serviceclub.solutions/rd/c8965pgHNm1363446vzKt6paw467MQwM337
200 OK 243 B URL HTTP/1.1 serviceclub.solutions/rd/c8965pgHNm1363446vzKt6paw467MQwM337
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text
Hash 45e3305389edc4d26f20f3ed270de653
7adeb5558d16808f2b60fee7258382fb86cd2d79
ced6411122f104b7f8adbbe3cdf5f3d8cba7649a9576e292e77379214d51dd4b
Analyzer Verdict Alert fortinet Phishing
GET /rd/c8965pgHNm1363446vzKt6paw467MQwM337 HTTP/1.1
Host: serviceclub.solutions
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Sat, 12 Nov 2022 06:41:07 GMT
Content-Length: 243
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3d0727e32cd103ddd4b73f28c81758aa
197a7bf43d63723fc532c23c6dced68d5cc36652
d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6120
Expires: Sat, 12 Nov 2022 08:23:07 GMT
Date: Sat, 12 Nov 2022 06:41:07 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4edf853c470fcec0ab277c78527f3c2d
de93530ce15337e671c488d9fe05e7091d4956f0
b9d7976b398b1243ff8a571ddd3975d3a1317d69101061bdb1a755b3b56620e6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5404
Cache-Control: max-age=105624
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:07 GMT
Etag: "636e247f-1d7"
Expires: Sun, 13 Nov 2022 12:01:31 GMT
Last-Modified: Fri, 11 Nov 2022 10:31:27 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 12 Nov 2022 05:44:01 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3426
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8391107bfc5e4673e8a706f90f63768
5295ed0b1cb8bad4d3e851049acc7f0270937d12
ed5c27510100ffc4481be474ebcb020d147c645beb110604d5284eeeb8b97c02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ED5C27510100FFC4481BE474EBCB020D147C645BEB110604D5284EEEB8B97C02"
Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17668
Expires: Sat, 12 Nov 2022 11:35:35 GMT
Date: Sat, 12 Nov 2022 06:41:07 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: edR/nLfVdsWK9ZHtLhlCSfabB7NErx7sIYbAp3yxJ9O/QSyVxmbnvWvODx8V9FyBgA28/2h6qXI=
x-amz-request-id: XMQXT9MAZ5VKEHF3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 12 Nov 2022 06:12:53 GMT
age: 1694
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
serviceclub.solutions/track/c8965pgHNm1363446vzKt6paw467MQwM337
302 Found 131 B URL HTTP/1.1 serviceclub.solutions/track/c8965pgHNm1363446vzKt6paw467MQwM337
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text
Hash 9eb81f00a547dc366584df2030de07cf
5ad46f0a7541d48eb2e90792c5e38e62d8bff109
cd4e82a3fa344501b932a8087fb943af44d4a199ef010e10b93f56cb9bf1ecfb
Analyzer Verdict Alert fortinet Phishing
GET /track/c8965pgHNm1363446vzKt6paw467MQwM337 HTTP/1.1
Host: serviceclub.solutions
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serviceclub.solutions/rd/c8965pgHNm1363446vzKt6paw467MQwM337
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: https://owenfeel.com/?a=4762&oc=14770&c=43604&m=3&s1=14&s2=337-8965&s3=1363446-6-467
Date: Sat, 12 Nov 2022 06:41:07 GMT
Content-Length: 131
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 06:41:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 12 Nov 2022 06:25:00 GMT
cache-control: public,max-age=3600
age: 968
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 1f8e560aa1e7aa781c2671aaad3ed825
54a6b4098f8e54e4e3708ee27290ccf7c772d4e8
0db17f2313ae978efd392764591eba2361aed4a1b2602d5a789029a1bdf8f4a9
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 06:41:08 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 16 Nov 2022 06:41:07 GMT
ETag: "54a6b4098f8e54e4e3708ee27290ccf7c772d4e8"
Last-Modified: Sat, 12 Nov 2022 06:41:08 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 768d47b92deeb503-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash f7ff606fbc8634c858bbc04b69f55cf6
2441de2cba649239efd0dae7a878d7ef2245c0b4
95154e0dbb7e827b8f893cc141f986c29634ead618256470d753429aa65a0548
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6231
Cache-Control: max-age=101375
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:08 GMT
Etag: "636e10ac-1d7"
Expires: Sun, 13 Nov 2022 10:50:43 GMT
Last-Modified: Fri, 11 Nov 2022 09:06:52 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
owenfeel.com/?a=4762&oc=14770&c=43604&m=3&s1=14&s2=337-8965&s3=1363446-6-467
302 Found 248 B URL HTTP/1.1 owenfeel.com/?a=4762&oc=14770&c=43604&m=3&s1=14&s2=337-8965&s3=1363446-6-467
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 64c2682296f37a856b3e4d56dd7628be
22580464bb75633cd53e69c06d3ac35422ac3a5c
edf5d348efcf45fd8791bf875a5674fee3c1dd416d7c96dc5ba828618cb9ac90
GET /?a=4762&oc=14770&c=43604&m=3&s1=14&s2=337-8965&s3=1363446-6-467 HTTP/1.1
Host: owenfeel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://serviceclub.solutions/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
date: Sat, 12 Nov 2022 06:41:08 GMT
content-type: text/html; charset=utf-8
content-length: 248
cache-control: private
location: https://mrktormed.com/click.track?CID=441252&AFID=423268&ADID=2536059&AffiliateReferenceID=14720-276866590&SID=4762
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: som=W+MgTsBvXMJ6KEbRXv6e8yRE3UxXU4/g6AQ/6an/BNSdmEdQPJ7tHg==; domain=.owenfeel.com; path=/; HttpOnly
tib=ePE4nQb4y+98pne0tpFARCRE3UxXU4/g6AQ/6an/BNSdmEdQPJ7tHg==; domain=.owenfeel.com; expires=Tue, 12-Nov-2024 06:41:04 GMT; path=/; HttpOnly
c14720=W+MgTsBvXMLYgay24NJ96GqQm6c53CmT+3kuL+e00sFmlAatq512KA==; domain=.owenfeel.com; expires=Mon, 12-Dec-2022 06:41:04 GMT; path=/; HttpOnly
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sk9hr5mXITL9bnPx8z/ulA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6a20ytHjfX9Vyt/3e6T60D0R9KQ=
ocsp.sectigo.com/
200 OK 471 B IP
Hash f346f16c54b9f6c43dd28190436e04b5
e3f0e04224d3aa62287ea51eb625ae8f38a4fbcb
b1d6a2adafc348d762a88ac34f6105e8ef77cc323bc65d40c27805f4a53faee3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 12 Nov 2022 06:41:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 11 Nov 2022 10:32:32 GMT
Expires: Fri, 18 Nov 2022 10:32:31 GMT
Etag: "e3f0e04224d3aa62287ea51eb625ae8f38a4fbcb"
Cache-Control: max-age=531682,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 768d47be4e6eb529-OSL
mrktormed.com/click.track?CID=441252&AFID=423268&ADID=2536059&AffiliateReferenceID=14720-276866590&SID=4762
302 Found 246 B URL HTTP/1.1 mrktormed.com/click.track?CID=441252&AFID=423268&ADID=2536059&AffiliateReferenceID=14720-276866590&SID=4762
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 95ca55a066e21928cc3b087783fc82e4
715122059b15e91240f2045f3a0e9f5f48040552
c56fde4491714e997245b54ddb6361a570c3b2d38fbd7f70652df33085c6c74d
GET /click.track?CID=441252&AFID=423268&ADID=2536059&AffiliateReferenceID=14720-276866590&SID=4762 HTTP/1.1
Host: mrktormed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://serviceclub.solutions/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 12 Nov 2022 06:41:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 246
Connection: keep-alive
Cache-Control: private
Location: https://www.motty.no/refinansiering-av-lan?adid=7655/?aff-id=423268&ClickID=11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93
P3P: policyref="/p3p/P3P.mrktormed.com.xml", CP="NOI DSP COR NID ADM DEV OUR STP OTC"
X-AspNet-Version: 4.0.30319
Set-Cookie: LTTC6_441252=11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93; expires=Mon, 12-Dec-2022 06:41:09 GMT; path=/; SameSite=None; secure; HttpOnly
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb29db48daab83bcaed56b72093619cc
e0e0a09d729ffb1c41411419768896f1e1eb3346
08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4570
Expires: Sat, 12 Nov 2022 07:57:19 GMT
Date: Sat, 12 Nov 2022 06:41:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb29db48daab83bcaed56b72093619cc
e0e0a09d729ffb1c41411419768896f1e1eb3346
08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4570
Expires: Sat, 12 Nov 2022 07:57:19 GMT
Date: Sat, 12 Nov 2022 06:41:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb29db48daab83bcaed56b72093619cc
e0e0a09d729ffb1c41411419768896f1e1eb3346
08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4570
Expires: Sat, 12 Nov 2022 07:57:19 GMT
Date: Sat, 12 Nov 2022 06:41:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X3SUo1LP97TxraRav0ftskBhzWkTJInHaS44PW26yloF-dgD-bHBuA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:45:12 GMT
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
