ocsp.starfieldtech.com/
2.1 kB IP
Hash 60763e7a712a52ad061b7c4aa525cbd2
d471b36913a3bd8116783cf11e7d2326cdd83e40
4c752437790612b5d21e0f07df39e4014a38ae0a504c32c7c14916be984c2031
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 05 May 2024 00:35:38 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 04 May 2024 01:45:16 GMT
Expires: Sun, 05 May 2024 01:45:16 GMT
ETag: "d471b36913a3bd8116783cf11e7d2326cdd83e40"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
verifiedwebpage.com/go?ehash=9d401eb949f71ec02e22d82bf922ac14&product=22875&ar=55&cid=2608&lid=1610&slhash=345599b9c81e1952060ac22c7b9cc293&mtaid=mpmta&cid2=Offer_of_the_day
302 Found 95 B URL User Request GET HTTP/2 verifiedwebpage.com/go?ehash=9d401eb949f71ec02e22d82bf922ac14&product=22875&ar=55&cid=2608&lid=1610&slhash=345599b9c81e1952060ac22c7b9cc293&mtaid=mpmta&cid2=Offer_of_the_day
IP
Certificate IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
FingerprintB6:7C:0D:93:CD:D6:56:A3:74:B9:46:38:F0:C7:A5:31:BC:5F:AF:56
ValidityWed, 10 Apr 2024 21:43:08 GMT - Tue, 09 Jul 2024 21:43:07 GMT
File type HTML document, ASCII text
Hash 1dc0ae424a9231f2d185012d150681c2
f05716da750dfdb88bd2473f174bf9d3193affc9
4fe35558d37a19fc5fd048ff9f420a282dd7488e540d09ec07ac44744a0292bd
GET /go?ehash=9d401eb949f71ec02e22d82bf922ac14&product=22875&ar=55&cid=2608&lid=1610&slhash=345599b9c81e1952060ac22c7b9cc293&mtaid=mpmta&cid2=Offer_of_the_day HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 05 May 2024 00:35:39 GMT
content-type: text/html; charset=UTF-8
location: https://www.p3lstrk.com/2MGNK7T/CXW7M6/?sub1=3415447649292147582
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=bd25d7ad460d99f5b336d0be5a0479cd; path=/
pixel_session_hash_22875=3415447649292147582; expires=Tue, 04-Jun-2024 00:35:38 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_22875=1d565e6c46e7c8ff1ef711f5cf89196f599513238b770533d9725ad32f6a5e7f; expires=Tue, 07-May-2024 00:35:38 GMT; Max-Age=172800
__cf_bm=5c.q7Cdqm9XBa7uOLaBQwqCUhqgpAW7q_exhKVvr_eI-1714869339-1.0.1.1-QDyC4EOcuDrliKpX0rKr6ttjGBLN3hmUXuc2lQnE6NsAm28UGxJOLv3o6kG2Z.SJ0wmPHyvdmmOrrb7fJdASYg; path=/; expires=Sun, 05-May-24 01:05:39 GMT; domain=.verifiedwebpage.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87eca6d3ec7456c9-OSL
X-Firefox-Spdy: h2
go.goodlifestylenews.com/BRKOil0323/9d401eb949f71ec02e22d82bf922ac14/55/leadsource/2608/1610/345599b9c81e1952060ac22c7b9cc293/mpmta/Offer_of_the_day
302 Found 2.1 kB URL User Request GET HTTP/2 go.goodlifestylenews.com/BRKOil0323/9d401eb949f71ec02e22d82bf922ac14/55/leadsource/2608/1610/345599b9c81e1952060ac22c7b9cc293/mpmta/Offer_of_the_day
IP
Certificate IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hash 60763e7a712a52ad061b7c4aa525cbd2
d471b36913a3bd8116783cf11e7d2326cdd83e40
4c752437790612b5d21e0f07df39e4014a38ae0a504c32c7c14916be984c2031
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /BRKOil0323/9d401eb949f71ec02e22d82bf922ac14/55/leadsource/2608/1610/345599b9c81e1952060ac22c7b9cc293/mpmta/Offer_of_the_day HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 05 May 2024 00:35:38 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=9d401eb949f71ec02e22d82bf922ac14&product=22875&ar=55&cid=2608&lid=1610&slhash=345599b9c81e1952060ac22c7b9cc293&mtaid=mpmta&cid2=Offer_of_the_day
cache-control: max-age=600
