firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 30 Sep 2022 13:58:05 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: geRSW3TRpZoi1daEP7jlkHH3GSxdM-X_RdB2JsaT2J1Hn8PkCu6dsQ==
Age: 2302
teluguapps.in/
200 OK 7.0 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash fb6afc042f6f9f134b2376ba132421ec
1524015909ff7411aa33b4bc519f33d579ac06c7
bcd2d1a201646864d2b068b26ae154a5cc3fcd387a1e9e0e4a836da9ba199818
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: teluguapps.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Fri, 30 Sep 2022 14:36:27 GMT
content-type: text/html; charset=utf-8
content-length: 7007
vary: Accept-Language
content-language: en
connection: close
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 60e4edea7b5f4d19f3547a3bb2d5df57
3ee076bab4da3416c2c5808f730cb316c28baef7
763e2dadfdd286a51327cd2000ca335e30cd0b9b7267875d22ca33f7556ba200
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763E2DADFDD286A51327CD2000CA335E30CD0B9B7267875D22CA33F7556BA200"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11563
Expires: Fri, 30 Sep 2022 17:49:10 GMT
Date: Fri, 30 Sep 2022 14:36:27 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 30 Sep 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WpMXc3FsHvhFU9i2DUvAlwS00bpYVmqzfEkBsGmcn3vbzJ4XLibKUw==
age: 32880
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 14:36:27 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
teluguapps.in/favicon.ico
200 OK 43 B URL HTTP/1.1 teluguapps.in/favicon.ico
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /favicon.ico HTTP/1.1
Host: teluguapps.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://teluguapps.in/
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Fri, 30 Sep 2022 14:36:27 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
connection: close
teluguapps.in/mtm/async/.eJxdi0sOwjAMBe_iZYlqlnzEWZCJ3NRSkobEgUiIu5MWVuxm3ui9oGaBEyAYoOxKx06ZJ86cvzIvRa-RAndV9tVVSqmMEteLtZx0C01x1uBNj14sqSwR27rs2v8a_Pl-2Y9HI4EcIz1k-uGTb8kMOGz9AO8PWCg1Rg:1oeH7r:Xnv6Cu1CCE64AxxeZ1s-mmO8gJQ/1/0
200 OK 153 B URL HTTP/1.1 teluguapps.in/mtm/async/.eJxdi0sOwjAMBe_iZYlqlnzEWZCJ3NRSkobEgUiIu5MWVuxm3ui9oGaBEyAYoOxKx06ZJ86cvzIvRa-RAndV9tVVSqmMEteLtZx0C01x1uBNj14sqSwR27rs2v8a_Pl-2Y9HI4EcIz1k-uGTb8kMOGz9AO8PWCg1Rg:1oeH7r:Xnv6Cu1CCE64AxxeZ1s-mmO8gJQ/1/0
IP
File type ASCII text, with no line terminators
Hash 637708dacc7877d57a528aa0f61088df
35a65509ab46b58173b6c1fc78a3bf0a65afba53
eaf8fd411c5db5a096be9fcfdb9bf4145e96b20a508d67b52865b69fad5d31c7
Analyzer Verdict Alert fortinet Malware
GET /mtm/async/.eJxdi0sOwjAMBe_iZYlqlnzEWZCJ3NRSkobEgUiIu5MWVuxm3ui9oGaBEyAYoOxKx06ZJ86cvzIvRa-RAndV9tVVSqmMEteLtZx0C01x1uBNj14sqSwR27rs2v8a_Pl-2Y9HI4EcIz1k-uGTb8kMOGz9AO8PWCg1Rg:1oeH7r:Xnv6Cu1CCE64AxxeZ1s-mmO8gJQ/1/0 HTTP/1.1
Host: teluguapps.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://teluguapps.in/
Connection: keep-alive
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Fri, 30 Sep 2022 14:36:27 GMT
content-type: text/html; charset=utf-8
content-length: 153
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=""; expires=Fri, 30-Sep-2022 15:36:27 GMT; Max-Age=3600; Path=/
connection: close
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 30 Sep 2022 14:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Fri, 30 Sep 2022 15:04:31 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WA_GVFE6-m9H-lT0HsFVH4xX_lNE8nLnrNSq7CRp-C55r-hURBBqYw==
Age: 414
ocsp.digicert.com/
200 OK 471 B IP
Hash d1be374a29f94481ff2c021e35f4eaa0
e05e92d94b5e434e9935e560fd8dc33bdc393aea
37a5132d2183f5c3bfaac5c89df691fea72cac4423110df88bdeb231f430deee
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5399
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:28 GMT
Last-Modified: Fri, 30 Sep 2022 13:06:29 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 60518fd095f1e4ad97fce1c81cf8bd22
3fbc4d16b7e92b218f987e76af691617349dbaf1
3244ea680019a04e55b432ab7c76bb783a04746a4b38bed4329397eb51795fd8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 30 Sep 2022 14:36:28 GMT
Last-Modified: Fri, 30 Sep 2022 13:45:27 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SXXtpERs8T-qhGsEEems2XMtvXZ3X-TrCbeTWIuCWKieuuxQnxPkAA==
Age: 3061
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3hCHn8gJm/p7xsl3s1sZyw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CIrQ6L/P7lfBbbekQvyIffnM3+A=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c7075af542ff556f3f94a1cf7ee05845
0e1f41acc7c109fce048ab8910bf7fc1cdc50c7a
cfd1d677a15d2a0d1744fd52bcfafe2545b4b27a6f5656730f11b2404902c613
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFD1D677A15D2A0D1744FD52BCFAFE2545B4B27A6F5656730F11B2404902C613"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13458
Expires: Fri, 30 Sep 2022 18:20:46 GMT
Date: Fri, 30 Sep 2022 14:36:28 GMT
Connection: keep-alive
brynh-lei.com/favicon.ico
404 Not Found 653 B URL HTTP/2 brynh-lei.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: brynh-lei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brynh-lei.com/zcredirect?visitid=44579fe3-40cd-11ed-a70b-12b8fbaeae65&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Fri, 30 Sep 2022 14:36:28 GMT
content-type: text/html;charset=utf-8
content-length: 653
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-webkit-csp: default-src 'self'; script-src 'self' 'unsafe-inline'
content-language: en
server: tyrcaVKd
X-Firefox-Spdy: h2
clever-redirect.com/s/r6?s=623619497&s2=erythraean-weasel&s3=bravo-bra-kpplj9xe5z
200 OK 350 B URL HTTP/2 clever-redirect.com/s/r6?s=623619497&s2=erythraean-weasel&s3=bravo-bra-kpplj9xe5z
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (350), with no line terminators
Hash e61cf2e586d339d6036a0ccd94572423
6fd6c2820cae71464276fb30d0390598a27bead2
c0279e6e27d0330a8680afe0c56cb4bb258ac090634d201b71244560a885868f
GET /s/r6?s=623619497&s2=erythraean-weasel&s3=bravo-bra-kpplj9xe5z HTTP/1.1
Host: clever-redirect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brynh-lei.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
referrer-policy: no-referrer
x-powered-by: PHP/7.4.27
set-cookie: 46904c108333a908302500a4baa06694=5d5188956e31d3cb698ee61ca1f6797e34cba9ac0be1d34d42edfb2cf7e38156a%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2246904c108333a908302500a4baa06694%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D; expires=Sat, 01-Oct-2022 14:36:28 GMT; Max-Age=86400; path=/; HttpOnly
content-length: 350
content-type: text/html; charset=UTF-8
date: Fri, 30 Sep 2022 14:36:28 GMT
server: Apache/2.4.52 (codeit) OpenSSL/1.1.1m PHP/7.4.27
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 460a5ff692dd2a7dab6bff67c051521a
8d2f5c19eb8fca3aa9494931bcf25cd132d6570f
96e4b9459a56b831bbebb7f5aa59eacdead1a4c9fb9b3a1ac81ab576ab0e12f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96E4B9459A56B831BBEBB7F5AA59EACDEAD1A4C9FB9B3A1AC81AB576AB0E12F3"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15962
Expires: Fri, 30 Sep 2022 19:02:30 GMT
Date: Fri, 30 Sep 2022 14:36:28 GMT
Connection: keep-alive
brynh-lei.com/zcredirect?visitid=44579fe3-40cd-11ed-a70b-12b8fbaeae65&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
200 OK 1.3 kB URL HTTP/2 brynh-lei.com/zcredirect?visitid=44579fe3-40cd-11ed-a70b-12b8fbaeae65&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (948)
Hash 048430b3669b7dff2bf58258afd9c322
c812ff5bd05ad2938ce38cd3012d66fc93377722
db59407fa260bb048524f9bce1bdb1f09e4cd3b1fb493b5f3b8b0128a62681f4
GET /zcredirect?visitid=44579fe3-40cd-11ed-a70b-12b8fbaeae65&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: brynh-lei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brynh-lei.com/zcvisitor/44579fe3-40cd-11ed-a70b-12b8fbaeae65/f8472a30-a5e5-11ec-9226-0a76dcc61f13?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 30 Sep 2022 14:36:28 GMT
content-type: text/html;charset=UTF-8
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-webkit-csp: default-src 'self'; script-src 'self' 'unsafe-inline'
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
server: mXbPmcss
X-Firefox-Spdy: h2
lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3DZ0FgJbj%2F7ZKLGjMs%26placementId%3D8ce5feefa749eb9971953ec8ba22802e&h=c0e5c5c0849453bedc4604330296ea7a
200 OK 867 B URL HTTP/1.1 lookandfind.me/s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%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%3D%3D%26i%3DZ0FgJbj%2F7ZKLGjMs%26placementId%3D8ce5feefa749eb9971953ec8ba22802e&h=c0e5c5c0849453bedc4604330296ea7a
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (867), with no line terminators
Hash 1a32b3ace0023f84b0172f5c45c91e63
09af4c5a6d1896e8a3ed334d369c681263007848
093a79ddf04e4ef765baba6b9b0ad04a4a716e66f9e6b6afdf28b417d5fd0ea9
GET /s/r?u=https%3A%2F%2Fapi.yadore.com%2Fv2%2Fr%3Fe%3DcHlLOFNYTkFpSjY4aTZ1d3pSL3pReDZMRmwwM1VaYW4wazlGSUIrMDhMcW5wbmNFcVpoTXBoQkY5eWEzZHBCUjh3NjZmV1lkcmJUanNRSThDTUJ4c3Z2S1F4eUM4NnNXUEFxY0Q3N2xyMjI0Y25hTU9lWDM1WTZRQkNxVklxQnJCdGdFaThQUXU4SUdKeGcrZldsZ3lINjl1b3FKb2hUTXlOL0NLSmdSaGMySXRHWTBuWFViR3I3azlxc0dCL1lEN0lMUCtSUkdxNE5kNEVHSk83QTluMmROaTVnRTl1dUhpc3g3bFlJWkIzWnNPN29penlOSS9LM0swVXdrekpGQlB1NW1pUzZnNUtwQ0pVU2kwWkdkK2l2SzRsZk0zZzJrTXFyUTFEdEl2S0JSZFVZRFc1djhhdFlGV1hQN2pzVXJ1dXptekZ4TlZ6emJCUmtveTFwQUdvY2pmZmFVYk9JTlZ0L2s3ZXc3TzV4Z3hXNnJyTmZxZ2dobEM2WjNNWjcwODR4a3d6aFFCZEN2OWlaeFlBSEp1N3BJZXRlVGpxRnFZUlFCVVE9PQ%3D%3D%26i%3DZ0FgJbj%2F7ZKLGjMs%26placementId%3D8ce5feefa749eb9971953ec8ba22802e&h=c0e5c5c0849453bedc4604330296ea7a HTTP/1.1
Host: lookandfind.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: 38b047df8755cb1c8b27e0b7b67d397c=5770343b7aaa421aa59cfd4b8907f0e9078de166c1a649bc864f1b302dd47a6aa%3A2%3A%7Bi%3A0%3Bs%3A32%3A%2238b047df8755cb1c8b27e0b7b67d397c%22%3Bi%3A1%3Bs%3A1%3A%221%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 30 Sep 2022 14:36:29 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k
X-Powered-By: PHP/8.1.10
Referrer-Policy: strict-origin-when-cross-origin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 61e9ea219a2f954701846f347c85e7c7
bf48c4678c84fc375f85624a77c7a2dfb6c2c663
ae446e91f57b79e15068b42264fe00606d73e74d1ab28946fa12f45c598872a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AE446E91F57B79E15068B42264FE00606D73E74D1AB28946FA12F45C598872A7"
Last-Modified: Thu, 29 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6975
Expires: Fri, 30 Sep 2022 16:32:44 GMT
Date: Fri, 30 Sep 2022 14:36:29 GMT
Connection: keep-alive
api.yadore.com/v2/r?e=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&i=Z0FgJbj/7ZKLGjMs&placementId=8ce5feefa749eb9971953ec8ba22802e
302 Found 0 B URL HTTP/2 api.yadore.com/v2/r?e=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&i=Z0FgJbj/7ZKLGjMs&placementId=8ce5feefa749eb9971953ec8ba22802e
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/r?e=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&i=Z0FgJbj/7ZKLGjMs&placementId=8ce5feefa749eb9971953ec8ba22802e HTTP/1.1
Host: api.yadore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