age: 32157
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d4e929-d0bb-41b7-bdcd-0e67258b428a.webp
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d4e929-d0bb-41b7-bdcd-0e67258b428a.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 516f1bfefb1c1a737ea2441f85343b32
0cc22d7bf9092fb30f31e2ca8f242c197b891669
733824d4f6f7c5b54ce4e02ecaf152cfc1e10f3f6a801d7e2c55a02460e40087
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d4e929-d0bb-41b7-bdcd-0e67258b428a.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9012
x-amzn-requestid: 83eac9e7-5387-4e11-9769-182fa3f7fffb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdNC6FxzoAMF80w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec212-5ca277b90a5a9a4c437edc1e;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:43:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: PrJoEROPymrtc0egNlWRoOMjohiCo3zReD01qAHwByaSiXarfRS0XQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 22:00:43 GMT
age: 31226
etag: "0cc22d7bf9092fb30f31e2ca8f242c197b891669"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b650f84-0cd0-4921-bc04-f0ea0459e4d1.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b650f84-0cd0-4921-bc04-f0ea0459e4d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 084ca839d34b15916cd2f5034440a1ef
7764777ce9a862c1590712ef33032df72edefffd
b8893d7f327f88316cb909ded7fd8f4e1809190a7da807677785bf953f6e33fb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b650f84-0cd0-4921-bc04-f0ea0459e4d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8482
x-amzn-requestid: 79e5e211-afc8-4531-b361-6f6f3386f16e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUGJsIAMF7Mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-5a0ba4a93eba91c81ba3a9bc;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CxrOwBRw0YlwOnKPJZI7h7YEwOAYS3ZtFa8q2o5rDvQct6pehCAFAg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:51:43 GMT
age: 31766
etag: "7764777ce9a862c1590712ef33032df72edefffd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6fac57d-aa5c-42c2-904b-58aa73c59975.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6fac57d-aa5c-42c2-904b-58aa73c59975.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 701700f42e1b0e528a63c3bd2a4c54e7
a3af603900538ea10e094981d298a0b37d0ab896
c84ac2d3524eb950a433aa01e1226d995d87948452e4e135a4661094923ca465
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6fac57d-aa5c-42c2-904b-58aa73c59975.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4268
x-amzn-requestid: 19d2f4e7-b6c1-4093-b54c-70a9a476ad89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhSEwYIAMFg7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-6e2f5a6147153e5c32cc4499;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 1tbxcsSYcJuquYxeYfqcwaQaHpWmL9jwX31h1ZIyXO6i5A8gIbFQmA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:45:12 GMT
etag: "a3af603900538ea10e094981d298a0b37d0ab896"
content-type: image/jpeg
age: 32157
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffadd7839-d41e-4198-abc2-17384d90e28c.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffadd7839-d41e-4198-abc2-17384d90e28c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 97c5c44bd44390f0c719f56ecee6d513
1d791a0dadbfbab7c9b377783587ff728b2008d8
5995012d66ee68690d198a0857848077bfe80d88b2f2987a54f2d896461f7275
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffadd7839-d41e-4198-abc2-17384d90e28c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6797
x-amzn-requestid: 3e8b7aaf-8e8a-4a04-8bc0-e18e6044a50a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdM6-F3DIAMFzfQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec1df-3bfa53123a76e84f210fea38;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:42:55 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: zz90ngWySbVf_cXv_HBcQpNfb4MCsTVTl5l5bBPL4MaPXAF4VIifdA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:45:13 GMT
age: 32156
etag: "1d791a0dadbfbab7c9b377783587ff728b2008d8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facfcee70-832e-4f2d-8fc7-55d2bfff651e.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facfcee70-832e-4f2d-8fc7-55d2bfff651e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eac2ed4bece6282c8273a58a88371e2e
2d90ff66079e8ffbaaa367a6bfc08927e7cc424d
aea97fd7d90302edcb3e0c08507d682e02166e8ddd4d082fc4f5435af438594c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facfcee70-832e-4f2d-8fc7-55d2bfff651e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8633
x-amzn-requestid: 8bdfbfbb-5193-4c62-ba1b-c906f7548676
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhSEC1oAMF8tw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-39b4c2954dbc8e4c40a2c9d8;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lxrfhO5oOGvECIrlZYKsfXOTZZksAIIHAafyRM-FdRXAaBVZs5cEQA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 21:45:21 GMT
age: 32148
etag: "2d90ff66079e8ffbaaa367a6bfc08927e7cc424d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b74fd7942bd7295fd2d1ccda192a61f9
544877e71e4c4614a225c890c465c1a12af84dc5
cc5295ec2fffa9c35b854976db6a1fa0ee7ae82a40c6b61d2a6d26453d0123ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CC5295EC2FFFA9C35B854976DB6A1FA0EE7AE82A40C6B61D2A6D26453D0123FF"
Last-Modified: Wed, 09 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21569
Expires: Sat, 12 Nov 2022 12:40:38 GMT
Date: Sat, 12 Nov 2022 06:41:09 GMT
Connection: keep-alive
www.motty.no/refinansiering-av-lan?adid=7655/?aff-id=423268&ClickID=11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93
200 OK 25 kB URL HTTP/2 www.motty.no/refinansiering-av-lan?adid=7655/?aff-id=423268&ClickID=11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8864), with CRLF, LF line terminators
Hash ff203d4e73aa939f787992832ce94dcb
31e25e247bc6498154e5d835ae92d6c23c599803
c392c0b95289dc28c49b39b5e91d64e71ce51fd942d0ea9380cad7072c53e896
GET /refinansiering-av-lan?adid=7655/?aff-id=423268&ClickID=11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93 HTTP/1.1
Host: www.motty.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://serviceclub.solutions/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 06:41:09 GMT
content-type: text/html;charset=utf-8
content-length: 24570
d-cache: from-cache
content-encoding: gzip
strict-transport-security: max-age=31536000; preload
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-content-type-options: nosniff
vary: user-agent,accept-encoding
d-geo: EU
X-Firefox-Spdy: h2
static.cdn-website.com/mnlt/production/2981/_dm/s/rt/dist/scripts/d-js-jquery-migrate.min.js
200 OK 3.8 kB URL HTTP/2 static.cdn-website.com/mnlt/production/2981/_dm/s/rt/dist/scripts/d-js-jquery-migrate.min.js
IP
File type ASCII text, with very long lines (558)
Hash b13cd3038a1b55c2c2fae0b1638badf9
84d73a86a5dac83eac39566ffa09acb74932a231
85e9d3ece00c1bcdebc06e42ba3e6059b1588325cc3718c26d785bb6d6f427e5
GET /mnlt/production/2981/_dm/s/rt/dist/scripts/d-js-jquery-migrate.min.js HTTP/1.1
Host: static.cdn-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 3809
date: Thu, 10 Nov 2022 14:04:58 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: FAILED
last-modified: Thu, 10 Nov 2022 13:55:39 GMT
etag: "3b9b4be11c442558448e1bcb0e914c6c"
cache-control: max-age=31536000
x-amz-version-id: 9HJbAWUXmNMnjA1CYJ5Bbhrw30f7Z44E
accept-ranges: bytes
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5G5F1GhqIkfZ7CHb9Nh24BCyhgzc1vBglvPaMaA4nYhobC3ElmxIiA==
age: 146172
X-Firefox-Spdy: h2
static.cdn-website.com/libs/jquery/jquery-3.6.0.min.js
200 OK 28 kB URL HTTP/2 static.cdn-website.com/libs/jquery/jquery-3.6.0.min.js
IP
File type ASCII text, with very long lines (65447)
Hash e3b056b5f5833ed57baaeb7d1f759d66
aef9ffcd15bb3fd72f0846d557f46c1560cbb622
bdb487a7bf608abf88dc492b5c4d82253539a3e1a885055541391cab973b7748
GET /libs/jquery/jquery-3.6.0.min.js HTTP/1.1
Host: static.cdn-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 27967
date: Mon, 31 Oct 2022 10:26:33 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: FAILED
last-modified: Sun, 20 Jun 2021 11:54:25 GMT
etag: "8fb8fee4fcc3cc86ff6c724154c49c42"
cache-control: max-age=31536000
x-amz-version-id: DnPaSD2ax.ofdsMomR96m6B51pMZfReJ
accept-ranges: bytes
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: k0-kw9ttwtblW_3YOQobJdeWNDaOSa7o9V-PfP-yDzd3otCfWeykSg==
age: 1023276
