| no-go.kelkoogroup.net/redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af226dbb436429c932e8c626651e04b1922c3a2c075ce61350a0cb0e87095a9453d85f8ea7129a5389883a80a1fe1707be61b4e646a4464b2bc52e385fa794d7af3b7a4bfe81379de6a4798ac4a79613c974b4e99b7f05ca1498f5c0a19295b71511145eca0b4ebbab60643597a96353d08160dc69922606c28351ff256ad78cbcf590ce52c63d468cf4d467dc3bacc4a8b76f45f915bbf32f8714aafbe08c538f45f5163de60b304a03bfefc3891cea55cf88aeecb96f69a10bdca0f5f4692c6f7aa017756d86e9bbcd463f073dceb85c9d4ed60b578b4585bef82d35574f7d39cb03dfda24c2f050ace65064380eb9785962542113baaeaeae43a40a30e9b9f85c690e396e85aeb7c28deb3bb0248ad16ee84495869ba7249b4ed14a80fec98afce618dcc0157be708505c4c6770a5b7321b58ad028648860851cd9346b908f952d18caf42f9070548fc56df5977ef66573c9da087f0f25bf57775c6d71e2c2111b04eb709eab7831096d82d4f6a47ace7&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D62A901JTND9Q2M96K3BN9K0C0W8JM2%26url%3Dhttps%253A%252F%252Fwww.farmasiet.no&dc=false |  95.211.116.26 | 403 Forbidden | 746 B |
URL User Request GET no-go.kelkoogroup.net/redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af226dbb436429c932e8c626651e04b1922c3a2c075ce61350a0cb0e87095a9453d85f8ea7129a5389883a80a1fe1707be61b4e646a4464b2bc52e385fa794d7af3b7a4bfe81379de6a4798ac4a79613c974b4e99b7f05ca1498f5c0a19295b71511145eca0b4ebbab60643597a96353d08160dc69922606c28351ff256ad78cbcf590ce52c63d468cf4d467dc3bacc4a8b76f45f915bbf32f8714aafbe08c538f45f5163de60b304a03bfefc3891cea55cf88aeecb96f69a10bdca0f5f4692c6f7aa017756d86e9bbcd463f073dceb85c9d4ed60b578b4585bef82d35574f7d39cb03dfda24c2f050ace65064380eb9785962542113baaeaeae43a40a30e9b9f85c690e396e85aeb7c28deb3bb0248ad16ee84495869ba7249b4ed14a80fec98afce618dcc0157be708505c4c6770a5b7321b58ad028648860851cd9346b908f952d18caf42f9070548fc56df5977ef66573c9da087f0f25bf57775c6d71e2c2111b04eb709eab7831096d82d4f6a47ace7&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D62A901JTND9Q2M96K3BN9K0C0W8JM2%26url%3Dhttps%253A%252F%252Fwww.farmasiet.no&dc=false IP95.211.116.26:443 ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerDigiCert Inc Subject*.kelkoogroup.net FingerprintAB:7F:31:B1:66:46:76:99:39:20:8C:5B:A4:03:6B:DE:E6:6B:F4:17 ValidityThu, 26 Sep 2024 00:00:00 GMT - Fri, 10 Oct 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (746), with no line terminators Hashf9577f558bf6a0f6e18ca11cc9eabafc b5be2ff651f50a582fc806cdefac325c77684642 c86fb85e665b2af7b2d7175b12d66f0bb23ed3806867da689e226d50802be963
GET /redirect?country=no&k=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&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D62A901JTND9Q2M96K3BN9K0C0W8JM2%26url%3Dhttps%253A%252F%252Fwww.farmasiet.no&dc=false HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/
DNT: 1
Connection: keep-alive
Cookie: kelkooID=a4c629a-196aad4dc46-d3418
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Pragma: no-cache
X-DD-B: 3
Charset: utf-8
Accept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Set-Cookie: datadome=lf4hwoWOHy7VeC3fQgxhQWNp8WTno6rUS8N6mgC1kjB1oN~jjm2t90v25jVEHxu~FndhqccFTVDB8nhwzkZfNu6QDLWCbHDfZklSf_~j95Do5VvZ_atonoJDq_zFRrlA; Max-Age=31104000; Expires=Sat, 02 May 2026 12:59:59 GMT; SameSite=Lax; Path=/; Domain=.kelkoogroup.net; Secure
X-DataDome: protected
Request-Time: PT0.013103471S
Cache-Control: max-age=0, private, no-cache, no-store, must-revalidate
X-DataDome-CID: AHrlqAAAAAMAo_ufPY21GfwAW1oqmg==
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Date: Wed, 07 May 2025 12:59:59 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 746
|
|
| static.captcha-delivery.com/common/fonts/roboto/roboto.woff2 |  54.240.174.73 | 200 OK | 16 kB |
URL GET static.captcha-delivery.com/common/fonts/roboto/roboto.woff2 IP54.240.174.73:443
Requested byhttps://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=lf4hwoWOHy7VeC3fQgxhQWNp8WTno6rUS8N6mgC1kjB1oN~jjm2t90v25jVEHxu~FndhqccFTVDB8nhwzkZfNu6QDLWCbHDfZklSf_~j95Do5VvZ_atonoJDq_zFRrlA&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&s=35103&b=1441348&dm=cd CertificateIssuerAmazon Subject*.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15688, version 1.0 Hashaa23b7b4bcf2b8f0e876106bb3de69c6 106ac454ba4e503e0a1cd15e1275130918049182 cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca
GET /common/fonts/roboto/roboto.woff2 HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://geo.captcha-delivery.com
DNT: 1
Connection: keep-alive
Referer: https://static.captcha-delivery.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff2
content-length: 15688
access-control-allow-origin: https://geo.captcha-delivery.com
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Fri, 06 May 2022 16:47:07 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 May 2025 02:08:52 GMT
etag: "aa23b7b4bcf2b8f0e876106bb3de69c6"
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eq-on3mYUIeeIFZ6AE6EYVBCAsUmevTen1iYzjIN0mDR0nATNYsD3g==
age: 39926
X-Firefox-Spdy: h2
|
|
| static.captcha-delivery.com/common/fonts/roboto/font-face.css | 54.240.174.73 | 200 OK | 519 B |
URL GET static.captcha-delivery.com/common/fonts/roboto/font-face.css IP54.240.174.73:443
Requested byhttps://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg==&cid=lf4hwoWOHy7VeC3fQgxhQ_s2qoXuVc29pneCZSryCWdGhx3bBzfQbFtZFEOlYtMOVSBLq1yePeY18lJ0f99uRvAxSlNUB3EYquSrEkJ~zBef7G5FZPayEEOzq~vlA_cr&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=9a0910770836e00b2274cc5fac802d50431cd742b64e935383b7f7d2095b1595&ir=36%2C20&dm=dc_ir CertificateIssuerAmazon Subject*.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT
Hashe4f77074c0ffbfab377011e19283eb13 9160259165ca1ef84209d4dd675c3ed367babff1 66599c34190f7a6a402b38664a30a9b564fc22510f51fa3c5f027fb91e7a0e51
GET /common/fonts/roboto/font-face.css HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 519
last-modified: Fri, 19 Jul 2024 12:42:09 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 May 2025 00:51:41 GMT
etag: "e4f77074c0ffbfab377011e19283eb13"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xVdCuY0QWsEZ-nBupvhImFzKEM-miSxGH8UZV_YMKfk6Zgoc1H2SzA==
age: 43702
X-Firefox-Spdy: h2
|
|
| dd.prod.captcha-delivery.com/image/2025-05-07/c009c278f8a0fb502fdb51c974820f49.jpg | 54.240.174.72 | 200 OK | 10 kB |
URL GET dd.prod.captcha-delivery.com/image/2025-05-07/c009c278f8a0fb502fdb51c974820f49.jpg IP54.240.174.72:443