expires: Sun, 05 May 2024 00:45:37 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7GRE4ZFFqV3OM0GnTj11UNnAbxbGKODLGv6%2BujnAQ%2BwFYMTx6J9NLXzDBnU2JuopKl8mRymHE1GP8lQN%2FRPLSzhYJd898KcxwJxh9ELMXItjzp2xzoHouO9h4tL0hTN3d78XobJXYt2%2BncA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eca6cf39e17129-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pro.oxfordclub.com/m/2314530?s1=54dd3614f68c4606aa337aedc27e997b
301 Moved Permanently 223 B URL User Request GET HTTP/1.1 pro.oxfordclub.com/m/2314530?s1=54dd3614f68c4606aa337aedc27e997b
IP
Certificate IssuerLet's Encrypt
Subjectordertracking2.pubsvs.com
Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E
ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 42c0fd3dc692b1b4ac56ac1086d7c087
6925964f6bb1c6b5e37d7669368f9b508f8d91c6
331e588e1b3165e81cfac97e45e625b6e5530bb2e4f6cd31d78edad1fdb591dd
GET /m/2314530?s1=54dd3614f68c4606aa337aedc27e997b HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Date: Sun, 05 May 2024 00:35:39 GMT
Content-Length: 223
Set-Cookie: 2314530=2743372; expires=Sat, 25-May-2024 00:35:39 GMT; path=/; HttpOnly
BIGipServerIRIS_PROD_HTTPS_POOL=!KWjYpNhqAxkabeM0QCUGrw3uOK3bWR4z1k7D66as65TKLIs0Ac51E95zhKrvYi1aL7bFdy1hBDz5LVU=; path=/; Httponly; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains
pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
200 OK 7.2 kB URL User Request GET HTTP/1.1 pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
IP
Certificate IssuerLet's Encrypt
Subjectordertracking2.pubsvs.com
Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E
ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1213), with CRLF, LF line terminators
Hash 5c64a923c15ccf53af221e6bbf5d507e
c4c492e8caf07289f003920c4298780c9e955582
0e29564d13163dfdc2dcd243f23071a6b08db88c775575c1ff577a6d64bd68e4
GET /p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!KWjYpNhqAxkabeM0QCUGrw3uOK3bWR4z1k7D66as65TKLIs0Ac51E95zhKrvYi1aL7bFdy1hBDz5LVU=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Set-Cookie: NBRK4404=; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Referrer-Policy: no-referrer-when-downgrade
Date: Sun, 05 May 2024 00:35:39 GMT
Content-Length: 7173
Strict-Transport-Security: max-age=63072000; includeSubDomains
use.typekit.net/myz0yns.css
200 OK 723 B URL GET HTTP/2 use.typekit.net/myz0yns.css
IP
ASN #20940 Akamai International B.V.
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56
ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (516)
Hash 2e7b43c19a9fef8e02459d18badd437a
eeb7ce8dda91f0c7aa5bd3f16a0a737f827d5158
0ae53ddd770100cf31ea14d22ee92b85050e48deb00d76e02ea6384edf30ee10
GET /myz0yns.css HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 723
date: Sun, 05 May 2024 00:35:40 GMT
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/animate.css/4.0.0/animate.min.css
200 OK 4.2 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/animate.css/4.0.0/animate.min.css
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65346)
Hash 39aca93cfd689b19cc6241e859642a92
5022a36b3d077c80b0b4a550ddfb280aae28dafe
eb2798553d86c6b1806d208320f645bd79eab0cebcf22176bddbc648e8f3ccd4
GET /ajax/libs/animate.css/4.0.0/animate.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:40 GMT
content-type: text/css; charset=utf-8
content-length: 4216
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb436a8-11848"
last-modified: Thu, 07 May 2020 16:26:16 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 375455