X-Firefox-Spdy: h2
static.cdn-website.com/mnlt/production/2981/_dm/s/rt/dist/scripts/d-js-one-runtime-unified-desktop.min.js
200 OK 100 kB URL HTTP/2 static.cdn-website.com/mnlt/production/2981/_dm/s/rt/dist/scripts/d-js-one-runtime-unified-desktop.min.js
IP
File type ASCII text, with very long lines (1040)
Size 100 kB (100201 bytes)
Hash f6db36e32dfb63d7898080fb11fb8c48
fe9e1968c95583ce609b2c77eb186f3c5b8b82e7
c6a484f949e442478594ddcf5a66825982461f46ad7104509301b0e47e062886
GET /mnlt/production/2981/_dm/s/rt/dist/scripts/d-js-one-runtime-unified-desktop.min.js HTTP/1.1
Host: static.cdn-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 100201
date: Thu, 10 Nov 2022 14:04:57 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: PENDING
last-modified: Thu, 10 Nov 2022 13:55:39 GMT
etag: "cb4e91f4867e49a9378c3bb94cedd984"
cache-control: max-age=31536000
x-amz-version-id: 1gFvfOSVfUgIfyyqSLUV8q5s046MxGvD
accept-ranges: bytes
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: jHcA4jmjqwLnZL3OaeM2RrzdQ7i-Tyl0k3gTisoJUqRPuPHTSU1H-g==
age: 146171
X-Firefox-Spdy: h2
static.cdn-website.com/mnlt/production/2981/_dm/s/rt/dist/css/d-css-runtime-desktop-one-package-new.min.css
200 OK 25 kB URL HTTP/2 static.cdn-website.com/mnlt/production/2981/_dm/s/rt/dist/css/d-css-runtime-desktop-one-package-new.min.css
IP
File type ASCII text, with very long lines (35992)
Hash 7dffe0fbb5ea906f2ad094256c53315c
db48b3751a0bfa34dd1e712ad1638eeaf4286817
6c1eb1890e5319e45e18edea0dd717ea8ce305e3cc3828301a6767d04b363e47
GET /mnlt/production/2981/_dm/s/rt/dist/css/d-css-runtime-desktop-one-package-new.min.css HTTP/1.1
Host: static.cdn-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-length: 25264
date: Thu, 10 Nov 2022 14:04:56 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: FAILED
last-modified: Thu, 10 Nov 2022 13:55:38 GMT
etag: "3be5aba0c4a986de4b085cf7c44e58b6"
cache-control: max-age=31536000
x-amz-version-id: wBxJxswLpXmdjmxyRmkBsyRVowPBNnE1
accept-ranges: bytes
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Mp7DmZOsK_-gW0pCif9qYL9PTbb94z705RvZovCR82S3j5c5b3_XmQ==
age: 146173
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 61356d3e3f58a6103551bb5871be329e
729103c4467eccbf4a1f96b5797e0b9d8ff0daf1
0373641ddd4d95497f329b16d2ec6558ec3f0a752379b5657eac11babde17961
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0373641DDD4D95497F329B16D2EC6558EC3F0A752379B5657EAC11BABDE17961"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=660
Expires: Sat, 12 Nov 2022 06:52:10 GMT
Date: Sat, 12 Nov 2022 06:41:10 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e7dc2623cb841be51d3e8857e015d8e1
cbfdb2a7b965598de893fef89d47e17763501acf
df1fc0809a603469e6abcf1f07a13d792550d68c862f80e38c00e47e9b233a5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-cdn.multiscreensite.com/fonts/fontawesome-webfont.woff?v=6
200 OK 98 kB URL HTTP/2 static-cdn.multiscreensite.com/fonts/fontawesome-webfont.woff?v=6
IP
File type Web Open Font Format, TrueType, length 98024, version 4.7\012- data
Hash fee66e712a8a08eef5805a46892932ad
28b782240b3e76db824e12c02754a9731a167527
ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07
GET /fonts/fontawesome-webfont.woff?v=6 HTTP/1.1
Host: static-cdn.multiscreensite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.motty.no
Connection: keep-alive
Referer: https://static.cdn-website.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/font-woff
content-length: 98024
date: Sat, 05 Nov 2022 05:57:07 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: FAILED
last-modified: Wed, 05 Jun 2019 08:06:55 GMT
etag: "fee66e712a8a08eef5805a46892932ad"
cache-control: max-age=31536000
x-amz-version-id: bR46Z9gnVogjFEVmln4nlzTlCUFntZSU
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: fa72qftj7-YbH8xsdve_32PxRvGc4Fw_RBqWlzrQtgUqVUnAfwS2gg==
age: 607444
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 52 kB IP
ASN #20940 Akamai International B.V.
Hash 903835466d3921648a63f6c41b39523e
993ecc170f194054794f1550137d0c816c729ddb
f127e324f7e7f3391f79f07b8a8f1c8f3e901fe82a4af2533181ad8b97d6f209
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "579A2102F36944FD5D9957A82B5E5CFD022A4B478B11E78C50E8C5535919CD54"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15206
Expires: Sat, 12 Nov 2022 10:54:36 GMT
Date: Sat, 12 Nov 2022 06:41:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 234d371016cce974d0db925ca284836c
9a33c5ec377f66e7e00b3cfe80989d258eebd3cd
579a2102f36944fd5d9957a82b5e5cfd022a4b478b11e78c50e8c5535919cd54
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "579A2102F36944FD5D9957A82B5E5CFD022A4B478B11E78C50E8C5535919CD54"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11106
Expires: Sat, 12 Nov 2022 09:46:16 GMT
Date: Sat, 12 Nov 2022 06:41:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 234d371016cce974d0db925ca284836c
9a33c5ec377f66e7e00b3cfe80989d258eebd3cd
579a2102f36944fd5d9957a82b5e5cfd022a4b478b11e78c50e8c5535919cd54
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "579A2102F36944FD5D9957A82B5E5CFD022A4B478B11E78C50E8C5535919CD54"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15202
Expires: Sat, 12 Nov 2022 10:54:32 GMT
Date: Sat, 12 Nov 2022 06:41:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 51 kB IP
ASN #20940 Akamai International B.V.
Hash 87da6bf51ac65876c89d93ebe08ceac2
91af4952462dbad26fad0e43d3ef0115f4860bb3
84956e0517d3469ef1bc29a4da6fc8a266aa3a5ae8599337ab5e816dda390d61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "579A2102F36944FD5D9957A82B5E5CFD022A4B478B11E78C50E8C5535919CD54"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11136
Expires: Sat, 12 Nov 2022 09:46:46 GMT
Date: Sat, 12 Nov 2022 06:41:10 GMT
Connection: keep-alive
irp.cdn-website.com/fonts/css?family=Lato:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic&subset=latin-ext&display=swap
200 OK 89 kB URL HTTP/2 irp.cdn-website.com/fonts/css?family=Lato:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic&subset=latin-ext&display=swap
IP
Hash 8086f26fcd87ff0de07db4e3dd0341f0
c5e0db4bd732dfbcce092f9bcf44c59b1bfb81bf
9db6607281abe6479e17198078eeb960a9588ca3c362aef6868315c94b1a5603
GET /fonts/css?family=Lato:100,200,300,400,500,600,700,800,900,100italic,200italic,300italic,400italic,500italic,600italic,700italic,800italic,900italic&subset=latin-ext&display=swap HTTP/1.1
Host: irp.cdn-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
server: CloudFront
date: Mon, 17 Oct 2022 06:06:23 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 4gselRv5ek-y2s1Rfp99pcKrBJ85_ZvSu75u7JqwhATCdTaBfo5FVQ==
age: 2248486
X-Firefox-Spdy: h2
static-cdn.multiscreensite.com/fonts/dm-common-icons.ttf?5f0fg
200 OK 2.4 kB URL HTTP/2 static-cdn.multiscreensite.com/fonts/dm-common-icons.ttf?5f0fg
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, dm-common-icons\012- data
Hash b71bfcb8a1c734ad0654e25cd41964f2
2c7fb7007f8f6250c5c1c323f36c29873107c9ee
432d3ceb04bc5bb9c94242a57a06211ab0cbe6168af26354223a9b57df4266f0
GET /fonts/dm-common-icons.ttf?5f0fg HTTP/1.1
Host: static-cdn.multiscreensite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.motty.no
Connection: keep-alive
Referer: https://static.cdn-website.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 2368
date: Wed, 09 Nov 2022 03:02:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
x-amz-replication-status: FAILED
last-modified: Mon, 19 Aug 2019 11:53:23 GMT
etag: "b71bfcb8a1c734ad0654e25cd41964f2"
cache-control: max-age=31536000
x-amz-version-id: PqntK7H35YcTmkMvqWIJAJRdU.53YusY
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 6cpQcZykHvAyCmuv005O_bwKrD9DGwGIa4aNOnwh6BhWtyLh5Dfmdw==
age: 272313
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e7dc2623cb841be51d3e8857e015d8e1
cbfdb2a7b965598de893fef89d47e17763501acf
df1fc0809a603469e6abcf1f07a13d792550d68c862f80e38c00e47e9b233a5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/7yOT9-o9nws
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/7yOT9-o9nws
IP
Hash 96bf92da264bf366294127e94bf0e081
eb5cf3452f9f3bfafdbc15b120421845dd78f51b
fd624a8c28af86697c70dd01e8b818ef34c6e83a4e6ea9beceefa7a1f7418311
POST /s/gts1d4/7yOT9-o9nws HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:10 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleoptimize.com/optimize.js?id=OPT-N8J4MJ7