Requested byhttps://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg==&cid=lf4hwoWOHy7VeC3fQgxhQ_s2qoXuVc29pneCZSryCWdGhx3bBzfQbFtZFEOlYtMOVSBLq1yePeY18lJ0f99uRvAxSlNUB3EYquSrEkJ~zBef7G5FZPayEEOzq~vlA_cr&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=9a0910770836e00b2274cc5fac802d50431cd742b64e935383b7f7d2095b1595&ir=36%2C20&dm=dc_ir CertificateIssuerAmazon Subjectdd.prod.captcha-delivery.com Fingerprint78:DE:FA:F7:3D:63:84:2A:F7:68:BE:5E:19:5C:02:C6:7A:A4:A2:DA ValidityMon, 27 Jan 2025 00:00:00 GMT - Wed, 25 Feb 2026 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x155, components 3 Hash63d1999baf3b03dbf8e0725900393cc3 e6eb396f97f4e315335f95511aa58adbda491daa 76ff040b10434e45d09a1c6beb4b998911b1da933191020a5009bc36c12a1550
GET /image/2025-05-07/c009c278f8a0fb502fdb51c974820f49.jpg HTTP/1.1
Host: dd.prod.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://geo.captcha-delivery.com
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 9995
date: Wed, 07 May 2025 00:00:21 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3600
last-modified: Sat, 03 May 2025 05:07:43 GMT
x-amz-expiration: expiry-date="Sun, 11 May 2025 00:00:00 GMT", rule-id="auto-clean old captchas image (7 days)"
etag: "63d1999baf3b03dbf8e0725900393cc3"
x-amz-server-side-encryption: AES256
x-amz-version-id: BptN.aR_J19a9o3RJzIhpMowo0Z2xr6i
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cwtXZZTvmInbmyQoBvRQIaIvxknts6ZV1YDbAug5BkJKVnPsjmI08g==
age: 46782
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| ww16.clientsettingscdn.robloxz.com/munin/a/ls?t=681b594b&token=906c65db0ff3e47ade54ec494ba78d2738562eaa |  185.53.178.50 | 201 Created | 0 B |
URL GET ww16.clientsettingscdn.robloxz.com/munin/a/ls?t=681b594b&token=906c65db0ff3e47ade54ec494ba78d2738562eaa IP185.53.178.50:443 ASN#61969 Team Internet AG
Requested byhttps://ww16.clientsettingscdn.robloxz.com/ CertificateIssuerLet's Encrypt Subjectww16.clientsettingscdn.robloxz.com Fingerprint3A:B3:EB:88:FC:B8:D1:F5:3B:F8:DD:8C:F6:1C:58:75:A1:E5:B7:C9 ValidityTue, 06 May 2025 13:47:41 GMT - Mon, 04 Aug 2025 13:47:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/ls?t=681b594b&token=906c65db0ff3e47ade54ec494ba78d2738562eaa HTTP/1.1
Host: ww16.clientsettingscdn.robloxz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.clientsettingscdn.robloxz.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 201 Created
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin:
access-control-max-age: 86400
alt-svc: h3=":8443"; ma=2592000
charset: utf-8
content-type: text/javascript;charset=UTF-8
date: Wed, 07 May 2025 12:59:56 GMT
server: Caddy, Caddy
status: 201 Created
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_QNbiemTnIXE3RLCLP5EInxUwpV+zxfCrIWJwtoEeQu3lT+4+8iQHIJ4VqkaBl9ibsclnlxd3z3qt+oy9L2IuJg==
x-log-success: 681b594cfb1088f7f50ef2f2
content-length: 0
X-Firefox-Spdy: h2
|
|
| urbge-omf.com/favicon.ico | 107.20.254.67 | 404 Not Found | 82 B |
URL GET urbge-omf.com/favicon.ico IP107.20.254.67:443
Requested byhttps://urbge-omf.com/zclkvisitor/2c1963b2-2b43-11f0-b31b-0affe8231a59/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=1f221ad0-16c2-11ef-994a-12832fc4c381 CertificateIssuerAmazon Subjecturbge-omf.com Fingerprint94:EC:BB:3E:B0:F7:E9:9D:10:13:D3:16:D7:BD:D0:F9:26:27:CD:EA ValidityThu, 17 Apr 2025 00:00:00 GMT - Sat, 16 May 2026 23:59:59 GMT
Hash43901553ea7eca1645b68adcb81fe5c8 fec42b97b131f9640804b891e7ef6fab3843ff1c d2d68cf60e8d96738ee7896649b862fadc19ece170c5767701bc5f570d55653b
GET /favicon.ico HTTP/1.1
Host: urbge-omf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urbge-omf.com/zclkvisitor/2c1963b2-2b43-11f0-b31b-0affe8231a59/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=1f221ad0-16c2-11ef-994a-12832fc4c381
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Wed, 07 May 2025 12:59:56 GMT
content-type: application/json
X-Firefox-Spdy: h2
|
|
| urbge-omf.com/zclkredirect?visitid=2c1963b2-2b43-11f0-b31b-0affe8231a59&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=Mesa%3B%20llvmpipe&timezone=UTC%2B00%3A00&timezoneName=UTC | 107.20.254.67 | 302 Found | 0 B |
URL User Request GET urbge-omf.com/zclkredirect?visitid=2c1963b2-2b43-11f0-b31b-0affe8231a59&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=Mesa%3B%20llvmpipe&timezone=UTC%2B00%3A00&timezoneName=UTC IP107.20.254.67:443
CertificateIssuerAmazon Subjecturbge-omf.com Fingerprint94:EC:BB:3E:B0:F7:E9:9D:10:13:D3:16:D7:BD:D0:F9:26:27:CD:EA ValidityThu, 17 Apr 2025 00:00:00 GMT - Sat, 16 May 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zclkredirect?visitid=2c1963b2-2b43-11f0-b31b-0affe8231a59&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false&webdriverDetected=false&gpu=Mesa%3B%20llvmpipe&timezone=UTC%2B00%3A00&timezoneName=UTC HTTP/1.1
Host: urbge-omf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urbge-omf.com/zclkvisitor/2c1963b2-2b43-11f0-b31b-0affe8231a59/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=1f221ad0-16c2-11ef-994a-12832fc4c381
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| ct.captcha-delivery.com/i.js | 18.165.140.50 | 200 OK | 13 kB |
URL GET ct.captcha-delivery.com/i.js IP18.165.140.50:443
Requested byhttps://no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D62A901JTND9Q2M96K3BN9K0C0W8JM2%26url%3Dhttps%253A%252F%252Fwww.farmasiet.no&dc=false CertificateIssuerAmazon Subject*.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT
File typeJavaScript source, ASCII text Hashc289d6c8b0e743fd024d52618d546f20 cd29405db7518c6943bacc943ac35c3d314ac722 8d973ba5eafa4328ff1feaefd70cccd0472b8af0c006285ba63eed00977935cc
GET /i.js HTTP/1.1
Host: ct.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 12996
date: Tue, 06 May 2025 15:14:10 GMT
last-modified: Mon, 17 Feb 2025 09:53:49 GMT
etag: "c289d6c8b0e743fd024d52618d546f20"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a6a86fed229f78b2cbda93125b5e5856.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P3
x-amz-cf-id: -wxqUoCAiLJD3urh3JDjLaW1iNUv1OwpbAxeAdWbF-kCFiDz-WxHpw==
age: 78350
X-Firefox-Spdy: h2
|
|
| static.captcha-delivery.com/captcha/assets/tpl/device-check/index.css | 54.240.174.73 | 200 OK | 3.7 kB |
URL GET static.captcha-delivery.com/captcha/assets/tpl/device-check/index.css IP54.240.174.73:443
Requested byhttps://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=lf4hwoWOHy7VeC3fQgxhQWNp8WTno6rUS8N6mgC1kjB1oN~jjm2t90v25jVEHxu~FndhqccFTVDB8nhwzkZfNu6QDLWCbHDfZklSf_~j95Do5VvZ_atonoJDq_zFRrlA&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&s=35103&b=1441348&dm=cd CertificateIssuerAmazon Subject*.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT
Hashd24f433ae1916185b0e4e20ed76cb64b e0c8d4c58b7d0983f9b4042bea94c014cd5ec668 f40a7b02a8a2d420aa9d4cb5b0b26a92468828984fdc4b0d1202de4e24f59859