date: Fri, 30 Sep 2022 14:36:29 GMT
location: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664542488687&.sig=z4pBhPVbqvJIwJEn__y8MTXPcos-&affiliationId=96965886&comId=100525120&country=no&offerId=c24388583502d26fb26742f9b53db0e2&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f1e7b18fbddbfb2f458ee98978a420782319e93703c1a8f131d4ed2ac38250f&custom2=SRdytlITOR16&custom3=false
server: nginx
x-powered-by: PHP/8.0.20
content-length: 0
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 85b6de4b144cff9fbdccc16497d3e855
a13d94a8a1b9f215282f55e69cde8169fdc96a89
2475916ad2e6d0e58f2dabc9f98fec01aa548692da354865fb03718902eb8271
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2464
Cache-Control: max-age=95713
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:29 GMT
Etag: "6335c82e-1d7"
Expires: Sat, 01 Oct 2022 17:11:42 GMT
Last-Modified: Thu, 29 Sep 2022 16:30:38 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664542488687&.sig=z4pBhPVbqvJIwJEn__y8MTXPcos-&affiliationId=96965886&comId=100525120&country=no&offerId=c24388583502d26fb26742f9b53db0e2&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f1e7b18fbddbfb2f458ee98978a420782319e93703c1a8f131d4ed2ac38250f&custom2=SRdytlITOR16&custom3=false
200 OK 32 kB URL HTTP/1.1 no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664542488687&.sig=z4pBhPVbqvJIwJEn__y8MTXPcos-&affiliationId=96965886&comId=100525120&country=no&offerId=c24388583502d26fb26742f9b53db0e2&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f1e7b18fbddbfb2f458ee98978a420782319e93703c1a8f131d4ed2ac38250f&custom2=SRdytlITOR16&custom3=false
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12978)
Hash f6ba0690c186632c83127238295f92e5
bc91d5594b1fb26706123c46a5f1e4e11d969492
981c8c26368e8b6a31b88336e8a39f6c3463968a786ca09c0ae3198190bd2273
GET /ctl/go/offersearchGo?.ts=1664542488687&.sig=z4pBhPVbqvJIwJEn__y8MTXPcos-&affiliationId=96965886&comId=100525120&country=no&offerId=c24388583502d26fb26742f9b53db0e2&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f1e7b18fbddbfb2f458ee98978a420782319e93703c1a8f131d4ed2ac38250f&custom2=SRdytlITOR16&custom3=false HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookandfind.me/
Connection: keep-alive
Cookie: datadome=fkeSQaNSikapd74s8m9EkO.vwxzUpO0Cl4.GNGaRbZ2eykkJJUAvrwISecwzCeb8U6kSdNC3d1nFQ.dbkD5.zQwwPD.sn7KJv8lC9i3~bRjCV6O7Nv90jHHS6EDBrXz; kelkooID=a4c6294-1838eb26b10-4b600
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 30 Sep 2022 14:36:29 GMT
leadId: dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422
clickId: 107698149_1664548589417_1240912
country: no
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.016794S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/html; charset=UTF-8
Content-Length: 31775
Set-Cookie: datadome=T1fI-n6dWLZIpGcrVwJc9zp8AMh77_s3yvg6Cg2k9Fmkh.1Jb4GCQzWXj0x0GzmaV2fI_RD0Op2HszV7gyp1.k4cgMamwgmKotkJJgiIqslpXEr9vDKlReHaehkkyfK; Max-Age=31536000; Expires=Sat, 30 Sep 2023 14:36:29 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
kelkooID=a4c6294-1838eb26b10-4b600; Max-Age=31536000; Expires=Sat, 30 Sep 2023 14:36:29 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=100
Connection: Keep-Alive
dd.kelkoogroup.net/tags.js
200 OK 43 kB URL HTTP/2 dd.kelkoogroup.net/tags.js
IP
File type ASCII text, with very long lines (65432)
Hash a9f75aaa24c508083c6eda2912cb2929
c47edaa4aa173610bef816ec6078b8385b271bca
092fecd8bdaf2416d3c813569c99ca72665726b2231a01308c07db16489ca93d
GET /tags.js HTTP/1.1
Host: dd.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Cookie: datadome=T1fI-n6dWLZIpGcrVwJc9zp8AMh77_s3yvg6Cg2k9Fmkh.1Jb4GCQzWXj0x0GzmaV2fI_RD0Op2HszV7gyp1.k4cgMamwgmKotkJJgiIqslpXEr9vDKlReHaehkkyfK; kelkooID=a4c6294-1838eb26b10-4b600; _ga=GA1.2.452819119.1664546397; _gid=GA1.2.789779484.1664546397
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 43000
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Fri, 30 Sep 2022 11:57:45 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
via: 1.1 6bf2ca4ea5a5c92a1d7cd2f9767e8674.cloudfront.net (CloudFront), 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
date: Fri, 30 Sep 2022 13:58:01 GMT
cache-control: max-age=3600, public
expires: Fri, 30 Sep 2022 14:57:52 GMT
etag: "33929-5e9e3b3bbc8ac-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P3, OSL50-P1
x-amz-cf-id: sg_6S7Yf0fBubsJg9xV1-UizjlQDuf1xzec4InJKiMRES1spurfNBA==
age: 2317
X-Firefox-Spdy: h2
no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&clickId=107698149_1664548589417_1240912
200 OK 68 B URL HTTP/1.1 no-go.kelkoogroup.net/assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&clickId=107698149_1664548589417_1240912
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
GET /assets/images/p.png?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&clickId=107698149_1664548589417_1240912 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664542488687&.sig=z4pBhPVbqvJIwJEn__y8MTXPcos-&affiliationId=96965886&comId=100525120&country=no&offerId=c24388583502d26fb26742f9b53db0e2&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f1e7b18fbddbfb2f458ee98978a420782319e93703c1a8f131d4ed2ac38250f&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=T1fI-n6dWLZIpGcrVwJc9zp8AMh77_s3yvg6Cg2k9Fmkh.1Jb4GCQzWXj0x0GzmaV2fI_RD0Op2HszV7gyp1.k4cgMamwgmKotkJJgiIqslpXEr9vDKlReHaehkkyfK; kelkooID=a4c6294-1838eb26b10-4b600; _ga=GA1.2.452819119.1664546397; _gid=GA1.2.789779484.1664546397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 30 Sep 2022 14:36:29 GMT
Request-Time: PT0.001628S
X-Robots-Tag: noindex,nofollow
Cache-Control: private, must-revalidate
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: image/png
Content-Length: 68
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=97
Connection: Keep-Alive
no-go.kelkoogroup.net/fp?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a7d73ad4ec25b3b986cbb2626e22083463e31a18d571dc59fc2db95d47c0f53a0af68aa58243442a8dca85b29252159a6b00c3a93b0f2d4a306fae712adf23510dbfceaad24a40d29ac77cee25d40643ec19f530ad0fb5ec391238a1b71eb0450e3bb6b2e48c257858c31321591925915610807e24e26cb82312727287940908ba92a8a76a3179dadab04d76a543b2ebf2c00811e73caa774d10adfa0f8b460c7beda184056ed0ff042d1021f1dd36872c421eaab7c35996c904584fbfb66d2b8c007464b5e658dee827862fc65feb01a7a995c229bc41cdf6a80ebbc406602bb8865a8394dade350ff81d56da44be99f609a1e2960994d6f0ad364a7413f2d9c7&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&clickId=107698149_1664548589417_1240912
200 OK 0 B URL HTTP/1.1 no-go.kelkoogroup.net/fp?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&clickId=107698149_1664548589417_1240912
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp?country=no&k=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&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&clickId=107698149_1664548589417_1240912 HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664542488687&.sig=z4pBhPVbqvJIwJEn__y8MTXPcos-&affiliationId=96965886&comId=100525120&country=no&offerId=c24388583502d26fb26742f9b53db0e2&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f1e7b18fbddbfb2f458ee98978a420782319e93703c1a8f131d4ed2ac38250f&custom2=SRdytlITOR16&custom3=false
Content-Type: text/plain;charset=utf-8
Content-Length: 520
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Cookie: datadome=T1fI-n6dWLZIpGcrVwJc9zp8AMh77_s3yvg6Cg2k9Fmkh.1Jb4GCQzWXj0x0GzmaV2fI_RD0Op2HszV7gyp1.k4cgMamwgmKotkJJgiIqslpXEr9vDKlReHaehkkyfK; kelkooID=a4c6294-1838eb26b10-4b600; _ga=GA1.2.452819119.1664546397; _gid=GA1.2.789779484.1664546397
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 30 Sep 2022 14:36:29 GMT
Request-Time: PT0.003274S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Type: text/plain; charset=UTF-8
Content-Length: 0
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=99
Connection: Keep-Alive
no-go.kelkoogroup.net/favicon.ico
403 Forbidden 0 B URL HTTP/1.0 no-go.kelkoogroup.net/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664542488687&.sig=z4pBhPVbqvJIwJEn__y8MTXPcos-&affiliationId=96965886&comId=100525120&country=no&offerId=c24388583502d26fb26742f9b53db0e2&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f1e7b18fbddbfb2f458ee98978a420782319e93703c1a8f131d4ed2ac38250f&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=T1fI-n6dWLZIpGcrVwJc9zp8AMh77_s3yvg6Cg2k9Fmkh.1Jb4GCQzWXj0x0GzmaV2fI_RD0Op2HszV7gyp1.k4cgMamwgmKotkJJgiIqslpXEr9vDKlReHaehkkyfK; kelkooID=a4c6294-1838eb26b10-4b600; _ga=GA1.2.452819119.1664546397; _gid=GA1.2.789779484.1664546397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.0 403 Forbidden
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
no-go.kelkoogroup.net/redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a7d73ad4ec25b3b986cbb2626e22083463e31a18d571dc59fc2db95d47c0f53a0af68aa58243442a8dca85b29252159a6b00c3a93b0f2d4a306fae712adf23510dbfceaad24a40d29ac77cee25d40643ec19f530ad0fb5ec391238a1b71eb0450e3bb6b2e48c257858c31321591925915610807e24e26cb82312727287940908ba92a8a76a3179dadab04d76a543b2ebf2c00811e73caa774d10adfa0f8b460c7beda184056ed0ff042d1021f1dd36872c421eaab7c35996c904584fbfb66d2b8c007464b5e658dee827862fc65feb01a7a995c229bc41cdf6a80ebbc406602bb8865a8394dade350ff81d56da44be99f609a1e2960994d6f0ad364a7413f2d9c7&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&clickId=107698149_1664548589417_1240912&url=https%3A%2F%2Fto.lekia.no%2Ft%2Ft%3Fa%3D1509455795%26as%3D1331389421%26t%3D2%26tk%3D1%26epi%3Ddc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422%26url%3Dhttps%3A%2F%2Fwww.lekia.no%2Fbrio-world-b-o-damptog
303 See Other 0 B URL HTTP/1.1 no-go.kelkoogroup.net/redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a7d73ad4ec25b3b986cbb2626e22083463e31a18d571dc59fc2db95d47c0f53a0af68aa58243442a8dca85b29252159a6b00c3a93b0f2d4a306fae712adf23510dbfceaad24a40d29ac77cee25d40643ec19f530ad0fb5ec391238a1b71eb0450e3bb6b2e48c257858c31321591925915610807e24e26cb82312727287940908ba92a8a76a3179dadab04d76a543b2ebf2c00811e73caa774d10adfa0f8b460c7beda184056ed0ff042d1021f1dd36872c421eaab7c35996c904584fbfb66d2b8c007464b5e658dee827862fc65feb01a7a995c229bc41cdf6a80ebbc406602bb8865a8394dade350ff81d56da44be99f609a1e2960994d6f0ad364a7413f2d9c7&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&clickId=107698149_1664548589417_1240912&url=https%3A%2F%2Fto.lekia.no%2Ft%2Ft%3Fa%3D1509455795%26as%3D1331389421%26t%3D2%26tk%3D1%26epi%3Ddc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422%26url%3Dhttps%3A%2F%2Fwww.lekia.no%2Fbrio-world-b-o-damptog