200 OK 44 kB URL HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-N8J4MJ7
IP
File type ASCII text, with very long lines (1921)
Hash 2d59fba89a7096ef0a7c52420f540fa8
e1127c652d3881613578b291e17b0589235f2832
1abe99be5ba109f936a11b8d701c673bbac7b2660407d89e591c185559b346d2
GET /optimize.js?id=OPT-N8J4MJ7 HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 12 Nov 2022 06:41:10 GMT
expires: Sat, 12 Nov 2022 06:41:10 GMT
cache-control: private, max-age=900
last-modified: Sat, 12 Nov 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43978
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
13l14z2.com/track/code.js
200 OK 962 B URL HTTP/2 13l14z2.com/track/code.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (484)
Hash feb2bbea1e972939fe4ccec7159eb072
4edee034d5ec92ce2d4661159c18db6cdb6becf4
e96c87dc74005d82aedcfc1617cca43fb8aeec304a9d507db82a0fd579bea95e
GET /track/code.js HTTP/1.1
Host: 13l14z2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=UTF-8
set-cookie: uxid=ae9bc917-baf6-479f-8100-f168f0d77a5c; Path=/; Expires=Sun, 12 Nov 2023 06:41:10 GMT; Secure; SameSite=None
date: Sat, 12 Nov 2022 06:41:10 GMT
content-length: 962
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lirp.cdn-website.com/2d20583b/dms3rep/multi/opt/background-1920w.jpg
200 OK 69 kB URL HTTP/2 lirp.cdn-website.com/2d20583b/dms3rep/multi/opt/background-1920w.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x630, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a5bde78120352322c0ab89dd5e05caf8
98e57ba0183ea861546c7270a6a6b229855bcf12
1ab742a469216709499d16281b3d46649bede878a766ff2c4e57af221c8148a0
GET /2d20583b/dms3rep/multi/opt/background-1920w.jpg HTTP/1.1
Host: lirp.cdn-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 69440
date: Sat, 12 Nov 2022 06:41:11 GMT
last-modified: Sun, 05 Jun 2022 21:04:34 GMT
x-amz-expiration: expiry-date="Sat, 03 Dec 2022 00:00:00 GMT", rule-id="delete images after 6 months"
etag: "a5bde78120352322c0ab89dd5e05caf8"
cache-control: public, max-age=31536000
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 7zLUNXaAfOOo185LHzLtUnlDHHVQsNbfPCYn8yAcTJjKL4cPpvc7Pg==
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/1rvwe20eq8Y
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/1rvwe20eq8Y
IP
Hash 957024f3eb36c62dec2315755df44063
be5b0977bb15b44e403df089fa84079b7e5ad81e
fbfc667ff2dd4aa083fb287ed20e11ec4af835adb1cf7db9b9566b63c77821ca
POST /s/gts1d4/1rvwe20eq8Y HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:10 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/1rvwe20eq8Y
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/1rvwe20eq8Y
IP
Hash 957024f3eb36c62dec2315755df44063
be5b0977bb15b44e403df089fa84079b7e5ad81e
fbfc667ff2dd4aa083fb287ed20e11ec4af835adb1cf7db9b9566b63c77821ca
POST /s/gts1d4/1rvwe20eq8Y HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:10 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/7yOT9-o9nws
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/7yOT9-o9nws
IP
Hash 96bf92da264bf366294127e94bf0e081
eb5cf3452f9f3bfafdbc15b120421845dd78f51b
fd624a8c28af86697c70dd01e8b818ef34c6e83a4e6ea9beceefa7a1f7418311
POST /s/gts1d4/7yOT9-o9nws HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:10 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
webtrafficsource.com/tr
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /tr HTTP/1.1
Host: webtrafficsource.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.motty.no/
Origin: https://www.motty.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-headers: Origin,Content-Type
access-control-allow-methods: POST,GET
access-control-allow-origin: *
date: Sat, 12 Nov 2022 06:41:10 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
webtrafficsource.com/tr
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /tr HTTP/1.1
Host: webtrafficsource.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 73
Origin: https://www.motty.no
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: Content-Length
date: Sat, 12 Nov 2022 06:41:10 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/1rvwe20eq8Y
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/1rvwe20eq8Y
IP
Hash 957024f3eb36c62dec2315755df44063
be5b0977bb15b44e403df089fa84079b7e5ad81e
fbfc667ff2dd4aa083fb287ed20e11ec4af835adb1cf7db9b9566b63c77821ca
POST /s/gts1d4/1rvwe20eq8Y HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:10 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.5 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (12826)
Hash 806d185619a4ef5951ab91810117e4ba
f40031c0ea5718f6d9a0a35e8ca60262daedc440
06489a801966cb9e7b467aed4edb63aa10bc2e588d259054ef696ade54e4b19f
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 09 Nov 2022 19:27:04 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=28923
date: Sat, 12 Nov 2022 06:41:10 GMT
content-length: 4530
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1bb279167832b97b5e80041e8975740c
48d5f288978ea6717b16e0f96974a23603361cc2
894d4dd927851fb6078c3bd527e3f424c4e3ad3f6ebdfa7c0fee089e0ce044cd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6084
Cache-Control: max-age=167089
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:10 GMT
Etag: "636f11f3-1d7"
Expires: Mon, 14 Nov 2022 05:05:59 GMT
Last-Modified: Sat, 12 Nov 2022 03:24:35 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
cdn.motty.no/icons/refinancing.svg
200 OK 21 kB URL HTTP/2 cdn.motty.no/icons/refinancing.svg
IP
ASN #34989 ServeTheWorld AS
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1891), with no line terminators
Hash cc1028f09a2e427010bedc93a640a327
f5d18ccf8342e5e7b6cc20cc580112f8b92ca671
3917ff0659c6406c500c5a6e2aaa2a8c752d92584af8d3ef0a8eb37881644a1a
GET /icons/refinancing.svg HTTP/1.1
Host: cdn.motty.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://irp.cdn-website.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 06:41:10 GMT
content-type: image/svg+xml
vary: Accept-Encoding
server: BunnyCDN-NO-830
cdn-pullzone: 46157
cdn-uid: 395a56fd-014e-4f58-9b1f-340626af5f6d
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
content-md5: a+z0+iLH+QNiVnOyEvOHqA==
last-modified: Fri, 18 Jun 2021 13:09:13 GMT
x-ms-request-id: 6cd077e4-301e-004c-114e-f30dea000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/08/2022 08:45:45
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: e02bf58c679765e04405fe4f7e82d665
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23dd8b12572b78e5d32d491b3d0d9d32
718c3e3abcc55c295c72e5ee4e5441fe5acc1363
f72c359246ea96d4f28bbc5aee8d4d24fcba9f47dfc691693f6c49e370d9b103
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Sat, 12 Nov 2022 06:41:10 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-bma1659-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 0ac10debd3a9ea8147a26d045bb93e6e
ff45f3442508e8695f2303701682ebdb6e016464
5dee7b453b2c72c07ff1d62432493a044507835a8031ea62edf2fa7cc26219b9
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: tNV/ujlh+VzSEwrdpXBc1LyIhrgaLjPElrZEh+4lcMPcp7ygZfAi0OCnHi48uvBTXebA9xdKKhUdP8tsxWptsQ==
priority: u=3,i
content-length: 27337
x-fb-trip-id: 1904183273
date: Sat, 12 Nov 2022 06:41:10 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/691343174/?random=1668235269757&cv=11&fst=1668235269757&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&ref=http%3A%2F%2Fserviceclub.solutions%2F&tiba=Refinansiering%20av%20l%C3%A5n%20med%20lav%20rente%20%7C%20Motty&auid=2098401638.1668235270&rfmt=3&fmt=4
200 OK 985 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/691343174/?random=1668235269757&cv=11&fst=1668235269757&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&ref=http%3A%2F%2Fserviceclub.solutions%2F&tiba=Refinansiering%20av%20l%C3%A5n%20med%20lav%20rente%20%7C%20Motty&auid=2098401638.1668235270&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2191), with no line terminators
Hash 0aff4ce3188ee0bb756c2a2c2c815397
e712a12fd1696a92d892747ab1fb6924435cc0f0
ad6595df6a14e7603e85446f1dd869ebee74a5fc8bf9e355e29057916a9ca63c
GET /pagead/viewthroughconversion/691343174/?random=1668235269757&cv=11&fst=1668235269757&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&ref=http%3A%2F%2Fserviceclub.solutions%2F&tiba=Refinansiering%20av%20l%C3%A5n%20med%20lav%20rente%20%7C%20Motty&auid=2098401638.1668235270&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 12 Nov 2022 06:41:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 985