GET /captcha/assets/tpl/device-check/index.css HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 08 Feb 2024 08:41:29 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
date: Wed, 07 May 2025 02:01:23 GMT
etag: W/"d24f433ae1916185b0e4e20ed76cb64b"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wYn6T4LXGpYGl31BxgonWb_Au_45N_Dwp81TIsVGNrG0nbTTmSgWiw==
age: 39518
X-Firefox-Spdy: h2
|
|
| geo.captcha-delivery.com/interstitial/ |  13.50.6.43 | 200 OK | 1.8 kB |
URL POST geo.captcha-delivery.com/interstitial/ IP13.50.6.43:443
Requested byhttps://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=lf4hwoWOHy7VeC3fQgxhQWNp8WTno6rUS8N6mgC1kjB1oN~jjm2t90v25jVEHxu~FndhqccFTVDB8nhwzkZfNu6QDLWCbHDfZklSf_~j95Do5VvZ_atonoJDq_zFRrlA&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&s=35103&b=1441348&dm=cd CertificateIssuerAmazon Subject*.captcha-delivery.com FingerprintF2:9E:7E:72:25:57:E3:AF:B6:87:61:A0:0D:B1:85:B4:85:82:E6:96 ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT
Hash0a9971e431d619e1ea8c2c4153f159d3 b74fa394edf3e32608a01eeeb145dd9ba6406a99 95917729c116dd2cf36c8d3054bccbc946edf92420c77d0defc20146c263bb39
POST /interstitial/ HTTP/1.1
Host: geo.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 7670
Origin: https://geo.captcha-delivery.com
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=lf4hwoWOHy7VeC3fQgxhQWNp8WTno6rUS8N6mgC1kjB1oN~jjm2t90v25jVEHxu~FndhqccFTVDB8nhwzkZfNu6QDLWCbHDfZklSf_~j95Do5VvZ_atonoJDq_zFRrlA&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%3D612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af226dbb436429c932e8c626651e04b1922c3a2c075ce61350a0cb0e87095a9453d85f8ea7129a5389883a80a1fe1707be61b4e646a4464b2bc52e385fa794d7af3b7a4bfe81379de6a4798ac4a79613c974b4e99b7f05ca1498f5c0a19295b71511145eca0b4ebbab60643597a96353d08160dc69922606c28351ff256ad78cbcf590ce52c63d468cf4d467dc3bacc4a8b76f45f915bbf32f8714aafbe08c538f45f5163de60b304a03bfefc3891cea55cf88aeecb96f69a10bdca0f5f4692c6f7aa017756d86e9bbcd463f073dceb85c9d4ed60b578b4585bef82d35574f7d39cb03dfda24c2f050ace65064380eb9785962542113baaeaeae43a40a30e9b9f85c690e396e85aeb7c28deb3bb0248ad16ee84495869ba7249b4ed14a80fec98afce618dcc0157be708505c4c6770a5b7321b58ad028648860851cd9346b908f952d18caf42f9070548fc56df5977ef66573c9da087f0f25bf57775c6d71e2c2111b04eb709eab7831096d82d4f6a47ace7%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&s=35103&b=1441348&dm=cd
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 May 2025 13:00:02 GMT
Content-Type: application/json;charset=utf-8
Content-Length: 1791
Connection: keep-alive
|
|
| ww16.clientsettingscdn.robloxz.com/favicon.ico | 185.53.178.50 | 200 OK | 0 B |
URL GET ww16.clientsettingscdn.robloxz.com/favicon.ico IP185.53.178.50:443 ASN#61969 Team Internet AG
Requested byhttps://ww16.clientsettingscdn.robloxz.com/ CertificateIssuerLet's Encrypt Subjectww16.clientsettingscdn.robloxz.com Fingerprint3A:B3:EB:88:FC:B8:D1:F5:3B:F8:DD:8C:F6:1C:58:75:A1:E5:B7:C9 ValidityTue, 06 May 2025 13:47:41 GMT - Mon, 04 Aug 2025 13:47:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ww16.clientsettingscdn.robloxz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.clientsettingscdn.robloxz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":8443"; ma=2592000
content-type: image/vnd.microsoft.icon
date: Wed, 07 May 2025 12:59:56 GMT
etag: "d9eps5fusebl0"
last-modified: Thu, 24 Apr 2025 08:09:09 GMT
server: Caddy, Caddy
vary: Accept-Encoding
content-length: 0
X-Firefox-Spdy: h2
|
|
| urbge-omf.com/zclkvisitor/2c1963b2-2b43-11f0-b31b-0affe8231a59/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=1f221ad0-16c2-11ef-994a-12832fc4c381 | 107.20.254.67 | 200 OK | 3.1 kB |
URL User Request GET urbge-omf.com/zclkvisitor/2c1963b2-2b43-11f0-b31b-0affe8231a59/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=1f221ad0-16c2-11ef-994a-12832fc4c381 IP107.20.254.67:443
CertificateIssuerAmazon Subjecturbge-omf.com Fingerprint94:EC:BB:3E:B0:F7:E9:9D:10:13:D3:16:D7:BD:D0:F9:26:27:CD:EA ValidityThu, 17 Apr 2025 00:00:00 GMT - Sat, 16 May 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (409) Hash43a1597fa50d18deacca6e0f2bee1d62 fd5408ca755f7815359a6d9d05f2e34a2b0a4949 b0be4f20829e5bcac3574dce8b59c44dfc9e2a52813915a29ecbe0e2644861df
GET /zclkvisitor/2c1963b2-2b43-11f0-b31b-0affe8231a59/85aefdc2-9ed0-48aa-922d-60f9f9fc0f2d?campaignid=1f221ad0-16c2-11ef-994a-12832fc4c381 HTTP/1.1
Host: urbge-omf.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.clientsettingscdn.robloxz.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 07 May 2025 12:59:56 GMT
content-type: text/html;charset=UTF-8
content-length: 3088
cache-control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type
X-Firefox-Spdy: h2
|
|
| api.yadore.com/v2/d?url=https%3A%2F%2Fwww.farmasiet.no&market=no&projectId=Sde46opRHJDX&placementId=5t76LuAEV6F8 | 88.99.112.2 | 302 Found | 249 kB |
URL User Request GET api.yadore.com/v2/d?url=https%3A%2F%2Fwww.farmasiet.no&market=no&projectId=Sde46opRHJDX&placementId=5t76LuAEV6F8 IP88.99.112.2:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectyadore.com Fingerprint12:0F:65:95:06:0F:A7:D7:31:79:00:DD:B4:E7:F2:42:47:B3:7F:42 ValidityWed, 09 Apr 2025 06:40:24 GMT - Tue, 08 Jul 2025 06:40:23 GMT
Size249 kB (248561 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/d?url=https%3A%2F%2Fwww.farmasiet.no&market=no&projectId=Sde46opRHJDX&placementId=5t76LuAEV6F8 HTTP/1.1
Host: api.yadore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
access-control-allow-credentials: true
access-control-allow-headers: Origin, Content-Type, Accept, API-Key
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: *
access-control-max-age: 86400
content-type: text/html; charset=UTF-8
date: Wed, 07 May 2025 12:59:58 GMT
location: https://api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Fwww.farmasiet.no&custom1=e14426c403edb5b4681b930a2f8d52a2286ff1f2d2cd70ad83f503ced2daffae&publisherSubId=Sde46opRHJDX&publisherTrafficType=publishernetwork&originReferer=https%253A%252F%252Fwww.yadore.com
referrer-policy: no-referrer
server: nginx
x-powered-by: PHP/8.3.20
X-Firefox-Spdy: h2
|
|
| arveaoy.com/double?t=2&d=eyJVUkwiOiJodHRwczovL2FwaS55YWRvcmUuY29tL3YyL2Q_dXJsPWh0dHBzJTNBJTJGJTJGd3d3LmZhcm1hc2lldC5ub1x1MDAyNm1hcmtldD1ub1x1MDAyNnByb2plY3RJZD1TZGU0Nm9wUkhKRFhcdTAwMjZwbGFjZW1lbnRJZD01dDc2THVBRVY2RjgiLCJSZWRpcmVjdFdvcmRpbmciOiIgIiwiUmVkaXJlY3RUaXRsZSI6IlJlZGlyZWN0aW9uLi4uIiwiUmVkaXJlY3RMaW5rVGV4dCI6IiAiLCJJbnN0YWxsSWQiOjIwMDF9 | 3.126.48.135 | 200 OK | 780 B |