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43705260665475808a7d73ad4ec25b3b986cbb2626e22083463e31a18d571dc59fc2db95d47c0f53a0af68aa58243442a8dca85b29252159a6b00c3a93b0f2d4a306fae712adf23510dbfceaad24a40d29ac77cee25d40643ec19f530ad0fb5ec391238a1b71eb0450e3bb6b2e48c257858c31321591925915610807e24e26cb82312727287940908ba92a8a76a3179dadab04d76a543b2ebf2c00811e73caa774d10adfa0f8b460c7beda184056ed0ff042d1021f1dd36872c421eaab7c35996c904584fbfb66d2b8c007464b5e658dee827862fc65feb01a7a995c229bc41cdf6a80ebbc406602bb8865a8394dade350ff81d56da44be99f609a1e2960994d6f0ad364a7413f2d9c7&leadId=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&clickId=107698149_1664548589417_1240912&url=https%3A%2F%2Fto.lekia.no%2Ft%2Ft%3Fa%3D1509455795%26as%3D1331389421%26t%3D2%26tk%3D1%26epi%3Ddc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422%26url%3Dhttps%3A%2F%2Fwww.lekia.no%2Fbrio-world-b-o-damptog HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/ctl/go/offersearchGo?.ts=1664542488687&.sig=z4pBhPVbqvJIwJEn__y8MTXPcos-&affiliationId=96965886&comId=100525120&country=no&offerId=c24388583502d26fb26742f9b53db0e2&service=37&tokenId=eef84b7f-8e19-45d1-adee-7c88767dc72d&wait=true&addedParams=true&custom1=4f1e7b18fbddbfb2f458ee98978a420782319e93703c1a8f131d4ed2ac38250f&custom2=SRdytlITOR16&custom3=false
Connection: keep-alive
Cookie: datadome=T1fI-n6dWLZIpGcrVwJc9zp8AMh77_s3yvg6Cg2k9Fmkh.1Jb4GCQzWXj0x0GzmaV2fI_RD0Op2HszV7gyp1.k4cgMamwgmKotkJJgiIqslpXEr9vDKlReHaehkkyfK; kelkooID=a4c6294-1838eb26b10-4b600; _ga=GA1.2.452819119.1664546397; _gid=GA1.2.789779484.1664546397
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 303 See Other
Date: Fri, 30 Sep 2022 14:36:29 GMT
leadId: dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422
clickId: 107698149_1664548589417_1240912
country: no
Location: https://to.lekia.no/t/t?a=1509455795&as=1331389421&t=2&tk=1&epi=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&url=https://www.lekia.no/brio-world-b-o-damptog
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-DataDome: protected
Request-Time: PT0.012608S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Content-Length: 0
Set-Cookie: datadome=PCRJ.3d8uHs5Al4TMhgI35XmzJa7eKtpWpLYDxX0N2Y1dsx~x~VcnOl0qiuvYU769.0uzba3qb~EZjh73Jjvm84Rez2kdnUDfk1gZiDqz_1UQVXlZixFvLMU212uKkV; Max-Age=31536000; Expires=Sat, 30 Sep 2023 14:36:29 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
P3P: CP="Anything"
ApacheTracking: localhost
Keep-Alive: timeout=40, max=82
Connection: Keep-Alive
Content-Type: text/plain
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7865
Expires: Fri, 30 Sep 2022 16:47:34 GMT
Date: Fri, 30 Sep 2022 14:36:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7865
Expires: Fri, 30 Sep 2022 16:47:34 GMT
Date: Fri, 30 Sep 2022 14:36:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7865
Expires: Fri, 30 Sep 2022 16:47:34 GMT
Date: Fri, 30 Sep 2022 14:36:29 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d906d66-cd90-4963-827e-8d0564c0f787.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d906d66-cd90-4963-827e-8d0564c0f787.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13a12db696bc2bf6a6ea2f48f4c1428e
3481dce8ab711111fc8863d88bee1a887cfd43ac
6dae6c9e5de4146e1f528a36a1795225c9731385f13927fc001fb3f9842fe8f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d906d66-cd90-4963-827e-8d0564c0f787.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5106
x-amzn-requestid: a906507c-8820-489c-9978-7d0fd026c862
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPd5PE0MIAMF3DA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6336103a-49eb3879088f17bc01d177c7;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: op_2CSOAx9-hqXvj1nOyitq0UXqIyItmquWjMkmMdKWnwoTIA_SA6A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:45:26 GMT
age: 60663
etag: "3481dce8ab711111fc8863d88bee1a887cfd43ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59da9c68-5ffa-4dc1-adf8-645278cd60ca.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59da9c68-5ffa-4dc1-adf8-645278cd60ca.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 139a144f8cb04ac8aae65f4bad1473e7
265840b2d2fc6eb764cc6409b05deee8d77a19c2
6e0f01b6bdd5a92e92c7b29a6172a2900c68900afd2abba948940621252e0fd8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59da9c68-5ffa-4dc1-adf8-645278cd60ca.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10380
x-amzn-requestid: 35ee2a77-159c-4bb4-a825-98c638398586
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPdZYHsTIAMFQNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63360f6f-4f68073432bcea371c7b8f03;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:34:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: IENB0e-e13ywHJKPgyLWn1bGPMMxFLUu3cIUcREjGhxDEMROEL1jBg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:45:15 GMT
age: 60674
etag: "265840b2d2fc6eb764cc6409b05deee8d77a19c2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2016911-a1a6-4bdf-a8f3-89e94a0aaff7.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2016911-a1a6-4bdf-a8f3-89e94a0aaff7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 456968f691ae9464d69a37bffe9bd7ce
31b8538deb0f00d5b4182739a4a2fcc1b956a998
5cde1e3158e6c6c0b7a01d3bd32f2aa292b3b205f604e5c4ed71cafedad06bf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2016911-a1a6-4bdf-a8f3-89e94a0aaff7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7810
x-amzn-requestid: 7f6d92e1-c7b1-4dd2-9efa-52ad324ca19d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK6pFvkoAMF_yA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334beaa-362b7368566955966db78385;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TbPFEVDpMOjK26iu1UGcx56vtP7Pywq05VAylNubOIfbMgo1qGsA-w==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 23:45:42 GMT
age: 53447
etag: "31b8538deb0f00d5b4182739a4a2fcc1b956a998"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98c23448-09e3-4c05-86c5-dafbe6ca8a0e.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98c23448-09e3-4c05-86c5-dafbe6ca8a0e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d21d2bdcedbd619a80017054076319f9
86dd3bf133e9eddf8852f39e1ee695ee599ac886
fc5672d5a8e9c6a5ec531f7ba05b65c192af37edf6c3a48105df3685de44ec0d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98c23448-09e3-4c05-86c5-dafbe6ca8a0e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8059
x-amzn-requestid: f8bb9e4b-9f3c-47ba-8524-de16155e536d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZNepwHAVoAMFvNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633544a4-5d884e29378635b60592b618;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 07:09:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NMiKZSkokVXNTV76vsVJ7VEu6YFfT9MqL7tHtT8CwZq0BwTbXOpm6Q==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 30 Sep 2022 06:34:26 GMT
age: 28923
etag: "86dd3bf133e9eddf8852f39e1ee695ee599ac886"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9789cead-4e6c-4a12-9b45-25d0efd38fc9.png
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9789cead-4e6c-4a12-9b45-25d0efd38fc9.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1389b1d624b44706c7a6f6b7eb769241
78b798f2cfa7db13a6b5ca2ca2783bece5e77d5d
c3c2526b98be06fc7e793e1150bacde2a7bd718e29a851a6e6992e8d84333790
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9789cead-4e6c-4a12-9b45-25d0efd38fc9.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16011
x-amzn-requestid: d58dfdcd-383a-45ac-8ae2-2b97f016b6a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPdbjFy1IAMF84A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63360f7c-1ca9707a5e5087fd769d9ab6;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:34:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: QKHN1asEv6w1mTLxsmn7Oj5AZTsPcg0H8zv5_qQ1BYptjL254kCZdA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 22:20:36 GMT
age: 58553
etag: "78b798f2cfa7db13a6b5ca2ca2783bece5e77d5d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac0adb1a-3390-4c2f-8884-055b217a0c2c.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac0adb1a-3390-4c2f-8884-055b217a0c2c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8337b3316a9c7ee94fea710d83ab5b70
632f621fe04de121001fb4d3b51fa8e318376bb2
070deb0d8955fabda308ae55d6ed0ebead9a5ea310b913e6ef762eb16b63c100
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac0adb1a-3390-4c2f-8884-055b217a0c2c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9685
x-amzn-requestid: a7a4df5a-3456-4658-aba9-abec376d79af
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPdZaHHJIAMFdhw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63360f6f-28aecee27887f6516d2df6c9;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:34:39 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wzCOPcEwFdINaJFDS3hgms9bG2-nL2YsQJ9tNmWq7xd7S05irtgpbQ==
via: 1.1 94be61e339880d0097634de6934f7710.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:45:15 GMT
age: 60674
etag: "632f621fe04de121001fb4d3b51fa8e318376bb2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 224d0ab21f5aa0c1e5537d2b7dbea191
d506cbc63f0695949dcce5ac84d1c1224a1d5154
384f6bed1f9061af28b44c31bc5d576153ddb1e4b1b0dfdc374ce8b1a9e0e3db
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "384F6BED1F9061AF28B44C31BC5D576153DDB1E4B1B0DFDC374CE8B1A9E0E3DB"
Last-Modified: Wed, 28 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21563
Expires: Fri, 30 Sep 2022 20:35:52 GMT
Date: Fri, 30 Sep 2022 14:36:29 GMT
Connection: keep-alive
to.lekia.no/t/t?a=1509455795&as=1331389421&t=2&tk=1&epi=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&url=https://www.lekia.no/brio-world-b-o-damptog
302 0 B URL HTTP/1.1 to.lekia.no/t/t?a=1509455795&as=1331389421&t=2&tk=1&epi=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&url=https://www.lekia.no/brio-world-b-o-damptog
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/t?a=1509455795&as=1331389421&t=2&tk=1&epi=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&url=https://www.lekia.no/brio-world-b-o-damptog HTTP/1.1
Host: to.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Cache-Control: no-cache
Access-Control-Allow-Origin: *
X-TraceId: b914ff15-b185-4726-991d-bded8df57d08
Set-Cookie: at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33; Max-Age=94608000; Path=/; Domain=to.lekia.no; SameSite=None; Secure
Location: https://www.lekia.no/brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33
Transfer-Encoding: chunked
Date: Fri, 30 Sep 2022 14:36:29 GMT
Connection: close
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d86c4c86c0f02ed5f5c25d7fe83a3bf3
c4a282d99ecf920d9b5b7fa5f137656246e17ec0
36d51ec645a280f8630076938fd895edc234ed2181685b43a3cc72494b62b0c1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36D51EC645A280F8630076938FD895EDC234ED2181685B43A3CC72494B62B0C1"
Last-Modified: Thu, 29 Sep 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10865
Expires: Fri, 30 Sep 2022 17:37:35 GMT
Date: Fri, 30 Sep 2022 14:36:30 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6ac97060c75238244bfa94c6c6f63e40
9a640270fe62b82a8d971472f28a150e23f3a0c2
f7c0b8dc16c4a08e73772eadf8303a509768acf9d70f132c1c1db899534d4bab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1664542488687%26.sig%3Dz4pBhPVbqvJIwJEn__y8MTXPcos-%26affiliationId%3D96965886%26comId%3D100525120%26country%3Dno%26offerId%3Dc24388583502d26fb26742f9b53db0e2%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D4f1e7b18fbddbfb2f458ee98978a420782319e93703c1a8f131d4ed2ac38250f%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100525120%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Lekia.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=452819119.1664546397&tid=UA-168544891-6&_gid=789779484.1664546397&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&cd3=100525120&cd4=a4c6294-1838eb26b10-4b600&cd5=&cd6=96965886%7C100525120%7C&z=1087592008