expires: Fri, 25 Apr 2025 00:35:40 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TsVdMSaAbj6HCyz6Jh4n%2BWuTEBYTYDX0Y081uXpTRFBgqZVnUfRdQaFO%2FyVpgXbvSA5PlkKklFVIbZr0Qed90PI1flIyzMu94r0j1EjMGc8ZhbJ3%2BakEn18cLRrNyYUvLDTAiuDv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87eca6e3498f569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.3.1.min.js
200 OK 30 kB URL GET HTTP/2 code.jquery.com/jquery-3.3.1.min.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /jquery-3.3.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1538f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:40 GMT
age: 20068737
x-served-by: cache-lga13622-LGA, cache-hel1410023-HEL
x-cache: HIT, HIT
x-cache-hits: 36, 378113
x-timer: S1714869341.708967,VS0,VE0
vary: Accept-Encoding
content-length: 30288
X-Firefox-Spdy: h2
pro.oxfordclub.com/p/Scripts/Common.js
200 OK 1.1 kB URL GET HTTP/1.1 pro.oxfordclub.com/p/Scripts/Common.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectordertracking2.pubsvs.com
Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E
ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 2fa1e7a35bfa376eff7f1426fc4a8afa
008b48dbd95a158542969743c18d0bc33e0a9384
857d94bd23b6437baa66255e1d507ad4a23d75ef9a271fb3e1303dc7dd0aced9
GET /p/Scripts/Common.js HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!KWjYpNhqAxkabeM0QCUGrw3uOK3bWR4z1k7D66as65TKLIs0Ac51E95zhKrvYi1aL7bFdy1hBDz5LVU=; NBRK4404=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "a37f814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Sun, 05 May 2024 00:35:40 GMT
Content-Length: 1140
Strict-Transport-Security: max-age=63072000; includeSubDomains
fast.wistia.com/assets/external/E-v1.js
200 OK 137 kB URL GET HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (65474)
Size 137 kB (136902 bytes)
Hash 80614b8d803f2c906aa3c7e77f8960ff
7a19443f27fb47fc8af0d969cd7872d4ad838c09
c0565c7259c86537c464248d3a2388eaea8fe765e69d6eb624b42f19e5951cf7
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 03 May 2024 17:44:50 GMT
etag: "91d641ace2bbc02e4c4b16d6564d8895"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:40 GMT
age: 3000
x-served-by: cache-iad-kcgs7200157-IAD, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 62, 611
x-timer: S1714869341.761537,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4d5bc81afe0358a5328c14b0f1d142707476b3ca
content-length: 136902
X-Firefox-Spdy: h2
pro.oxfordclub.com/p/Scripts/exitsplash.js
200 OK 3.4 kB URL GET HTTP/1.1 pro.oxfordclub.com/p/Scripts/exitsplash.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectordertracking2.pubsvs.com
Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E
ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File type JavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 4be89f6e2195d99e7c63c983c053429f
f0bb7ae25fa74b28c6cabaddb65e4ddb3be87423
02e1862c23b8216b6e54326209b9698c756058974ce647a52b98e10317f86be1
GET /p/Scripts/exitsplash.js HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!KWjYpNhqAxkabeM0QCUGrw3uOK3bWR4z1k7D66as65TKLIs0Ac51E95zhKrvYi1aL7bFdy1hBDz5LVU=; NBRK4404=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "bbcd814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Sun, 05 May 2024 00:35:40 GMT
Content-Length: 3383
Strict-Transport-Security: max-age=63072000; includeSubDomains
p.typekit.net/p.css?s=1&k=myz0yns&ht=tk&f=2007.2008.2011.2012&a=87036888&app=typekit&e=css
200 OK 5 B URL GET HTTP/2 p.typekit.net/p.css?s=1&k=myz0yns&ht=tk&f=2007.2008.2011.2012&a=87036888&app=typekit&e=css
IP
ASN #20940 Akamai International B.V.