URL User Request GET arveaoy.com/double?t=2&d=eyJVUkwiOiJodHRwczovL2FwaS55YWRvcmUuY29tL3YyL2Q_dXJsPWh0dHBzJTNBJTJGJTJGd3d3LmZhcm1hc2lldC5ub1x1MDAyNm1hcmtldD1ub1x1MDAyNnByb2plY3RJZD1TZGU0Nm9wUkhKRFhcdTAwMjZwbGFjZW1lbnRJZD01dDc2THVBRVY2RjgiLCJSZWRpcmVjdFdvcmRpbmciOiIgIiwiUmVkaXJlY3RUaXRsZSI6IlJlZGlyZWN0aW9uLi4uIiwiUmVkaXJlY3RMaW5rVGV4dCI6IiAiLCJJbnN0YWxsSWQiOjIwMDF9 IP3.126.48.135:443
CertificateIssuerLet's Encrypt Subjectarveaoy.com Fingerprint18:24:ED:D6:E3:2E:3D:5B:DD:F8:09:47:D2:D7:9D:37:8D:B0:30:09 ValidityFri, 18 Apr 2025 00:17:54 GMT - Thu, 17 Jul 2025 00:17:53 GMT
File typeHTML document, ASCII text Hash6919b395d12318a78fe692538847f221 7e9dabb311a31fcae94a75e31d552dda4c3e23d8 7a6a1f6739ebaa56d318024a06097a9461ed69fcecc58e00c88e9b6cdce95404
GET /double?t=2&d=eyJVUkwiOiJodHRwczovL2FwaS55YWRvcmUuY29tL3YyL2Q_dXJsPWh0dHBzJTNBJTJGJTJGd3d3LmZhcm1hc2lldC5ub1x1MDAyNm1hcmtldD1ub1x1MDAyNnByb2plY3RJZD1TZGU0Nm9wUkhKRFhcdTAwMjZwbGFjZW1lbnRJZD01dDc2THVBRVY2RjgiLCJSZWRpcmVjdFdvcmRpbmciOiIgIiwiUmVkaXJlY3RUaXRsZSI6IlJlZGlyZWN0aW9uLi4uIiwiUmVkaXJlY3RMaW5rVGV4dCI6IiAiLCJJbnN0YWxsSWQiOjIwMDF9 HTTP/1.1
Host: arveaoy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ClickDataNG=H4sIAAAAAAAA_7RUbW_bNhD-K8YBBTZAkUnqxRYLo0idZeuQl2FZi34YMFDUyeFCkwJJyXba_veBkpIZQ7_u0_nueXy8l-f0BQZ0XlkDHGhKUgIJhFOHwEkCvq__ePktrRnQBWyAt0J7TEBqJZ8-NMChCKvypr_86VN5vYYEGhEQOF3lZcnYqlonIMW-E2pnIjvPC0YTUH772-VrLmeDCMqOBFoWWZWA6zVGlyTgsFEOZbjF8Ggb4EUC3vZOjniWJaCFaZTZzfTZ--g0cIAEbNuiixhjGc0SqJ0w8nEmj-BEfQyh83y5FJ1KT6KxDlNp98uBLZt3vdObEX-TXb5h12_Y9eFwSFvh9sIrDKmxf_aEsHIv3BOGzYvbOfs3yvCh2Tw0mJe2-_2XX68-z5gWEvdoIvqfCUrrA3CSElLE7gc0_bSFTpxsH_4tfNs7h0aegMPHhytIoHfqvBM3oLCnsY1xXe-CG1SzGXcwVYHHoJrNs2OSVmVWM1bnGaUtqTNaE9G2uGYZFUVFWZaTql3njBQ5q1FUEjMmhKAkK-saSUVWZE3WrMqZpKsCsyl_bGUzdkIImUJBuJ1qNigf7YW3-mLIDpjlurD7CffyudtoEdCpoGzvL1qhpTWQgOoum8ah98ChomlF0pyltMjPoXJaeu_RXe7QBOBwa5-V1mJZpGTxw2dK3y5ulOmPi-O6_KvM3y7cwKsyJT8ufkb5ZJeMUEIooYtr5bC1x2UEIS6iRYcOOPSu3uGF3bdxslHxOCiJr7diY33jE1F9_tPrhUEUnz34Mcmc_fXv750wzUSaAre2QX0euBN7nHw5vQVbUWtcXj3cxAn4Dji81-q4eLC6j-fkRy31JriokLv7sYndVMvd_dev917bxTYSTpGpwukMgCg3hyZso3LmU3Jqp8xNdxYKThgv5HS9HrjptU5A9j7YPfAvs5bhRQKQAB4DOiP0-O34P5QHCQxkqm6gwOE7SosQmykZcPiu3IZ8ZhSznbU1rGa7nm0V7bdv_wQAAP__SBhdVE0FAAA=; ClickDataNgFall=H4sIAAAAAAAA_7RUbW_bNhD-K8YBBTZAkUnqxRYLo0idZeuQl2FZi34YMFDUyeFCkwJJyXba_veBkpIZQ7_u0_nueXy8l-f0BQZ0XlkDHGhKUgIJhFOHwEkCvq__ePktrRnQBWyAt0J7TEBqJZ8-NMChCKvypr_86VN5vYYEGhEQOF3lZcnYqlonIMW-E2pnIjvPC0YTUH772-VrLmeDCMqOBFoWWZWA6zVGlyTgsFEOZbjF8Ggb4EUC3vZOjniWJaCFaZTZzfTZ--g0cIAEbNuiixhjGc0SqJ0w8nEmj-BEfQyh83y5FJ1KT6KxDlNp98uBLZt3vdObEX-TXb5h12_Y9eFwSFvh9sIrDKmxf_aEsHIv3BOGzYvbOfs3yvCh2Tw0mJe2-_2XX68-z5gWEvdoIvqfCUrrA3CSElLE7gc0_bSFTpxsH_4tfNs7h0aegMPHhytIoHfqvBM3oLCnsY1xXe-CG1SzGXcwVYHHoJrNs2OSVmVWM1bnGaUtqTNaE9G2uGYZFUVFWZaTql3njBQ5q1FUEjMmhKAkK-saSUVWZE3WrMqZpKsCsyl_bGUzdkIImUJBuJ1qNigf7YW3-mLIDpjlurD7CffyudtoEdCpoGzvL1qhpTWQgOoum8ah98ChomlF0pyltMjPoXJaeu_RXe7QBOBwa5-V1mJZpGTxw2dK3y5ulOmPi-O6_KvM3y7cwKsyJT8ufkb5ZJeMUEIooYtr5bC1x2UEIS6iRYcOOPSu3uGF3bdxslHxOCiJr7diY33jE1F9_tPrhUEUnz34Mcmc_fXv750wzUSaAre2QX0euBN7nHw5vQVbUWtcXj3cxAn4Dji81-q4eLC6j-fkRy31JriokLv7sYndVMvd_dev917bxTYSTpGpwukMgCg3hyZso3LmU3Jqp8xNdxYKThgv5HS9HrjptU5A9j7YPfAvs5bhRQKQAB4DOiP0-O34P5QHCQxkqm6gwOE7SosQmykZcPiu3IZ8ZhSznbU1rGa7nm0V7bdv_wQAAP__SBhdVE0FAAA=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 07 May 2025 12:59:58 GMT
content-type: text/html; charset=utf-8
content-length: 780
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
expires: Thu, 01 Jan 1970 00:00:00 UTC
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| api.kelkoogroup.net/ados.js | 54.240.174.108 | 404 Not Found | 0 B |
URL GET api.kelkoogroup.net/ados.js IP54.240.174.108:443
Requested byhttps://api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Fwww.farmasiet.no&custom1=e14426c403edb5b4681b930a2f8d52a2286ff1f2d2cd70ad83f503ced2daffae&publisherSubId=Sde46opRHJDX&publisherTrafficType=publishernetwork&originReferer=https%253A%252F%252Fwww.yadore.com
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ados.js HTTP/1.1
Host: api.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Fwww.farmasiet.no&custom1=e14426c403edb5b4681b930a2f8d52a2286ff1f2d2cd70ad83f503ced2daffae&publisherSubId=Sde46opRHJDX&publisherTrafficType=publishernetwork&originReferer=https%253A%252F%252Fwww.yadore.com
DNT: 1
Connection: keep-alive
Cookie: kelkooID=a4c629a-196aad4dc46-d3418
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| static.captcha-delivery.com/captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css | 54.240.174.73 | 200 OK | 6.2 kB |
URL GET static.captcha-delivery.com/captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css IP54.240.174.73:443
Requested byhttps://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg==&cid=lf4hwoWOHy7VeC3fQgxhQ_s2qoXuVc29pneCZSryCWdGhx3bBzfQbFtZFEOlYtMOVSBLq1yePeY18lJ0f99uRvAxSlNUB3EYquSrEkJ~zBef7G5FZPayEEOzq~vlA_cr&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%3D612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af226dbb436429c932e8c626651e04b1922c3a2c075ce61350a0cb0e87095a9453d85f8ea7129a5389883a80a1fe1707be61b4e646a4464b2bc52e385fa794d7af3b7a4bfe81379de6a4798ac4a79613c974b4e99b7f05ca1498f5c0a19295b71511145eca0b4ebbab60643597a96353d08160dc69922606c28351ff256ad78cbcf590ce52c63d468cf4d467dc3bacc4a8b76f45f915bbf32f8714aafbe08c538f45f5163de60b304a03bfefc3891cea55cf88aeecb96f69a10bdca0f5f4692c6f7aa017756d86e9bbcd463f073dceb85c9d4ed60b578b4585bef82d35574f7d39cb03dfda24c2f050ace65064380eb9785962542113baaeaeae43a40a30e9b9f85c690e396e85aeb7c28deb3bb0248ad16ee84495869ba7249b4ed14a80fec98afce618dcc0157be708505c4c6770a5b7321b58ad028648860851cd9346b908f952d18caf42f9070548fc56df5977ef66573c9da087f0f25bf57775c6d71e2c2111b04eb709eab7831096d82d4f6a47ace7%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=9a0910770836e00b2274cc5fac802d50431cd742b64e935383b7f7d2095b1595&ir=36%2C20&dm=dc_ir CertificateIssuerAmazon Subject*.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash1f113f0b6d6855568c684e354bb853d1 2a2fbd27d5408fa3e53c74f04b7790ab1aea9b2c d49fce4d3745c6d9f755f6be625eb218238baec337cfdb30be0e87d8c0ff6653
GET /captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 11 Apr 2024 08:21:58 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
x-amz-version-id: null
server: AmazonS3
date: Wed, 07 May 2025 00:51:47 GMT
etag: W/"1f113f0b6d6855568c684e354bb853d1"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y-GN8NuVavzsCspPNWaJfQEOPwaIY20cfOKIgUQo_vZgXse8Sdvi2Q==
age: 43696
