| u43944338.ct.sendgrid.net/ls/click?upn=u001.pLXsUs5crURBbjesTN4uXoAnzpFeY-2BUmP-2FwRql1gpr7heNlRFjRlAaERWFe2oCz6oC7dsdAt83a5WH69zqeYwh2tMa-2F2z7do-2BHPG3QEHdtxT9zYnpwduqGYIQKUtov0p-2F9xkXLBIKdqFENl-2BsNOWtdmtobkyLNcBljS8devOO7rHpsriMMbVWMNHGIddsDU9hFMzxbLfGU5kFJBaUmDpZKsHGjn43ZM8H6HE4QZ8YNc-3DDG21_GP-2B-2Fg8Qx2FZkIQt1kziz2a1AOUDsrqJzy-2BVxxqgo-2BFZvMhus1OPr3Bnl8Te1N-2B2azeUDkwW9psrQ6RGWOEvPjqD5x5xsHtNG0G0-2Fc3SQYnKDm71ABLhZBI-2Fv31hYxh0pVEEkuG1qQQA1FiRhjLRHH8Ou2OwjyFZ0DNBThVn5WNiOJtTwgIiTo2S-2F3-2Bou1PTJV24366uOdw-2FQ-2FuDaqhgrEDCBuNZ0LhQmmWTIN-2FKCCmQ-3D |  167.89.115.147 | 302 Found | 187 B |
URL User Request GET HTTP/1.1u43944338.ct.sendgrid.net/ls/click?upn=u001.pLXsUs5crURBbjesTN4uXoAnzpFeY-2BUmP-2FwRql1gpr7heNlRFjRlAaERWFe2oCz6oC7dsdAt83a5WH69zqeYwh2tMa-2F2z7do-2BHPG3QEHdtxT9zYnpwduqGYIQKUtov0p-2F9xkXLBIKdqFENl-2BsNOWtdmtobkyLNcBljS8devOO7rHpsriMMbVWMNHGIddsDU9hFMzxbLfGU5kFJBaUmDpZKsHGjn43ZM8H6HE4QZ8YNc-3DDG21_GP-2B-2Fg8Qx2FZkIQt1kziz2a1AOUDsrqJzy-2BVxxqgo-2BFZvMhus1OPr3Bnl8Te1N-2B2azeUDkwW9psrQ6RGWOEvPjqD5x5xsHtNG0G0-2Fc3SQYnKDm71ABLhZBI-2Fv31hYxh0pVEEkuG1qQQA1FiRhjLRHH8Ou2OwjyFZ0DNBThVn5WNiOJtTwgIiTo2S-2F3-2Bou1PTJV24366uOdw-2FQ-2FuDaqhgrEDCBuNZ0LhQmmWTIN-2FKCCmQ-3D IP167.89.115.147:443
CertificateIssuerGoDaddy.com, Inc. Subject*.ct.sendgrid.net FingerprintC4:63:80:FB:99:8B:B5:4D:2C:7D:7F:D7:88:03:EE:F1:EA:8C:CE:55 ValidityMon, 15 Apr 2024 08:08:37 GMT - Wed, 14 May 2025 18:07:20 GMT
File typeHTML document, ASCII text Hash4ebd4a9a0eb5b208feefc80e2dfbe31b 9b73ca1ba732f2e0a1f2a1aab1059c376efccb11 67cb12ee7e4e196d8ecc9394884e799fc2de78a84ba644e79dd4e49094bfee82
GET /ls/click?upn=u001.pLXsUs5crURBbjesTN4uXoAnzpFeY-2BUmP-2FwRql1gpr7heNlRFjRlAaERWFe2oCz6oC7dsdAt83a5WH69zqeYwh2tMa-2F2z7do-2BHPG3QEHdtxT9zYnpwduqGYIQKUtov0p-2F9xkXLBIKdqFENl-2BsNOWtdmtobkyLNcBljS8devOO7rHpsriMMbVWMNHGIddsDU9hFMzxbLfGU5kFJBaUmDpZKsHGjn43ZM8H6HE4QZ8YNc-3DDG21_GP-2B-2Fg8Qx2FZkIQt1kziz2a1AOUDsrqJzy-2BVxxqgo-2BFZvMhus1OPr3Bnl8Te1N-2B2azeUDkwW9psrQ6RGWOEvPjqD5x5xsHtNG0G0-2Fc3SQYnKDm71ABLhZBI-2Fv31hYxh0pVEEkuG1qQQA1FiRhjLRHH8Ou2OwjyFZ0DNBThVn5WNiOJtTwgIiTo2S-2F3-2Bou1PTJV24366uOdw-2FQ-2FuDaqhgrEDCBuNZ0LhQmmWTIN-2FKCCmQ-3D HTTP/1.1
Host: u43944338.ct.sendgrid.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 24 Apr 2024 19:58:05 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 187
Connection: keep-alive
Location: https://linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FgzkMCiPC3Xc&urlhash=P4Kz&trk=public_profile-settings_topcard-website
X-Robots-Tag: noindex, nofollow
|
|
| linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FgzkMCiPC3Xc&urlhash=P4Kz&trk=public_profile-settings_topcard-website | 13.107.42.14 | 301 Moved Permanently | 0 B |
URL User Request GET HTTP/2linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FgzkMCiPC3Xc&urlhash=P4Kz&trk=public_profile-settings_topcard-website IP13.107.42.14:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerDigiCert Inc Subjectwww.linkedin.com FingerprintDC:45:B0:FA:20:27:5C:91:BE:80:C2:BD:D1:63:40:B7:B0:24:25:EE ValidityTue, 30 Jan 2024 00:00:00 GMT - Tue, 30 Jul 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FgzkMCiPC3Xc&urlhash=P4Kz&trk=public_profile-settings_topcard-website HTTP/1.1
Host: linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
location: https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FgzkMCiPC3Xc&urlhash=P4Kz&trk=public_profile-settings_topcard-website
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYW3RbIVeW8siiebpR2pw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F582DDD566744451B95ACC2951DBC1F5 Ref B: OSL30EDGE0417 Ref C: 2024-04-24T19:58:05Z
date: Wed, 24 Apr 2024 19:58:05 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FgzkMCiPC3Xc&urlhash=P4Kz&trk=public_profile-settings_topcard-website | 13.107.42.14 | 200 OK | 1.3 kB |
URL User Request GET HTTP/2www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FgzkMCiPC3Xc&urlhash=P4Kz&trk=public_profile-settings_topcard-website IP13.107.42.14:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerDigiCert Inc Subjectwww.linkedin.com FingerprintDC:45:B0:FA:20:27:5C:91:BE:80:C2:BD:D1:63:40:B7:B0:24:25:EE ValidityTue, 30 Jan 2024 00:00:00 GMT - Tue, 30 Jul 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (3637) Hasha683ce2ea1df255926ff0251e9f816dd 05c306d7530cd918ec842b94384e6c3b96ce34d6 fecfa495f34485a88ad8af3ab11ae44030f51be1c64013bb2a9288fb24ee9c42
GET /redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FgzkMCiPC3Xc&urlhash=P4Kz&trk=public_profile-settings_topcard-website HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
pragma: no-cache
content-length: 1308
content-type: text/html; charset=utf-8
content-encoding: gzip
expires: Thu, 01 Jan 1970 00:00:00 GMT
vary: Accept-Encoding
set-cookie: JSESSIONID=ajax:2960781427321184461; Domain=.www.linkedin.com; Path=/; Secure; SameSite=None
lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&5eff81e6-3b27-4d86-84ae-f2296fc4e168"; Domain=.linkedin.com; Expires=Thu, 24-Apr-2025 19:58:06 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202404241958068af7af2b-7611-4c0e-82c6-ee92a9198cedAQGOFpIEAbkViSylhMyCRlNuTlJv5oW1"; Domain=.www.linkedin.com; Expires=Thu, 24-Apr-2025 19:58:06 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE3MTM5ODg2ODY7MjswMjG2IPD9pzAuihCpiEPi0mzJHTfFV2K31IPKp/6yXSE37g==; Domain=.linkedin.com; Expires=Mon, 21 Oct 2024 19:58:06 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2789:u=1:x=1:i=1713988686:t=1714075086:v=2:sig=AQFmuLwtjVmq8uITL6xAsak8rsQhDVtT"; Expires=Thu, 25 Apr 2024 19:58:06 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; connect-src 'self' *.licdn.com *.linkedin.com cdn.linkedin.oribi.io dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ v.clarity.ms/collect *.microsoft.com *.adnxs.com *.tealiumiq.com login.microsoftonline.com; script-src 'report-sample' 'sha256-th47JTnh6tX15SUn/I+GGmsOSXpa7dh5Skner77gxlY=' 'sha256-SSoodjUD3LGm2FfFCVHGqEb8D4UM3OOigidT2UKDcYg=' 'sha256-cKTgdnmO6+hXd85a9wKg1effVfVzenUAtUCyOKY9bQE=' 'sha256-DwtT8+ZZKpxH9pqZNAmJ3GdbLAh5SsYaXR3omTXPCns=' 'sha256-sV9jZa797T0QWBzcU/CNd4tpBhTnh+TFdLnfjlitl28=' 'sha256-aa/Q8CRBDSqTQbCIyioPhZaz+G+dbPyu7BzsjInEmiU=' 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-zTIusdVJJeXz9+iox2a+pdDglzbpRpFVRzEwvW4AONk=' 'sha256-iC8MPqNLw0FDnsBf4DlSkFLNTwhkI85aouiAEB819ic=' 'sha256-2EqrEvcPzl8c6/TSGVvaVMEe7lg700MAz/te4/3kTYY=' 'sha256-y5uW69VItKj51mcc7UD9qfptDVUqicZL+bItEpvVNDw=' 'sha256-DatsFGoJ8gFkzzxo47Ou76WZ+3QBPOQHtBu9p9b3DhA=' 'sha256-k95cyM8gFgPziZe5VQ2IvJvBUVyd5zFt2CokIUwqdHE=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-RFqsjmAF1N5LnfpaHFvPqFlVkeIS/DtTAFor+JjJJVc=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' 'sha256-9pXOIwF4N0gPltLd3AI69lkCjSC2H/Eb3sc5zdmUyYU=' 'sha256-jou6v/Nleyzoc+LXktAv1Fp8M807dVVxy7E/yzVljHc=' 'sha256-6E4e/3dSvj/8JZT2S2yR91mspqM6MyOpKl5lrhHsZa8=' 'sha256-3woF8BZ54TeXM+czaH3aXoaJsVpiamuAKFsXDykAR/Q=' 'sha256-vIfNcKb8ixJg1cfJIoNNYjWcm0lezj1/XpUNFiZyVsU=' 'sha256-cLsHUHFgT/VGX04cZrJ9xgm4HbzTR7ptutkxK+7BlMk=' 'sha256-BwU8jMnQYUhjOpsDVABpfddV/DlP1ZYrFcTumYw7x54=' 'sha256-wz6ika9i3WU3bpUPdhYDZeO/NrDQniDyiscN0LWnyaY=' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com snap.licdn.com www.googletagmanager.com/gtag/js merchantpool1.linkedin.com/mdt.js; img-src data: blob: * android-webview-video-poster:; font-src data: *; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src 'self' *.licdn.com *.lynda.com; worker-src 'self' blob: static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; frame-src 'self' www.youtube.com/embed/ www.youtube-nocookie.com/embed/ lnkd.demdex.net smartlock.google.com accounts.google.com player.vimeo.com *.linkedin.com www.slideshare.net *.megaphone.fm *.omny.fm *.sounder.fm msit.powerbi.com app.powerbi.com linkedin.github.io *.licdn.com *.adnxs.com acdn.adnxs-simple.com radar.cedexis.com edge-auth.microsoft.com li.protechts.net *.xlgmedia.com *.px-cloud.net merchantpool1.linkedin.com; frame-ancestors 'self' *.www.linkedin.com:*; manifest-src 'self'; report-uri https://www.linkedin.com/security/csp?f=gd
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYW3RbLXA3EHeQzFiwWYQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: DA6B4C27D5A9426793F0146D4C393157 Ref B: OSL30EDGE0417 Ref C: 2024-04-24T19:58:06Z
date: Wed, 24 Apr 2024 19:58:05 GMT
X-Firefox-Spdy: h2
|
|
| static.licdn.com/sc/h/8hfbuq1ftcvnnx4dd5067pi0t |  95.101.11.48 | | 27 kB |
URL static.licdn.com/sc/h/8hfbuq1ftcvnnx4dd5067pi0t IP95.101.11.48:0 ASN#20940 Akamai International B.V.