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1664542488687%26.sig%3Dz4pBhPVbqvJIwJEn__y8MTXPcos-%26affiliationId%3D96965886%26comId%3D100525120%26country%3Dno%26offerId%3Dc24388583502d26fb26742f9b53db0e2%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D4f1e7b18fbddbfb2f458ee98978a420782319e93703c1a8f131d4ed2ac38250f%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100525120%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Lekia.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=452819119.1664546397&tid=UA-168544891-6&_gid=789779484.1664546397&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&cd3=100525120&cd4=a4c6294-1838eb26b10-4b600&cd5=&cd6=96965886%7C100525120%7C&z=1087592008
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=j96&t=pageview&_s=1&dl=https%3A%2F%2Fno-go.kelkoogroup.net%2Fctl%2Fgo%2FoffersearchGo%3F.ts%3D1664542488687%26.sig%3Dz4pBhPVbqvJIwJEn__y8MTXPcos-%26affiliationId%3D96965886%26comId%3D100525120%26country%3Dno%26offerId%3Dc24388583502d26fb26742f9b53db0e2%26service%3D37%26tokenId%3Deef84b7f-8e19-45d1-adee-7c88767dc72d%26wait%3Dtrue%26addedParams%3Dtrue%26custom1%3D4f1e7b18fbddbfb2f458ee98978a420782319e93703c1a8f131d4ed2ac38250f%26custom2%3DSRdytlITOR16%26custom3%3Dfalse&dr=https%3A%2F%2Flookandfind.me%2F&dp=%2F96965886%7C100525120%7C&ul=en-us&de=UTF-8&dt=Du%20sendes%20videre%20til%20Lekia.no&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=QACAAAABAAAAAC~&cid=452819119.1664546397&tid=UA-168544891-6&_gid=789779484.1664546397&_r=1&cd1=96965886&cd2=dc1-kls-prod-ls-03.prod.dc1.kelkoo.net_1664548589423_591422&cd3=100525120&cd4=a4c6294-1838eb26b10-4b600&cd5=&cd6=96965886%7C100525120%7C&z=1087592008 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://no-go.kelkoogroup.net
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
access-control-allow-origin: https://no-go.kelkoogroup.net
date: Fri, 30 Sep 2022 14:36:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2601db85aa6894ea41f37fc0c1f2594a
afc9de950cf648d720a78467582b26346b8d53bc
3211c5c61098100152ea682c86ec84f3a80229b8d709e5cbe0022caba7dc9e24
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.lekia.no/brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33
200 OK 32 kB URL HTTP/2 www.lekia.no/brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33
IP
ASN #198568 ATEA Sverige AB
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1222), with CRLF line terminators
Hash 1d96dc3ab689bd6f2f5917318a362cf3
2e05bd35fe20b8a35b7e3977afce4a32240dc05a
122ce78c5baaedaa6431f2569914f0c3e4b6c632a146d7ec0cb692b262fab57f
GET /brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33 HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: -1
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; expires=Fri, 09-Dec-2022 01:16:30 GMT; path=/; HttpOnly
ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; path=/; HttpOnly; SameSite=Lax
Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; expires=Fri, 30-Dec-2022 15:36:30 GMT; path=/; secure
ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c;Path=/;Domain=www.lekia.no
x-commerce-platform: Easyfy Commerce 3.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 31610
X-Firefox-Spdy: h2
www.lekia.no/bundles/theme02/app-all-css?v=X6b44xwll8QB3NVyrENxQjASK-txBVwsEPnsxj5eaBc1
200 OK 12 kB URL HTTP/2 www.lekia.no/bundles/theme02/app-all-css?v=X6b44xwll8QB3NVyrENxQjASK-txBVwsEPnsxj5eaBc1
IP
ASN #198568 ATEA Sverige AB
File type ASCII text, with very long lines (30825), with CRLF line terminators
Hash 23ca6246e84b7b7ff55d9aaad24d697c
1d213623ff8e1798bf5a834512d271c029e1b5e0
f73dd81335520011bc9fe1ca01fd8c23475ad686eb19f212626dcd0431f0c3bc
GET /bundles/theme02/app-all-css?v=X6b44xwll8QB3NVyrENxQjASK-txBVwsEPnsxj5eaBc1 HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33
Cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: text/css; charset=utf-8
content-encoding: gzip
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Fri, 30 Sep 2022 14:36:30 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 11679
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js
200 OK 4.0 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js
IP
File type HTML document, ASCII text, with very long lines (11084), with no line terminators
Hash a5775b673c18ffa903cd1a6129ce5f87
ee2569b285a7dbc4ccc95b01a16f06943fade768
ab8ad2f07d5214be2ade4edcd295d5fb8f8aa60971b3ec1348063a8a19659fc9
GET /ajax/libs/modernizr/2.8.3/modernizr.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 30 Sep 2022 14:36:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 3980
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f26-2b4c"
last-modified: Mon, 04 May 2020 16:13:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 660957
expires: Wed, 20 Sep 2023 14:36:30 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7rmRmn%2FbMTnNFJiBj3t9M4hwLzNt5uQvb3%2BuvI%2BiavWouJV5BCVgt0bYUg%2FbYo2wKGlg0FbTqEXjmE8rrFfy2GtMYpoQWREca%2BFEOxbuDWTnDvkTCkvzEbilkl%2F%2BlPZQFHlsTx8G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 752db0f2c94e1bfe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.lekia.no/Themes/Theme02/Content/images/lekia-store-map_nb-NO.png
200 OK 63 kB URL HTTP/2 www.lekia.no/Themes/Theme02/Content/images/lekia-store-map_nb-NO.png
IP
ASN #198568 ATEA Sverige AB
File type PNG image data, 342 x 470, 8-bit/color RGBA, interlaced\012- data
Hash 9561297624c81108e20aaffb98810f35
3050e1247c3ed3f5e706c3603c749203b9f78259
2f92ca4004b8458206efbdb05ba945b615e02d84453afd3aad6fd9ab177cc745
GET /Themes/Theme02/Content/images/lekia-store-map_nb-NO.png HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33
Cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Mon, 19 Sep 2022 04:05:42 GMT
accept-ranges: bytes
etag: "0afb715ddcbd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 63223
X-Firefox-Spdy: h2
www.lekia.no/bundles/theme02/app-product-css?v=q212WZF4HUnMevL_VOcgNLhJMo60lLodzc2Rr_xQeuI1
200 OK 77 kB URL HTTP/2 www.lekia.no/bundles/theme02/app-product-css?v=q212WZF4HUnMevL_VOcgNLhJMo60lLodzc2Rr_xQeuI1
IP
ASN #198568 ATEA Sverige AB
File type ASCII text, with very long lines (55015), with CRLF, LF line terminators
Hash ca08ce2ae8ebdf4f4ca05c6a001f2a64
f0afa32f0c691e1455ddc048e14b45e2351276e0
409b44e9a60c2560bb79ffa327c36b3b63c5e90d9960d80a3e1a841fdfe241cd
GET /bundles/theme02/app-product-css?v=q212WZF4HUnMevL_VOcgNLhJMo60lLodzc2Rr_xQeuI1 HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33
Cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: text/css; charset=utf-8
content-encoding: gzip
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Fri, 30 Sep 2022 14:36:30 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 76879
X-Firefox-Spdy: h2
www.lekia.no/Themes/Theme02/Content/images/frakt.png
200 OK 81 kB URL HTTP/2 www.lekia.no/Themes/Theme02/Content/images/frakt.png
IP
ASN #198568 ATEA Sverige AB
File type PNG image data, 1750 x 1750, 8-bit/color RGBA, interlaced\012- data
Hash 1f9e11b08e28ee61393cac3e557a6514
03a739638f07aed9c69c5d99c57a2489bb089f0c
993531c630285ae17d8c73681a3f86fa86daeaee11fddcd619b156814de96233
GET /Themes/Theme02/Content/images/frakt.png HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33
Cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Mon, 19 Sep 2022 04:05:42 GMT
accept-ranges: bytes
etag: "0afb715ddcbd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 81394
X-Firefox-Spdy: h2
www.lekia.no/bundles/theme02/jqueryval?v=58888f042Yesgykb4SRDO8U6g7ZsuaapoBM-3n62PPw1
200 OK 14 kB URL HTTP/2 www.lekia.no/bundles/theme02/jqueryval?v=58888f042Yesgykb4SRDO8U6g7ZsuaapoBM-3n62PPw1
IP
ASN #198568 ATEA Sverige AB
File type Unicode text, UTF-8 text, with very long lines (22886), with CRLF line terminators
Hash de79652ae9b85474876a01fae46e38f7
4109e343febd84d5a9c74623699fbc12ae8919bd
bc6dd191e6b957fe7e6101035981e6d8d7c5ea9bad4b378055f3c2b43df7f6a4
GET /bundles/theme02/jqueryval?v=58888f042Yesgykb4SRDO8U6g7ZsuaapoBM-3n62PPw1 HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33
Cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: application/javascript; charset=utf-8
content-encoding: gzip
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Fri, 30 Sep 2022 14:36:30 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 14305
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 86e0fe14ac54b7b9131a460fd65d73fd
49ec80657f4183e2ad7e906583b94cbf48a94809
9f30a1437666225f096d72763cf89a4e5ae9e5f501ffed4becc51b08c515cf6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
use.typekit.net/sjs2zma.js
200 OK 6.8 kB URL HTTP/2 use.typekit.net/sjs2zma.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (2940)
Hash 60f385efa3eb04c24abb49f28b40db99
79b72d5ce102108712fc81c738f7c54176fb2d6e
7b84baced5a9d7bd27d5f6c00b57ebe7e20459b99fccbf8e039597d34b4e4cb6
GET /sjs2zma.js HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: public, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 6843
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
www.lekia.no/bundles/theme02/app-all-js?v=NBljKgy2fWFWzx8brS2UbeG5f8rV_pBED6NyMOat_-w1
200 OK 94 kB URL HTTP/2 www.lekia.no/bundles/theme02/app-all-js?v=NBljKgy2fWFWzx8brS2UbeG5f8rV_pBED6NyMOat_-w1
IP
ASN #198568 ATEA Sverige AB
File type ASCII text, with very long lines (32065), with CRLF line terminators
Hash b5295d0564977c1e4f4c867ecbd2f567
23823b194b2d42ad51bef1c7534233f9e190877a
06ca223349df44ea5902ddd56fbad210d86fcc33fb1c964478c826efb9771ff3
GET /bundles/theme02/app-all-js?v=NBljKgy2fWFWzx8brS2UbeG5f8rV_pBED6NyMOat_-w1 HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33
Cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: application/javascript; charset=utf-8
content-encoding: gzip
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Fri, 30 Sep 2022 14:36:30 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 93985
X-Firefox-Spdy: h2
www.lekia.no/themes/default/content/superslides/superslides.css
200 OK 716 B URL HTTP/2 www.lekia.no/themes/default/content/superslides/superslides.css
IP
ASN #198568 ATEA Sverige AB
File type ASCII text, with CRLF line terminators
Hash adcdbf5ae9ed3faec7c2c68cb484c82b
6ab18e30ae35abc5814088a3ebe4fc8626777411
b1cb6d077731d6a1b7c7489a0d978386feb3824aee04ad88f22f82876ec8d22b
GET /themes/default/content/superslides/superslides.css HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/bundles/theme02/app-product-css?v=q212WZF4HUnMevL_VOcgNLhJMo60lLodzc2Rr_xQeuI1
Cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: gzip
last-modified: Mon, 19 Sep 2022 04:05:42 GMT
accept-ranges: bytes
etag: "0afb715ddcbd81:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 716