X-Firefox-Spdy: h2
|
|
| static.captcha-delivery.com/common/fonts/roboto/roboto.woff2 | 54.240.174.73 | 200 OK | 16 kB |
URL GET static.captcha-delivery.com/common/fonts/roboto/roboto.woff2 IP54.240.174.73:443
Requested byhttps://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg==&cid=lf4hwoWOHy7VeC3fQgxhQ_s2qoXuVc29pneCZSryCWdGhx3bBzfQbFtZFEOlYtMOVSBLq1yePeY18lJ0f99uRvAxSlNUB3EYquSrEkJ~zBef7G5FZPayEEOzq~vlA_cr&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=9a0910770836e00b2274cc5fac802d50431cd742b64e935383b7f7d2095b1595&ir=36%2C20&dm=dc_ir CertificateIssuerAmazon Subject*.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15688, version 1.0 Hashaa23b7b4bcf2b8f0e876106bb3de69c6 106ac454ba4e503e0a1cd15e1275130918049182 cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca
GET /common/fonts/roboto/roboto.woff2 HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://geo.captcha-delivery.com
DNT: 1
Connection: keep-alive
Referer: https://static.captcha-delivery.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff2
content-length: 15688
access-control-allow-origin: https://geo.captcha-delivery.com
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Fri, 06 May 2022 16:47:07 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 May 2025 02:08:52 GMT
etag: "aa23b7b4bcf2b8f0e876106bb3de69c6"
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0S9uu6qxBeSY8rTC1doSUgRpZP4cSYDsArLOQNXhLiIOyzZUeef23A==
age: 39935
X-Firefox-Spdy: h2
|
|
| ww16.clientsettingscdn.robloxz.com/ | 185.53.178.50 | 200 OK | 2.9 kB |
URL User Request GET ww16.clientsettingscdn.robloxz.com/ IP185.53.178.50:443 ASN#61969 Team Internet AG
CertificateIssuerLet's Encrypt Subjectww16.clientsettingscdn.robloxz.com Fingerprint3A:B3:EB:88:FC:B8:D1:F5:3B:F8:DD:8C:F6:1C:58:75:A1:E5:B7:C9 ValidityTue, 06 May 2025 13:47:41 GMT - Mon, 04 Aug 2025 13:47:40 GMT
File typeHTML document, ASCII text, with very long lines (850) Hash7b5fd8296104821c226de44b683ea8ca bf2b060b995d0983dc3158851de56c8d7043db2b 45ac02c8f4a1ee3c6ba9120ab6f90bbe290732b5d9681f8e0f45b4d28b65e734
GET / HTTP/1.1
Host: ww16.clientsettingscdn.robloxz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":8443"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 07 May 2025 12:59:55 GMT
server: Caddy, Caddy
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_gBK74uc8iDbynBPV/Rhmt+wvdr1ujUFlmP1d/aabGYIxfNHmJl8bsm3NZ4+2PGCfMgDrrpkWjzCZDxLSttUi1g==
x-buckets: bucket003,bucket077
x-domain: robloxz.com
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-redirect: zeropark_zeroclick
x-subdomain: ww16.clientsettingscdn
x-template: tpl_CleanPeppermintBlack_twoclick
content-length: 1778
X-Firefox-Spdy: h2
|
|
| d38psrni17bvxu.cloudfront.net/scripts/js3.js | 18.165.132.97 | 200 OK | 1.1 kB |
URL GET d38psrni17bvxu.cloudfront.net/scripts/js3.js IP18.165.132.97:443
Requested byhttps://ww16.clientsettingscdn.robloxz.com/ CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (475) Hashf0efa0cdd18cbb4afaf3ba408af8d9c9 7bd63f94c5356df9b7c49344459a6e527490c458 1ea543e1c0e8e7656a0846a397055ed10469c05c5ab555076f850df0b557d3f9
GET /scripts/js3.js HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.clientsettingscdn.robloxz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 453
server: nginx
date: Wed, 07 May 2025 03:56:52 GMT
content-encoding: gzip
last-modified: Wed, 29 Jan 2025 07:52:18 GMT
etag: "d7ee6y3j8oz5uy-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 46f331563d4a8baa77a470097fa3a10c.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P2
x-amz-cf-id: jpjuEhdDtg4JT4AcxZcZ6UyKDZ7w70FfO3KB4IeEgtXWKPWgkwKkWg==
age: 32583
X-Firefox-Spdy: h2
|
|
| api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Fwww.farmasiet.no&custom1=e14426c403edb5b4681b930a2f8d52a2286ff1f2d2cd70ad83f503ced2daffae&publisherSubId=Sde46opRHJDX&publisherTrafficType=publishernetwork&originReferer=https%253A%252F%252Fwww.yadore.com | 54.240.174.108 | 200 OK | 249 kB |
URL User Request GET api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Fwww.farmasiet.no&custom1=e14426c403edb5b4681b930a2f8d52a2286ff1f2d2cd70ad83f503ced2daffae&publisherSubId=Sde46opRHJDX&publisherTrafficType=publishernetwork&originReferer=https%253A%252F%252Fwww.yadore.com IP54.240.174.108:443
CertificateIssuerAmazon Subjectapi.kelkoogroup.net FingerprintDE:F8:09:ED:61:51:96:48:CB:23:37:6D:A6:4F:C8:7C:0C:15:69:2D ValidityMon, 18 Nov 2024 00:00:00 GMT - Tue, 16 Dec 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (31608) Size249 kB (248561 bytes) Hash8fc82d68d6c323ef9c08b10308ee706f 689e5309ea67643428164f41846d6d1502f4be71 4f287a953549992fa5922314a92387f62ee8f68e7a98dadefae53f28677fe4f0
GET /publisher/shopping/v2/link-monetizer/link?country=no&id=e4ef5dec-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https%3A%2F%2Fwww.farmasiet.no&custom1=e14426c403edb5b4681b930a2f8d52a2286ff1f2d2cd70ad83f503ced2daffae&publisherSubId=Sde46opRHJDX&publisherTrafficType=publishernetwork&originReferer=https%253A%252F%252Fwww.yadore.com HTTP/1.1
Host: api.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 248561
leadid: 62A901JTND9Q2M96K3BN9K0C0W8JM2
pragma: no-cache
x-dd-b: 3
charset: utf-8
clickid: 107698154_1746622798918_7520962
country: no
accept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
set-cookie: datadome=pCmi9_k_~X_awGHUgdAmndEwChm2gxqbxLlIxxjRrSow25Qk2MjNEbLdj037US~ON0pY_5pyA4bp1QUoWSfo1Z~sEapz1hdUBNDF1~bHPrU_k7UAA1Ut21CcgXer7Gjt; Max-Age=31104000; Expires=Sat, 02 May 2026 12:59:58 GMT; SameSite=Lax; Path=/; Domain=.kelkoo.net; Secure
kelkooID=a4c629a-196aad4dc46-d3418; Max-Age=31536000; Expires=Thu, 07 May 2026 12:59:58 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
x-datadome: protected
request-time: PT0.026339243S
x-robots-tag: noindex,nofollow
cache-control: max-age=0, private, no-cache, no-store, must-revalidate
x-datadome-cid: AHrlqAAAAAMAfbkBMEpmyg0AW1oqmg==
referrer-policy: origin-when-cross-origin
x-frame-options: ALLOWALL
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
date: Wed, 07 May 2025 12:59:58 GMT
x-gravitee-transaction-id: 3d5b33ab-87ff-4131-9b33-ab87ff913182
x-gravitee-request-id: 3d5b33ab-87ff-4131-9b33-ab87ff913182
x-cache: Miss from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zwKPQnwwdlmzhSwqUAXNHQSZQSnkmnr-C14BQPHWM8Bqi4IN4-3VOA==
X-Firefox-Spdy: h2
|
|
| geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=lf4hwoWOHy7VeC3fQgxhQWNp8WTno6rUS8N6mgC1kjB1oN~jjm2t90v25jVEHxu~FndhqccFTVDB8nhwzkZfNu6QDLWCbHDfZklSf_~j95Do5VvZ_atonoJDq_zFRrlA&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%3D612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af226dbb436429c932e8c626651e04b1922c3a2c075ce61350a0cb0e87095a9453d85f8ea7129a5389883a80a1fe1707be61b4e646a4464b2bc52e385fa794d7af3b7a4bfe81379de6a4798ac4a79613c974b4e99b7f05ca1498f5c0a19295b71511145eca0b4ebbab60643597a96353d08160dc69922606c28351ff256ad78cbcf590ce52c63d468cf4d467dc3bacc4a8b76f45f915bbf32f8714aafbe08c538f45f5163de60b304a03bfefc3891cea55cf88aeecb96f69a10bdca0f5f4692c6f7aa017756d86e9bbcd463f073dceb85c9d4ed60b578b4585bef82d35574f7d39cb03dfda24c2f050ace65064380eb9785962542113baaeaeae43a40a30e9b9f85c690e396e85aeb7c28deb3bb0248ad16ee84495869ba7249b4ed14a80fec98afce618dcc0157be708505c4c6770a5b7321b58ad028648860851cd9346b908f952d18caf42f9070548fc56df5977ef66573c9da087f0f25bf57775c6d71e2c2111b04eb709eab7831096d82d4f6a47ace7%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&s=35103&b=1441348&dm=cd | 13.50.6.43 | 200 OK | 543 kB |
URL GET geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=lf4hwoWOHy7VeC3fQgxhQWNp8WTno6rUS8N6mgC1kjB1oN~jjm2t90v25jVEHxu~FndhqccFTVDB8nhwzkZfNu6QDLWCbHDfZklSf_~j95Do5VvZ_atonoJDq_zFRrlA&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%3D612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af226dbb436429c932e8c626651e04b1922c3a2c075ce61350a0cb0e87095a9453d85f8ea7129a5389883a80a1fe1707be61b4e646a4464b2bc52e385fa794d7af3b7a4bfe81379de6a4798ac4a79613c974b4e99b7f05ca1498f5c0a19295b71511145eca0b4ebbab60643597a96353d08160dc69922606c28351ff256ad78cbcf590ce52c63d468cf4d467dc3bacc4a8b76f45f915bbf32f8714aafbe08c538f45f5163de60b304a03bfefc3891cea55cf88aeecb96f69a10bdca0f5f4692c6f7aa017756d86e9bbcd463f073dceb85c9d4ed60b578b4585bef82d35574f7d39cb03dfda24c2f050ace65064380eb9785962542113baaeaeae43a40a30e9b9f85c690e396e85aeb7c28deb3bb0248ad16ee84495869ba7249b4ed14a80fec98afce618dcc0157be708505c4c6770a5b7321b58ad028648860851cd9346b908f952d18caf42f9070548fc56df5977ef66573c9da087f0f25bf57775c6d71e2c2111b04eb709eab7831096d82d4f6a47ace7%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&s=35103&b=1441348&dm=cd IP13.50.6.43:443
Requested byhttps://no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D62A901JTND9Q2M96K3BN9K0C0W8JM2%26url%3Dhttps%253A%252F%252Fwww.farmasiet.no&dc=false CertificateIssuerAmazon Subject*.captcha-delivery.com FingerprintF2:9E:7E:72:25:57:E3:AF:B6:87:61:A0:0D:B1:85:B4:85:82:E6:96 ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (61853) Size543 kB (542843 bytes) Hashcb52034d5d361bd8ddb812b93bf988c9 e965e0e038055c8b5d637386f423a17487845f3f 9a760631bbacf1600ebe49ca8925ab89dc589c2e37395485872173a3cc1b6307
GET /interstitial/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=lf4hwoWOHy7VeC3fQgxhQWNp8WTno6rUS8N6mgC1kjB1oN~jjm2t90v25jVEHxu~FndhqccFTVDB8nhwzkZfNu6QDLWCbHDfZklSf_~j95Do5VvZ_atonoJDq_zFRrlA&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&s=35103&b=1441348&dm=cd HTTP/1.1
Host: geo.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://no-go.kelkoogroup.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 May 2025 12:59:59 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| dd.prod.captcha-delivery.com/image/2025-05-07/c009c278f8a0fb502fdb51c974820f49.frag.png | 54.240.174.72 | 200 OK | 6.5 kB |
URL GET dd.prod.captcha-delivery.com/image/2025-05-07/c009c278f8a0fb502fdb51c974820f49.frag.png IP54.240.174.72:443
Requested byhttps://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg==&cid=lf4hwoWOHy7VeC3fQgxhQ_s2qoXuVc29pneCZSryCWdGhx3bBzfQbFtZFEOlYtMOVSBLq1yePeY18lJ0f99uRvAxSlNUB3EYquSrEkJ~zBef7G5FZPayEEOzq~vlA_cr&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=9a0910770836e00b2274cc5fac802d50431cd742b64e935383b7f7d2095b1595&ir=36%2C20&dm=dc_ir CertificateIssuerAmazon Subjectdd.prod.captcha-delivery.com Fingerprint78:DE:FA:F7:3D:63:84:2A:F7:68:BE:5E:19:5C:02:C6:7A:A4:A2:DA ValidityMon, 27 Jan 2025 00:00:00 GMT - Wed, 25 Feb 2026 23:59:59 GMT
File typePNG image data, 63 x 155, 8-bit/color RGBA, non-interlaced Hashd4a6cc15096d9b3b62f63bd4782072bc b4f0207448ec929aa51507209b1aebf37c10445b fffc9282aae77fbba04442285370a0a4e3124be1d6303916c35e85f97ebff975
GET /image/2025-05-07/c009c278f8a0fb502fdb51c974820f49.frag.png HTTP/1.1
Host: dd.prod.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://geo.captcha-delivery.com
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 6450
date: Wed, 07 May 2025 00:00:21 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3600
last-modified: Sat, 03 May 2025 05:07:43 GMT
x-amz-expiration: expiry-date="Sun, 11 May 2025 00:00:00 GMT", rule-id="auto-clean old captchas image (7 days)"
etag: "d4a6cc15096d9b3b62f63bd4782072bc"
x-amz-server-side-encryption: AES256
x-amz-version-id: ntdR1QQsnZsOl4TUHa0DNGIZF1W6VPkh
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PADAMYs_IwSOR4dg3evcJxtvN5X7oxs7H1uDgJnFixYDhubdGOwjDg==
age: 46782
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| static.captcha-delivery.com/common/fonts/roboto/roboto.woff2 | 54.240.174.73 | 200 OK | 16 kB |
URL GET static.captcha-delivery.com/common/fonts/roboto/roboto.woff2 IP54.240.174.73:443
Requested byhttps://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg==&cid=lf4hwoWOHy7VeC3fQgxhQ_s2qoXuVc29pneCZSryCWdGhx3bBzfQbFtZFEOlYtMOVSBLq1yePeY18lJ0f99uRvAxSlNUB3EYquSrEkJ~zBef7G5FZPayEEOzq~vlA_cr&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=9a0910770836e00b2274cc5fac802d50431cd742b64e935383b7f7d2095b1595&ir=36%2C20&dm=dc_ir CertificateIssuerAmazon Subject*.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15688, version 1.0 Hashaa23b7b4bcf2b8f0e876106bb3de69c6 106ac454ba4e503e0a1cd15e1275130918049182 cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca
GET /common/fonts/roboto/roboto.woff2 HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://geo.captcha-delivery.com
DNT: 1
Connection: keep-alive
Referer: https://static.captcha-delivery.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff2
content-length: 15688
access-control-allow-origin: https://geo.captcha-delivery.com
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
access-control-allow-credentials: true
last-modified: Fri, 06 May 2022 16:47:07 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 May 2025 02:08:52 GMT
etag: "aa23b7b4bcf2b8f0e876106bb3de69c6"
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v40XPDElw4Ne2KzB8MrlPsQbqdoLThZsPK1nGG1nCMtwIRwnuirJRg==
age: 39929
X-Firefox-Spdy: h2
|
|
| ww16.clientsettingscdn.robloxz.com/munin/a/tr/browserjs?domain=robloxz.com&toggle=browserjs&uid=MTc0NjYyMjc5NC45NTY2OjM5ZGQ4ZGM1NzMyMzNkODQ3OWIxMzE5ZTRhNTYzNDY3NTcyMjZhYjU1ZDcxMGJhMmFjNGVjYTkwODU1OGJlYjQ6NjgxYjU5NGFlOTg5Ng%3D%3D | 185.53.178.50 | 200 OK | 0 B |