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash8f4e491728bd1469f8dfbdfc575da67d e1c9e7e3ac470880759f5b0a3baa8a205c3632b6 d0953f99372914944b39b292593d55ae8355cef39859e5cf745b83f1c6a53fef
GET /sc/h/8hfbuq1ftcvnnx4dd5067pi0t HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Play
expires: Sat, 26 Aug 2023 04:07:37 GMT
cache-control: max-age=31536000, immutable
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
x-li-static-content: 1
content-type: text/javascript
x-fs-uuid: 0005e71d0df472c25aeb04dfffb93853
x-li-fabric: prod-lor1
x-li-pop: prod-lor1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAXnHQ30csJa6wTf/7k4Uw==
remote-cache-status: TCP_HIT, TCP_HIT, TCP_HIT, TCP_HIT, TCP_HIT, TCP_HIT, TCP_HIT
x-datastream-cache-status: 2
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:06 GMT
content-length: 27194
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2
|
|
| static.licdn.com/sc/h/3vg7r8ejqsag1yupubi3fjuy3 | 95.101.11.48 | | 17 kB |
URL static.licdn.com/sc/h/3vg7r8ejqsag1yupubi3fjuy3 IP95.101.11.48:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (65536), with no line terminators Hash416e1e17970e51815b07b5d71edc5e6b ef0759a406c1a83adf441260403395b6dedca35c 8a3691fde91637d78d406a7ac96babadf7c6cc8deda9da39c6777260469616bc
GET /sc/h/3vg7r8ejqsag1yupubi3fjuy3 HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Play
expires: Sat, 29 Mar 2025 08:01:04 GMT
cache-control: max-age=31536000, immutable
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
x-li-static-content: 1
content-type: text/css
x-fs-uuid: 000614c80aa415b1aa3e3f6426dbd20a
x-li-fabric: prod-lva1
x-content-type-options: nosniff
x-li-pop: prod-lva1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYUyAqkFbGqPj9kJtvSCg==
remote-cache-status: TCP_HIT
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:06 GMT
content-length: 17231
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2
|
|
| static.licdn.com/scds/common/u/lib/fizzy/fz-1.3.3-min.js | 95.101.11.48 | | 9.1 kB |
URL static.licdn.com/scds/common/u/lib/fizzy/fz-1.3.3-min.js IP95.101.11.48:0 ASN#20940 Akamai International B.V.
File typeJavaScript source, ASCII text, with very long lines (552) Hashb246431fdcb8945538cae1dd7b74b536 8c7a84c578feddc44eae733c7646f8ea83cf1dbf 32a1526db17fd5b37624507d2a2ef296d1b59cd118b474ca61718d4f9db31b1f
GET /scds/common/u/lib/fizzy/fz-1.3.3-min.js HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Fri, 31 Jan 2025 20:28:16 GMT
cache-control: max-age=31536000, immutable
x-li-fabric: prod-lva1
x-content-type-options: nosniff
x-li-pop: prod-lva1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYQV9XS+1ec8W/Q1HXxcA==
server: Play
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
x-li-static-content: 1
content-type: text/javascript
x-fs-uuid: 0005f2779fb9bb094351a87e1b52953c
remote-cache-status: TCP_HIT
x-datastream-cache-status: 1
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:06 GMT
content-length: 9079
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2
|
|
| static.licdn.com/sc/p/com.linkedin.trust-frontend%3Atrust-frontend-static-content%2B0.2.301/f/%2Ftrust-frontend%2Fdust%2Fdev%2Flinkedin-dust.js | 95.101.11.48 | | 0 B |
URL static.licdn.com/sc/p/com.linkedin.trust-frontend%3Atrust-frontend-static-content%2B0.2.301/f/%2Ftrust-frontend%2Fdust%2Fdev%2Flinkedin-dust.js IP95.101.11.48:0 ASN#20940 Akamai International B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sc/p/com.linkedin.trust-frontend%3Atrust-frontend-static-content%2B0.2.301/f/%2Ftrust-frontend%2Fdust%2Fdev%2Flinkedin-dust.js HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: Play
content-length: 0
x-fs-uuid: 000616dd16d37401c4af022da6a25cb0
x-li-fabric: prod-lva1
x-content-type-options: nosniff
x-li-pop: prod-lva1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYW3RbTdAHErwItpqJcsA==
x-edgeconnect-midmile-rtt: 7
x-edgeconnect-origin-mex-latency: 127
date: Wed, 24 Apr 2024 19:58:06 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2
|
|
| static.licdn.com/sc/p/com.linkedin.trust-frontend%3Atrust-frontend-static-content%2B0.2.301/f/%2Ftrust-frontend%2Fcom%2Flinkedin%2Fdust%2Fjavascripts%2Fdust-utils_en_US.js | 95.101.11.48 | | 0 B |
URL static.licdn.com/sc/p/com.linkedin.trust-frontend%3Atrust-frontend-static-content%2B0.2.301/f/%2Ftrust-frontend%2Fcom%2Flinkedin%2Fdust%2Fjavascripts%2Fdust-utils_en_US.js IP95.101.11.48:0 ASN#20940 Akamai International B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sc/p/com.linkedin.trust-frontend%3Atrust-frontend-static-content%2B0.2.301/f/%2Ftrust-frontend%2Fcom%2Flinkedin%2Fdust%2Fjavascripts%2Fdust-utils_en_US.js HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: Play
content-length: 0
x-fs-uuid: 000616dd16d39b22d89e2382c07b4d62
x-li-fabric: prod-lva1
x-content-type-options: nosniff
x-li-pop: prod-lva1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYW3RbTmyLYniOCwHtNYg==
x-edgeconnect-midmile-rtt: 7
x-edgeconnect-origin-mex-latency: 122
date: Wed, 24 Apr 2024 19:58:06 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2
|
|
| static.licdn.com/sc/h/4vbn3bojmnmybj7crmfdbhuz4 | 95.101.11.48 | | 548 B |
URL static.licdn.com/sc/h/4vbn3bojmnmybj7crmfdbhuz4 IP95.101.11.48:0 ASN#20940 Akamai International B.V.
File typeSVG Scalable Vector Graphics image Hash524300f751bfdd2a0819c5a43c076610 a3cd7d5ea70d7c86806eb5a6b337e9c4d3964153 8e1593e11a400da9ea41a85f5eaa4a64708df4587d63d640c46699a18124ed82
GET /sc/h/4vbn3bojmnmybj7crmfdbhuz4 HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.linkedin.com
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: Play
expires: Thu, 03 Apr 2025 17:25:05 GMT
cache-control: max-age=31536000, immutable
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
x-li-static-content: 1
content-type: image/svg+xml
x-fs-uuid: 0006153480ee67bedf10c6051107b084
x-li-fabric: prod-lva1
x-content-type-options: nosniff
x-li-pop: prod-lva1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYVNIDuZ77fEMYFEQewhA==
remote-cache-status: TCP_HIT, TCP_HIT
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:06 GMT
content-length: 548
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2
|
|
| static.licdn.com/sc/h/fpxv8vfe817y6giishsfm40l | 95.101.11.48 | | 463 B |
URL static.licdn.com/sc/h/fpxv8vfe817y6giishsfm40l IP95.101.11.48:0 ASN#20940 Akamai International B.V.
File typeSVG Scalable Vector Graphics image Hash076047c956aa8c9a28593f7208132cd5 16c457f533ecdc3556ced92bfa6fd80532a0c8b0 80aab4090d9ebb1983681bc59822e4102ddd13a3e9391f78a19c18d4aa271365
GET /sc/h/fpxv8vfe817y6giishsfm40l HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static.licdn.com/sc/h/3vg7r8ejqsag1yupubi3fjuy3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
expires: Thu, 05 Dec 2024 11:42:09 GMT
cache-control: max-age=31536000, immutable
x-li-fabric: prod-lor1
x-content-type-options: nosniff
x-li-pop: prod-lor1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYL1ddknJvxzKm/ROO/vA==
server: Play
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
x-li-static-content: 1
content-type: image/svg+xml
x-fs-uuid: 97e4388b8b307f1650994fb44d2b0000
content-length: 463
unused62: 8096267
x-datastream-cache-status: 1
remote-cache-status: TCP_HIT, TCP_HIT
date: Wed, 24 Apr 2024 19:58:06 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2
|
|
| www.linkedin.com/favicon.ico | 13.107.42.14 | | 25 kB |
URL www.linkedin.com/favicon.ico IP13.107.42.14:0 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerDigiCert Inc Subjectwww.linkedin.com FingerprintDC:45:B0:FA:20:27:5C:91:BE:80:C2:BD:D1:63:40:B7:B0:24:25:EE ValidityTue, 30 Jan 2024 00:00:00 GMT - Tue, 30 Jul 2024 23:59:59 GMT
File typeMS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel Hashb2ccd167c908a44e1dd69df79382286a d9349f1bdcf3c1556cd77ae1f0029475596342aa 19b079c09197fba68d021fa3ba394ec91703909ffd237efa3eb9a2bca13148ec
GET /favicon.ico HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FgzkMCiPC3Xc&urlhash=P4Kz&trk=public_profile-settings_topcard-website
Cookie: JSESSIONID=ajax:2960781427321184461; lang=v=2&lang=en-us; bcookie="v=2&5eff81e6-3b27-4d86-84ae-f2296fc4e168"; bscookie="v=1&202404241958068af7af2b-7611-4c0e-82c6-ee92a9198cedAQGOFpIEAbkViSylhMyCRlNuTlJv5oW1"; li_gc=MTswOzE3MTM5ODg2ODY7MjswMjG2IPD9pzAuihCpiEPi0mzJHTfFV2K31IPKp/6yXSE37g==; lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2789:u=1:x=1:i=1713988686:t=1714075086:v=2:sig=AQFmuLwtjVmq8uITL6xAsak8rsQhDVtT"
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=604800,private
content-length: 24838
content-type: image/x-icon
expires: Wed, 01 May 2024 19:58:07 GMT
last-modified: Tue, 16 Apr 2024 21:20:32 GMT
accept-ranges: bytes
etag: "661eeba0-6106"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: sameorigin
content-security-policy: default-src 'none'; connect-src 'self' *.licdn.com *.linkedin.com cdn.linkedin.oribi.io dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.microsoft.com *.adnxs.com login.microsoftonline.com; script-src 'report-sample' 'sha256-SSoodjUD3LGm2FfFCVHGqEb8D4UM3OOigidT2UKDcYg=' 'sha256-cKTgdnmO6+hXd85a9wKg1effVfVzenUAtUCyOKY9bQE=' 'sha256-DwtT8+ZZKpxH9pqZNAmJ3GdbLAh5SsYaXR3omTXPCns=' 'sha256-sV9jZa797T0QWBzcU/CNd4tpBhTnh+TFdLnfjlitl28=' 'sha256-aa/Q8CRBDSqTQbCIyioPhZaz+G+dbPyu7BzsjInEmiU=' 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-zTIusdVJJeXz9+iox2a+pdDglzbpRpFVRzEwvW4AONk=' 'sha256-iC8MPqNLw0FDnsBf4DlSkFLNTwhkI85aouiAEB819ic=' 'sha256-2EqrEvcPzl8c6/TSGVvaVMEe7lg700MAz/te4/3kTYY=' 'sha256-y5uW69VItKj51mcc7UD9qfptDVUqicZL+bItEpvVNDw=' 'sha256-DatsFGoJ8gFkzzxo47Ou76WZ+3QBPOQHtBu9p9b3DhA=' 'sha256-k95cyM8gFgPziZe5VQ2IvJvBUVyd5zFt2CokIUwqdHE=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-RFqsjmAF1N5LnfpaHFvPqFlVkeIS/DtTAFor+JjJJVc=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' 'sha256-3RIGhhApBii1KY+aW1xk7kFyoQY8vSVE5DfT7E9SJUc=' 'sha256-9pXOIwF4N0gPltLd3AI69lkCjSC2H/Eb3sc5zdmUyYU=' 'sha256-jou6v/Nleyzoc+LXktAv1Fp8M807dVVxy7E/yzVljHc=' 'sha256-6E4e/3dSvj/8JZT2S2yR91mspqM6MyOpKl5lrhHsZa8=' 'sha256-3woF8BZ54TeXM+czaH3aXoaJsVpiamuAKFsXDykAR/Q=' 'sha256-vIfNcKb8ixJg1cfJIoNNYjWcm0lezj1/XpUNFiZyVsU=' 'sha256-cLsHUHFgT/VGX04cZrJ9xgm4HbzTR7ptutkxK+7BlMk=' 'sha256-BwU8jMnQYUhjOpsDVABpfddV/DlP1ZYrFcTumYw7x54=' 'sha256-wz6ika9i3WU3bpUPdhYDZeO/NrDQniDyiscN0LWnyaY=' 'sha256-wy4DvlEW9PHPIGvQJW6Wv4woBSa/0LJHs8LHsBVVXCs=' 'sha256-065A0cJTDQ+hyKvufSL/flW02hIbgLndOINLRWux6To=' 'sha256-Ga5SLB8hPdWUE8Wb6LgZ05D9Z5vrdLAaPbDBW2m3BI8=' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com snap.licdn.com; img-src data: blob: * android-webview-video-poster:; font-src data: *; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src 'self' *.licdn.com *.lynda.com; worker-src 'self' blob: static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; frame-src 'self' www.youtube.com/embed/ www.youtube-nocookie.com/embed/ lnkd.demdex.net smartlock.google.com accounts.google.com player.vimeo.com *.linkedin.com www.slideshare.net *.megaphone.fm *.omny.fm *.sounder.fm msit.powerbi.com app.powerbi.com linkedin.github.io *.licdn.com *.adnxs.com acdn.adnxs-simple.com radar.cedexis.com edge-auth.microsoft.com; frame-ancestors 'self' *.www.linkedin.com:*; manifest-src 'self'; report-uri https://www.linkedin.com/security/csp?f=d
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAYW3RbXdtCZvEvUsS+lpA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B492A2F01BF2446BABE521571CECA871 Ref B: OSL30EDGE0417 Ref C: 2024-04-24T19:58:06Z
date: Wed, 24 Apr 2024 19:58:06 GMT
X-Firefox-Spdy: h2
|
|
| lookerstudio.google.com/s/gzkMCiPC3Xc | 142.250.74.110 | 302 Found | 0 B |
URL User Request GET HTTP/2lookerstudio.google.com/s/gzkMCiPC3Xc IP142.250.74.110:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign |
GET /s/gzkMCiPC3Xc HTTP/1.1
Host: lookerstudio.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-frame-options: DENY
content-security-policy: script-src 'report-sample' 'nonce-HMkD_xWGlN4syIVcfwUWNg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none'
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 19:58:10 GMT
location: https://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58; expires=Thu, 24-Oct-2024 19:58:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| apis.google.com/js/client.js | 142.250.74.110 | 200 OK | 5.9 kB |
URL GET HTTP/3apis.google.com/js/client.js IP142.250.74.110:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2054) Hashd727cd28761ce9124c869f5453ff81de 930c45f2f085dabd7f562a35879e219ffb0e7a15 c60fe7c117ce40f5d355adfc6deb367a44166d57a3c19bc6d6c896ac5b38aedc
GET /js/client.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 5903
date: Wed, 24 Apr 2024 19:58:11 GMT
expires: Wed, 24 Apr 2024 19:58:11 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7c8d949c56f70886"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ssl.gstatic.com/datastudio/cloud-lego-fe.fe-server_20240423.00_p0/css/material_theme.css?cb=627243876 | 142.250.74.163 | 200 OK | 34 kB |
URL GET HTTP/2ssl.gstatic.com/datastudio/cloud-lego-fe.fe-server_20240423.00_p0/css/material_theme.css?cb=627243876 IP142.250.74.163:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash6dadb096729872a52e0a5d6c945657b3 6e1ad6d3c0edd16fa689eb447a4fe2416ff97b29 b90b51ec0d94f8d97db8b2fc0bd922708ab5f3ec0939914f5ca383ef7d26f6be
GET /datastudio/cloud-lego-fe.fe-server_20240423.00_p0/css/material_theme.css?cb=627243876 HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/analytics-lego-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="analytics-lego-eng"
report-to: {"group":"analytics-lego-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/analytics-lego-eng"}]}
content-length: 34277
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 20:54:36 GMT
expires: Wed, 23 Apr 2025 20:54:36 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 07:24:25 GMT
content-type: text/css
vary: Accept-Encoding
age: 83015
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| static.licdn.com/sc/h/9ebf8tffd75yehebdtenpl54k | 95.101.11.48 | | 1.5 MB |
URL static.licdn.com/sc/h/9ebf8tffd75yehebdtenpl54k IP95.101.11.48:0 ASN#20940 Akamai International B.V.