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/vanilla-lazyload@12.0.0/dist/lazyload.min.js
200 OK 2.1 kB URL HTTP/2 cdn.jsdelivr.net/npm/vanilla-lazyload@12.0.0/dist/lazyload.min.js
IP
File type ASCII text, with very long lines (5543)
Hash 55e1cbfc8f8adad7a0b9e16bad1d1e9c
63eadd258f012d0deb681e26a8047828d2e53d7f
19e25f38c6058b1ae7474b77381e222b25e2461d67ad6c37ef6cf92ca5df9e7c
GET /npm/vanilla-lazyload@12.0.0/dist/lazyload.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 12.0.0
x-jsd-version-type: version
etag: W/"15d1-IxZ2QckOwVh8MMcWJc7ap/VwGh4"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 30 Sep 2022 14:36:30 GMT
age: 14820682
x-served-by: cache-fra19170-FRA, cache-bma1622-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2145
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f3fb3dc5714550c9e0667bd5ee8641b0
1d6f0a66a553e61889eb4625e58b97916c165ed8
5bd7c3b3cc5ce382b0caa36450bf89387c452bb7deec2a7bafdafffb7486722b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5BD7C3B3CC5CE382B0CAA36450BF89387C452BB7DEEC2A7BAFDAFFFB7486722B"
Last-Modified: Fri, 30 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10856
Expires: Fri, 30 Sep 2022 17:37:26 GMT
Date: Fri, 30 Sep 2022 14:36:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f3fb3dc5714550c9e0667bd5ee8641b0
1d6f0a66a553e61889eb4625e58b97916c165ed8
5bd7c3b3cc5ce382b0caa36450bf89387c452bb7deec2a7bafdafffb7486722b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5BD7C3B3CC5CE382B0CAA36450BF89387C452BB7DEEC2A7BAFDAFFFB7486722B"
Last-Modified: Fri, 30 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10856
Expires: Fri, 30 Sep 2022 17:37:26 GMT
Date: Fri, 30 Sep 2022 14:36:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f3fb3dc5714550c9e0667bd5ee8641b0
1d6f0a66a553e61889eb4625e58b97916c165ed8
5bd7c3b3cc5ce382b0caa36450bf89387c452bb7deec2a7bafdafffb7486722b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5BD7C3B3CC5CE382B0CAA36450BF89387C452BB7DEEC2A7BAFDAFFFB7486722B"
Last-Modified: Fri, 30 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10856
Expires: Fri, 30 Sep 2022 17:37:26 GMT
Date: Fri, 30 Sep 2022 14:36:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f3fb3dc5714550c9e0667bd5ee8641b0
1d6f0a66a553e61889eb4625e58b97916c165ed8
5bd7c3b3cc5ce382b0caa36450bf89387c452bb7deec2a7bafdafffb7486722b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5BD7C3B3CC5CE382B0CAA36450BF89387C452BB7DEEC2A7BAFDAFFFB7486722B"
Last-Modified: Fri, 30 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10856
Expires: Fri, 30 Sep 2022 17:37:26 GMT
Date: Fri, 30 Sep 2022 14:36:30 GMT
Connection: keep-alive
fonts.googleapis.com/css?family=PT+Sans:400,400i,700,700i
200 OK 2.0 kB URL HTTP/2 fonts.googleapis.com/css?family=PT+Sans:400,400i,700,700i
IP
Hash 1b10024a4ebeea76004b15780a95b16f
98235c885a11ad95604b69538d1351eaa668e3b2
0974269f9f034946a4a1e3414ed89bbe603edc4fa237d8a0124bf965148ef478
GET /css?family=PT+Sans:400,400i,700,700i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 30 Sep 2022 14:36:30 GMT
date: Fri, 30 Sep 2022 14:36:30 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_lego_41706_09b5a540-40e0-48bd-98ca-9d47038146e6/50/50/0/lego-friends-41706-lego-friends-julekalender.jpg
200 OK 2.7 kB URL HTTP/2 media.lekia.no/lekia.no/images/g_lego_41706_09b5a540-40e0-48bd-98ca-9d47038146e6/50/50/0/lego-friends-41706-lego-friends-julekalender.jpg
IP
ASN #198568 ATEA Sverige AB
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 638134d2667de6a0bb9fd9046ac1a73c
4da62e0e073b41f8708e17100b346a1db6f2d172
1135787df8b8816417a14661453f74180f7dbb18bc94829f75fd0dbb284dc2fc
GET /lekia.no/images/g_lego_41706_09b5a540-40e0-48bd-98ca-9d47038146e6/50/50/0/lego-friends-41706-lego-friends-julekalender.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Thu, 15 Sep 2022 08:58:47 GMT
etag: "4365C38780987DC187C9D820685443DB"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/not-found/230/100/0/not-found.jpg
200 OK 27 kB URL HTTP/2 media.lekia.no/lekia.no/images/not-found/230/100/0/not-found.jpg
IP
ASN #198568 ATEA Sverige AB
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 230x100, components 3\012- data
Hash 28ca1d7e6c434913fd3823b43b16e04e
6e18a0e43273d1305737a82705d60f1ce032ecd2
51cddfdd959a86de5712b9a3a9a6f62632e2ab3d2b7fd12278eb80f9fb8d8378
GET /lekia.no/images/not-found/230/100/0/not-found.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Wed, 07 Nov 2018 09:30:54 GMT
etag: "274D7980FE26767E4B931AEBF8BB18C6"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_lego_2304_2340de6f-51b0-4028-a064-9472cfa27de4/50/50/0/lego-duplo-klosser-2304-stor-gr%C3%B8nn-byggeplate.jpg
200 OK 2.5 kB URL HTTP/2 media.lekia.no/lekia.no/images/g_lego_2304_2340de6f-51b0-4028-a064-9472cfa27de4/50/50/0/lego-duplo-klosser-2304-stor-gr%C3%B8nn-byggeplate.jpg
IP
ASN #198568 ATEA Sverige AB
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 47315a3bf448f674523b1c07dffd7dcf
753604b9ae4d4080414db60895730fcd2e0dd1f5
de846e3b04dd7de273c666da31f50a92d32dfd75b91cb987a89c2eb8729f87c3
GET /lekia.no/images/g_lego_2304_2340de6f-51b0-4028-a064-9472cfa27de4/50/50/0/lego-duplo-klosser-2304-stor-gr%C3%B8nn-byggeplate.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Mon, 25 Oct 2021 08:15:33 GMT
etag: "734EE11784D030B63EA9F3E08737069C"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
www.lekia.no/Themes/Theme02/Content/images/headers/autom.png
200 OK 186 kB URL HTTP/2 www.lekia.no/Themes/Theme02/Content/images/headers/autom.png
IP
ASN #198568 ATEA Sverige AB
File type PNG image data, 3118 x 110, 8-bit/color RGBA, non-interlaced\012- data
Size 186 kB (185479 bytes)
Hash 1f0e1bd05e391affe1228da96d96e282
527231994576b1b3195e8385b98c295eb6666bc8
343acbd6b63e92e115b852d01a78b31dcc7a63ed14f0cbd255906702afc7566b
GET /Themes/Theme02/Content/images/headers/autom.png HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33
Cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Mon, 19 Sep 2022 04:05:42 GMT
accept-ranges: bytes
etag: "0afb715ddcbd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 185479
X-Firefox-Spdy: h2
www.lekia.no/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 www.lekia.no/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
ASN #198568 ATEA Sverige AB
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.lekia.no/bundles/theme02/app-all-css?v=X6b44xwll8QB3NVyrENxQjASK-txBVwsEPnsxj5eaBc1
Cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
last-modified: Mon, 19 Sep 2022 04:05:42 GMT
accept-ranges: bytes
etag: "0afb715ddcbd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 77160
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_lego_76230_4deb3980-18bf-4395-b190-3f663c7f95a2/50/50/0/lego-marvel-76230-figur-av-venom.jpg
200 OK 65 kB URL HTTP/2 media.lekia.no/lekia.no/images/g_lego_76230_4deb3980-18bf-4395-b190-3f663c7f95a2/50/50/0/lego-marvel-76230-figur-av-venom.jpg
IP
ASN #198568 ATEA Sverige AB
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 7cce9e1858b0341d681c2579c0d71d53
610f961128808051940c6f2ef3a1fb005a310aed
1841e813f35ef38bde5a0f71f2fe5584e77c247e02ceca135b704a06a4795550
GET /lekia.no/images/g_lego_76230_4deb3980-18bf-4395-b190-3f663c7f95a2/50/50/0/lego-marvel-76230-figur-av-venom.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Thu, 15 Sep 2022 08:14:08 GMT
etag: "61B1E0CD914B5C8AF3C437CA45F6F5F0"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
www.lekia.no/themes/theme02/content/slick/ajax-loader.gif
200 OK 4.2 kB URL HTTP/2 www.lekia.no/themes/theme02/content/slick/ajax-loader.gif
IP
ASN #198568 ATEA Sverige AB
File type GIF image data, version 89a, 32 x 32\012- data
Hash c5cd7f5300576ab4c88202b42f6ded62
7a1aa43614396382bb15e5fde574d9cdcd21698f
e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b
GET /themes/theme02/content/slick/ajax-loader.gif HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/bundles/theme02/app-product-css?v=q212WZF4HUnMevL_VOcgNLhJMo60lLodzc2Rr_xQeuI1
Cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/gif
last-modified: Mon, 19 Sep 2022 04:05:42 GMT
accept-ranges: bytes
etag: "0afb715ddcbd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 4178
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_brio_33884_966aa24e-399b-414d-bcb7-407c5cc1e94a/90/90/0/brio-world-b-o-damptog.jpg
200 OK 3.8 kB URL HTTP/2 media.lekia.no/lekia.no/images/g_brio_33884_966aa24e-399b-414d-bcb7-407c5cc1e94a/90/90/0/brio-world-b-o-damptog.jpg
IP
ASN #198568 ATEA Sverige AB
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 90x90, components 3\012- data
Hash 77ff819a59098198963656453bb3b796
cf02dea12c86abb66d167aaf2dad8ab47ca357c9
84af78bd293cef2e93fe0abe3b0a205edf50dbf2eb7660cea035ef962b111da7
GET /lekia.no/images/g_brio_33884_966aa24e-399b-414d-bcb7-407c5cc1e94a/90/90/0/brio-world-b-o-damptog.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Tue, 26 Oct 2021 21:23:48 GMT
etag: "DDE2D02C8AB5BFEA4D295FE98DBD43C2"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
www.lekia.no/content/favicons/favicon-16x16.png?v=E6bypnnE4e
200 OK 479 B URL HTTP/2 www.lekia.no/content/favicons/favicon-16x16.png?v=E6bypnnE4e
IP
ASN #198568 ATEA Sverige AB
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 6fc5cf1021a275b7680398cb29927ee1
85ccae41cf790d49f140012b230457d2c3b0895d
2de9d500e7e3cbd23c30c323f6d92dd71a6d93d17f6161499457f6327eeab255
GET /content/favicons/favicon-16x16.png?v=E6bypnnE4e HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33
Cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
last-modified: Mon, 19 Sep 2022 04:05:42 GMT
accept-ranges: bytes
etag: "0afb715ddcbd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 479
X-Firefox-Spdy: h2
assets.pinterest.com/js/pinit.js
200 OK 203 B URL HTTP/2 assets.pinterest.com/js/pinit.js
IP
File type ASCII text, with very long lines (361), with no line terminators
Hash 62d32c28f14783b94192cd8d35bc010d
78c1ba11e104bbd01a07225d0f8c41d7712094d4
e823b68f75484d37c74ebb652e2a5b183a1b65c43f1592985e519a8cabc44b2e
GET /js/pinit.js HTTP/1.1
Host: assets.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "62d32c28f14783b94192cd8d35bc010d"
content-encoding: br
accept-ranges: bytes
content-type: application/javascript; charset=utf-8
content-length: 203
cache-control: max-age=247
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bdd6cc32fbdb5603995e45c2cba3bd60
3e5338633410c2714fa9c44ef5528c9a4cfa59c9
103af480989f65c65190deee9d9af15a94b98d040858b50647e694e628cfef4f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5754
Cache-Control: max-age=92527
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:31 GMT
Etag: "6335aee4-1d7"
Expires: Sat, 01 Oct 2022 16:18:38 GMT
Last-Modified: Thu, 29 Sep 2022 14:42:44 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
use.typekit.net/af/2e2357/00000000000000000001709f/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i7&v=3
200 OK 25 kB URL HTTP/2 use.typekit.net/af/2e2357/00000000000000000001709f/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 24844, version 1.0\012- data