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 12-Nov-2022 06:56:11 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1bb279167832b97b5e80041e8975740c
48d5f288978ea6717b16e0f96974a23603361cc2
894d4dd927851fb6078c3bd527e3f424c4e3ad3f6ebdfa7c0fee089e0ce044cd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6085
Cache-Control: max-age=167089
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:11 GMT
Etag: "636f11f3-1d7"
Expires: Mon, 14 Nov 2022 05:06:00 GMT
Last-Modified: Sat, 12 Nov 2022 03:24:35 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23dd8b12572b78e5d32d491b3d0d9d32
718c3e3abcc55c295c72e5ee4e5441fe5acc1363
f72c359246ea96d4f28bbc5aee8d4d24fcba9f47dfc691693f6c49e370d9b103
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
requirejs.org/docs/release/2.3.6/minified/require.js
200 OK 6.6 kB URL HTTP/2 requirejs.org/docs/release/2.3.6/minified/require.js
IP
File type ASCII text, with very long lines (17493)
Hash 65f3022df1eee0a8d8fe63f03a740659
89a0847a95af7fda86c9962787ab64285a558673
1b348e674fdee358f68ec8cf243fd745edd848fb97c05630c76621aebebc3197
GET /docs/release/2.3.6/minified/require.js HTTP/1.1
Host: requirejs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
x-origin-cache: HIT
last-modified: Sat, 18 May 2019 19:25:41 GMT
access-control-allow-origin: *
etag: W/"5ce05c35-451f"
expires: Fri, 11 Nov 2022 12:51:18 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: F674:1490:242132:24FF11:636E42EE
accept-ranges: bytes
date: Sat, 12 Nov 2022 06:41:11 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1639-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1668235271.004362,VS0,VE102
vary: Accept-Encoding
x-fastly-request-id: 024e66b6790c83fd666b77a0811b5e2de1d56ce6
content-length: 6590
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 822987624a1dd75e2c6dc8641ce65082
fd2db77ec0724369646b8d49eedd4b4630b016fd
51d9ff9047557ec6ac00be1301ccf64ba3dc1377955d26d38bf6942d46eac452
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5499
Cache-Control: max-age=110708
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:11 GMT
Etag: "636e3800-13a"
Expires: Sun, 13 Nov 2022 13:26:19 GMT
Last-Modified: Fri, 11 Nov 2022 11:54:40 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 314
vars.hotjar.com/box-c6ca1c87e308a39aabb76b56ba54398b.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-c6ca1c87e308a39aabb76b56ba54398b.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash b6d25d1350d6a014d80689f389e76f97
a957e3d99790759f71a4d9e2fdaf819f60e8c569
fb2a1528b99d3eb4c9374642b5045efaf6e06666fdd48a55560a375449b01079
GET /box-c6ca1c87e308a39aabb76b56ba54398b.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Fri, 04 Nov 2022 12:22:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "b6d25d1350d6a014d80689f389e76f97"
last-modified: Fri, 04 Nov 2022 12:21:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gDljDWdK9t5BZfC_mS9FNG-1cua0m-L0obdF-IFLBi_hROolTKNqCA==
age: 670745
X-Firefox-Spdy: h2
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
200 OK 6.1 kB URL HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Fri, 11 Nov 2022 06:47:38 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gz4ds1LLyPJJ5TOnYumzHJC6Dos-Rq_t4ejoucSV7RkToS_Zuh5TyQ==
age: 86013
X-Firefox-Spdy: h2
cdn.motty.no/application-sliders-widget.js
200 OK 2.3 kB URL HTTP/2 cdn.motty.no/application-sliders-widget.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (5868), with no line terminators
Hash 0352cd9bc16d92d3994108ebb9efdbdb
718b44c2c16f7f6831f145c4796cdad638a2d9d8
4a8e03ecf52c80cdb507dce52334de0a7dc1fd7d8d0462a17f5ab605bf3ea500
GET /application-sliders-widget.js HTTP/1.1
Host: cdn.motty.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Cookie: _gcl_au=1.1.2098401638.1668235270; _ga_D9XCSC6T3J=GS1.1.1668235269.1.0.1668235269.0.0.0; _ga=GA1.2.2103762840.1668235270; _gid=GA1.2.1079412930.1668235270; _gat_UA-133846958-1=1; _gat_gtag_UA_108377723_24=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 12 Nov 2022 06:41:11 GMT
content-type: application/javascript
server: BunnyCDN-NO-830
cdn-pullzone: 46157
cdn-uid: 395a56fd-014e-4f58-9b1f-340626af5f6d
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=2592000
content-md5: nv0insJJXrZ07kcnzO4Gdg==
last-modified: Mon, 12 Sep 2022 09:03:18 GMT
x-ms-request-id: 3ede53fd-f01e-0021-654e-f3b9a1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/08/2022 08:46:29
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 73305160aba7fef9d01e4ec497bf69d1
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=60e41e228b616600019987b4
200 OK 2.1 kB URL HTTP/2 widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=60e41e228b616600019987b4
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6784)
Hash bbd26c541b063878dddb6095c1f82221
ad7402097c8a410e880016bf77b037e2def9a09f
d7cc9429d7ddde82e2f3d9390e483ca72489b153a4356a401456411d5b40fa9a
GET /trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=60e41e228b616600019987b4 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 2114
last-modified: Tue, 04 Oct 2022 10:33:49 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Fri, 11 Nov 2022 09:06:16 GMT
cache-control: max-age=86400
etag: "bbd26c541b063878dddb6095c1f82221"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iJgfWh_vC5FL_aBrHBTgUHU8fHFA10Ut8drrtNRsUvfgPOKIUxfQfA==
age: 77696
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/main.js
200 OK 17 kB URL HTTP/2 widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/main.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (55461)
Hash 8efe0f2f2944e9baaa88fd0174e1b459
390574f839b7fb636c79834a1a53a0ebc1e2c87b
30b71113e1dbb5d3de637195adf9e5708923a611cb99f5670e7fd1c04c123d32
GET /trustboxes/5419b637fa0340045cd0c936/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=60e41e228b616600019987b4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 17075
last-modified: Tue, 04 Oct 2022 10:33:51 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Sat, 12 Nov 2022 00:45:28 GMT
cache-control: max-age=86400
etag: "8efe0f2f2944e9baaa88fd0174e1b459"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xL8wY47gIT2P1gaZug21xLfMZmn-YCx0GPqT13-vsGAULeugzuv0jg==
age: 21344
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=e7114524-d3f4-4925-9830-f47ba45f3298&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be030113-4f0f-4721-8dbd-a6920d411aee&tw_document_href=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o8uma&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=e7114524-d3f4-4925-9830-f47ba45f3298&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be030113-4f0f-4721-8dbd-a6920d411aee&tw_document_href=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o8uma&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=e7114524-d3f4-4925-9830-f47ba45f3298&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be030113-4f0f-4721-8dbd-a6920d411aee&tw_document_href=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o8uma&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 06:41:10 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=2a0a18c3-177f-4f42-afae-ca24b47c23ae; Max-Age=63072000; Expires=Mon, 11 Nov 2024 06:41:11 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: f5f8d2b861eb38ff
strict-transport-security: max-age=0
x-response-time: 110
x-connection-hash: c643e951e36fe1a2c5f7a98ea0f8dd376f1f8a80ed0fabc724592e77e2f6e373
X-Firefox-Spdy: h2
widget.trustpilot.com/trustbox-data/5419b637fa0340045cd0c936?businessUnitId=60e41e228b616600019987b4&locale=no
200 OK 420 B URL HTTP/2 widget.trustpilot.com/trustbox-data/5419b637fa0340045cd0c936?businessUnitId=60e41e228b616600019987b4&locale=no
IP
File type JSON data\012- , ASCII text, with very long lines (895), with no line terminators
Hash d75ec9eefc6302805a2f96af21ed9b44
87dd83520b82bb1c496ef5d99405c69d6178557f
f9b223b555a76dbc2687ea4b82830c0ed5b2f79ef76cbad9af30c94282f41b2b
GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=60e41e228b616600019987b4&locale=no HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=60e41e228b616600019987b4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
content-length: 420
content-encoding: gzip
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-fallback-status: BYPASS