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size1.5 MB (1512241 bytes) Hashe4fd71416e5f2ef9934e700abbb879ae 248e5e23d5f3ded1031cf49ceff3c94568231280 24553b98cbdaebebcc89a864d7a30ed27f18f51fc7f51bf058336d8b14f7fc13
GET /sc/h/9ebf8tffd75yehebdtenpl54k HTTP/1.1
Host: static.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.linkedin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Play
expires: Tue, 22 Apr 2025 18:26:03 GMT
cache-control: max-age=31536000, immutable
last-modified: Mon, 05 Nov 2012 04:00:51 GMT
x-li-static-content: 1
content-type: text/javascript
x-fs-uuid: 000616b391f1e9572aa2cc6f017ebcb3
x-li-fabric: prod-lva1
x-content-type-options: nosniff
x-li-pop: prod-lva1-x
x-li-proto: http/1.1
access-control-expose-headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE
x-li-uuid: AAYWs5Hx6VcqosxvAX68sw==
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:06 GMT
x-cdn-proto: HTTP2
x-cdn-client-ip-version: IPV4
timing-allow-origin: *
access-control-allow-origin: *
x-cdn: AKAM
X-Firefox-Spdy: h2
|
|
| ssl.gstatic.com/datastudio/cloud-lego-fe.fe-server_20240423.00_p0/css/css.css?cb=627243876 | 142.250.74.163 | 200 OK | 131 kB |
URL GET HTTP/2ssl.gstatic.com/datastudio/cloud-lego-fe.fe-server_20240423.00_p0/css/css.css?cb=627243876 IP142.250.74.163:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeASCII text, with very long lines (65437) Size131 kB (130781 bytes) Hash39622fb933372dab5567efa6e42290f0 8f73fcd12be98d220b7c04a39f69416798937db9 5e1ebd79f46370c4726dbdc1a566391ad3241fbe499a716b6155d3cb7793132a
GET /datastudio/cloud-lego-fe.fe-server_20240423.00_p0/css/css.css?cb=627243876 HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/analytics-lego-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="analytics-lego-eng"
report-to: {"group":"analytics-lego-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/analytics-lego-eng"}]}
content-length: 130781
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 20:54:36 GMT
expires: Wed, 23 Apr 2025 20:54:36 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 07:24:25 GMT
content-type: text/css
vary: Accept-Encoding
age: 83015
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-S4FJY0X3VX | 142.250.74.168 | 200 OK | 96 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-S4FJY0X3VX IP142.250.74.168:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Hashed7331c713c0a9f0c286ab88d44376ea 3707e33b231cc9feca0d9599e6fa5e3a5a211b7c ba09a7581cb3b4ffffcc400e8c5d530efad712238a6205760c289588a7196790
GET /gtag/js?id=G-S4FJY0X3VX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 19:58:11 GMT
expires: Wed, 24 Apr 2024 19:58:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 95615
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/icon?family=Material+Icons|Material+Icons+Extended | 142.250.74.74 | 200 OK | 16 kB |
URL GET HTTP/2fonts.googleapis.com/icon?family=Material+Icons|Material+Icons+Extended IP142.250.74.74:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typegzip compressed data, max compression Hashd0e8a1a8d2ff56b939240b52b0be732a 007e8a92ee5312669818cfd5877e706b662359c6 d9f2acfa7ef1b31811d666006820caec5c663dc289246177aeb820763057954a
GET /icon?family=Material+Icons|Material+Icons+Extended HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 19:58:11 GMT
date: Wed, 24 Apr 2024 19:58:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:54:48 GMT
expires: Wed, 23 Apr 2025 05:54:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 137004
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lookerstudio.google.com/favicon.ico | 142.250.74.110 | 301 Moved Permanently | 0 B |
URL GET HTTP/3lookerstudio.google.com/favicon.ico IP142.250.74.110:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign |
GET /favicon.ico HTTP/1.1
Host: lookerstudio.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58; _ga_S4FJY0X3VX=GS1.1.1713988692.1.0.1713988692.0.0.0; _ga=GA1.1.1470445353.1713988693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
content-type: application/binary
x-frame-options: DENY
content-security-policy: script-src 'report-sample' 'nonce-5Afgikip7DPmBLaOGyEwug' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none'
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 19:58:12 GMT
location: https://ssl.gstatic.com/datastudio/latest/static_images/pngs/favicon_looker_studio.png
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ssl.gstatic.com/datastudio/latest/static_images/pngs/favicon_looker_studio.png | 142.250.74.163 | 200 OK | 4.8 kB |
URL GET HTTP/3ssl.gstatic.com/datastudio/latest/static_images/pngs/favicon_looker_studio.png IP142.250.74.163:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hashcb13b37d9ceb24a98dda6afd6eda0c39 a42e3afb3223a2892fa9483b2f4ccd3596ef6eb0 a3941e483ef88cf0299266cdb18200770144a15c836c9b40e7052ae0f2e0dc44
GET /datastudio/latest/static_images/pngs/favicon_looker_studio.png HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookerstudio.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/analytics-lego-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="analytics-lego-eng"
report-to: {"group":"analytics-lego-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/analytics-lego-eng"}]}
content-length: 4811
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:59:30 GMT
expires: Fri, 18 Apr 2025 02:59:30 GMT
cache-control: public, max-age=31536000
age: 579522
last-modified: Mon, 10 Oct 2022 09:21:33 GMT
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css | 142.250.74.35 | 200 OK | 25 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeASCII text, with very long lines (56412), with no line terminators Hash2c00b9f417b688224937053cd0c284a5 17b4c18ebc129055dd25f214c3f11e03e9df2d82 1e754b107428162c65a26d399b66db3daaea09616bf8620d9de4bc689ce48eed
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24617
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 15:50:55 GMT
expires: Wed, 23 Apr 2025 15:50:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/css
vary: Accept-Encoding
age: 101237
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 206 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205803 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:54:48 GMT
expires: Wed, 23 Apr 2025 05:54:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 137004
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js | 142.250.74.164 | 200 OK | 7.4 kB |
URL GET HTTP/3www.google.com/js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (17602) Hasha881e4c268e13ad20405ae80fca4c36b dee477906e2c92b4c7747029a2409069b9b676ad 63d2e26aa68933bac804050c4e0f0293f1f97e927ad4a79ac9e6a0e8b310fb77
GET /js/bg/Y9LiaqaJM7rIBAUMTg8Ck_H5fpJ61Keayeag6LMQ-3c.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 7447
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 05:05:57 GMT
expires: Thu, 24 Apr 2025 05:05:57 GMT
cache-control: public, max-age=31536000
age: 53536
last-modified: Tue, 16 Apr 2024 13:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/recaptcha/api2/logo_48.png | 142.250.74.35 | 200 OK | 2.2 kB |
URL GET HTTP/3www.gstatic.com/recaptcha/api2/logo_48.png IP142.250.74.35:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashef9941290c50cd3866e2ba6b793f010d 4736508c795667dcea21f8d864233031223b7832 1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:54:07 GMT
expires: Thu, 25 Apr 2024 02:54:07 GMT
cache-control: public, max-age=604800
age: 579846
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:03 GMT
expires: Fri, 18 Apr 2025 02:43:03 GMT
cache-control: public, max-age=31536000
age: 580510
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:25:07 GMT
expires: Fri, 18 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 527586
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/feedback/js/help/prod/service/lazy.min.js | 142.250.74.35 | 200 OK | 37 kB |
URL GET HTTP/3www.gstatic.com/feedback/js/help/prod/service/lazy.min.js IP142.250.74.35:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (3383) Hashde2f04957196ac8c3c7678ad4c33a46a 4788d5b2576e992626df52268f212a5a2d141d02 e4073a5d69e86546e65b01c6f50f43b91691ceee2a9eedfe2ddfcbb90a8d695b
GET /feedback/js/help/prod/service/lazy.min.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/product-feedback-gathering
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="product-feedback-gathering"
report-to: {"group":"product-feedback-gathering","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/product-feedback-gathering"}]}
content-length: 36994
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 19:22:27 GMT
expires: Wed, 24 Apr 2024 20:12:27 GMT
cache-control: public, max-age=3000
last-modified: Tue, 23 Apr 2024 16:28:31 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 2146
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m | 142.250.74.164 | 200 OK | 206 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m IP142.250.74.164:443
Requested byhttps://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size206 kB (205913 bytes) Hashe4eb924eec164dfe5fb43e5d8e6b2a2f 582bad0eac6440aa49632ca1e24d7a52a89d7d92 428ed37cf336160c986f3c470a345bd9790e95d119cfb794767637df59eb3a59
GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Wed, 24 Apr 2024 19:58:13 GMT
date: Wed, 24 Apr 2024 19:58:13 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/_/datastudio/_/js/k=datastudio.datastudio.no.s2bpyJv6F3s.2018.O/am=gA/d=0/rs=AHAPuoPtapAwodRsVrwfaPG1y3YIiRE83Q/m=syd,syc,sy8,syp,syn,sy12,syb,sye,sy1g,sy6,sy9,sym,syo,sy4,sy16,sy19,syw,sy1a,sy7,sy15,sya,sy1b,sy1c,sy1d,sy2,syi,sy10,sy1z,sy1x,syl,syv,sy17,sy18,syz,sy1h,sy1i,sy1j,sy1f,syf,syh,sys,sy1,sy1l,sy1q,syj,syy,sy1p,sy1o,sy1e,sy13,sy1y,sy1w,sy22,sy3,sy5,syg,syq,syr,syt,syu,syx,sy11,sy1k,sy1m,sy14,sy1r,sy1s,sy25,sy28,sy21,sy1u,sy29,sy0,sy26,sy2i,sy2j,sy2h,sy20,sy23,sy24,sy2k,sy1t,sy2e,sy2f,sy2c,sy2q,sy2a,sy2r,syk,sy1n,sy1v,sy2b,sy2o,sy2t,sy31,sy36,sy37,sy38,sy39,sy3a,sy3b,pm_ng2report | 142.250.74.35 | 200 OK | 2.1 MB |
URL GET HTTP/3www.gstatic.com/_/datastudio/_/js/k=datastudio.datastudio.no.s2bpyJv6F3s.2018.O/am=gA/d=0/rs=AHAPuoPtapAwodRsVrwfaPG1y3YIiRE83Q/m=syd,syc,sy8,syp,syn,sy12,syb,sye,sy1g,sy6,sy9,sym,syo,sy4,sy16,sy19,syw,sy1a,sy7,sy15,sya,sy1b,sy1c,sy1d,sy2,syi,sy10,sy1z,sy1x,syl,syv,sy17,sy18,syz,sy1h,sy1i,sy1j,sy1f,syf,syh,sys,sy1,sy1l,sy1q,syj,syy,sy1p,sy1o,sy1e,sy13,sy1y,sy1w,sy22,sy3,sy5,syg,syq,syr,syt,syu,syx,sy11,sy1k,sy1m,sy14,sy1r,sy1s,sy25,sy28,sy21,sy1u,sy29,sy0,sy26,sy2i,sy2j,sy2h,sy20,sy23,sy24,sy2k,sy1t,sy2e,sy2f,sy2c,sy2q,sy2a,sy2r,syk,sy1n,sy1v,sy2b,sy2o,sy2t,sy31,sy36,sy37,sy38,sy39,sy3a,sy3b,pm_ng2report IP142.250.74.35:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (1279) Size2.1 MB (2124182 bytes) Hashd44497d9477bbff35e02f46ce36bb292 0878db7de7d4818f915ce6e9a3e06c00c0ebfb9b 32f46f08f8091a7b327a850a9f2e86629d181bd47ef275a839a192acba6b3c7c
GET /_/datastudio/_/js/k=datastudio.datastudio.no.s2bpyJv6F3s.2018.O/am=gA/d=0/rs=AHAPuoPtapAwodRsVrwfaPG1y3YIiRE83Q/m=syd,syc,sy8,syp,syn,sy12,syb,sye,sy1g,sy6,sy9,sym,syo,sy4,sy16,sy19,syw,sy1a,sy7,sy15,sya,sy1b,sy1c,sy1d,sy2,syi,sy10,sy1z,sy1x,syl,syv,sy17,sy18,syz,sy1h,sy1i,sy1j,sy1f,syf,syh,sys,sy1,sy1l,sy1q,syj,syy,sy1p,sy1o,sy1e,sy13,sy1y,sy1w,sy22,sy3,sy5,syg,syq,syr,syt,syu,syx,sy11,sy1k,sy1m,sy14,sy1r,sy1s,sy25,sy28,sy21,sy1u,sy29,sy0,sy26,sy2i,sy2j,sy2h,sy20,sy23,sy24,sy2k,sy1t,sy2e,sy2f,sy2c,sy2q,sy2a,sy2r,syk,sy1n,sy1v,sy2b,sy2o,sy2t,sy31,sy36,sy37,sy38,sy39,sy3a,sy3b,pm_ng2report HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/analytics-lego-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="analytics-lego-eng"
report-to: {"group":"analytics-lego-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/analytics-lego-eng"}]}
timing-allow-origin: https://datastudio.google.com
content-length: 2124182
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 21:02:40 GMT
expires: Wed, 23 Apr 2025 21:02:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 07:28:27 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 82533
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| content-people-pa.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ | 142.250.74.74 | | 287 B |