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56
ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
Hash 83d24d4b43cc7eef2b61e66c95f3d158
f0cafc285ee23bb6c28c5166f305493c4331c84d
1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
GET /p.css?s=1&k=myz0yns&ht=tk&f=2007.2008.2011.2012&a=87036888&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
content-length: 5
last-modified: Tue, 07 Mar 2023 19:56:00 GMT
etag: "640796d0-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:41 GMT
X-Firefox-Spdy: h2
pro.oxfordclub.com/p/Scripts/HideContent.js
200 OK 466 B URL GET HTTP/1.1 pro.oxfordclub.com/p/Scripts/HideContent.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectordertracking2.pubsvs.com
Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E
ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File type JavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash cc54a637e514fddfe0be2e7c2d062e5b
a0f97813508d22d71f015b93cc8dfdcee65acdfd
580942b09dd77a53c0501f35a1d6c61cbcff1d504a6efb0dfa5d77cbdb1af741
GET /p/Scripts/HideContent.js HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!KWjYpNhqAxkabeM0QCUGrw3uOK3bWR4z1k7D66as65TKLIs0Ac51E95zhKrvYi1aL7bFdy1hBDz5LVU=; NBRK4404=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "bbcd814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Sun, 05 May 2024 00:35:40 GMT
Content-Length: 466
Strict-Transport-Security: max-age=63072000; includeSubDomains
portrait-tracker.s3.amazonaws.com/promo.js
200 OK 26 kB URL GET HTTP/1.1 portrait-tracker.s3.amazonaws.com/promo.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.s3.amazonaws.com
FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 968945799d89c26299a62dc0339bde67
5cce6ec9ed0e06a085ad9313a133c49b2dca0f3d
8b8045007a32445a83e59d46d1e8237fb3a7a4bd62d3cfdd943ca853ba86e2b2
GET /promo.js HTTP/1.1
Host: portrait-tracker.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: Qle15J1OfPa0vARXVi1QteeFIxMrvuPbdAG0jcKiqdmJfTqiGo/fDQGOIilS1u41uK0Lj5sGWUwU8b2ZmIwzakS9n6qeopw+Z5gx2g8w/jE=
x-amz-request-id: WZTQTT43PHMJ9PMV
Date: Sun, 05 May 2024 00:35:42 GMT
Last-Modified: Mon, 18 Mar 2024 16:37:29 GMT
ETag: "968945799d89c26299a62dc0339bde67"
x-amz-server-side-encryption: AES256
x-amz-version-id: Ea8sPnxc0hvQZiplzrNDZ20cACmxzdAR
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 25710
portrait-tracker.s3.amazonaws.com/all.js
200 OK 38 kB URL GET HTTP/1.1 portrait-tracker.s3.amazonaws.com/all.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.s3.amazonaws.com
FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (38527), with no line terminators
Hash 7a4866af82b3d9c4147211938ab5004d
b33f73f72aec3baf76b1a1b30e473e6b1e9ee3e1
0d442120d2b60deb30df02e017358ba9e8057e57af2a52aadaceb08200dc5118
GET /all.js HTTP/1.1
Host: portrait-tracker.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 6OwdhmF/syoW8rvqizn3bsduQT8795zEJyjD4bkRE9LVdIrN4CSzY7SQAwaxhRTiUGF7m5XL+7VS1PB0A4tf1qMYc6FekxsfXwWxhR1lFsI=
x-amz-request-id: WZTRQFA8PNYA6QHP
Date: Sun, 05 May 2024 00:35:42 GMT
Last-Modified: Tue, 12 Mar 2024 18:03:33 GMT
ETag: "7a4866af82b3d9c4147211938ab5004d"
x-amz-server-side-encryption: AES256
x-amz-version-id: DJTsKKAXZAjX88yytY8IZ9oo.cyFutLW
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 38527
s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/styles.css
200 OK 26 kB URL GET HTTP/1.1 s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/styles.css
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
Hash 2ca2bdfb68d8f3b7fef71af972cb74dc
7d7df1c9b92a4d2596fe31c33ffba65fa7cafd9b
9a36df90805efd3a97b8e302947477b8fdc1d3379d6e9892417c59135cf8ce71
GET /assets.oxfordclub.com/promo/brk/oil/styles.css HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: Dvgy1eoEPfbqG0WL8uhCYcOOyWbM2VLtjDueAawjDnBpv+gw0d4PTuoSLR573TRZwqd8rWvw3+g=
x-amz-request-id: WZTKBFANBF2SYTZS
Date: Sun, 05 May 2024 00:35:42 GMT
Last-Modified: Thu, 25 Apr 2024 15:35:37 GMT
ETag: "2ca2bdfb68d8f3b7fef71af972cb74dc"
x-amz-server-side-encryption: AES256
x-amz-version-id: pG6X6kwIGpGpIxk6S.TqL0xqRXaSRTcJ
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 25644
cdn.getblueshift.com/blueshift.js