x-skip-cache-cookie: 0
x-xss-protection: 1; mode=block
cache-control: public,max-age=1800
date: Sat, 12 Nov 2022 06:27:46 GMT
etag: "1c2143f12226e19b4aeeddb956cc9a40"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JUtoGgZQPIu80yIHWPeSbGRRmaxfza2dg67R9Z1dT9Bx7TMrkt09LA==
age: 805
X-Firefox-Spdy: h2
script.hotjar.com/modules.b738078c6419b4df4360.js
200 OK 68 kB URL HTTP/2 script.hotjar.com/modules.b738078c6419b4df4360.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 8f0c4297c2d458710337dddf28967bf3
d08ccfbb3663051f6b4c9cb5e04b545832d77906
4ad2290f9d61995edab85f4a0ac65d3134b6cba364b18b7f3047a939f3a775d3
GET /modules.b738078c6419b4df4360.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68482
date: Fri, 11 Nov 2022 12:14:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "8f0c4297c2d458710337dddf28967bf3"
last-modified: Fri, 11 Nov 2022 12:13:35 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rJDyQa1B0cVqXxH5Ji4e9UWqD9EZXrohuZNVllbpXv_oikV3FgpNzA==
age: 66425
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/4393257/domain/motty.no/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/4393257/domain/motty.no/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/4393257/domain/motty.no/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.motty.no/
Origin: https://www.motty.no
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Sat, 12 Nov 2022 01:14:14 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: A1WWG1WQxtGd8MY_4lGGbc1bM2xiiZIAilqSEbP4NrI2UGVRp59YAw==
age: 19617
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash e332a4c800bd0aade95654f16a69d09b
72f01080e896b4b0433091580232c78c6383af35
46da569f33746e18130655033c27df3dd298a59c39b47adb5542b6509835019f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4057
Cache-Control: max-age=150305
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:11 GMT
Etag: "636ed850-13a"
Expires: Mon, 14 Nov 2022 00:26:16 GMT
Last-Modified: Fri, 11 Nov 2022 23:18:40 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 314
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a7d7a5379a732fc5eadab78de886cc31
6df8c63644e97bf57262415f24e270c718e1758b
c355159cc937a19485f62cc446530f319749237e147adbb2c5784d1d2c20ed64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aca2e38eee453679f022dba5cf64555b
1c9f6f5e9ed1272e9edcc958e7cc2dec61f793df
ea8bc6a82c3243813e137066ca5b659192f72ac69690f9ea4dcb668624baf586
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/691343174/?random=1668235269757&cv=11&fst=1668232800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&ref=http%3A%2F%2Fserviceclub.solutions%2F&tiba=Refinansiering%20av%20l%C3%A5n%20med%20lav%20rente%20%7C%20Motty&fmt=3&is_vtc=1&random=3137389259&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/691343174/?random=1668235269757&cv=11&fst=1668232800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&ref=http%3A%2F%2Fserviceclub.solutions%2F&tiba=Refinansiering%20av%20l%C3%A5n%20med%20lav%20rente%20%7C%20Motty&fmt=3&is_vtc=1&random=3137389259&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/691343174/?random=1668235269757&cv=11&fst=1668232800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&ref=http%3A%2F%2Fserviceclub.solutions%2F&tiba=Refinansiering%20av%20l%C3%A5n%20med%20lav%20rente%20%7C%20Motty&fmt=3&is_vtc=1&random=3137389259&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 12 Nov 2022 06:41:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/691343174/?random=1668235269757&cv=11&fst=1668232800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&ref=http%3A%2F%2Fserviceclub.solutions%2F&tiba=Refinansiering%20av%20l%C3%A5n%20med%20lav%20rente%20%7C%20Motty&fmt=3&is_vtc=1&random=3137389259&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/691343174/?random=1668235269757&cv=11&fst=1668232800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&ref=http%3A%2F%2Fserviceclub.solutions%2F&tiba=Refinansiering%20av%20l%C3%A5n%20med%20lav%20rente%20%7C%20Motty&fmt=3&is_vtc=1&random=3137389259&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/691343174/?random=1668235269757&cv=11&fst=1668232800000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&ref=http%3A%2F%2Fserviceclub.solutions%2F&tiba=Refinansiering%20av%20l%C3%A5n%20med%20lav%20rente%20%7C%20Motty&fmt=3&is_vtc=1&random=3137389259&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 12 Nov 2022 06:41:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/4393257/domain/motty.no/token
200 OK 66 B URL HTTP/2 cdn.linkedin.oribi.io/partner/4393257/domain/motty.no/token
IP
Hash 964975f2d84792af2e6f7187e5c16e93
f991e2aaab77d7aa2377fe40375fdffa5157e7bb
bd8f39b0b855d2253bb6e0379fd7f77db5b4ef5373b628d846bea95c746fc3d4
GET /partner/4393257/domain/motty.no/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.motty.no
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Sat, 12 Nov 2022 01:14:14 GMT
access-control-allow-origin: *
cache-control: public, max-age=25991
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DFZE2SejDPJDJ-YiMr9_466u2nMpmgRhN06P0E1KPT5PYNCbOvJpLw==
age: 19617
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7178c97c15d49f214dd4e238628d8123
60c15885ccb9910621dd369fc0578a344bdab734
c668912ace8d705981ac3a28ffef7075f373ef1352b58d6384f44aae1c386baf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e569acd833d180f3c2fba0919fbeb704
60a3121c9bf8e08a8a7fe70001c24b6f8c9981f5
994bee0670c93479c3e835985d24d7ce41fbc0a3013e173d79ea1ea5f63ac85c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=519377513014339&ev=PageView&dl=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&rl=http%3A%2F%2Fserviceclub.solutions%2F&if=false&ts=1668235270876&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1668235270876.2140663269&it=1668235270477&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=519377513014339&ev=PageView&dl=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&rl=http%3A%2F%2Fserviceclub.solutions%2F&if=false&ts=1668235270876&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1668235270876.2140663269&it=1668235270477&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=519377513014339&ev=PageView&dl=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&rl=http%3A%2F%2Fserviceclub.solutions%2F&if=false&ts=1668235270876&sw=1280&sh=1024&v=2.9.89&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1668235270876.2140663269&it=1668235270477&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 12 Nov 2022 06:41:11 GMT
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=e7114524-d3f4-4925-9830-f47ba45f3298&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be030113-4f0f-4721-8dbd-a6920d411aee&tw_document_href=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o8uma&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=e7114524-d3f4-4925-9830-f47ba45f3298&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be030113-4f0f-4721-8dbd-a6920d411aee&tw_document_href=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o8uma&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=e7114524-d3f4-4925-9830-f47ba45f3298&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be030113-4f0f-4721-8dbd-a6920d411aee&tw_document_href=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o8uma&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 06:41:10 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_RXwEDvZjlnbauPodMcKNJg=="; Max-Age=63072000; Expires=Mon, 11 Nov 2024 06:41:11 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: ee79cb5716ed800a
strict-transport-security: max-age=631138519
x-response-time: 104
x-connection-hash: ef8dd55f9041aa309a54b5fdd44350943ae1b0443468ecab0a32111bc7c6369d