URL content-people-pa.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ IP142.250.74.74:0
File typeHTML document, ASCII text Hash86875b8c5f50b50318b03cb066bc4658 ffe3053da31204b1b2b0688916aaab634d14b78c 6392a3abe229ead4ea07171a429a061a2c0d4d1dfb3612668736185c14b3f769
GET /static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ HTTP/1.1
Host: content-people-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-UAdTv8cHVtXPKMbEaywqww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/xd3cpp/2, require-trusted-types-for 'script'
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp; report-to="gapi"
report-to: {"group":"gapi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi"}]}
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:14 GMT
server: ESF
cache-control: private
content-length: 287
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/js/googleapis.proxy.js?onload=startup | 142.250.74.110 | 200 OK | 5.9 kB |
URL GET HTTP/3apis.google.com/js/googleapis.proxy.js?onload=startup IP142.250.74.110:443
Requested byhttps://content-sheets.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#parent=https%3A%2F%2Flookerstudio.google.com&rpctoken=1263400939 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2054) Hasheab0dc82067fb5758a121009c7040231 8d869354f7a947ecc087b23868999bc53f77bdf7 9c77d6db3131248f92ae41075f189b4ecc2e51bcfdcca143719a83145f8ac070
GET /js/googleapis.proxy.js?onload=startup HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://content-people-pa.googleapis.com/
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 5903
date: Wed, 24 Apr 2024 19:58:14 GMT
expires: Wed, 24 Apr 2024 19:58:14 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "9bc2326c55ad9a5d"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs | 142.250.74.110 | 200 OK | 28 kB |
URL GET HTTP/3apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs IP142.250.74.110:443
Requested byhttps://content-sheets.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#parent=https%3A%2F%2Flookerstudio.google.com&rpctoken=1263400939 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2124) Hash7d8cbf3c10edeb25732380ab3a9485c6 dc6332379fa46051ae4884abaa785d2b71fb9daf 1b163608a38440e0853a40a67c2645f310d490a4be2dd556a258c642df2e57d7
GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://content-people-pa.googleapis.com/
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 28128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 16:18:30 GMT
expires: Tue, 22 Apr 2025 16:18:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 18:15:45 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 185984
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/analytics-suite/header/suite/v2/ic_account_circle_dark.svg | 142.250.74.35 | 200 OK | 357 B |
URL GET HTTP/3www.gstatic.com/analytics-suite/header/suite/v2/ic_account_circle_dark.svg IP142.250.74.35:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeSVG Scalable Vector Graphics image Hash4796d40fb5b4a306a024c6bda7511fd6 a2e09ef16d96a1d7b68c38a5330a26174f23b7c4 a731909ef87a24cbed00b0856627a4a3fbe368424fdfce5235d3d404773fc48a
GET /analytics-suite/header/suite/v2/ic_account_circle_dark.svg HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
content-encoding: br
content-length: 357
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/analytics-config-team
cross-origin-opener-policy: same-origin; report-to="analytics-config-team"
report-to: {"group":"analytics-config-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/analytics-config-team"}]}
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 19:56:25 GMT
expires: Wed, 24 Apr 2024 20:56:25 GMT
cache-control: public, max-age=3600
age: 111
last-modified: Thu, 12 Oct 2023 20:18:33 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/analytics-lego/svg/ic_looker_studio.svg | 142.250.74.35 | 200 OK | 784 B |
URL GET HTTP/3www.gstatic.com/analytics-lego/svg/ic_looker_studio.svg IP142.250.74.35:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeSVG Scalable Vector Graphics image Hash8030c81bbb9b80e55e54b1fc4ce1eba8 bad358c2a4734db79a99a5c7f9665f2276366d4a 355995015d94f26eff134f7c53a942f1b6d2837a805bea8b8691f3b6620b6ecf
GET /analytics-lego/svg/ic_looker_studio.svg HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: image/svg+xml
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/analytics-lego-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="analytics-lego-eng"
report-to: {"group":"analytics-lego-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/analytics-lego-eng"}]}
content-length: 784
date: Wed, 24 Apr 2024 19:58:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0 Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 13:20:56 GMT
expires: Fri, 18 Apr 2025 13:20:56 GMT
cache-control: public, max-age=31536000
age: 542240
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 | 216.58.207.227 | 200 OK | 34 kB |
URL GET HTTP/3fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 IP216.58.207.227:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 34108, version 1.0 Hashc15d33a9508923be839d315a999ab9c7 d17f6e786a1464e13d4ec8e842f4eb121b103842 65c99d3b9f1a1b905046e30d00a97f2d4d605e565c32917e7a89a35926e04b98
GET /s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34108
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:58:19 GMT
expires: Wed, 23 Apr 2025 01:58:19 GMT
cache-control: public, max-age=31536000
age: 151197
last-modified: Tue, 23 May 2023 16:35:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| content-people-pa.googleapis.com/$discovery/rest?pp=0&fields=fields%5B%22kind%22%5D%2Cfields%5B%22name%22%5D%2Cfields%5B%22version%22%5D%2Cfields%5B%22rootUrl%22%5D%2Cfields%5B%22servicePath%22%5D%2Cfields%5B%22resources%22%5D%2Cfields%5B%22parameters%22%5D%2Cfields%5B%22methods%22%5D%2Cfields%5B%22batchPath%22%5D%2Cfields%5B%22id%22%5D&key=AIzaSyAng4TaCSbwmEwKIdn9M0m9ZHpzjAkbMw8 | 142.250.74.74 | 200 OK | 37 kB |
URL GET HTTP/3content-people-pa.googleapis.com/$discovery/rest?pp=0&fields=fields%5B%22kind%22%5D%2Cfields%5B%22name%22%5D%2Cfields%5B%22version%22%5D%2Cfields%5B%22rootUrl%22%5D%2Cfields%5B%22servicePath%22%5D%2Cfields%5B%22resources%22%5D%2Cfields%5B%22parameters%22%5D%2Cfields%5B%22methods%22%5D%2Cfields%5B%22batchPath%22%5D%2Cfields%5B%22id%22%5D&key=AIzaSyAng4TaCSbwmEwKIdn9M0m9ZHpzjAkbMw8 IP142.250.74.74:443
Requested byhttps://content-people-pa.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#parent=https%3A%2F%2Flookerstudio.google.com&rpctoken=618257192 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hashad32503e6148dc10deb0c58523d1c1c9 a518947a336f8f4ccac70391cde9fbc734cec06b c42a0ca6b4bde8ada1db3162b1a9c370fd93f2af868be93e013e4fcc8d40a41e
GET /$discovery/rest?pp=0&fields=fields%5B%22kind%22%5D%2Cfields%5B%22name%22%5D%2Cfields%5B%22version%22%5D%2Cfields%5B%22rootUrl%22%5D%2Cfields%5B%22servicePath%22%5D%2Cfields%5B%22resources%22%5D%2Cfields%5B%22parameters%22%5D%2Cfields%5B%22methods%22%5D%2Cfields%5B%22batchPath%22%5D%2Cfields%5B%22id%22%5D&key=AIzaSyAng4TaCSbwmEwKIdn9M0m9ZHpzjAkbMw8 HTTP/1.1
Host: content-people-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-ClientDetails: appVersion=5.0%20(X11)&platform=Linux%20x86_64&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0
X-Requested-With: XMLHttpRequest
X-JavaScript-User-Agent: google-api-javascript-client/1.1.0
X-Origin: https://lookerstudio.google.com
X-Referer: https://lookerstudio.google.com
X-Goog-Encode-Response-If-Executable: base64
DNT: 1
Connection: keep-alive
Referer: https://content-people-pa.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:16 GMT
server: ESF
cache-control: private
content-length: 36977
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/_/datastudio/_/js/k=datastudio.datastudio.no.s2bpyJv6F3s.2018.O/am=gA/d=0/rs=AHAPuoPtapAwodRsVrwfaPG1y3YIiRE83Q/m=pm_firebase | 142.250.74.35 | 200 OK | 147 kB |
URL GET HTTP/3www.gstatic.com/_/datastudio/_/js/k=datastudio.datastudio.no.s2bpyJv6F3s.2018.O/am=gA/d=0/rs=AHAPuoPtapAwodRsVrwfaPG1y3YIiRE83Q/m=pm_firebase IP142.250.74.35:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeJavaScript source, ASCII text, with very long lines (36329) Size147 kB (146655 bytes) Hash8600101c545be494e8b5998e5770248f bbc650d2e81a6d26a2d806f5b15bf59748cb8cb2 aefbcba613122091ba380a8a1239c4f95c7ddd241b08d4d48b6d8f77aba05db1
GET /_/datastudio/_/js/k=datastudio.datastudio.no.s2bpyJv6F3s.2018.O/am=gA/d=0/rs=AHAPuoPtapAwodRsVrwfaPG1y3YIiRE83Q/m=pm_firebase HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/analytics-lego-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="analytics-lego-eng"
report-to: {"group":"analytics-lego-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/analytics-lego-eng"}]}
timing-allow-origin: https://datastudio.google.com
content-length: 146655
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 21:30:56 GMT
expires: Wed, 23 Apr 2025 21:30:56 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 07:28:27 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 80840
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/maps/api/js?key=AIzaSyAng4TaCSbwmEwKIdn9M0m9ZHpzjAkbMw8&v=3&callback=loadMapsApiCallback&language=no®ion=US&libraries=visualization | 142.250.74.74 | 200 OK | 66 kB |
URL GET HTTP/3maps.googleapis.com/maps/api/js?key=AIzaSyAng4TaCSbwmEwKIdn9M0m9ZHpzjAkbMw8&v=3&callback=loadMapsApiCallback&language=no®ion=US&libraries=visualization IP142.250.74.74:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeJavaScript source, ASCII text, with very long lines (10168) Hashcaa83ced949ec8c094cd25a6a9c2a7b4 af744f8f83be6698d89f00cf0974ddc2140beda3 7ad52e536a4724bb03530899633f258faceab218165381882f3bfc10254029e0
GET /maps/api/js?key=AIzaSyAng4TaCSbwmEwKIdn9M0m9ZHpzjAkbMw8&v=3&callback=loadMapsApiCallback&language=no®ion=US&libraries=visualization HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
timing-allow-origin: *
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=1800
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:16 GMT
server: scaffolding on HTTPServer2
content-length: 66160
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ssl.gstatic.com/datastudio%2Fcloud-lego-fe.fe-server_20240423.00_p0%2Fstatic/icon/reset.svg | 142.250.74.163 | 200 OK | 243 B |
URL GET HTTP/3ssl.gstatic.com/datastudio%2Fcloud-lego-fe.fe-server_20240423.00_p0%2Fstatic/icon/reset.svg IP142.250.74.163:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeSVG Scalable Vector Graphics image Hash579e5ae9e692ac8183a2b8315a6c0507 4f109b651d50246a23c3df2e91d6b5aa2fdce9ea 297c8cee8619573fb8711ca1d6e064c70d8ffe8ce641f71a60d0315a4539391b
GET /datastudio%2Fcloud-lego-fe.fe-server_20240423.00_p0%2Fstatic/icon/reset.svg HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: https://lookerstudio.google.com
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/analytics-lego-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="analytics-lego-eng"
report-to: {"group":"analytics-lego-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/analytics-lego-eng"}]}
content-length: 243
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 20:55:01 GMT
expires: Wed, 23 Apr 2025 20:55:01 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 07:24:25 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin
age: 82996
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/images/icons/material/system_gm/svg/more_vert_24px.svg | 142.250.74.35 | 200 OK | 159 B |
URL GET HTTP/3www.gstatic.com/images/icons/material/system_gm/svg/more_vert_24px.svg IP142.250.74.35:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeSVG Scalable Vector Graphics image Hash8b6c7812ba9efab131f916bdf12566f6 d355101604837d05d76d41cbe225e785728e190a 6c7113da4bf372feb6c320a461f0c510fa8b92626a52b08cdeda3063070b3570
GET /images/icons/material/system_gm/svg/more_vert_24px.svg HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: https://lookerstudio.google.com
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 159