URL GET ww16.clientsettingscdn.robloxz.com/munin/a/tr/browserjs?domain=robloxz.com&toggle=browserjs&uid=MTc0NjYyMjc5NC45NTY2OjM5ZGQ4ZGM1NzMyMzNkODQ3OWIxMzE5ZTRhNTYzNDY3NTcyMjZhYjU1ZDcxMGJhMmFjNGVjYTkwODU1OGJlYjQ6NjgxYjU5NGFlOTg5Ng%3D%3D IP185.53.178.50:443 ASN#61969 Team Internet AG
Requested byhttps://ww16.clientsettingscdn.robloxz.com/ CertificateIssuerLet's Encrypt Subjectww16.clientsettingscdn.robloxz.com Fingerprint3A:B3:EB:88:FC:B8:D1:F5:3B:F8:DD:8C:F6:1C:58:75:A1:E5:B7:C9 ValidityTue, 06 May 2025 13:47:41 GMT - Mon, 04 Aug 2025 13:47:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/browserjs?domain=robloxz.com&toggle=browserjs&uid=MTc0NjYyMjc5NC45NTY2OjM5ZGQ4ZGM1NzMyMzNkODQ3OWIxMzE5ZTRhNTYzNDY3NTcyMjZhYjU1ZDcxMGJhMmFjNGVjYTkwODU1OGJlYjQ6NjgxYjU5NGFlOTg5Ng%3D%3D HTTP/1.1
Host: ww16.clientsettingscdn.robloxz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.clientsettingscdn.robloxz.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":8443"; ma=2592000
content-type: text/html; charset=UTF-8
date: Wed, 07 May 2025 12:59:56 GMT
server: Caddy, Caddy
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2
|
|
| no-go.kelkoogroup.net/favicon.ico | 95.211.116.26 | 404 Not Found | 1.1 kB |
URL GET no-go.kelkoogroup.net/favicon.ico IP95.211.116.26:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D62A901JTND9Q2M96K3BN9K0C0W8JM2%26url%3Dhttps%253A%252F%252Fwww.farmasiet.no&dc=false CertificateIssuerDigiCert Inc Subject*.kelkoogroup.net FingerprintAB:7F:31:B1:66:46:76:99:39:20:8C:5B:A4:03:6B:DE:E6:6B:F4:17 ValidityThu, 26 Sep 2024 00:00:00 GMT - Fri, 10 Oct 2025 23:59:59 GMT
File typeHTML document, ASCII text Hash8560de521c4990c7c870121fc9643508 0cacf7a6b96cceeb6ceae74d5f14dc87406a6f39 73a434285c3a752bc8c44aebd50e10f1a766853cbc7184e78d5c934c7b52b620
GET /favicon.ico HTTP/1.1
Host: no-go.kelkoogroup.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://no-go.kelkoogroup.net/redirect?country=no&k=612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af226dbb436429c932e8c626651e04b1922c3a2c075ce61350a0cb0e87095a9453d85f8ea7129a5389883a80a1fe1707be61b4e646a4464b2bc52e385fa794d7af3b7a4bfe81379de6a4798ac4a79613c974b4e99b7f05ca1498f5c0a19295b71511145eca0b4ebbab60643597a96353d08160dc69922606c28351ff256ad78cbcf590ce52c63d468cf4d467dc3bacc4a8b76f45f915bbf32f8714aafbe08c538f45f5163de60b304a03bfefc3891cea55cf88aeecb96f69a10bdca0f5f4692c6f7aa017756d86e9bbcd463f073dceb85c9d4ed60b578b4585bef82d35574f7d39cb03dfda24c2f050ace65064380eb9785962542113baaeaeae43a40a30e9b9f85c690e396e85aeb7c28deb3bb0248ad16ee84495869ba7249b4ed14a80fec98afce618dcc0157be708505c4c6770a5b7321b58ad028648860851cd9346b908f952d18caf42f9070548fc56df5977ef66573c9da087f0f25bf57775c6d71e2c2111b04eb709eab7831096d82d4f6a47ace7&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D62A901JTND9Q2M96K3BN9K0C0W8JM2%26url%3Dhttps%253A%252F%252Fwww.farmasiet.no&dc=false
DNT: 1
Connection: keep-alive
Cookie: kelkooID=a4c629a-196aad4dc46-d3418; datadome=lf4hwoWOHy7VeC3fQgxhQWNp8WTno6rUS8N6mgC1kjB1oN~jjm2t90v25jVEHxu~FndhqccFTVDB8nhwzkZfNu6QDLWCbHDfZklSf_~j95Do5VvZ_atonoJDq_zFRrlA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Request-Time: PT0.000421149S
X-Robots-Tag: noindex,nofollow
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: frame-ancestors 'none'
X-Permitted-Cross-Domain-Policies: master-only
Date: Wed, 07 May 2025 12:59:58 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 1144
|
|
| ww16.clientsettingscdn.robloxz.com/munin/a/tr/click?click=1aaa89cc1c51b4237e019495b36b2a5225563285&domain=robloxz.com&uid=MTc0NjYyMjc5NC45NTY2OjM5ZGQ4ZGM1NzMyMzNkODQ3OWIxMzE5ZTRhNTYzNDY3NTcyMjZhYjU1ZDcxMGJhMmFjNGVjYTkwODU1OGJlYjQ6NjgxYjU5NGFlOTg5Ng%3D%3D&ts=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.Evi3bMoh8X_IXJD3WLBDHSyoGh2raswNo-d4rf1fY9pgBHcJK4pFtQ.ue7gJoNzUQDqZtyJm2licQ.i-BrSaZQG4dKJedJkpWkpWeKOS6PTJaDpWOUdgvYgGxHRQ6x26Zi3KdOLRvKypcbSCWzTxbFnQonFBylqaeusyQpHFPaUm0uMVuK_DqOSp6Wb63ucULsLObThaZ25PsfVDSq9I_xsEexfsfGJW6-6sVQV4o9dixeRiZydi1-2xnJYtaC4Wq1CYFpXY6XhHYb7VFYyt-fPGdR1ieSuh7OzQFgoCF5l_NTIb8nKUVI8lqMlsu-amPhFCMX5pAU5VipSUTB3S6WGbfbgAa-DdWYJO3rl0XL9a5oCldZaqZ9XRioRtRhPa-TnqpDI2EMZYagC9CGK0EwCpO9etBJwfwLiLPCDOVdJIUgxAIJufpBXUEoSExivzgODk1dStDkPSJ0UVJ70ViGEu78TEhZ6kG8wASCIYYjc3GepVqZ_OcEQ1E2X0TfH-MSrq1cMYOeHvCgBK04Gv21F6KYAXc1RBSykAsMQWjIB5OoGtimMc-1hGUxmcfUrA4PQrYGhA0zmuDx4tf7RvH0D36DGI3r6pfnt80aelR_o0IzL_LGWYD2VKmNlwMcEnl1cKBtn4fe6pm3_teC7DUVe22Q0a4rIq89W74vU63RjJoNtfBWA5DwWyriIzCNfYmsGLaTAm9j17HI.GswTxq-UnNS6vgX4jA31OA&kw=&search=&pcat=&bucket=&clientID=&adtest=off | 185.53.178.50 | 200 OK | 0 B |
URL GET ww16.clientsettingscdn.robloxz.com/munin/a/tr/click?click=1aaa89cc1c51b4237e019495b36b2a5225563285&domain=robloxz.com&uid=MTc0NjYyMjc5NC45NTY2OjM5ZGQ4ZGM1NzMyMzNkODQ3OWIxMzE5ZTRhNTYzNDY3NTcyMjZhYjU1ZDcxMGJhMmFjNGVjYTkwODU1OGJlYjQ6NjgxYjU5NGFlOTg5Ng%3D%3D&ts=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.Evi3bMoh8X_IXJD3WLBDHSyoGh2raswNo-d4rf1fY9pgBHcJK4pFtQ.ue7gJoNzUQDqZtyJm2licQ.i-BrSaZQG4dKJedJkpWkpWeKOS6PTJaDpWOUdgvYgGxHRQ6x26Zi3KdOLRvKypcbSCWzTxbFnQonFBylqaeusyQpHFPaUm0uMVuK_DqOSp6Wb63ucULsLObThaZ25PsfVDSq9I_xsEexfsfGJW6-6sVQV4o9dixeRiZydi1-2xnJYtaC4Wq1CYFpXY6XhHYb7VFYyt-fPGdR1ieSuh7OzQFgoCF5l_NTIb8nKUVI8lqMlsu-amPhFCMX5pAU5VipSUTB3S6WGbfbgAa-DdWYJO3rl0XL9a5oCldZaqZ9XRioRtRhPa-TnqpDI2EMZYagC9CGK0EwCpO9etBJwfwLiLPCDOVdJIUgxAIJufpBXUEoSExivzgODk1dStDkPSJ0UVJ70ViGEu78TEhZ6kG8wASCIYYjc3GepVqZ_OcEQ1E2X0TfH-MSrq1cMYOeHvCgBK04Gv21F6KYAXc1RBSykAsMQWjIB5OoGtimMc-1hGUxmcfUrA4PQrYGhA0zmuDx4tf7RvH0D36DGI3r6pfnt80aelR_o0IzL_LGWYD2VKmNlwMcEnl1cKBtn4fe6pm3_teC7DUVe22Q0a4rIq89W74vU63RjJoNtfBWA5DwWyriIzCNfYmsGLaTAm9j17HI.GswTxq-UnNS6vgX4jA31OA&kw=&search=&pcat=&bucket=&clientID=&adtest=off IP185.53.178.50:443 ASN#61969 Team Internet AG