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4393257&time=1668235270397&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4393257&time=1668235270397&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4393257&time=1668235270397&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4393257%26time%3D1668235270397%26url%3Dhttps%253A%252F%252Fwww.motty.no%252Frefinansiering-av-lan%253Fadid%253D7655%252F%253Faff-id%253D423268%2526ClickID%253D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQJdMzetg7JIkAAAAYRqkh1FQFBrLVDUUyRBqadN6ZY1Yyhh64TCVl1v8PjGEhcn6fE6ciF_lM0hkQ; Max-Age=2592000; Expires=Mon, 12 Dec 2022 06:41:11 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQIplTIqhJx2hgAAAYRqkh1FG3Ix2H2nBG8BX7NRmkoDsW_an2bkDcTSLSt5Ad328N1julw6WYNTkm-uxw6iiw; Max-Age=2592000; Expires=Mon, 12 Dec 2022 06:41:11 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&a903c4a3-3650-474e-8b6a-e1d31a4a2014"; domain=.linkedin.com; Path=/; Secure; Expires=Sun, 12-Nov-2023 06:41:11 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2373:u=1:x=1:i=1668235271:t=1668321671:v=2:sig=AQFgnU8NIkohZVXrGWxmoB5V2QX6aUBS"; Expires=Sun, 13 Nov 2022 06:41:11 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXtQErCKpEhp5o2pHJsRw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B9C466986609405EA8C4FDB4633AE270 Ref B: OSL30EDGE0212 Ref C: 2022-11-12T06:41:11Z
date: Sat, 12 Nov 2022 06:41:11 GMT
content-length: 0
X-Firefox-Spdy: h2
d32hwlnfiv2gyn.cloudfront.net/i?e=pv&page=Refinansiering%20av%20l%C3%A5n%20med%20lav%20rente%20%7C%20Motty&dtm=1668235270405&tid=379204&vp=1280x939&ds=1268x4221&vid=1&duid=c8b81b153e36b1f0&p=web&tv=js-2.0.0&fp=3963981668&aid=2d20583b&lang=en-US&cs=UTF-8&tz=UTC&tna=cf&refr=http%3A%2F%2Fserviceclub.solutions%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93
200 OK 37 B URL HTTP/2 d32hwlnfiv2gyn.cloudfront.net/i?e=pv&page=Refinansiering%20av%20l%C3%A5n%20med%20lav%20rente%20%7C%20Motty&dtm=1668235270405&tid=379204&vp=1280x939&ds=1268x4221&vid=1&duid=c8b81b153e36b1f0&p=web&tv=js-2.0.0&fp=3963981668&aid=2d20583b&lang=en-US&cs=UTF-8&tz=UTC&tna=cf&refr=http%3A%2F%2Fserviceclub.solutions%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /i?e=pv&page=Refinansiering%20av%20l%C3%A5n%20med%20lav%20rente%20%7C%20Motty&dtm=1668235270405&tid=379204&vp=1280x939&ds=1268x4221&vid=1&duid=c8b81b153e36b1f0&p=web&tv=js-2.0.0&fp=3963981668&aid=2d20583b&lang=en-US&cs=UTF-8&tz=UTC&tna=cf&refr=http%3A%2F%2Fserviceclub.solutions%2F&res=1280x1024&cd=24&cookie=1&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93 HTTP/1.1
Host: d32hwlnfiv2gyn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 37
date: Sat, 12 Nov 2022 06:41:12 GMT
last-modified: Thu, 03 Jul 2014 09:50:57 GMT
etag: "3eacd0132310ea44cad756b378a3bc07"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qwGQnkHcs9GWTR784e9DNHO-oFdaN3D83sDaaZ-GK-nrBl1CD8CUEg==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash dcfff2821cf07c701789e657d2b6eaa1
7c26bd10e86b8d64544e90b7a5a3926556477c0a
cd364a668e74da79c998c98d4e07cc5ced8e836cb843b79c03f02ca39c784af3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=119892
Date: Sat, 12 Nov 2022 06:41:11 GMT
Etag: "636e6961-1d7"
Expires: Sun, 13 Nov 2022 15:59:23 GMT
Last-Modified: Fri, 11 Nov 2022 15:25:21 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8SJORuZKVg-ZV0cKfSk9WYujm0YJMPYckfh9HRNeBwXW58ZxIf0iOg==
Age: 2042
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4393257%26time%3D1668235270397%26url%3Dhttps%253A%252F%252Fwww.motty.no%252Frefinansiering-av-lan%253Fadid%253D7655%252F%253Faff-id%253D423268%2526ClickID%253D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4393257%26time%3D1668235270397%26url%3Dhttps%253A%252F%252Fwww.motty.no%252Frefinansiering-av-lan%253Fadid%253D7655%252F%253Faff-id%253D423268%2526ClickID%253D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D4393257%26time%3D1668235270397%26url%3Dhttps%253A%252F%252Fwww.motty.no%252Frefinansiering-av-lan%253Fadid%253D7655%252F%253Faff-id%253D423268%2526ClickID%253D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.motty.no/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=4393257&time=1668235270397&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&16ec5152-0131-4428-832b-356abc71825e"; Domain=.linkedin.com; Expires=Sun, 12-Nov-2023 06:41:11 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20221112064111e848c16c-bcbb-4b79-81a7-a6b29b3ec050AQGHlGzWR8RSZ8Lx3SPi7x1wVkGB0sDa"; Domain=.www.linkedin.com; Expires=Sun, 12-Nov-2023 06:41:11 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjgyMzUyNzE7MjswMjHt1JuYdtYiIX5Vncv2uKZCXxzmcwFBUtjdkHjaRmENVw==; Domain=.linkedin.com; Expires=Thu, 11 May 2023 06:41:11 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2416:u=1:x=1:i=1668235271:t=1668321671:v=2:sig=AQFmM-K28cnN7neI8BBBIKcyKdckelxM"; Expires=Sun, 13 Nov 2022 06:41:11 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/status linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXtQErFGTNfhGvbFqsIrQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 7E8D09C59A8C4E44ADD0F6CA6A017216 Ref B: OSL30EDGE0212 Ref C: 2022-11-12T06:41:11Z
date: Sat, 12 Nov 2022 06:41:11 GMT
content-length: 0
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=4393257&time=1668235270397&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=4393257&time=1668235270397&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=4393257&time=1668235270397&url=https%3A%2F%2Fwww.motty.no%2Frefinansiering-av-lan%3Fadid%3D7655%2F%3Faff-id%3D423268%26ClickID%3D11_127227825_c9675e8c-4fd9-4e79-a329-0a3b0f677a93&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.motty.no/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&89aba510-3d40-4d16-8a41-1bdee5f91049"; domain=.linkedin.com; Path=/; Secure; Expires=Sun, 12-Nov-2023 06:41:11 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2373:u=1:x=1:i=1668235271:t=1668321671:v=2:sig=AQFgnU8NIkohZVXrGWxmoB5V2QX6aUBS"; Expires=Sun, 13 Nov 2022 06:41:11 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXtQErH9UQ+jd+8iwaT9Q==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 0DEA0A3F471F4C4B95651E023C7D542C Ref B: OSL30EDGE0212 Ref C: 2022-11-12T06:41:11Z
date: Sat, 12 Nov 2022 06:41:11 GMT
content-length: 0
X-Firefox-Spdy: h2
www.motty.no/runtime-service-worker.js?v=3
200 OK 4.6 kB URL HTTP/2 www.motty.no/runtime-service-worker.js?v=3
IP
Hash fe3a85f61159e656872daee4feba2d1e
ff2994868fcffa52f13b87da731d00715ed25b34
1db0d5857241242d1993e09ace10a71232fbd5422d052d6c4ac73d9001924d03
GET /runtime-service-worker.js?v=3 HTTP/1.1
Host: www.motty.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: dm_timezone_offset=0; dm_last_page_view=1668235269606; dm_this_page_view=1668235269606; dm_last_visit=1668235269606; dm_total_visits=1; _gcl_au=1.1.2098401638.1668235270; _ga_D9XCSC6T3J=GS1.1.1668235269.1.0.1668235269.0.0.0; _ga=GA1.2.2103762840.1668235270; _sp_id.c542=c8b81b153e36b1f0.1668235270.1.1668235270.1668235270; _sp_ses.c542=1668237070404; _gid=GA1.2.1079412930.1668235270; _gat_UA-133846958-1=1; _gat_gtag_UA_108377723_24=1; _fbp=fb.1.1668235270876.2140663269; _hjSessionUser_2893907=eyJpZCI6IjZmMTgzYjk3LTU2YjctNWJiZC1hYWFmLWNhNDZhMDUzY2M4MCIsImNyZWF0ZWQiOjE2NjgyMzUyNzA4NTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2893907=eyJpZCI6ImQ5MWZiOGNmLTUyODQtNGRiMy05ZWY3LTNhNDA1NzY1ZDBlNiIsImNyZWF0ZWQiOjE2NjgyMzUyNzA4ODYsImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=0; ln_or=d
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 06:41:11 GMT
content-type: text/javascript
content-length: 4569
d-cache: from-cache
content-encoding: gzip
content-disposition: inline;filename=f.txt
d-geo: EU
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fed981981e40d9dbe8da712086dbba7d
0d233d980fc71ea58d1665d690997820849aa845
aba1ccf3f153f769d484062a1add13671eaa42da68426c9564d3ba59eedc4e3e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/workbox-cdn/releases/3.0.0-beta.0/workbox-sw.js
200 OK 1.5 kB URL HTTP/2 storage.googleapis.com/workbox-cdn/releases/3.0.0-beta.0/workbox-sw.js
IP
File type ASCII text, with very long lines (1420)
Hash 5c061d8f7fda59b5a1a13cbad864e585
c4e9eb6328ca26c84392a658f5a2f1c8acace865
4cad7b04adc7c399e5c5afe20bde431706729aadefbd80bb78f5046d3181e73e
GET /workbox-cdn/releases/3.0.0-beta.0/workbox-sw.js HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ADPycdumETP2UZzcZqybvS8y-8uhWxurmjMPZQB_XlodUBgppWJIsPlFST7p6E5dmiozicLNVr9RFRKwYDZYcL2KP0YUmQ
x-goog-generation: 1517526342705547
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1461
x-goog-hash: crc32c=77cSoA==, md5=XAYdj3/aWbWhoTy62GTlhQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1461
access-control-allow-origin: *
server: UploadServer
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
date: Sat, 12 Nov 2022 05:51:51 GMT
expires: Sat, 12 Nov 2022 06:51:51 GMT
cache-control: public, max-age=3600
age: 2961
last-modified: Thu, 01 Feb 2018 23:05:42 GMT
etag: "5c061d8f7fda59b5a1a13cbad864e585"