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 05:58:34 GMT
expires: Wed, 23 Apr 2025 05:58:34 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin
age: 136783
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/images/icons/material/system_gm/svg/content_copy_24px.svg | 142.250.74.35 | 200 OK | 240 B |
URL GET HTTP/3www.gstatic.com/images/icons/material/system_gm/svg/content_copy_24px.svg IP142.250.74.35:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeSVG Scalable Vector Graphics image Hash41fb3f6666db2c18de8b5ded8796195c adfeadac45e9bc6b5c112eb6d51aae9c2020bd46 bbb5ed0d166d1ef2dbf5f980bd320fee22ae9b18fc4866e2425a50699246b5d7
GET /images/icons/material/system_gm/svg/content_copy_24px.svg HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: https://lookerstudio.google.com
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 240
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 10:51:36 GMT
expires: Thu, 24 Apr 2025 10:51:36 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 25 Nov 2020 02:15:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin
age: 32801
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/images/icons/material/system_gm/svg/slideshow_24px.svg | 142.250.74.35 | 200 OK | 178 B |
URL GET HTTP/3www.gstatic.com/images/icons/material/system_gm/svg/slideshow_24px.svg IP142.250.74.35:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeSVG Scalable Vector Graphics image Hash24f52e64bd023c875da4494489744f94 30a099cf87fe18074b557208be35d7448614a004 a910a1f071e7d288803f9516fd5a312eb9fe1037bc9c4a8575ceda66f26e5136
GET /images/icons/material/system_gm/svg/slideshow_24px.svg HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: https://lookerstudio.google.com
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 178
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 11:19:05 GMT
expires: Tue, 22 Apr 2025 11:19:05 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin
age: 203952
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/images/icons/material/system_gm/svg/person_add_24px.svg | 142.250.74.35 | 200 OK | 246 B |
URL GET HTTP/3www.gstatic.com/images/icons/material/system_gm/svg/person_add_24px.svg IP142.250.74.35:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeSVG Scalable Vector Graphics image Hash4de8c3652f285aa52639648c01e57be7 449c913aa5290201b20a97695a74b8dbeba149eb 92121d0499048670a707ddd136c4340964b1050a346faf113905e0ee84fb222d
GET /images/icons/material/system_gm/svg/person_add_24px.svg HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: https://lookerstudio.google.com
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 246
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 02:00:16 GMT
expires: Wed, 23 Apr 2025 02:00:16 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin
age: 151081
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/images/icons/material/system_gm/svg/link_24px.svg | 142.250.74.35 | 200 OK | 202 B |
URL GET HTTP/3www.gstatic.com/images/icons/material/system_gm/svg/link_24px.svg IP142.250.74.35:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeSVG Scalable Vector Graphics image Hashf6e063941521cd8808a2f8aa5b6ceba7 3df1b9a549c6f90adf0217465436cda8b8b175c9 00f190c275beafbabb14d0adc6127dbb136b8a050517210f865cc1d4d3d95e35
GET /images/icons/material/system_gm/svg/link_24px.svg HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: https://lookerstudio.google.com
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 202
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 02:00:16 GMT
expires: Wed, 23 Apr 2025 02:00:16 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin
age: 151081
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.gstatic.com/images/icons/material/system_gm/svg/file_download_24px.svg | 142.250.74.35 | 200 OK | 170 B |
URL GET HTTP/3www.gstatic.com/images/icons/material/system_gm/svg/file_download_24px.svg IP142.250.74.35:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeSVG Scalable Vector Graphics image Hash5687c66c1b440611982a7836a6cb7b3a aa2ae264f9502d713202fb81a2a12097dafbf9c6 a8dfd68c9bc8e1cea1b1c1c13f18ae82229a1845471eacb05c1e3a25f7d8d83d
GET /images/icons/material/system_gm/svg/file_download_24px.svg HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: https://lookerstudio.google.com
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 170
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 06:02:41 GMT
expires: Wed, 23 Apr 2025 06:02:41 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Origin
age: 136536
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| lookerstudio.google.com/getReport?appVersion=20240423_0000 | 142.250.74.110 | 200 OK | 2.0 kB |
URL POST HTTP/3lookerstudio.google.com/getReport?appVersion=20240423_0000 IP142.250.74.110:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeASCII text, with very long lines (5591) Hash11ba010e1103a189f4db8cec26dad05c 73a2d41711d8b02bdc5d5b841bc03394890bf7f5 93e210ca2d848d85b4427eed0ef88596471791f67603f055f82dfbad9736bdf8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign |
POST /getReport?appVersion=20240423_0000 HTTP/1.1
Host: lookerstudio.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
encoding: null
Content-Length: 194
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58; _ga_S4FJY0X3VX=GS1.1.1713988692.1.1.1713988695.0.0.0; _ga=GA1.1.1470445353.1713988693
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
x-frame-options: DENY
content-security-policy: script-src 'report-sample' 'nonce-Su3Lm3aVT7YYedRnl9T29Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none'
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 19:58:16 GMT
content-disposition: attachment; filename="json.txt"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/js/googleapis.proxy.js?onload=startup | 142.250.74.110 | 200 OK | 5.9 kB |
URL GET HTTP/3apis.google.com/js/googleapis.proxy.js?onload=startup IP142.250.74.110:443
Requested byhttps://content-sheets.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#parent=https%3A%2F%2Flookerstudio.google.com&rpctoken=1263400939 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2054) Hasheab0dc82067fb5758a121009c7040231 8d869354f7a947ecc087b23868999bc53f77bdf7 9c77d6db3131248f92ae41075f189b4ecc2e51bcfdcca143719a83145f8ac070
GET /js/googleapis.proxy.js?onload=startup HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://content-sheets.googleapis.com/
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 5903
date: Wed, 24 Apr 2024 19:58:17 GMT
expires: Wed, 24 Apr 2024 19:58:17 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "9bc2326c55ad9a5d"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 | 216.58.207.227 | 200 OK | 34 kB |
URL GET HTTP/3fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 IP216.58.207.227:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 34108, version 1.0 Hashc15d33a9508923be839d315a999ab9c7 d17f6e786a1464e13d4ec8e842f4eb121b103842 65c99d3b9f1a1b905046e30d00a97f2d4d605e565c32917e7a89a35926e04b98
GET /s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34108
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:58:19 GMT
expires: Wed, 23 Apr 2025 01:58:19 GMT
cache-control: public, max-age=31536000
age: 151198
last-modified: Tue, 23 May 2023 16:35:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs | 142.250.74.110 | 200 OK | 28 kB |
URL GET HTTP/3apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs IP142.250.74.110:443
Requested byhttps://content-sheets.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#parent=https%3A%2F%2Flookerstudio.google.com&rpctoken=1263400939 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2124) Hash7d8cbf3c10edeb25732380ab3a9485c6 dc6332379fa46051ae4884abaa785d2b71fb9daf 1b163608a38440e0853a40a67c2645f310d490a4be2dd556a258c642df2e57d7
GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://content-sheets.googleapis.com/
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 28128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 16:18:30 GMT
expires: Tue, 22 Apr 2025 16:18:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 18:15:45 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 185987
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 | 216.58.207.227 | 200 OK | 128 kB |
URL GET HTTP/3fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 IP216.58.207.227:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 128352, version 1.0 Size128 kB (128352 bytes) Hash53436aca8627a49f4deaaa44dc9e3c05 0bc0c675480d94ec7e8609dda6227f88c5d08d2c 8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 Apr 2024 06:44:19 GMT
expires: Sun, 20 Apr 2025 06:44:19 GMT
cache-control: public, max-age=31536000
age: 393238
last-modified: Mon, 08 Apr 2024 19:04:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2 | 216.58.207.227 | 200 OK | 17 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2 IP216.58.207.227:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17032, version 1.0 Hash05a47f9e469d408c629f931cd33ff8b2 823f21f7b1d456db889c3afea393f0d2b9581c38 6be97ca17228a69c406231d89c003194c3dfba7401eaa9fe9e9ed0ef1c18dc38
GET /s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17032
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 21:52:10 GMT
expires: Tue, 22 Apr 2025 21:52:10 GMT
cache-control: public, max-age=31536000
age: 165967
last-modified: Wed, 11 May 2022 19:24:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 | 216.58.207.227 | 200 OK | 17 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 IP216.58.207.227:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17368, version 1.0 Hashabe083d96b58eb02ada8b7c30d7b09f2 61447d66d13a8c8f4335696777a85c438c46f749 db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 19 Apr 2024 20:59:15 GMT
expires: Sat, 19 Apr 2025 20:59:15 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 428342
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true | 142.250.74.74 | 200 OK | 23 B |
URL GET HTTP/3maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true IP142.250.74.74:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hash8a80554c91d9fca8acb82f023de02f11 5f36b2ea290645ee34d943220a14b54ee5ea5be5 ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:17 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://lookerstudio.google.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| content-sheets.googleapis.com/$discovery/rest?version=v4&pp=0&fields=fields%5B%22kind%22%5D%2Cfields%5B%22name%22%5D%2Cfields%5B%22version%22%5D%2Cfields%5B%22rootUrl%22%5D%2Cfields%5B%22servicePath%22%5D%2Cfields%5B%22resources%22%5D%2Cfields%5B%22parameters%22%5D%2Cfields%5B%22methods%22%5D%2Cfields%5B%22batchPath%22%5D%2Cfields%5B%22id%22%5D&key=AIzaSyAng4TaCSbwmEwKIdn9M0m9ZHpzjAkbMw8 | 142.250.74.74 | 200 OK | 4.9 kB |
URL GET HTTP/3content-sheets.googleapis.com/$discovery/rest?version=v4&pp=0&fields=fields%5B%22kind%22%5D%2Cfields%5B%22name%22%5D%2Cfields%5B%22version%22%5D%2Cfields%5B%22rootUrl%22%5D%2Cfields%5B%22servicePath%22%5D%2Cfields%5B%22resources%22%5D%2Cfields%5B%22parameters%22%5D%2Cfields%5B%22methods%22%5D%2Cfields%5B%22batchPath%22%5D%2Cfields%5B%22id%22%5D&key=AIzaSyAng4TaCSbwmEwKIdn9M0m9ZHpzjAkbMw8 IP142.250.74.74:443
Requested byhttps://content-sheets.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__#parent=https%3A%2F%2Flookerstudio.google.com&rpctoken=1263400939 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hash0054ad0204e50bc76eb2e209df95345b 44d8c40db56d120e5a7a2c0f34a7fbc337c3701a c96422959474288a3c10bce16ba89b7b8f13e02df15ea0a45dae6b0f5a0f3325
GET /$discovery/rest?version=v4&pp=0&fields=fields%5B%22kind%22%5D%2Cfields%5B%22name%22%5D%2Cfields%5B%22version%22%5D%2Cfields%5B%22rootUrl%22%5D%2Cfields%5B%22servicePath%22%5D%2Cfields%5B%22resources%22%5D%2Cfields%5B%22parameters%22%5D%2Cfields%5B%22methods%22%5D%2Cfields%5B%22batchPath%22%5D%2Cfields%5B%22id%22%5D&key=AIzaSyAng4TaCSbwmEwKIdn9M0m9ZHpzjAkbMw8 HTTP/1.1
Host: content-sheets.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-ClientDetails: appVersion=5.0%20(X11)&platform=Linux%20x86_64&userAgent=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0