200 OK 2.8 kB URL GET HTTP/1.1 cdn.getblueshift.com/blueshift.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.getblueshift.com
Fingerprint29:49:01:4C:AB:3A:C5:E4:F6:F2:67:75:BE:5B:FF:4B:F3:5C:EC:47
ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 06 Aug 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (6625), with no line terminators
Hash e70a08bd9e7ef156c1673f55ed87aa85
9dfa4cf582654332eb4e1ada9843594ca64bb0d2
a97c4e09767a155128f03c8a72efccc7d8e38e2e8e78daf14c8e5beaf72ff1a5
GET /blueshift.js HTTP/1.1
Host: cdn.getblueshift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 2826
Connection: keep-alive
Last-Modified: Wed, 24 Jan 2024 03:44:50 GMT
x-amz-server-side-encryption: AES256
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 05 May 2024 00:18:10 GMT
Cache-Control: max-age=3600
ETag: "bd39fba69cd2745738daf44e0e350f6e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3cMZIaPwb73-VM5DFx0edEbJ1GOyGKS0TwL1l2-0uDK5lDTlutdRaA==
Age: 1052
fast.wistia.com/assets/external/E-v1.js
200 OK 137 kB URL GET HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (65474)
Size 137 kB (136902 bytes)
Hash 80614b8d803f2c906aa3c7e77f8960ff
7a19443f27fb47fc8af0d969cd7872d4ad838c09
c0565c7259c86537c464248d3a2388eaea8fe765e69d6eb624b42f19e5951cf7
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 03 May 2024 17:44:50 GMT
etag: "91d641ace2bbc02e4c4b16d6564d8895"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:41 GMT
age: 3001
x-served-by: cache-iad-kcgs7200157-IAD, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 62, 612
x-timer: S1714869341.337579,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4d5bc81afe0358a5328c14b0f1d142707476b3ca
content-length: 136902
X-Firefox-Spdy: h2
use.typekit.net/af/9cf49e/00000000000000000000e807/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3
200 OK 17 kB URL GET HTTP/2 use.typekit.net/af/9cf49e/00000000000000000000e807/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3
IP
ASN #20940 Akamai International B.V.
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56
ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 16728, version 1.0
Hash 994cc140824e4f41167b6a8f671c66b3
87410c73b2e269b136638b46eb888286ff93fdd2
c965b7e3bd43eceaf5c91309885ba7ee7bcb3b3d018a19c997faea37e30b3306
GET /af/9cf49e/00000000000000000000e807/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 16728
etag: "913296c9ffe9c1f97e163e531cc2022a12d91b5a"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 05 May 2024 00:35:41 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/a28b50/00000000000000000000e803/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3
200 OK 17 kB URL GET HTTP/2 use.typekit.net/af/a28b50/00000000000000000000e803/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3
IP
ASN #20940 Akamai International B.V.
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56
ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 16808, version 1.0
Hash e0ba364087ced101e98cb22c66a3de71
8a6fc598bf108239d94fabea4eb0fe686618a55a
09244974d9decf20f9cd3402621e4844a454f3ae43cdf509538f43c0456ba6c4
GET /af/a28b50/00000000000000000000e803/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 16808
etag: "a6c1fa20004e862da7c922781204c8a0ef8794a4"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 05 May 2024 00:35:41 GMT
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
200 OK 25 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File type ASCII text, with very long lines (65324)
Hash 3afe15e976734d9daac26310110c4594
4f14a09a606c99a11f8fda15564ef66f70402826
680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c
GET /bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:40 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"3afe15e976734d9daac26310110c4594"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 10/31/2023 18:50:52
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: c8fc23bbdd5ae140dc8cf7807c3ae033
cdn-cache: HIT
cf-cache-status: HIT
age: 373778
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87eca6e35f4e56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/bkgd.jpg