Requested byhttps://ww16.clientsettingscdn.robloxz.com/ CertificateIssuerLet's Encrypt Subjectww16.clientsettingscdn.robloxz.com Fingerprint3A:B3:EB:88:FC:B8:D1:F5:3B:F8:DD:8C:F6:1C:58:75:A1:E5:B7:C9 ValidityTue, 06 May 2025 13:47:41 GMT - Mon, 04 Aug 2025 13:47:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/click?click=1aaa89cc1c51b4237e019495b36b2a5225563285&domain=robloxz.com&uid=MTc0NjYyMjc5NC45NTY2OjM5ZGQ4ZGM1NzMyMzNkODQ3OWIxMzE5ZTRhNTYzNDY3NTcyMjZhYjU1ZDcxMGJhMmFjNGVjYTkwODU1OGJlYjQ6NjgxYjU5NGFlOTg5Ng%3D%3D&ts=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.Evi3bMoh8X_IXJD3WLBDHSyoGh2raswNo-d4rf1fY9pgBHcJK4pFtQ.ue7gJoNzUQDqZtyJm2licQ.i-BrSaZQG4dKJedJkpWkpWeKOS6PTJaDpWOUdgvYgGxHRQ6x26Zi3KdOLRvKypcbSCWzTxbFnQonFBylqaeusyQpHFPaUm0uMVuK_DqOSp6Wb63ucULsLObThaZ25PsfVDSq9I_xsEexfsfGJW6-6sVQV4o9dixeRiZydi1-2xnJYtaC4Wq1CYFpXY6XhHYb7VFYyt-fPGdR1ieSuh7OzQFgoCF5l_NTIb8nKUVI8lqMlsu-amPhFCMX5pAU5VipSUTB3S6WGbfbgAa-DdWYJO3rl0XL9a5oCldZaqZ9XRioRtRhPa-TnqpDI2EMZYagC9CGK0EwCpO9etBJwfwLiLPCDOVdJIUgxAIJufpBXUEoSExivzgODk1dStDkPSJ0UVJ70ViGEu78TEhZ6kG8wASCIYYjc3GepVqZ_OcEQ1E2X0TfH-MSrq1cMYOeHvCgBK04Gv21F6KYAXc1RBSykAsMQWjIB5OoGtimMc-1hGUxmcfUrA4PQrYGhA0zmuDx4tf7RvH0D36DGI3r6pfnt80aelR_o0IzL_LGWYD2VKmNlwMcEnl1cKBtn4fe6pm3_teC7DUVe22Q0a4rIq89W74vU63RjJoNtfBWA5DwWyriIzCNfYmsGLaTAm9j17HI.GswTxq-UnNS6vgX4jA31OA&kw=&search=&pcat=&bucket=&clientID=&adtest=off HTTP/1.1
Host: ww16.clientsettingscdn.robloxz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww16.clientsettingscdn.robloxz.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":8443"; ma=2592000
content-type: text/html; charset=UTF-8
date: Wed, 07 May 2025 12:59:56 GMT
server: Caddy, Caddy
x-custom-track: none
x-view-match: true
content-length: 0
X-Firefox-Spdy: h2
|
|
| static.captcha-delivery.com/common/fonts/roboto/font-face.css | 54.240.174.73 | 200 OK | 519 B |
URL GET static.captcha-delivery.com/common/fonts/roboto/font-face.css IP54.240.174.73:443
Requested byhttps://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=lf4hwoWOHy7VeC3fQgxhQWNp8WTno6rUS8N6mgC1kjB1oN~jjm2t90v25jVEHxu~FndhqccFTVDB8nhwzkZfNu6QDLWCbHDfZklSf_~j95Do5VvZ_atonoJDq_zFRrlA&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%3D612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af226dbb436429c932e8c626651e04b1922c3a2c075ce61350a0cb0e87095a9453d85f8ea7129a5389883a80a1fe1707be61b4e646a4464b2bc52e385fa794d7af3b7a4bfe81379de6a4798ac4a79613c974b4e99b7f05ca1498f5c0a19295b71511145eca0b4ebbab60643597a96353d08160dc69922606c28351ff256ad78cbcf590ce52c63d468cf4d467dc3bacc4a8b76f45f915bbf32f8714aafbe08c538f45f5163de60b304a03bfefc3891cea55cf88aeecb96f69a10bdca0f5f4692c6f7aa017756d86e9bbcd463f073dceb85c9d4ed60b578b4585bef82d35574f7d39cb03dfda24c2f050ace65064380eb9785962542113baaeaeae43a40a30e9b9f85c690e396e85aeb7c28deb3bb0248ad16ee84495869ba7249b4ed14a80fec98afce618dcc0157be708505c4c6770a5b7321b58ad028648860851cd9346b908f952d18caf42f9070548fc56df5977ef66573c9da087f0f25bf57775c6d71e2c2111b04eb709eab7831096d82d4f6a47ace7%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&s=35103&b=1441348&dm=cd CertificateIssuerAmazon Subject*.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT
Hashe4f77074c0ffbfab377011e19283eb13 9160259165ca1ef84209d4dd675c3ed367babff1 66599c34190f7a6a402b38664a30a9b564fc22510f51fa3c5f027fb91e7a0e51
GET /common/fonts/roboto/font-face.css HTTP/1.1
Host: static.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 519
last-modified: Fri, 19 Jul 2024 12:42:09 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 May 2025 00:51:41 GMT
etag: "e4f77074c0ffbfab377011e19283eb13"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _KLrFfUOnzXJXn8nXV3bATj-UCbnWTSEINb5JVH61aWPlR44Y_8tFA==
age: 43700
X-Firefox-Spdy: h2
|
|
| geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg==&cid=lf4hwoWOHy7VeC3fQgxhQ_s2qoXuVc29pneCZSryCWdGhx3bBzfQbFtZFEOlYtMOVSBLq1yePeY18lJ0f99uRvAxSlNUB3EYquSrEkJ~zBef7G5FZPayEEOzq~vlA_cr&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=9a0910770836e00b2274cc5fac802d50431cd742b64e935383b7f7d2095b1595&ir=36%2C20&dm=dc_ir | 13.50.6.43 | 200 OK | 602 kB |
URL GET geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg==&cid=lf4hwoWOHy7VeC3fQgxhQ_s2qoXuVc29pneCZSryCWdGhx3bBzfQbFtZFEOlYtMOVSBLq1yePeY18lJ0f99uRvAxSlNUB3EYquSrEkJ~zBef7G5FZPayEEOzq~vlA_cr&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=9a0910770836e00b2274cc5fac802d50431cd742b64e935383b7f7d2095b1595&ir=36%2C20&dm=dc_ir IP13.50.6.43:443
Requested byhttps://no-go.kelkoogroup.net/redirect?country=no&k=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&url=https%3A%2F%2Fpdt.tradedoubler.com%2Fclick%3Fa%3D332280%26p%3D302669%26epi%3D62A901JTND9Q2M96K3BN9K0C0W8JM2%26url%3Dhttps%253A%252F%252Fwww.farmasiet.no&dc=false CertificateIssuerAmazon Subject*.captcha-delivery.com FingerprintF2:9E:7E:72:25:57:E3:AF:B6:87:61:A0:0D:B1:85:B4:85:82:E6:96 ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (40959) Size602 kB (601845 bytes) Hash132849d0588c5cbcb396f34d556a11c1 7d77216ee03cafec72163000a88ed0be0c13fae9 c785c66797922e6be63cc437887703315c783d7352d931b67a71dd38344f144b
GET /captcha/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg==&cid=lf4hwoWOHy7VeC3fQgxhQ_s2qoXuVc29pneCZSryCWdGhx3bBzfQbFtZFEOlYtMOVSBLq1yePeY18lJ0f99uRvAxSlNUB3EYquSrEkJ~zBef7G5FZPayEEOzq~vlA_cr&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%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%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&hash=5954443B90DC91C1E924DE9BFBEAA5&t=fe&s=35103&e=9a0910770836e00b2274cc5fac802d50431cd742b64e935383b7f7d2095b1595&ir=36%2C20&dm=dc_ir HTTP/1.1
Host: geo.captcha-delivery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMAo_ufPY21GfwAW1oqmg%3D%3D&hash=5954443B90DC91C1E924DE9BFBEAA5&cid=lf4hwoWOHy7VeC3fQgxhQWNp8WTno6rUS8N6mgC1kjB1oN~jjm2t90v25jVEHxu~FndhqccFTVDB8nhwzkZfNu6QDLWCbHDfZklSf_~j95Do5VvZ_atonoJDq_zFRrlA&referer=https%3A%2F%2Fno-go.kelkoogroup.net%2Fredirect%3Fcountry%3Dno%26k%3D612f7a9541cd6ea61eb554c0e4cff43751c4e6ff4b34703f59267ef246260421ffe940a20aebd8854c374c9166d3f94caa8844910c81593b5cf37a8b6c51689154f9f9be5469b66c3942661dfe69af226dbb436429c932e8c626651e04b1922c3a2c075ce61350a0cb0e87095a9453d85f8ea7129a5389883a80a1fe1707be61b4e646a4464b2bc52e385fa794d7af3b7a4bfe81379de6a4798ac4a79613c974b4e99b7f05ca1498f5c0a19295b71511145eca0b4ebbab60643597a96353d08160dc69922606c28351ff256ad78cbcf590ce52c63d468cf4d467dc3bacc4a8b76f45f915bbf32f8714aafbe08c538f45f5163de60b304a03bfefc3891cea55cf88aeecb96f69a10bdca0f5f4692c6f7aa017756d86e9bbcd463f073dceb85c9d4ed60b578b4585bef82d35574f7d39cb03dfda24c2f050ace65064380eb9785962542113baaeaeae43a40a30e9b9f85c690e396e85aeb7c28deb3bb0248ad16ee84495869ba7249b4ed14a80fec98afce618dcc0157be708505c4c6770a5b7321b58ad028648860851cd9346b908f952d18caf42f9070548fc56df5977ef66573c9da087f0f25bf57775c6d71e2c2111b04eb709eab7831096d82d4f6a47ace7%26url%3Dhttps%253A%252F%252Fpdt.tradedoubler.com%252Fclick%253Fa%253D332280%2526p%253D302669%2526epi%253D62A901JTND9Q2M96K3BN9K0C0W8JM2%2526url%253Dhttps%25253A%25252F%25252Fwww.farmasiet.no%26dc%3Dfalse&s=35103&b=1441348&dm=cd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 May 2025 13:00:02 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|