X-Requested-With: XMLHttpRequest
X-JavaScript-User-Agent: google-api-javascript-client/1.1.0
X-Origin: https://lookerstudio.google.com
X-Referer: https://lookerstudio.google.com
X-Goog-Encode-Response-If-Executable: base64
DNT: 1
Connection: keep-alive
Referer: https://content-sheets.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:17 GMT
server: ESF
cache-control: private
content-length: 4949
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
x-l2-request-path: l2-managed-6
|
|
| lookerstudio.google.com/getFirebaseAuthToken?appVersion=20240423_0000 | 142.250.74.110 | 200 OK | 828 B |
URL POST HTTP/3lookerstudio.google.com/getFirebaseAuthToken?appVersion=20240423_0000 IP142.250.74.110:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeASCII text, with very long lines (1120) Hash7123cb6fccb732304d640899d703f3d7 5ea5ffb09a97b17d299111c80e0f128202ccfea1 c21a6a6f6b730f28d75d8ea4e38c29758a60b830a75246124eac6190b325e59f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign |
POST /getFirebaseAuthToken?appVersion=20240423_0000 HTTP/1.1
Host: lookerstudio.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
encoding: null
Content-Length: 94
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac/page/67CrD?s=gzkMCiPC3Xc
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58; _ga_S4FJY0X3VX=GS1.1.1713988692.1.1.1713988695.0.0.0; _ga=GA1.1.1470445353.1713988693
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
x-frame-options: DENY
content-security-policy: script-src 'report-sample' 'nonce-9AA77sTLa-gLz2kfdc3OpQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none'
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 19:58:17 GMT
content-disposition: attachment; filename="json.txt"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| identitytoolkit.googleapis.com/v1/accounts:signInWithCustomToken?key=AIzaSyAahxjTTmdpkfkjeuXkuBFRts-Ok51kuew | 142.250.74.106 | 200 OK | 1.3 kB |
URL OPTIONS HTTP/2identitytoolkit.googleapis.com/v1/accounts:signInWithCustomToken?key=AIzaSyAahxjTTmdpkfkjeuXkuBFRts-Ok51kuew IP142.250.74.106:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hash8fc892261175c590105109ddaa132ae2 608cc1c161392e790dc02245e8fd37e1d3ad3095 6a72c0c4d7536d3f617dd325a185052f2b59598db7ce27df7bf29869cf30dd27
POST /v1/accounts:signInWithCustomToken?key=AIzaSyAahxjTTmdpkfkjeuXkuBFRts-Ok51kuew HTTP/1.1
Host: identitytoolkit.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Client-Version: Firefox/JsCore/10.5.2/FirebaseCore-web
Content-Type: application/json
Content-Length: 1127
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 19:58:17 GMT
cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
server: ESF
content-length: 1250
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://lookerstudio.google.com
access-control-allow-credentials: true
access-control-expose-headers: date,vary,vary,vary,content-encoding,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| identitytoolkit.googleapis.com/v1/accounts:lookup?key=AIzaSyAahxjTTmdpkfkjeuXkuBFRts-Ok51kuew | 142.250.74.74 | 200 OK | 0 B |
URL POST HTTP/3identitytoolkit.googleapis.com/v1/accounts:lookup?key=AIzaSyAahxjTTmdpkfkjeuXkuBFRts-Ok51kuew IP142.250.74.74:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/accounts:lookup?key=AIzaSyAahxjTTmdpkfkjeuXkuBFRts-Ok51kuew HTTP/1.1
Host: identitytoolkit.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-client-version
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://lookerstudio.google.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-client-version
access-control-max-age: 3600
date: Wed, 24 Apr 2024 19:58:18 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| identitytoolkit.googleapis.com/v1/accounts:lookup?key=AIzaSyAahxjTTmdpkfkjeuXkuBFRts-Ok51kuew | 142.250.74.74 | 200 OK | 282 B |
URL POST HTTP/3identitytoolkit.googleapis.com/v1/accounts:lookup?key=AIzaSyAahxjTTmdpkfkjeuXkuBFRts-Ok51kuew IP142.250.74.74:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hash6ae2f170e4606e959f03a4e667520ea4 6dc7c7723ba1c599775469d3d92a296d802eab16 6b3f7afef56c560f3646a815ef64c9094946a63595a9fb848d38ef481f52c10e
POST /v1/accounts:lookup?key=AIzaSyAahxjTTmdpkfkjeuXkuBFRts-Ok51kuew HTTP/1.1
Host: identitytoolkit.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Client-Version: Firefox/JsCore/10.5.2/FirebaseCore-web
Content-Type: application/json
Content-Length: 1151
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: no-cache, no-store, max-age=0, must-revalidate
date: Wed, 24 Apr 2024 19:58:18 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
server: ESF
content-length: 282
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://lookerstudio.google.com
access-control-allow-credentials: true
access-control-expose-headers: date,vary,vary,vary,content-encoding,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=10475&CVER=22&X-HTTP-Session-Id=gsessionid&zx=tg3b9frfbewg&t=1 | 216.58.211.10 | 200 OK | 71 B |
URL POST HTTP/2firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=10475&CVER=22&X-HTTP-Session-Id=gsessionid&zx=tg3b9frfbewg&t=1 IP216.58.211.10:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectedgecert.googleapis.com Fingerprint73:4E:FC:CF:C3:7C:C7:53:F8:D9:1B:83:97:B3:E4:ED:66:7C:76:86 ValidityMon, 18 Mar 2024 20:54:38 GMT - Mon, 10 Jun 2024 20:54:37 GMT
Hash7ce1ced15cfb1a10f374b500109c672e baca5a463c8e12f540d343f9ae171598107681c8 ac7326c8ba9eaf67e2c611977cb721812bf6c59d3cf3daec286104aff50eafe3
POST /google.firestore.v1.Firestore/Listen/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=10475&CVER=22&X-HTTP-Session-Id=gsessionid&zx=tg3b9frfbewg&t=1 HTTP/1.1
Host: firestore.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookerstudio.google.com/
content-type: application/x-www-form-urlencoded
Content-Length: 1645
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-client-wire-protocol: h2
x-http-session-id: B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo
content-type: text/plain; charset=utf-8
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:18 GMT
server: ESF
cache-control: private
content-length: 71
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://lookerstudio.google.com
vary: origin
access-control-allow-credentials: true
access-control-expose-headers: x-client-wire-protocol,x-http-session-id
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| firestore.googleapis.com/google.firestore.v1.Firestore/Write/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=99890&CVER=22&X-HTTP-Session-Id=gsessionid&zx=yz8w4ifunt7r&t=1 | 216.58.211.10 | 200 OK | 71 B |
URL POST HTTP/2firestore.googleapis.com/google.firestore.v1.Firestore/Write/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=99890&CVER=22&X-HTTP-Session-Id=gsessionid&zx=yz8w4ifunt7r&t=1 IP216.58.211.10:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectedgecert.googleapis.com Fingerprint73:4E:FC:CF:C3:7C:C7:53:F8:D9:1B:83:97:B3:E4:ED:66:7C:76:86 ValidityMon, 18 Mar 2024 20:54:38 GMT - Mon, 10 Jun 2024 20:54:37 GMT
Hashf2c79d5213ee59bebd3cbb101bd6ff4c 9c446857439edddd921a5c82a93d4a095f9e2a25 6a8ec0c989d12e5c7d13a1c8b9620744a01b23e5a111af19ad1bbe541fc84e5a
POST /google.firestore.v1.Firestore/Write/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=99890&CVER=22&X-HTTP-Session-Id=gsessionid&zx=yz8w4ifunt7r&t=1 HTTP/1.1
Host: firestore.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookerstudio.google.com/
content-type: application/x-www-form-urlencoded
Content-Length: 1377
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-client-wire-protocol: h2
x-http-session-id: yVWXKxvUHo2owCbSQ2Z2mwIhxsk6vy3CaAApCiD72AY
content-type: text/plain; charset=utf-8
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:18 GMT
server: ESF
cache-control: private
content-length: 71
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://lookerstudio.google.com
vary: origin
access-control-allow-credentials: true
access-control-expose-headers: x-client-wire-protocol,x-http-session-id
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| lookerstudio.google.com/updatePresence?appVersion=20240423_0000 | 142.250.74.110 | 200 OK | 152 B |
URL POST HTTP/3lookerstudio.google.com/updatePresence?appVersion=20240423_0000 IP142.250.74.110:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
Hash38b96e0bb1e49e3a22406a7d20fd5b7b 8baffa80e9cea8667a4bc3968768825e32fd1042 39808f21e4e1770052ce3abccefd5b287d0222c1f1c5520f83a87bcfcdb1f27a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign |
POST /updatePresence?appVersion=20240423_0000 HTTP/1.1
Host: lookerstudio.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
encoding: null
Content-Length: 76
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac/page/67CrD?s=gzkMCiPC3Xc
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58; _ga_S4FJY0X3VX=GS1.1.1713988692.1.1.1713988695.0.0.0; _ga=GA1.1.1470445353.1713988693
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
x-frame-options: DENY
content-security-policy: script-src 'report-sample' 'nonce-dD3TQKRNpAEV91OuIAGMBw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none'
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 19:58:18 GMT
content-disposition: attachment; filename="json.txt"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=6RNT61ZqBs8i4h0qzEh9tw&AID=0&CI=0&TYPE=xmlhttp&zx=xnde2zz72vyf&t=1 | 216.58.211.10 | 200 OK | 623 B |
URL GET HTTP/2firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=6RNT61ZqBs8i4h0qzEh9tw&AID=0&CI=0&TYPE=xmlhttp&zx=xnde2zz72vyf&t=1 IP216.58.211.10:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectedgecert.googleapis.com Fingerprint73:4E:FC:CF:C3:7C:C7:53:F8:D9:1B:83:97:B3:E4:ED:66:7C:76:86 ValidityMon, 18 Mar 2024 20:54:38 GMT - Mon, 10 Jun 2024 20:54:37 GMT
Hash4f4d083f63d6d958b9d30e1c594e35da e5faa843bfda050c35e376cf861680ff6f3d8308 a7f1f1234c2da6e791fc6b4fee276f0713a3ea8fe65c9e81378ae1e1abf2def1
GET /google.firestore.v1.Firestore/Listen/channel?gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=6RNT61ZqBs8i4h0qzEh9tw&AID=0&CI=0&TYPE=xmlhttp&zx=xnde2zz72vyf&t=1 HTTP/1.1
Host: firestore.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookerstudio.google.com/
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-debug-tracking-id: 13098569733414398910;o=0
vary: Referer, origin
cache-control: private, max-age=0
x-content-type-options: nosniff
content-type: text/plain; charset=utf-8
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:19 GMT
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
access-control-allow-origin: https://lookerstudio.google.com
access-control-allow-credentials: true
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=6RNT61ZqBs8i4h0qzEh9tw&AID=0&CI=1&TYPE=xmlhttp&zx=yj0koubwcqsd&t=1 | 216.58.211.10 | 200 OK | 609 B |
URL GET HTTP/3firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=6RNT61ZqBs8i4h0qzEh9tw&AID=0&CI=1&TYPE=xmlhttp&zx=yj0koubwcqsd&t=1 IP216.58.211.10:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectedgecert.googleapis.com Fingerprint73:4E:FC:CF:C3:7C:C7:53:F8:D9:1B:83:97:B3:E4:ED:66:7C:76:86 ValidityMon, 18 Mar 2024 20:54:38 GMT - Mon, 10 Jun 2024 20:54:37 GMT
Hash04e6f949a3874fb40c2018a3ebeed777 573e008d4e52ced095b4142d3d3525010a07f62e 1adc6bff118a30aea6e717942304c416411efbdbab864a618c6c5f75176e3a66
GET /google.firestore.v1.Firestore/Listen/channel?gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=6RNT61ZqBs8i4h0qzEh9tw&AID=0&CI=1&TYPE=xmlhttp&zx=yj0koubwcqsd&t=1 HTTP/1.1
Host: firestore.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookerstudio.google.com/
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: private, max-age=0
x-content-type-options: nosniff
content-type: text/plain; charset=utf-8
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:20 GMT
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
access-control-allow-origin: https://lookerstudio.google.com
vary: origin
access-control-allow-credentials: true
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/maps-api-v3/api/js/55/11a/intl/no_ALL/common.js | 142.250.74.74 | 200 OK | 57 kB |