200 OK 100 kB URL GET HTTP/1.1 s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/bkgd.jpg
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 1276x1134, components 3
Size 100 kB (100140 bytes)
Hash 9b7b924d709aa47fdcbd499da85125ff
6d43cb6f3c9588055fb731d1925d3b0e3a713ef8
32968cead2c39de5de18fdf6483cd1032dce114ae4b060947bd7824b4d1eb9f9
GET /assets.oxfordclub.com/promo/brk/oil/bkgd.jpg HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: WoDH0WKjAh+m/U2Ic3aWBbnCPilq8d9X2oNHElrkM2KynuFlHRrr0qznVDBUpHkMXQSH/NB12Yg=
x-amz-request-id: WZTM7AC8YKVXJN35
Date: Sun, 05 May 2024 00:35:42 GMT
Last-Modified: Mon, 27 Feb 2023 22:17:15 GMT
ETag: "9b7b924d709aa47fdcbd499da85125ff"
x-amz-server-side-encryption: AES256
x-amz-version-id: CMlw7Lt3Rmny.r9msJHmKS9CHFdIc7iV
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 100140
fast.wistia.com/embed/medias/sr8r36952j.json
200 OK 1.7 kB URL GET HTTP/2 fast.wistia.com/embed/medias/sr8r36952j.json
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
Hash 17a50049b7f7ab664e0d435828f9e405
613ae05bcf9a7c7135504a6ad7b9c2a598e7c067
b4465156af24d5d0bbe5ccbef39e1cbb588a04d7fa20aeb63fd987eef684f556
GET /embed/medias/sr8r36952j.json HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"b4465156af24d5d0bbe5ccbef39e1cbb"
x-request-id: bd48b241-8cdb-4dfa-bf0b-de606399e312
x-runtime: 0.050159
content-encoding: br
x-envoy-upstream-service-time: 52
via: 1.1 3d088826d90526f82c740c9ebe467f50.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD55-P2
x-amz-cf-id: qH_faHotz-w7PRXymPOFhI48txATgahJsBczPQnxEf48itpsO2s0BQ==
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:41 GMT
age: 19472
x-served-by: cache-iad-kiad7000042-IAD, cache-hel1410029-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 81, 1
x-timer: S1714869342.690603,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1682
X-Firefox-Spdy: h2
c.lytics.io/api/tag/9c32784e3cc4888a693a7988ad64c63d/latest.min.js
200 OK 129 kB URL GET HTTP/2 c.lytics.io/api/tag/9c32784e3cc4888a693a7988ad64c63d/latest.min.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 129 kB (129131 bytes)
Hash 7a823e3b7bdd1dc0ede14452bc124040
bf707ab1b9859f343cf614416f9c18e72a000ea7
63c5498e6b566cbdce24d58c797661ae67e8dfb2d75f3d5592017a881f9b1762
GET /api/tag/9c32784e3cc4888a693a7988ad64c63d/latest.min.js HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:41 GMT
content-type: application/javascript
access-control-allow-origin: *
strict-transport-security: max-age=63072000;
x-lytics-trace: 3fd9571f578000e0f5d646fbe920fe5d
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: HIT
age: 19
last-modified: Sun, 05 May 2024 00:35:22 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BBp0ZU%2F3u6XFUk8tQhM1sVO6dCw%2FcR5%2FJ%2FNv6abofGxD8JmsER96teI5N9TH%2Bb%2Bt2qcrTMHNARlfEgDsZbKxjdlQeLl9%2FLqw3NFW8zoxNEXUY5AOxhFDn9JcJ%2Fjk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eca6e73a2d0b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/wistia-mux.js
200 OK 32 kB URL GET HTTP/2 fast.wistia.com/assets/external/wistia-mux.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (65468)
Hash 8ac06e5866be6184d2b1ce8d2bf0c91e
96a6d6c99957cbf14afa06f9726671d8b1442757
79d9fc4e90671a2dd5a4afa3f19f2e51145b394d006e4621f8e25526e2d68c68
GET /assets/external/wistia-mux.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Fri, 03 May 2024 17:44:51 GMT
etag: "6580b4867624ad8b22ed6c4d204a8163"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:41 GMT
age: 3135
x-served-by: cache-iad-kcgs7200108-IAD, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 74, 35
x-timer: S1714869342.733795,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4d5bc81afe0358a5328c14b0f1d142707476b3ca
content-length: 32084
X-Firefox-Spdy: h2
c.lytics.io/c/9c32784e3cc4888a693a7988ad64c63d?_e=pv&_sesstart=1&_tz=0&_ul=en-US&_sz=1280x1024&_ts=1714869341682&_nmob=t&_device=desktop&url=pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&_v=3.0.35&_uid=eb8b0adf-b986-4beb-b178-a9b087479600&_getid=t
200 OK 35 B URL GET HTTP/2 c.lytics.io/c/9c32784e3cc4888a693a7988ad64c63d?_e=pv&_sesstart=1&_tz=0&_ul=en-US&_sz=1280x1024&_ts=1714869341682&_nmob=t&_device=desktop&url=pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&_v=3.0.35&_uid=eb8b0adf-b986-4beb-b178-a9b087479600&_getid=t