content-type: application/javascript; charset=utf-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fed981981e40d9dbe8da712086dbba7d
0d233d980fc71ea58d1665d690997820849aa845
aba1ccf3f153f769d484062a1add13671eaa42da68426c9564d3ba59eedc4e3e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 12 Nov 2022 06:41:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.motty.no/?utm_source=homescreen&TIMESTAMP=1668235273423
200 OK 29 kB URL HTTP/2 www.motty.no/?utm_source=homescreen&TIMESTAMP=1668235273423
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (41314), with CRLF, LF line terminators
Hash 8d38e51273d98632115358c231cba3f7
f041fa28a4f8c6cf2a8f10dc395a0a568364010d
c71954616ae5c70040f35f6a7a43a399e16c638a82b091cccb9ef9d230b2d329
GET /?utm_source=homescreen&TIMESTAMP=1668235273423 HTTP/1.1
Host: www.motty.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.motty.no/runtime-service-worker.js?v=3
Connection: keep-alive
Cookie: dm_timezone_offset=0; dm_last_page_view=1668235269606; dm_this_page_view=1668235269606; dm_last_visit=1668235269606; dm_total_visits=1; _gcl_au=1.1.2098401638.1668235270; _ga_D9XCSC6T3J=GS1.1.1668235269.1.0.1668235269.0.0.0; _ga=GA1.2.2103762840.1668235270; _sp_id.c542=c8b81b153e36b1f0.1668235270.1.1668235270.1668235270; _sp_ses.c542=1668237070404; _gid=GA1.2.1079412930.1668235270; _gat_UA-133846958-1=1; _gat_gtag_UA_108377723_24=1; _fbp=fb.1.1668235270876.2140663269; _hjSessionUser_2893907=eyJpZCI6IjZmMTgzYjk3LTU2YjctNWJiZC1hYWFmLWNhNDZhMDUzY2M4MCIsImNyZWF0ZWQiOjE2NjgyMzUyNzA4NTQsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2893907=eyJpZCI6ImQ5MWZiOGNmLTUyODQtNGRiMy05ZWY3LTNhNDA1NzY1ZDBlNiIsImNyZWF0ZWQiOjE2NjgyMzUyNzA4ODYsImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=0; ln_or=d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 12 Nov 2022 06:41:14 GMT
content-type: text/html;charset=utf-8
content-length: 29169
d-cache: from-cache
content-encoding: gzip
strict-transport-security: max-age=31536000; preload
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-content-type-options: nosniff
vary: user-agent,accept-encoding
d-geo: EU
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6940de73-c8af-4f08-84f9-033133b198d6.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6940de73-c8af-4f08-84f9-033133b198d6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d5e82891325c1b680b0e4e1fc1125d52
8cb7131508030c23611ceccf9821b13a41fc8517
0166009c7ffe0ef81c0259e98b8a94cc1a270eb09dc52fe19ad4783585e848f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6940de73-c8af-4f08-84f9-033133b198d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4250
x-amzn-requestid: 3f643146-4c17-4525-8bc8-aa53300e2266
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMi9GzaIAMFVVA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec145-5c138ab16b352bd5420f26a0;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:21 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: awVvzPv9MffgExwbK0t8p9CjWAjZSM9EP50xsROieOwKNW5PZjnpRw==
via: 1.1 79880188a81becf1687ba18c0e064230.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 22:00:54 GMT
age: 31222
etag: "8cb7131508030c23611ceccf9821b13a41fc8517"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.motty.no/icons/new-loan.svg
200 OK 0 B URL HTTP/2 cdn.motty.no/icons/new-loan.svg
IP
ASN #34989 ServeTheWorld AS
GET /icons/new-loan.svg HTTP/1.1
Host: cdn.motty.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://irp.cdn-website.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 06:41:10 GMT
content-type: image/svg+xml
vary: Accept-Encoding
server: BunnyCDN-NO-830
cdn-pullzone: 46157
cdn-uid: 395a56fd-014e-4f58-9b1f-340626af5f6d
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
content-md5: Nwnuokb0jFePEOOCFp9YDg==
last-modified: Fri, 18 Jun 2021 13:09:13 GMT
x-ms-request-id: 3edd049e-f01e-0021-804e-f3b9a1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/08/2022 08:45:45
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: bc6fcd9e4bf2f31fda231fe711a54673
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/2893907/visit-data?sv=6
200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/2893907/visit-data?sv=6
IP
POST /api/v2/client/sites/2893907/visit-data?sv=6 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 131
Origin: https://www.motty.no
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 06:41:11 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
d32hwlnfiv2gyn.cloudfront.net/sp-2.0.0-dm-0.1.min.js
200 OK 0 B URL HTTP/2 d32hwlnfiv2gyn.cloudfront.net/sp-2.0.0-dm-0.1.min.js
IP
GET /sp-2.0.0-dm-0.1.min.js HTTP/1.1
Host: d32hwlnfiv2gyn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 09 Nov 2022 01:34:32 GMT
x-amz-replication-status: FAILED
last-modified: Sun, 20 Mar 2022 08:45:42 GMT
etag: W/"81ff203c31c9a3e5c15c5a790eebb460"
cache-control: max-age=6048000
x-amz-version-id: IZwYrapPL5STtMyaSYUvOnEvHgmJogqU
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: r2Vj_Of-smXIAwLvymgn5bKiRuMpW0u1JgDeSzZ1C1XK3AGTaC828Q==
age: 277598
X-Firefox-Spdy: h2
irp.cdn-website.com/WIDGET_CSS/production_2981/4124ff7778e87985af54eb7dc3e9b0f9.css
200 OK 0 B URL HTTP/2 irp.cdn-website.com/WIDGET_CSS/production_2981/4124ff7778e87985af54eb7dc3e9b0f9.css
IP
GET /WIDGET_CSS/production_2981/4124ff7778e87985af54eb7dc3e9b0f9.css HTTP/1.1
Host: irp.cdn-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Thu, 10 Nov 2022 14:09:58 GMT
last-modified: Thu, 10 Nov 2022 14:02:40 GMT
etag: W/"8e172e4270b0f359719ac45996f779f7"
cache-control: max-age=31536000
x-amz-version-id: i_6KrzIh_AFArywlwD8XOqfS_RHAjnVV
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: xqlE9VLYryBD50U4jshemrnJfcNsIH7tsWZPEeH5JwMeQsurQgwsow==
age: 145872
X-Firefox-Spdy: h2
irp.cdn-website.com/2d20583b/dms3rep/multi/motty.svg
200 OK 0 B URL HTTP/2 irp.cdn-website.com/2d20583b/dms3rep/multi/motty.svg
IP
GET /2d20583b/dms3rep/multi/motty.svg HTTP/1.1
Host: irp.cdn-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Mon, 07 Nov 2022 15:49:55 GMT
last-modified: Tue, 08 Jun 2021 12:35:12 GMT
etag: W/"a488895fc681c13f6e704d4e7890bf77"
cache-control: max-age=31536000
x-amz-version-id: .bHK_l77X4SOLeE0Grm0Fo.vAqO8tdoV
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: dIDX9UkRtUhDsXt3Hwjf6657L1NPO_p6vSsQw7EAFuYsn-Zl554OBg==
age: 399075
X-Firefox-Spdy: h2
irp.cdn-website.com/2d20583b/files/2d20583b_1.min.css?v=879
200 OK 0 B URL HTTP/2 irp.cdn-website.com/2d20583b/files/2d20583b_1.min.css?v=879
IP
GET /2d20583b/files/2d20583b_1.min.css?v=879 HTTP/1.1
Host: irp.cdn-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
date: Wed, 09 Nov 2022 03:37:50 GMT
last-modified: Tue, 01 Nov 2022 09:24:04 GMT
etag: W/"3fc7bdb1abe268025b7c80d159406111"
cache-control: max-age=31536000
x-amz-version-id: 4i.Ok5iClJcBNYA28GG9Hzb0C9DnQy55
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5yZ2UoZLcrqYQvdLzZPnFj6YqWUIIfByH8pyHqZGRzP8nYPP4Yfm-w==
age: 270200
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-2893907.js?sv=6
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-2893907.js?sv=6
IP
GET /c/hotjar-2893907.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Sat, 12 Nov 2022 06:41:10 GMT
cache-control: max-age=60
etag: W/a9bc2e75a5763d70dddaaed607489bcd
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DFVlGaP-xNPOgC2DaIrM05EmXUVZl1F-wQuQaiel2QJ-RNoMa8ckww==
X-Firefox-Spdy: h2
cdn.motty.no/application-sliders-widget.css
200 OK 0 B URL HTTP/2 cdn.motty.no/application-sliders-widget.css
IP
ASN #34989 ServeTheWorld AS
GET /application-sliders-widget.css HTTP/1.1
Host: cdn.motty.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.motty.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 12 Nov 2022 06:41:10 GMT
content-type: text/css
server: BunnyCDN-NO-830
cdn-pullzone: 46157
cdn-uid: 395a56fd-014e-4f58-9b1f-340626af5f6d
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=2592000
content-md5: eJWEAIAeHXzMp7LdfMRRDQ==
last-modified: Mon, 12 Sep 2022 09:03:20 GMT
x-ms-request-id: 6cd07810-301e-004c-384e-f30dea000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/08/2022 08:45:45
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 68d9d48a00ce22901914d15fad0344ff
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
40.115.44.9
13.107.42.14
3.67.141.185
23.36.76.210
31.13.72.12
34.78.223.0
93.184.220.29
104.18.32.68
54.171.136.239