URL GET HTTP/3maps.googleapis.com/maps-api-v3/api/js/55/11a/intl/no_ALL/common.js IP142.250.74.74:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeJavaScript source, ASCII text, with very long lines (6677) Hash60377760f49766c92e46b56261777f7b f2c6fc94ad861c5b32731b2a821686480971d3b8 d5d19897e1b3ca67890ab40eb6481660bb5cf96f6511eb271f853564caf24c7c
GET /maps-api-v3/api/js/55/11a/intl/no_ALL/common.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 56591
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 22:03:38 GMT
expires: Tue, 22 Apr 2025 22:03:38 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Feb 2024 23:41:46 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 165284
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/maps-api-v3/api/js/55/11a/intl/no_ALL/util.js | 142.250.74.74 | 200 OK | 57 kB |
URL GET HTTP/3maps.googleapis.com/maps-api-v3/api/js/55/11a/intl/no_ALL/util.js IP142.250.74.74:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeJavaScript source, ASCII text, with very long lines (562) Hash7217cfe43953b86b76691c5d1408b163 d2d95a0b110c70df7268f3dd910b02b8fd34e512 44f4d44984a0af8d694e23f3ebd55e1602ed5c052053b039950df897e848f6fa
GET /maps-api-v3/api/js/55/11a/intl/no_ALL/util.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 57101
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 20:43:07 GMT
expires: Tue, 22 Apr 2025 20:43:07 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Feb 2024 23:41:46 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 170115
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| location.services.mozilla.com/v1/country?key=no-mozilla-api-key | 52.25.6.244 | | 48 B |
URL location.services.mozilla.com/v1/country?key=no-mozilla-api-key IP52.25.6.244:0
Hash94bc553225a6cddab963f4053273b388 57ffc8bd333dfe0bf3a05a5945ee15f9c15b0672 977bc9f6239939e6e0a2682325098f1bf0109e1450f040536670acf0f8798cb6
GET /v1/country?key=no-mozilla-api-key HTTP/1.1
Host: location.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 2592000
Cache-Control: private, no-cache, no-store, must-revalidate
Content-Security-Policy: default-src 'none'; report-uri /__cspreport__
Content-Type: application/json
Date: Wed, 24 Apr 2024 19:58:34 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Content-Length: 48
Connection: keep-alive
|
|
| fonts.googleapis.com/css?family=Droid+Sans:400italic,700italic,400,700,500|Syncopate:400italic,700italic,400,700,500|Impact:400italic,700italic,400,700|Ubuntu:400italic,700italic,400,700|Ubuntu+Mono:400italic,700italic,400,700|Open+Sans:400italic,700italic,300,400,600,700|Lato:400italic,700italic,400,700|Oswald:400italic,700italic,400,700|Lora:400italic,700italic,400,700,500|Roboto:400italic,700italic,500italic,400,700,300,500|Roboto+Condensed:400italic,700italic,400,700,500|Roboto2:400,300|Montserrat:400italic,700italic,400,700,500|Quicksand:400italic,700italic,400,700,500|Chewy:400italic,700italic,400,700,500|Indie+Flower:400italic,700italic,400,700,500|Orbitron:400italic,700italic,400,700,500|Cambria:400italic,700italic,400,700,500|Consolas:400italic,700italic,400,700,500|Calibri:400italic,700italic,400,700|Corsiva:400italic,700italic,400,700,500|Tahoma:400italic,700italic,400,700,500|Trebuchet+MS:400italic,700italic,400,700,500|Boogaloo|Bubblegum+Sans|Coming+Soon|Cormorant+Unicase:400,700|Oleo+Script:400,700|Permanent+Marker|Raleway:400,400i,700,700i|Reenie+Beanie|Eater|Great+Vibes|Google+Sans:400italic,700italic,400,700,500|Product+Sans:400|Google+Material+Icons:400,500,700 | 142.250.74.74 | 200 OK | 199 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Droid+Sans:400italic,700italic,400,700,500|Syncopate:400italic,700italic,400,700,500|Impact:400italic,700italic,400,700|Ubuntu:400italic,700italic,400,700|Ubuntu+Mono:400italic,700italic,400,700|Open+Sans:400italic,700italic,300,400,600,700|Lato:400italic,700italic,400,700|Oswald:400italic,700italic,400,700|Lora:400italic,700italic,400,700,500|Roboto:400italic,700italic,500italic,400,700,300,500|Roboto+Condensed:400italic,700italic,400,700,500|Roboto2:400,300|Montserrat:400italic,700italic,400,700,500|Quicksand:400italic,700italic,400,700,500|Chewy:400italic,700italic,400,700,500|Indie+Flower:400italic,700italic,400,700,500|Orbitron:400italic,700italic,400,700,500|Cambria:400italic,700italic,400,700,500|Consolas:400italic,700italic,400,700,500|Calibri:400italic,700italic,400,700|Corsiva:400italic,700italic,400,700,500|Tahoma:400italic,700italic,400,700,500|Trebuchet+MS:400italic,700italic,400,700,500|Boogaloo|Bubblegum+Sans|Coming+Soon|Cormorant+Unicase:400,700|Oleo+Script:400,700|Permanent+Marker|Raleway:400,400i,700,700i|Reenie+Beanie|Eater|Great+Vibes|Google+Sans:400italic,700italic,400,700,500|Product+Sans:400|Google+Material+Icons:400,500,700 IP142.250.74.74:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeASCII text, with very long lines (1572) Size199 kB (198876 bytes) Hash1b3d632bac8367eaaddc34c118a9df4e 56a19877f5313ce23ff274f33a2a4008c421ebdf 1949a4d7ab22f975e613eedf570798ee7f0420561d2cad9ac5ff7617b671423b
GET /css?family=Droid+Sans:400italic,700italic,400,700,500|Syncopate:400italic,700italic,400,700,500|Impact:400italic,700italic,400,700|Ubuntu:400italic,700italic,400,700|Ubuntu+Mono:400italic,700italic,400,700|Open+Sans:400italic,700italic,300,400,600,700|Lato:400italic,700italic,400,700|Oswald:400italic,700italic,400,700|Lora:400italic,700italic,400,700,500|Roboto:400italic,700italic,500italic,400,700,300,500|Roboto+Condensed:400italic,700italic,400,700,500|Roboto2:400,300|Montserrat:400italic,700italic,400,700,500|Quicksand:400italic,700italic,400,700,500|Chewy:400italic,700italic,400,700,500|Indie+Flower:400italic,700italic,400,700,500|Orbitron:400italic,700italic,400,700,500|Cambria:400italic,700italic,400,700,500|Consolas:400italic,700italic,400,700,500|Calibri:400italic,700italic,400,700|Corsiva:400italic,700italic,400,700,500|Tahoma:400italic,700italic,400,700,500|Trebuchet+MS:400italic,700italic,400,700,500|Boogaloo|Bubblegum+Sans|Coming+Soon|Cormorant+Unicase:400,700|Oleo+Script:400,700|Permanent+Marker|Raleway:400,400i,700,700i|Reenie+Beanie|Eater|Great+Vibes|Google+Sans:400italic,700italic,400,700,500|Product+Sans:400|Google+Material+Icons:400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 19:58:11 GMT
date: Wed, 24 Apr 2024 19:58:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/_/datastudio/_/js/k=datastudio.datastudio.no.s2bpyJv6F3s.2018.O/am=gA/d=1/rs=AHAPuoPtapAwodRsVrwfaPG1y3YIiRE83Q/m=pm_base | 142.250.74.35 | 200 OK | 5.7 MB |
URL GET HTTP/2www.gstatic.com/_/datastudio/_/js/k=datastudio.datastudio.no.s2bpyJv6F3s.2018.O/am=gA/d=1/rs=AHAPuoPtapAwodRsVrwfaPG1y3YIiRE83Q/m=pm_base IP142.250.74.35:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
Size5.7 MB (5660294 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_/datastudio/_/js/k=datastudio.datastudio.no.s2bpyJv6F3s.2018.O/am=gA/d=1/rs=AHAPuoPtapAwodRsVrwfaPG1y3YIiRE83Q/m=pm_base HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/analytics-lego-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="analytics-lego-eng"
report-to: {"group":"analytics-lego-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/analytics-lego-eng"}]}
timing-allow-origin: https://datastudio.google.com
content-length: 1469040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 21:02:36 GMT
expires: Wed, 23 Apr 2025 21:02:36 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 23 Apr 2024 07:28:27 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 82535
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE | 142.250.74.164 | 200 OK | 1.0 kB |
URL GET HTTP/2www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE IP142.250.74.164:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCD:48:2A:0C:60:1D:37:5A:D4:D5:A9:F7:DE:A0:2B:5E:2F:29:76:73 ValidityMon, 18 Mar 2024 20:38:49 GMT - Mon, 10 Jun 2024 20:38:48 GMT
File typeJavaScript source, ASCII text, with very long lines (1034), with no line terminators Hashe647b5a757117da1403f3a354bf0aaef 8a716e6ac11ed9929767a03b33ec39f44df2236e c83edf232a4ef42fc3e7316b06897179d0e6ef123b80171107b3f4a7bd96bf2c
GET /recaptcha/api.js?trustedtypes=true&render=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Wed, 24 Apr 2024 19:58:11 GMT
date: Wed, 24 Apr 2024 19:58:11 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 99034
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| firestore.googleapis.com/google.firestore.v1.Firestore/Write/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&gsessionid=yVWXKxvUHo2owCbSQ2Z2mwIhxsk6vy3CaAApCiD72AY&SID=cDI2g-q-S3Lm3eS2V9TnvQ&RID=99891&AID=1&zx=qhbvos8y0l3y&t=1 | 216.58.211.10 | 200 OK | 10 B |
URL POST HTTP/3firestore.googleapis.com/google.firestore.v1.Firestore/Write/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&gsessionid=yVWXKxvUHo2owCbSQ2Z2mwIhxsk6vy3CaAApCiD72AY&SID=cDI2g-q-S3Lm3eS2V9TnvQ&RID=99891&AID=1&zx=qhbvos8y0l3y&t=1 IP216.58.211.10:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectedgecert.googleapis.com Fingerprint73:4E:FC:CF:C3:7C:C7:53:F8:D9:1B:83:97:B3:E4:ED:66:7C:76:86 ValidityMon, 18 Mar 2024 20:54:38 GMT - Mon, 10 Jun 2024 20:54:37 GMT
File typeASCII text, with no line terminators Hashab9e36780c790dd38cddd5d445b7abc2 bc2aaf26648117aaa0d6f400793ad90fa1ef8ca0 b459d27e44ba17191815ac0a52584437a236eeb63b939e7d6c0ea75c8a4cd272
POST /google.firestore.v1.Firestore/Write/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&gsessionid=yVWXKxvUHo2owCbSQ2Z2mwIhxsk6vy3CaAApCiD72AY&SID=cDI2g-q-S3Lm3eS2V9TnvQ&RID=99891&AID=1&zx=qhbvos8y0l3y&t=1 HTTP/1.1
Host: firestore.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookerstudio.google.com/
content-type: application/x-www-form-urlencoded
Content-Length: 1562
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/plain; charset=utf-8
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:19 GMT
server: ESF
cache-control: private
content-length: 30
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://lookerstudio.google.com
vary: origin
access-control-allow-credentials: true
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=6RNT61ZqBs8i4h0qzEh9tw&AID=5&CI=1&TYPE=xmlhttp&zx=rrxjt7p2td8r&t=1 | 216.58.211.10 | 200 OK | 1.7 kB |
URL GET HTTP/3firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=6RNT61ZqBs8i4h0qzEh9tw&AID=5&CI=1&TYPE=xmlhttp&zx=rrxjt7p2td8r&t=1 IP216.58.211.10:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectedgecert.googleapis.com Fingerprint73:4E:FC:CF:C3:7C:C7:53:F8:D9:1B:83:97:B3:E4:ED:66:7C:76:86 ValidityMon, 18 Mar 2024 20:54:38 GMT - Mon, 10 Jun 2024 20:54:37 GMT
File typeASCII text, with very long lines (1923), with no line terminators Hash891ee7d06ad102aed594d684230d2c11 dcc93d5f127dec0227649a7641bdd244d54a2cbb 8b2a8087382b16858a04bb1e9f1779b6cededcb0318ef0d297e836709211c648
GET /google.firestore.v1.Firestore/Listen/channel?gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=6RNT61ZqBs8i4h0qzEh9tw&AID=5&CI=1&TYPE=xmlhttp&zx=rrxjt7p2td8r&t=1 HTTP/1.1
Host: firestore.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookerstudio.google.com/
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cache-control: private, max-age=0
x-content-type-options: nosniff
content-type: text/plain; charset=utf-8
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:20 GMT
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
access-control-allow-origin: https://lookerstudio.google.com
vary: origin
access-control-allow-credentials: true
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&SID=6RNT61ZqBs8i4h0qzEh9tw&RID=10476&AID=5&zx=2lfnpant457u&t=1 | 216.58.211.10 | 200 OK | 10 B |
URL POST HTTP/3firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&SID=6RNT61ZqBs8i4h0qzEh9tw&RID=10476&AID=5&zx=2lfnpant457u&t=1 IP216.58.211.10:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectedgecert.googleapis.com Fingerprint73:4E:FC:CF:C3:7C:C7:53:F8:D9:1B:83:97:B3:E4:ED:66:7C:76:86 ValidityMon, 18 Mar 2024 20:54:38 GMT - Mon, 10 Jun 2024 20:54:37 GMT