Hash 5c7839dac3b835362b1b03f00b1279e2
84d5a8db2b72294288ec9860442bef85653eb6f3
cb26418fee39694ae65badb98f1d4217c2956f86676b540c87425178edf803be
GET /af/2e2357/00000000000000000001709f/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lekia.no
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 24844
etag: "7210f1b0b97a664f8555608685ebda5b3048b145"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 30 Sep 2022 14:36:31 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_brio_33884_54fac8c1-0e3d-4c8f-a6bd-c7493ccd909b/90/90/0/brio-world-b-o-damptog.jpg
200 OK 27 kB URL HTTP/2 media.lekia.no/lekia.no/images/g_brio_33884_54fac8c1-0e3d-4c8f-a6bd-c7493ccd909b/90/90/0/brio-world-b-o-damptog.jpg
IP
ASN #198568 ATEA Sverige AB
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 90x90, components 3\012- data
Hash 263912b299191ae8c58679d7395c3ef0
c440410e48acab3b6479e0722ad40330fc1489bb
e9f9e03ebbc42b732820d1b36eeab04470210803dedad3bbd43612e0dc9c9118
GET /lekia.no/images/g_brio_33884_54fac8c1-0e3d-4c8f-a6bd-c7493ccd909b/90/90/0/brio-world-b-o-damptog.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Sun, 24 Oct 2021 12:08:16 GMT
etag: "6DF9F76F395AD296EAF26CB35EA84079"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/d50a1b/00000000000000000001709d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i6&v=3
200 OK 25 kB URL HTTP/2 use.typekit.net/af/d50a1b/00000000000000000001709d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i6&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 24932, version 1.0\012- data
Hash a3a380fee81c136ef9ff61e3f6fcc2f6
432d409625a8c0f73043ff68d79e32ffbe8eb15e
8af6ddf4027d32c25243b34ccd99a227c70eb5979f922fc40853859e39c8eb73
GET /af/d50a1b/00000000000000000001709d/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i6&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lekia.no
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 24932
etag: "a40900b5a82198b63dad8942eaef4a85bbd90b79"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 30 Sep 2022 14:36:31 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_brio_33884_ca8ec651-4040-4b4e-bac8-0567c5652853/90/90/0/brio-world-b-o-damptog.jpg
200 OK 29 kB URL HTTP/2 media.lekia.no/lekia.no/images/g_brio_33884_ca8ec651-4040-4b4e-bac8-0567c5652853/90/90/0/brio-world-b-o-damptog.jpg
IP
ASN #198568 ATEA Sverige AB
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 90x90, components 3\012- data
Hash f012d6d6f74a43f3fe193921cdf1e9d5
9a0672f4a41de9364e78788198c3e60864d1942f
36f95abeaeab6932ba7034579fafc5e682d14493742974cff0bc5748f23e98f1
GET /lekia.no/images/g_brio_33884_ca8ec651-4040-4b4e-bac8-0567c5652853/90/90/0/brio-world-b-o-damptog.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Wed, 27 Oct 2021 06:06:49 GMT
etag: "7DAEA21D83082B92EAD7F06FC2BFFE33"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/c630c3/000000000000000000017098/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3
200 OK 24 kB URL HTTP/2 use.typekit.net/af/c630c3/000000000000000000017098/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 24232, version 1.0\012- data
Hash 11625d58bd529c384b60189ccc548472
254e029b1f4f70206dfc6bf10cacefe5786da7a2
c33ba1562488ae609a15d95e627f05a5cdf36b26bdd5f583d0e118445eb0cbb4
GET /af/c630c3/000000000000000000017098/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lekia.no
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 24232
etag: "1c74b79e9ba3360bbac2fe98f412a723013c3fe0"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 30 Sep 2022 14:36:31 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_brio_33884_523f2f8e-6b7c-40c0-ab4c-60ad4c9300a7/90/90/0/brio-world-b-o-damptog.jpg
200 OK 26 kB URL HTTP/2 media.lekia.no/lekia.no/images/g_brio_33884_523f2f8e-6b7c-40c0-ab4c-60ad4c9300a7/90/90/0/brio-world-b-o-damptog.jpg
IP
ASN #198568 ATEA Sverige AB
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 90x90, components 3\012- data
Hash 3129402f5e0cb5b0c2f2e9bef316fe83
077766937e85c83a1d3929a4d58cbbea22abe4f2
45c71dab878637a6858b7726d32f11671b1ce1f0ea7860728ffed7f392eefe89
GET /lekia.no/images/g_brio_33884_523f2f8e-6b7c-40c0-ab4c-60ad4c9300a7/90/90/0/brio-world-b-o-damptog.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Sun, 24 Oct 2021 11:59:43 GMT
etag: "A4BB5B80B031834D270D1F84092C481E"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 1edc1ba633c4f27fe9b1ca00b2189630
4180ecbc4b957d3e99db7202776cc37b1376fe17
d9a820ca9a8599ccb06c2dad401958a0b4e6a6041f5e5c88baaad2c36b03fc1c
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: gQc37B+u9uN4NVg+j9TVpKu2uwqrkOOvu4kEdkOtKsKBfsrtC84w0hiCRXUgfmCK/Cm9js6n17UqZy2eZG3eEg==
priority: u=3,i
content-length: 27316
x-fb-trip-id: 1904183273
date: Fri, 30 Sep 2022 14:36:31 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.lekia.no/bundles/theme02/app-product-js?v=sioPJxozeQDTwtoBfWLCPWxGisjhVfzQhIdVmgeZ0y01
200 OK 25 kB URL HTTP/2 www.lekia.no/bundles/theme02/app-product-js?v=sioPJxozeQDTwtoBfWLCPWxGisjhVfzQhIdVmgeZ0y01
IP
ASN #198568 ATEA Sverige AB
Hash fa3ccb0cee57785c0ad55ee0a452e5e3
e34ed9210274f385ef17d790bb5c9470f68e7083
c30888652ab291c15dae21cebba268b87b3948acaa58a3a53c4e872fb8c1b030
GET /bundles/theme02/app-product-js?v=sioPJxozeQDTwtoBfWLCPWxGisjhVfzQhIdVmgeZ0y01 HTTP/1.1
Host: www.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/brio-world-b-o-damptog?utm_source=adtraction&utm_medium=affiliate&utm_campaign=adtraction&at_gd=4EBA84BB35BBEC537E7A206EE6402762D0112C33
Cookie: .ASPXANONYMOUS=nbsNNLerlf4pMi-N77X_gnzD2t302m96H_njIw3emHng63t8xEJ_ZQ7UZKjMyjQ86fXSQrTowfVy35X7qAbbikaRcDVXbCUpB7UN8ljAUGcJl6xyFhNUiHnKgs_LnY1p7MTaXRFzAcDTqdRfuqB7QQ2; ASP.NET_SessionId=gx0btgg524k21ijv1dmwg14o; Lekia.NO.Session=visitor=7dbc3533-244f-4a4c-b18b-0e14d735abcf; ARRAffinity=c0fa72b817bc255e892fc110db09d2142983916abf8cb3ab255b303b814d926c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: application/javascript; charset=utf-8
content-encoding: gzip
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Fri, 30 Sep 2022 14:36:30 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET, ARR/3.0, ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
content-length: 107311
X-Firefox-Spdy: h2
eu-library.klarnaservices.com/lib.js
200 OK 34 kB URL HTTP/2 eu-library.klarnaservices.com/lib.js
IP
File type ASCII text, with very long lines (31494), with no line terminators
Hash 1857f03ad9bbdc97ba830e82ab643099
16352014d560cf825470940cdc9e71821e837482
4dddee16357886238cde00d3d2db0dfba73a778397eb369188ea390aca63f5b3
GET /lib.js HTTP/1.1
Host: eu-library.klarnaservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 23 Sep 2022 11:54:37 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Fri, 30 Sep 2022 08:18:36 GMT
cache-control: max-age=86400
etag: W/"94f8eda898d987e3caa43bb28e8c5baa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kPyjYReHUEu7tZdGwjM3wual8T7R2VdKoU-cvZkL8uOcfRlRpf0bwA==
age: 23906
X-Firefox-Spdy: h2
p.typekit.net/p.gif?s=1&k=sjs2zma&ht=tk&h=www.lekia.no&f=6846.6847.6848.6849.6850.6851.6852.6853&a=7249306&js=1.21.0&app=typekit&e=js&_=1664548588016
200 OK 35 B URL HTTP/2 p.typekit.net/p.gif?s=1&k=sjs2zma&ht=tk&h=www.lekia.no&f=6846.6847.6848.6849.6850.6851.6852.6853&a=7249306&js=1.21.0&app=typekit&e=js&_=1664548588016
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 81144d75b3e69e9aa2fa3e9d83a64d03
f0fbc60b50edf5b2a0b76e0aa0537b76bf346ffc
9b9265c69a5cc295d1ab0d04e0273b3677db1a6216ce2ccf4efc8c277ed84b39
GET /p.gif?s=1&k=sjs2zma&ht=tk&h=www.lekia.no&f=6846.6847.6848.6849.6850.6851.6852.6853&a=7249306&js=1.21.0&app=typekit&e=js&_=1664548588016 HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
content-type: image/gif
cross-origin-resource-policy: cross-origin
etag: "61c32ad2-23"
last-modified: Wed, 22 Dec 2021 13:40:34 GMT
server: nginx
content-length: 35
unused62: 8096267
date: Fri, 30 Sep 2022 14:36:31 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bdd6cc32fbdb5603995e45c2cba3bd60
3e5338633410c2714fa9c44ef5528c9a4cfa59c9
103af480989f65c65190deee9d9af15a94b98d040858b50647e694e628cfef4f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5754
Cache-Control: max-age=92527
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:31 GMT
Etag: "6335aee4-1d7"
Expires: Sat, 01 Oct 2022 16:18:38 GMT
Last-Modified: Thu, 29 Sep 2022 14:42:44 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
assets.pinterest.com/js/pinit_main.js?0.5017643491852255
200 OK 19 kB URL HTTP/2 assets.pinterest.com/js/pinit_main.js?0.5017643491852255
IP
File type Unicode text, UTF-8 text, with very long lines (32016)
Hash 3725764cf05d1a0938de73d398772331
abdc742d760ca9c8f28c8d44ca9796d9ad6c0bc7
f8c41f2f59fc9e9d088bc9002eef583c3cf256b4cd371619b18107b4abd92812
GET /js/pinit_main.js?0.5017643491852255 HTTP/1.1
Host: assets.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "3725764cf05d1a0938de73d398772331"
content-encoding: br
accept-ranges: bytes
content-type: application/javascript; charset=utf-8
content-length: 18679
cache-control: max-age=259
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
static.redeal.se/widget/js/redeal.js
200 OK 27 kB URL HTTP/2 static.redeal.se/widget/js/redeal.js
IP
File type ASCII text, with very long lines (23965)
Hash 0441b510790011093cd23453db4d3ad8
9866bfed0e6c1653863034dca9ae92efd0269f38
e3b2df1800b8e02b71d0d71ea980137d4496b2eade06c7e7d6b121f8a046cdcc
GET /widget/js/redeal.js HTTP/1.1
Host: static.redeal.se
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 30 Sep 2022 14:36:02 GMT
last-modified: Fri, 30 Sep 2022 13:15:52 GMT
x-amz-version-id: dIZi9VvMxX0WBU48XDZlQrcJwdk2hwWd
server: AmazonS3
content-encoding: gzip
etag: W/"5bea4a3c8a7a55153ce662ffcf648df4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kDr1JYEglv8FstLUU14rK-Vxt8mZLDpNwIRaWAGugUoErjbNmBWWow==
age: 30
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_leki_22107822_8c651401-6459-4c5f-9a7d-834d85903d3f/50/50/0/majorette-tune-up.jpg
200 OK 88 kB URL HTTP/2 media.lekia.no/lekia.no/images/g_leki_22107822_8c651401-6459-4c5f-9a7d-834d85903d3f/50/50/0/majorette-tune-up.jpg
IP
ASN #198568 ATEA Sverige AB
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 28cc3df390259f8eb5d4a633cfaa23dc
438fd21f7f612a0bc53c8e8724dfa55dc5367711
0676727d3f9498356f12b9ce950771d92ac31822960078f36435e01d44278203
GET /lekia.no/images/g_leki_22107822_8c651401-6459-4c5f-9a7d-834d85903d3f/50/50/0/majorette-tune-up.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Sat, 14 Aug 2021 16:47:11 GMT
