:AB:97:92:86:83:BA:3E:B0:B3:CE:73:94
ValidityMon, 25 Jul 2022 20:35:56 GMT - Thu, 20 Jul 2023 20:35:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?ctsa=mr&CtsSyncId=4DB196D14E82431AA1DA094B3B4AD192&RedC=c.clarity.ms&MXFR=3C721DFD17A166D3135A0F1313A168F1
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=3C721DFD17A166D3135A0F1313A168F1; domain=.clarity.ms; expires=Fri, 03-May-2024 17:56:36 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Sun, 09 Apr 2023 17:56:36 GMT
content-length: 0
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Ubuntu:300,400,500,700
142.250.74.170200 OK 6.8 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Ubuntu:300,400,500,700
IP 142.250.74.170:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint77:43:87:91:D0:0A:64:BD:84:1C:9A:F5:10:86:8E:8E:04:F1:F9:A3
ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT
File type ASCII text, with very long lines (6956), with no line terminators
Hash 69b37bb87d97e0430b4f76026fd9f270
cc56e1d02e57303787e3b45669111400a7bbc0b9
a742ddd0558819f3a953c19fe7867ba14ce0c2002e01232502641d628c063c1e
GET /css?family=Ubuntu:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sporttema.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 09 Apr 2023 17:56:34 GMT
date: Sun, 09 Apr 2023 17:56:34 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoC1CzjsGyN.woff2
216.58.207.227200 OK 39 kB URL GET HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoC1CzjsGyN.woff2
IP 216.58.207.227:443
Requested by https://www.sporttema.no/?kk=a4c6295-18767299cb7-5624ae&utm_source=kelkoono&utm_medium=cpc&utm_campaign=kelkooclick&utm_term=PUSLEMATTER+BUDO-NORD++Svart%2FGr%C3%A5+40+mm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint76:06:6A:AA:FB:72:F8:BA:90:67:2F:91:97:14:FB:68:D0:65:E9:22
ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT
File type Web Open Font Format (Version 2), TrueType, length 38752, version 1.0\012- data
Hash d451decbad0d0d2feba27610481a34d8
1479b2ad870d5e2bb04d206f33460089394f6eb5
a5515c53111bb4a4f45aff63d06df893ae9033dc85e82cc2ef27fc099a4d7609
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoC1CzjsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.sporttema.no
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 38752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Apr 2023 10:41:04 GMT
expires: Wed, 03 Apr 2024 10:41:04 GMT
cache-control: public, max-age=31536000
age: 458130
last-modified: Wed, 27 Apr 2022 17:04:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2