File typeASCII text, with no line terminators Hashe393ff4b41bc89897475b5386a8c5004 011dcd50813531536c93ca31cbd37aa22c4186e9 a7506d6afeaac5468a2cf381cebf15b52baf0e0ab9a5acb3208a562d951cdcf0
POST /google.firestore.v1.Firestore/Listen/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&SID=6RNT61ZqBs8i4h0qzEh9tw&RID=10476&AID=5&zx=2lfnpant457u&t=1 HTTP/1.1
Host: firestore.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookerstudio.google.com/
content-type: application/x-www-form-urlencoded
Content-Length: 142
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/plain; charset=utf-8
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:20 GMT
server: ESF
cache-control: private
content-length: 30
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://lookerstudio.google.com
vary: origin
access-control-allow-credentials: true
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m | 142.250.74.164 | 200 OK | 45 kB |
URL GET HTTP/3www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m IP142.250.74.164:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (36243) Hash03cd0976516eae8b6c341d97682378cd 9e2eeef1fe77e6fe23037b2c918af896fef9f7dd a9f9ba31ad0f4050c5b77a70b5e1481a9e384b53b7530eb9706b7d9c7beaae5b
GET /recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=f6la2zv9hn1m HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 19:58:12 GMT
content-security-policy: script-src 'nonce-YCPYZ-jN9lvFR8e2BdFuAg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc | 142.250.74.110 | 200 OK | 68 kB |
URL User Request GET HTTP/2lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc IP142.250.74.110:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeHTML document, ASCII text, with very long lines (62405) Hash8ce88b55e046a4083cfb0e4251687a45 6241f28a407d5b0723721d3ad4a91a3c2ee5f018 f6023084189876aaf49482ee9ae32ae6f611b3b0a4988263ed9594a570df86aa
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign |
GET /reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc HTTP/1.1
Host: lookerstudio.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-frame-options: DENY
content-security-policy: script-src 'report-sample' 'nonce-ut6DbCjHzzv2XWU3jZm7XA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none'
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 24 Apr 2024 19:58:10 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: unsafe-none
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&SID=6RNT61ZqBs8i4h0qzEh9tw&RID=10477&AID=5&zx=wqrcmdz0l4se&t=1 | 216.58.211.10 | 200 OK | 10 B |
URL POST HTTP/3firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&SID=6RNT61ZqBs8i4h0qzEh9tw&RID=10477&AID=5&zx=wqrcmdz0l4se&t=1 IP216.58.211.10:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectedgecert.googleapis.com Fingerprint73:4E:FC:CF:C3:7C:C7:53:F8:D9:1B:83:97:B3:E4:ED:66:7C:76:86 ValidityMon, 18 Mar 2024 20:54:38 GMT - Mon, 10 Jun 2024 20:54:37 GMT
File typeASCII text, with no line terminators Hashe393ff4b41bc89897475b5386a8c5004 011dcd50813531536c93ca31cbd37aa22c4186e9 a7506d6afeaac5468a2cf381cebf15b52baf0e0ab9a5acb3208a562d951cdcf0
POST /google.firestore.v1.Firestore/Listen/channel?VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&SID=6RNT61ZqBs8i4h0qzEh9tw&RID=10477&AID=5&zx=wqrcmdz0l4se&t=1 HTTP/1.1
Host: firestore.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookerstudio.google.com/
content-type: application/x-www-form-urlencoded
Content-Length: 385
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/plain; charset=utf-8
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:20 GMT
server: ESF
cache-control: private
content-length: 30
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://lookerstudio.google.com
vary: origin
access-control-allow-credentials: true
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=6RNT61ZqBs8i4h0qzEh9tw&AID=10&CI=1&TYPE=xmlhttp&zx=bhs1aqtw9z3v&t=1 |  0.0.0.0 | | 0 B |
URL GET firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=6RNT61ZqBs8i4h0qzEh9tw&AID=10&CI=1&TYPE=xmlhttp&zx=bhs1aqtw9z3v&t=1 IP0.0.0.0:0
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectedgecert.googleapis.com Fingerprint73:4E:FC:CF:C3:7C:C7:53:F8:D9:1B:83:97:B3:E4:ED:66:7C:76:86 ValidityMon, 18 Mar 2024 20:54:38 GMT - Mon, 10 Jun 2024 20:54:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google.firestore.v1.Firestore/Listen/channel?gsessionid=B-AbEZbPdkbX36HPls1OIRCBafeBmsHBA6vOonq0rqo&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=6RNT61ZqBs8i4h0qzEh9tw&AID=10&CI=1&TYPE=xmlhttp&zx=bhs1aqtw9z3v&t=1 HTTP/1.1
Host: firestore.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookerstudio.google.com/
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cache-control: private, max-age=0
x-content-type-options: nosniff
content-type: text/plain; charset=utf-8
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:20 GMT
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
access-control-allow-origin: https://lookerstudio.google.com
vary: origin
access-control-allow-credentials: true
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs | 142.250.74.110 | 200 OK | 326 kB |
URL GET HTTP/3apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs IP142.250.74.110:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2124) Size326 kB (325611 bytes) Hash5e1f51f81d8ccc6a9416f2343bb51285 263266f4b4808a8cf944854afde4a8b928336ac9 d7c8cad0d955b575b2210f6acbe90b948313f78b49b1a6b3804615de4e198ac3
GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 111042
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 16:18:12 GMT
expires: Tue, 22 Apr 2025 16:18:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Apr 2024 18:15:45 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 186000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| lookerstudio.google.com/getImageV2?reportId=64aea898-2447-44d1-97fc-8f198d3f37ac&id=ADpgoFUR5048L2IADctkxZQ3kAB82trzki2phar0LKaLbO0VUoHWgna0v%2B2dNXPQookjnOd3VRo3Wjd36LEVkWD04pTZXnw5S2Y0I%2F26x7MHhl2Pr%2BGR8d41QbXxXc8iBpC0IJGiA9PKsyC%2FOJtJDW2d47gvrI%2FlkaJbeh2CZY0%3D | 142.250.74.110 | 200 OK | 44 kB |
URL GET HTTP/3lookerstudio.google.com/getImageV2?reportId=64aea898-2447-44d1-97fc-8f198d3f37ac&id=ADpgoFUR5048L2IADctkxZQ3kAB82trzki2phar0LKaLbO0VUoHWgna0v%2B2dNXPQookjnOd3VRo3Wjd36LEVkWD04pTZXnw5S2Y0I%2F26x7MHhl2Pr%2BGR8d41QbXxXc8iBpC0IJGiA9PKsyC%2FOJtJDW2d47gvrI%2FlkaJbeh2CZY0%3D IP142.250.74.110:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint70:CC:1A:8A:58:6C:1F:6D:43:AE:66:75:89:F7:99:7B:BC:7A:74:2D ValidityMon, 18 Mar 2024 19:37:19 GMT - Mon, 10 Jun 2024 19:37:18 GMT
File typeASCII text, with very long lines (43538) Hash0ff979a8b0b004b53f590e1bf0baa7bf 0752b90693f3a62f8d0145592c1d49fb714ca491 3c726c5869b1621c705dd0696fd67b40d5a9edb6766a4eaeb30a3abfce32c0a8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Docusign |
GET /getImageV2?reportId=64aea898-2447-44d1-97fc-8f198d3f37ac&id=ADpgoFUR5048L2IADctkxZQ3kAB82trzki2phar0LKaLbO0VUoHWgna0v%2B2dNXPQookjnOd3VRo3Wjd36LEVkWD04pTZXnw5S2Y0I%2F26x7MHhl2Pr%2BGR8d41QbXxXc8iBpC0IJGiA9PKsyC%2FOJtJDW2d47gvrI%2FlkaJbeh2CZY0%3D HTTP/1.1
Host: lookerstudio.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac/page/67CrD?s=gzkMCiPC3Xc
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; NID=513=gZiQigWqOg1NO5Byoq5sICk5G4ZwfoCpa4Mn73U9pNj4PI3QMfeQVjZT-tuHdhtKMKZPoY2g7F1Ikdwc__GyvjTKVp0qpAdqGMj294sWdiLAli6xuT3JgYDLKpJ1a586isrqCzcEK3AwWkbfRJCTYl834waWlmorjEJ1_Ch1N58; _ga_S4FJY0X3VX=GS1.1.1713988692.1.1.1713988695.0.0.0; _ga=GA1.1.1470445353.1713988693
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
x-frame-options: DENY
content-security-policy: script-src 'report-sample' 'nonce-1ToxE2ji5q9fH7Ox_IZf6w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none'
x-content-type-options: nosniff
expires: Wed, 24 Apr 2024 19:58:17 GMT
date: Wed, 24 Apr 2024 19:58:17 GMT
cache-control: private, max-age=2592000
content-disposition: attachment; filename="json.txt"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| firestore.googleapis.com/google.firestore.v1.Firestore/Write/channel?gsessionid=yVWXKxvUHo2owCbSQ2Z2mwIhxsk6vy3CaAApCiD72AY&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=cDI2g-q-S3Lm3eS2V9TnvQ&AID=0&CI=0&TYPE=xmlhttp&zx=caayngf7g3aa&t=1 | 0.0.0.0 | | 0 B |
URL GET firestore.googleapis.com/google.firestore.v1.Firestore/Write/channel?gsessionid=yVWXKxvUHo2owCbSQ2Z2mwIhxsk6vy3CaAApCiD72AY&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=cDI2g-q-S3Lm3eS2V9TnvQ&AID=0&CI=0&TYPE=xmlhttp&zx=caayngf7g3aa&t=1 IP0.0.0.0:0
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectedgecert.googleapis.com Fingerprint73:4E:FC:CF:C3:7C:C7:53:F8:D9:1B:83:97:B3:E4:ED:66:7C:76:86 ValidityMon, 18 Mar 2024 20:54:38 GMT - Mon, 10 Jun 2024 20:54:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /google.firestore.v1.Firestore/Write/channel?gsessionid=yVWXKxvUHo2owCbSQ2Z2mwIhxsk6vy3CaAApCiD72AY&VER=8&database=projects%2Fdatastudio-prod-firestore%2Fdatabases%2F(default)&RID=rpc&SID=cDI2g-q-S3Lm3eS2V9TnvQ&AID=0&CI=0&TYPE=xmlhttp&zx=caayngf7g3aa&t=1 HTTP/1.1
Host: firestore.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lookerstudio.google.com/
Origin: https://lookerstudio.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
x-debug-tracking-id: 18329142931044178040;o=0
vary: Referer, origin
cache-control: private, max-age=0
x-content-type-options: nosniff
content-type: text/plain; charset=utf-8
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:19 GMT
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
access-control-allow-origin: https://lookerstudio.google.com
access-control-allow-credentials: true
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| content-people-pa.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ | 142.250.74.74 | 200 OK | 432 B |
URL GET HTTP/3content-people-pa.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ IP142.250.74.74:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeHTML document, ASCII text, with very long lines (463), with no line terminators Hasha673cef79dca55c1822e9dd1435797c0 898c8c7f95a54a69b5cb3152c631bc93c8944f7f 539b0428163f8f9fdcc4ece7b3d871b792c37661e69d7be8750e374611ee5397
GET /static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ HTTP/1.1
Host: content-people-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-UAdTv8cHVtXPKMbEaywqww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/xd3cpp/2, require-trusted-types-for 'script'
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp; report-to="gapi"
report-to: {"group":"gapi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi"}]}
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:14 GMT
server: ESF
cache-control: private
content-length: 287
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| content-sheets.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ | 142.250.74.74 | 200 OK | 432 B |
URL GET HTTP/3content-sheets.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ IP142.250.74.74:443
Requested byhttps://lookerstudio.google.com/reporting/64aea898-2447-44d1-97fc-8f198d3f37ac?s=gzkMCiPC3Xc CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeHTML document, ASCII text, with very long lines (463), with no line terminators Hash45f320834d48c2eb4ec6a8a7ce617ea2 f343282dd41c060eb9eec0493543986bb52b1ee5 d0ca9344095928419fec422adf674f8f874585db0c171cb838cc7ee2c3731f02
GET /static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.JisoxTPHVRs.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg%2Fm%3D__features__ HTTP/1.1
Host: content-sheets.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lookerstudio.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-meJXtXNfSEvJdVt4PnatZA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/xd3cpp/2, require-trusted-types-for 'script'
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp; report-to="gapi"
report-to: {"group":"gapi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi"}]}
content-encoding: gzip
date: Wed, 24 Apr 2024 19:58:17 GMT
server: ESF
cache-control: private
content-length: 286
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
x-l2-request-path: l2-managed-6
|
|
0.0.0.0