etag: "3EBD4437BE5A46CE57674CE4884ABF14"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=558174844592426&ev=PageView&dl=https%3A%2F%2Fwww.lekia.no%2Fbrio-world-b-o-damptog%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D4EBA84BB35BBEC537E7A206EE6402762D0112C33&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1664548588225&sw=1280&sh=1024&v=2.9.84&r=canary&ec=0&o=30&ttf=1461&tts=1269&ttse=1459&fbp=fb.1.1664548588224.172556407&it=1664548588032&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=558174844592426&ev=PageView&dl=https%3A%2F%2Fwww.lekia.no%2Fbrio-world-b-o-damptog%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D4EBA84BB35BBEC537E7A206EE6402762D0112C33&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1664548588225&sw=1280&sh=1024&v=2.9.84&r=canary&ec=0&o=30&ttf=1461&tts=1269&ttse=1459&fbp=fb.1.1664548588224.172556407&it=1664548588032&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=558174844592426&ev=PageView&dl=https%3A%2F%2Fwww.lekia.no%2Fbrio-world-b-o-damptog%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D4EBA84BB35BBEC537E7A206EE6402762D0112C33&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1664548588225&sw=1280&sh=1024&v=2.9.84&r=canary&ec=0&o=30&ttf=1461&tts=1269&ttse=1459&fbp=fb.1.1664548588224.172556407&it=1664548588032&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Fri, 30 Sep 2022 14:36:31 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=558174844592426&ev=ViewContent&dl=https%3A%2F%2Fwww.lekia.no%2Fbrio-world-b-o-damptog%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D4EBA84BB35BBEC537E7A206EE6402762D0112C33&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1664548588226&cd[content_name]=BRIO%20World%2C%20B%2FO%20Damptog&cd[content_category]=Leksaker%20och%20spel%20%3E%20Leksaker%20%3E%20Leksaksfordon%20%3E%20Leksakst%C3%A5g%20och%20leksaksj%C3%A4rnv%C3%A4gar&cd[content_ids]=%5B%22brio_33884%22%5D&cd[content_type]=product&cd[value]=449.0&cd[currency]=NOK&sw=1280&sh=1024&v=2.9.84&r=canary&ec=1&o=30&ttf=1465&tts=1269&ttse=1459&fbp=fb.1.1664548588224.172556407&it=1664548588032&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=558174844592426&ev=ViewContent&dl=https%3A%2F%2Fwww.lekia.no%2Fbrio-world-b-o-damptog%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D4EBA84BB35BBEC537E7A206EE6402762D0112C33&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1664548588226&cd[content_name]=BRIO%20World%2C%20B%2FO%20Damptog&cd[content_category]=Leksaker%20och%20spel%20%3E%20Leksaker%20%3E%20Leksaksfordon%20%3E%20Leksakst%C3%A5g%20och%20leksaksj%C3%A4rnv%C3%A4gar&cd[content_ids]=%5B%22brio_33884%22%5D&cd[content_type]=product&cd[value]=449.0&cd[currency]=NOK&sw=1280&sh=1024&v=2.9.84&r=canary&ec=1&o=30&ttf=1465&tts=1269&ttse=1459&fbp=fb.1.1664548588224.172556407&it=1664548588032&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=558174844592426&ev=ViewContent&dl=https%3A%2F%2Fwww.lekia.no%2Fbrio-world-b-o-damptog%3Futm_source%3Dadtraction%26utm_medium%3Daffiliate%26utm_campaign%3Dadtraction%26at_gd%3D4EBA84BB35BBEC537E7A206EE6402762D0112C33&rl=https%3A%2F%2Fno-go.kelkoogroup.net%2F&if=false&ts=1664548588226&cd[content_name]=BRIO%20World%2C%20B%2FO%20Damptog&cd[content_category]=Leksaker%20och%20spel%20%3E%20Leksaker%20%3E%20Leksaksfordon%20%3E%20Leksakst%C3%A5g%20och%20leksaksj%C3%A4rnv%C3%A4gar&cd[content_ids]=%5B%22brio_33884%22%5D&cd[content_type]=product&cd[value]=449.0&cd[currency]=NOK&sw=1280&sh=1024&v=2.9.84&r=canary&ec=1&o=30&ttf=1465&tts=1269&ttse=1459&fbp=fb.1.1664548588224.172556407&it=1664548588032&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Fri, 30 Sep 2022 14:36:31 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f4cac07a6b43c2c45dbdd3dcbf8856e4
985130ebc2d64abc30a0673061e6f73e5a4f02a4
8945a690f41c23b6411950f9bbdb51becf8c48e363a715af38984d45085f9904
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-36301303-4&cid=1474496165.1664548588&jid=766472895&gjid=1362714347&_gid=914842434.1664548588&_u=YEBAAAAAAAAAAC~&z=1120200128
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-36301303-4&cid=1474496165.1664548588&jid=766472895&gjid=1362714347&_gid=914842434.1664548588&_u=YEBAAAAAAAAAAC~&z=1120200128
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-36301303-4&cid=1474496165.1664548588&jid=766472895&gjid=1362714347&_gid=914842434.1664548588&_u=YEBAAAAAAAAAAC~&z=1120200128 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.lekia.no
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.lekia.no
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 30 Sep 2022 14:36:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 13447c24eb9845d6e3463ef34828eb7c
658985ed382874269a9011a9216371e3b0b31448
3c31e91637b1337b450f85d0bb296d0554498b00df38a983151ae8d63c03b66b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f4cac07a6b43c2c45dbdd3dcbf8856e4
985130ebc2d64abc30a0673061e6f73e5a4f02a4
8945a690f41c23b6411950f9bbdb51becf8c48e363a715af38984d45085f9904
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 254cce7ebdf47f4c681ad3d5e22fee04
21ef3d38029b8c76262a70ff813dccce63434eda
a316352726e25710020ff342d7d907ee2a39d3f643a00e52b88b4b8cabbca9bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-36301303-4&cid=1474496165.1664548588&jid=766472895&_u=YEBAAAAAAAAAAC~&z=1997584265
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-36301303-4&cid=1474496165.1664548588&jid=766472895&_u=YEBAAAAAAAAAAC~&z=1997584265
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-36301303-4&cid=1474496165.1664548588&jid=766472895&_u=YEBAAAAAAAAAAC~&z=1997584265 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 30 Sep 2022 14:36:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-36301303-4&cid=1474496165.1664548588&jid=766472895&_u=YEBAAAAAAAAAAC~&z=1997584265
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-36301303-4&cid=1474496165.1664548588&jid=766472895&_u=YEBAAAAAAAAAAC~&z=1997584265
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-36301303-4&cid=1474496165.1664548588&jid=766472895&_u=YEBAAAAAAAAAAC~&z=1997584265 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 30 Sep 2022 14:36:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6e45ed0e014d302b7e4d21520228f1ef
86e935f08f4217126f75d13a516ac049f23637a8
22366c353b6dbdd94f0efdf1163318b4e12476c8d7360c70e56b58650004a84c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9258de3968ca063250558ee06c75757b
56415f416ce29130b0a0b6fc919e2cdc0fd4d693
2474d99b3d10370e1efad3804a6f32452287e6b8e24d8254c69e8619a62624d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 14:36:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
log.pinterest.com/?type=pidget&guid=Qe0a5nW8Ks8x&tv=2021110201&event=init&sub=www&button_count=1&follow_count=0&pin_count=0&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=https%3A%2F%2Fwww.lekia.no%2Fbrio-world-b-o-damptog&viaSrc=canonical
200 OK 0 B URL HTTP/2 log.pinterest.com/?type=pidget&guid=Qe0a5nW8Ks8x&tv=2021110201&event=init&sub=www&button_count=1&follow_count=0&pin_count=0&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=https%3A%2F%2Fwww.lekia.no%2Fbrio-world-b-o-damptog&viaSrc=canonical
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?type=pidget&guid=Qe0a5nW8Ks8x&tv=2021110201&event=init&sub=www&button_count=1&follow_count=0&pin_count=0&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=https%3A%2F%2Fwww.lekia.no%2Fbrio-world-b-o-damptog&viaSrc=canonical HTTP/1.1
Host: log.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-envoy-upstream-service-time: 3
server: envoy
x-pinterest-rid: 1626715699891870
accept-ranges: bytes
date: Fri, 30 Sep 2022 14:36:32 GMT
via: 1.1 varnish
x-served-by: cache-bma1629-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664548592.362189,VS0,VE95
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
content-length: 0
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_maki_922-0079_a7cabbf4-c7c2-4a0d-b286-3855592be715/50/50/0/fortnite-victory-figure.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_maki_922-0079_a7cabbf4-c7c2-4a0d-b286-3855592be715/50/50/0/fortnite-victory-figure.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_maki_922-0079_a7cabbf4-c7c2-4a0d-b286-3855592be715/50/50/0/fortnite-victory-figure.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Wed, 27 Apr 2022 18:49:32 GMT
etag: "2247104557EB2FAEB8070A263FB6F55D"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_brio_24891310_ae790f8a-fada-454d-b4d2-c3accf5bf726/261/261/0/brio-kombi-dukkevogn-plomme-lilla.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_brio_24891310_ae790f8a-fada-454d-b4d2-c3accf5bf726/261/261/0/brio-kombi-dukkevogn-plomme-lilla.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_brio_24891310_ae790f8a-fada-454d-b4d2-c3accf5bf726/261/261/0/brio-kombi-dukkevogn-plomme-lilla.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:31 GMT
last-modified: Mon, 31 Aug 2020 07:05:36 GMT
etag: "649FC6D61A1F8012E143B8BADE235141"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/image-barbie-2019-04-08-103912057/230/100/0/barbie.png
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/image-barbie-2019-04-08-103912057/230/100/0/barbie.png
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/image-barbie-2019-04-08-103912057/230/100/0/barbie.png HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/png
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Mon, 08 Apr 2019 08:39:45 GMT
etag: "65EE5F4837E8DF6665614548A6B96545"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g-leki-38107162-2021-10-23-163924311/50/50/0/spy-agent-code-mission-money-bank-norska-mynt-no.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g-leki-38107162-2021-10-23-163924311/50/50/0/spy-agent-code-mission-money-bank-norska-mynt-no.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g-leki-38107162-2021-10-23-163924311/50/50/0/spy-agent-code-mission-money-bank-norska-mynt-no.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Sat, 23 Oct 2021 14:40:19 GMT
etag: "DB6FFE116FD8CC3A4BCC54A616C6D126"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_leki_22107072_31e6bfbe-7b03-4588-a9d1-14c393452287/50/50/0/teamsterz-s%C3%B8ppelbil-med-lys-og-lyd.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_leki_22107072_31e6bfbe-7b03-4588-a9d1-14c393452287/50/50/0/teamsterz-s%C3%B8ppelbil-med-lys-og-lyd.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_leki_22107072_31e6bfbe-7b03-4588-a9d1-14c393452287/50/50/0/teamsterz-s%C3%B8ppelbil-med-lys-og-lyd.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Wed, 27 Apr 2022 18:49:32 GMT
etag: "7F981B00924C3FB6286E83004B34DF04"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_brio_33884_ecd52883-b023-47e7-a2c6-dcc9290ceac2/90/90/0/brio-world-b-o-damptog.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_brio_33884_ecd52883-b023-47e7-a2c6-dcc9290ceac2/90/90/0/brio-world-b-o-damptog.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_brio_33884_ecd52883-b023-47e7-a2c6-dcc9290ceac2/90/90/0/brio-world-b-o-damptog.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Wed, 27 Oct 2021 06:06:48 GMT
etag: "60A525E9EA60D2D3603AC986CEEBC164"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_lego_76231_8aacaf66-c667-4ff3-a5ee-cbe18fd1c20f/50/50/0/lego-marvel-76231-guardians-of-the-galaxy-julekalender.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_lego_76231_8aacaf66-c667-4ff3-a5ee-cbe18fd1c20f/50/50/0/lego-marvel-76231-guardians-of-the-galaxy-julekalender.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_lego_76231_8aacaf66-c667-4ff3-a5ee-cbe18fd1c20f/50/50/0/lego-marvel-76231-guardians-of-the-galaxy-julekalender.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Thu, 15 Sep 2022 08:14:08 GMT
etag: "BF3D68AA7C3250051C9C7441DC3012C1"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_lego_76225_5d55ec84-6dfb-46b2-a6fb-c973e49ed6fc/50/50/0/lego-marvel-76225-figur-av-miles-morales.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_lego_76225_5d55ec84-6dfb-46b2-a6fb-c973e49ed6fc/50/50/0/lego-marvel-76225-figur-av-miles-morales.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_lego_76225_5d55ec84-6dfb-46b2-a6fb-c973e49ed6fc/50/50/0/lego-marvel-76225-figur-av-miles-morales.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Thu, 15 Sep 2022 08:14:08 GMT
etag: "3C9E85DBC352AA252316BA58E2CC9FD1"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/image-brio-2019-04-08-104630397/70/56/0/brio.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/image-brio-2019-04-08-104630397/70/56/0/brio.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/image-brio-2019-04-08-104630397/70/56/0/brio.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Mon, 08 Apr 2019 11:27:36 GMT
etag: "5C097A1D15A6E33456AC36EDEC5EFF13"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_brio_30388_a59d7399-1f18-4956-8037-d4161094739b/261/261/0/brio-30388-fjernstyrt-racerbil.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_brio_30388_a59d7399-1f18-4956-8037-d4161094739b/261/261/0/brio-30388-fjernstyrt-racerbil.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_brio_30388_a59d7399-1f18-4956-8037-d4161094739b/261/261/0/brio-30388-fjernstyrt-racerbil.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:31 GMT
last-modified: Sat, 23 Oct 2021 13:43:40 GMT
etag: "6CA92319023A4A846E1433F22E12B40B"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/image-lego-2019-04-26-093341381/230/100/0/lego.png
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/image-lego-2019-04-26-093341381/230/100/0/lego.png
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/image-lego-2019-04-26-093341381/230/100/0/lego.png HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/png
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Fri, 26 Apr 2019 07:37:50 GMT
etag: "86CBAA95F27883B7774E28A06D67F669"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/image-active-kids-2020-06-16-092715879/230/100/0/active-kids.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/image-active-kids-2020-06-16-092715879/230/100/0/active-kids.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/image-active-kids-2020-06-16-092715879/230/100/0/active-kids.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Tue, 11 Aug 2020 07:53:13 GMT
etag: "B0528C5E6D4406846AB4BD302F4529D7"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_lego_76226_3bf7445b-efe1-4303-99d5-d572d8f860e9/50/50/0/lego-marvel-76226-figur-av-spider-man.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_lego_76226_3bf7445b-efe1-4303-99d5-d572d8f860e9/50/50/0/lego-marvel-76226-figur-av-spider-man.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_lego_76226_3bf7445b-efe1-4303-99d5-d572d8f860e9/50/50/0/lego-marvel-76226-figur-av-spider-man.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Thu, 15 Sep 2022 08:14:08 GMT
etag: "AB8DB81207243579F8AB66DD5F427236"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_lego_60352_701a085c-a904-4769-b84a-8e63344e4e34/50/50/0/lego-city-60352-lego-city-julekalender.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_lego_60352_701a085c-a904-4769-b84a-8e63344e4e34/50/50/0/lego-city-60352-lego-city-julekalender.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_lego_60352_701a085c-a904-4769-b84a-8e63344e4e34/50/50/0/lego-city-60352-lego-city-julekalender.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Thu, 15 Sep 2022 08:58:47 GMT
etag: "665DE840DC4F4717AA1F72130909B54C"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_brio_33884_c6b15343-5871-4c1e-ae99-da6860d57e5e/90/90/0/brio-world-b-o-damptog.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_brio_33884_c6b15343-5871-4c1e-ae99-da6860d57e5e/90/90/0/brio-world-b-o-damptog.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_brio_33884_c6b15343-5871-4c1e-ae99-da6860d57e5e/90/90/0/brio-world-b-o-damptog.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Sun, 24 Oct 2021 12:18:32 GMT
etag: "AA987B87A2CA513B0AE61FE7C4BCCC3B"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_leki_20105837_43304bcf-b79b-4740-b09c-744814032bf3/50/50/0/frost-2-arendelle-royal-family.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_leki_20105837_43304bcf-b79b-4740-b09c-744814032bf3/50/50/0/frost-2-arendelle-royal-family.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_leki_20105837_43304bcf-b79b-4740-b09c-744814032bf3/50/50/0/frost-2-arendelle-royal-family.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Wed, 27 Apr 2022 18:49:32 GMT
etag: "BDA3EF075163AD163C6131963BD1FCD0"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_leki_58108210_183ee4fc-f09e-414c-8d7a-da9d57152a53/50/50/0/big-bobby-car-bobby-car-special.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_leki_58108210_183ee4fc-f09e-414c-8d7a-da9d57152a53/50/50/0/big-bobby-car-bobby-car-special.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_leki_58108210_183ee4fc-f09e-414c-8d7a-da9d57152a53/50/50/0/big-bobby-car-bobby-car-special.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Wed, 13 Apr 2022 06:35:55 GMT
etag: "764179270D79B754BEE0552CDEAE8782"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/image-aquadabra-2020-08-11-100014093/230/100/0/aquadabra.png
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/image-aquadabra-2020-08-11-100014093/230/100/0/aquadabra.png
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/image-aquadabra-2020-08-11-100014093/230/100/0/aquadabra.png HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/png
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Tue, 11 Aug 2020 08:01:47 GMT
etag: "DDE9AAA0166FC0761492AA46E09E4E33"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g-brio-33984-2020-10-20-100133158/261/261/0/brio-togsett-med-dyr.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g-brio-33984-2020-10-20-100133158/261/261/0/brio-togsett-med-dyr.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g-brio-33984-2020-10-20-100133158/261/261/0/brio-togsett-med-dyr.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:31 GMT
last-modified: Tue, 20 Oct 2020 08:01:44 GMT
etag: "6ED847F2546C8DACEDABAC91155FD7E3"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_leki_61105016_1/50/50/0/clixtracks-dinosaurus-bilbane-med-157-deler-og-1-bil.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_leki_61105016_1/50/50/0/clixtracks-dinosaurus-bilbane-med-157-deler-og-1-bil.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_leki_61105016_1/50/50/0/clixtracks-dinosaurus-bilbane-med-157-deler-og-1-bil.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Tue, 20 Nov 2018 10:08:35 GMT
etag: "ED6EF4CFBA337F3B8E7E29C7AF62BA84"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_brio_33884_1d0649e9-6192-41f8-8d9c-add6d76f5a73/90/90/0/brio-world-b-o-damptog.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_brio_33884_1d0649e9-6192-41f8-8d9c-add6d76f5a73/90/90/0/brio-world-b-o-damptog.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_brio_33884_1d0649e9-6192-41f8-8d9c-add6d76f5a73/90/90/0/brio-world-b-o-damptog.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Tue, 26 Oct 2021 02:26:58 GMT
etag: "E323F206B11D5B60F29EE8247A496034"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_leki_36106970_9889270b-32b8-46f4-a1e8-7d4d6e2de83c/50/50/0/praline-bambi.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_leki_36106970_9889270b-32b8-46f4-a1e8-7d4d6e2de83c/50/50/0/praline-bambi.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_leki_36106970_9889270b-32b8-46f4-a1e8-7d4d6e2de83c/50/50/0/praline-bambi.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Sat, 23 Oct 2021 17:54:34 GMT
etag: "77CC6914EB339B05C510892EC73897E2"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/image-alga-2019-04-08-103629792/230/100/0/alga.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/image-alga-2019-04-08-103629792/230/100/0/alga.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/image-alga-2019-04-08-103629792/230/100/0/alga.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Mon, 08 Apr 2019 08:39:45 GMT
etag: "39AF41C3756999C5A83A2B5F048D5655"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_brio_33884_c6b15343-5871-4c1e-ae99-da6860d57e5e/555/555/0/brio-world-b-o-damptog.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_brio_33884_c6b15343-5871-4c1e-ae99-da6860d57e5e/555/555/0/brio-world-b-o-damptog.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_brio_33884_c6b15343-5871-4c1e-ae99-da6860d57e5e/555/555/0/brio-world-b-o-damptog.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:31 GMT
last-modified: Sun, 24 Oct 2021 11:35:48 GMT
etag: "14EA5A77D49E6DC34CA2CBD6E6257E19"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
media.lekia.no/lekia.no/images/g_brio_33884_b76693c3-5316-4c4f-bcd7-e4cbcfd54ed0/90/90/0/brio-world-b-o-damptog.jpg
200 OK 0 B URL HTTP/2 media.lekia.no/lekia.no/images/g_brio_33884_b76693c3-5316-4c4f-bcd7-e4cbcfd54ed0/90/90/0/brio-world-b-o-damptog.jpg
IP
ASN #198568 ATEA Sverige AB
GET /lekia.no/images/g_brio_33884_b76693c3-5316-4c4f-bcd7-e4cbcfd54ed0/90/90/0/brio-world-b-o-damptog.jpg HTTP/1.1
Host: media.lekia.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lekia.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000
content-type: image/jpeg
expires: Sat, 30 Sep 2023 14:36:30 GMT
last-modified: Sun, 24 Oct 2021 13:57:01 GMT
etag: "4409CC4418482E914BD0AF5591714C2B"
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
date: Fri, 30 Sep 2022 14:36:30 GMT
X-Firefox-Spdy: h2
brynh-lei.com/zcvisitor/44579fe3-40cd-11ed-a70b-12b8fbaeae65/f8472a30-a5e5-11ec-9226-0a76dcc61f13?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
200 OK 0 B URL HTTP/2 brynh-lei.com/zcvisitor/44579fe3-40cd-11ed-a70b-12b8fbaeae65/f8472a30-a5e5-11ec-9226-0a76dcc61f13?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51
IP
GET /zcvisitor/44579fe3-40cd-11ed-a70b-12b8fbaeae65/f8472a30-a5e5-11ec-9226-0a76dcc61f13?campaignid=4fb4e190-e7f9-11ec-be3c-128084d1ce51 HTTP/1.1
Host: brynh-lei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://teluguapps.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 30 Sep 2022 14:36:28 GMT
content-type: text/html;charset=UTF-8
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-webkit-csp: default-src 'self'; script-src 'self' 'unsafe-inline'
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
server: rckWNPOc
X-Firefox-Spdy: h2
96.126.123.244
88.99.112.2
95.211.116.27
104.17.25.14
23.36.76.122
151.101.85.229
93.184.220.29