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File type GIF image data, version 89a, 1 x 1
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /c/9c32784e3cc4888a693a7988ad64c63d?_e=pv&_sesstart=1&_tz=0&_ul=en-US&_sz=1280x1024&_ts=1714869341682&_nmob=t&_device=desktop&url=pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&_v=3.0.35&_uid=eb8b0adf-b986-4beb-b178-a9b087479600&_getid=t HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:41 GMT
content-type: image/gif
content-length: 35
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cookie, *
access-control-allow-methods: GET, POST
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: seerid=eb8b0adf-b986-4beb-b178-a9b087479600; Path=/; Domain=lytics.io; Max-Age=77760000; Secure; SameSite=None
strict-transport-security: max-age=63072000;
x-lytics-trace: aebfe04bde44c86ebc16fa3f34e7049a
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ef7zSMqaxAknNeBqJW9dlvv2ovW9azzi5QbxK95r1CBEi6gncZqt3vB%2FJKZspQtmiAl0EwqkSMuBQEVEMxsn3WACJVsNFcCJDc%2B0nI5J94%2BAvaVlmcrM9h8EzUui"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eca6e9db9b0b02-OSL
X-Firefox-Spdy: h2
portrait-tracker.s3.amazonaws.com/index.html
200 OK 2.4 kB URL GET HTTP/1.1 portrait-tracker.s3.amazonaws.com/index.html
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.s3.amazonaws.com
FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT
File type HTML document, ASCII text
Hash c029f674b13b082e9a03b16217c3f576
f8ac05a2a24d42c863275c8dfd7e94486a237d0b
9b6554e3dbe9e11702720eb95ef8808b4e1e307bbec908ab5e6d0e1da2294470
GET /index.html HTTP/1.1
Host: portrait-tracker.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: frvK1iE7KA5Z9B88SUlZAH1C57vuvgxCdMZhhQTQR18y1vmtT2mLj2d4sPJmnmyolrSaDK1lFklM4Wv2Q4aph0xdbWHO3bFaxGpTxW1uu1E=
x-amz-request-id: WZTZDAX9ZE5RV2QS
Date: Sun, 05 May 2024 00:35:42 GMT
Last-Modified: Wed, 03 Nov 2021 21:10:09 GMT
ETag: "c029f674b13b082e9a03b16217c3f576"
x-amz-version-id: X1zblgbOV1d.Qkc55AyQidmgNGbabuW5
Accept-Ranges: bytes
Content-Type: text/html
Server: AmazonS3
Content-Length: 2371
s3.amazonaws.com/assets.oxfordclub.com/oxford-favicon.png
200 OK 1.5 kB URL GET HTTP/1.1 s3.amazonaws.com/assets.oxfordclub.com/oxford-favicon.png
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced
Hash 5ac49ec01d1cac718b2c4a4832d194c4
82a729b99d1363e89def3ece50ea7c0c07109a7a
77b961c58d38a7ae54fbd422c6388169b3f8b3932991f874326203fb1704f79a
GET /assets.oxfordclub.com/oxford-favicon.png HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 2/SE0fMgwcd8b9WZTw5X/EdLOuKsuQtzc0q32f0BT/71+uqNL4uz6mn5hDzfOFfGgk0NPRkJSdg=
x-amz-request-id: WZTM26VRA08EZJPE
Date: Sun, 05 May 2024 00:35:42 GMT
Last-Modified: Wed, 22 Aug 2018 16:04:30 GMT
ETag: "5ac49ec01d1cac718b2c4a4832d194c4"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 1487
fast.wistia.com/assets/external/playPauseLoadingControl.js
200 OK 22 kB URL GET HTTP/2 fast.wistia.com/assets/external/playPauseLoadingControl.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (65455)
Hash 7845f53703880c301c91e55dacfb2730
a91923e2fe5f5a139f65a41682cee83637c636bf
441f641db8dc0a94620a07d59cfdad03e6fd3630fe3af81f82ce80d9d8ac3942
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Fri, 03 May 2024 17:44:50 GMT
etag: "054f6647c2b3166c5479ecec2e1cdb23"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:42 GMT
age: 3001
x-served-by: cache-iad-kcgs7200088-IAD, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 59, 62
x-timer: S1714869342.065263,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4d5bc81afe0358a5328c14b0f1d142707476b3ca
content-length: 21596
X-Firefox-Spdy: h2
pro.oxfordclub.com/p/effortattributes/extractEffortattributes/NBRK4404
200 OK 771 B URL GET HTTP/1.1 pro.oxfordclub.com/p/effortattributes/extractEffortattributes/NBRK4404
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectordertracking2.pubsvs.com
Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E
ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
Hash 6ba0e609f7bf4c7ae77630ca1442f163
c83eea31ebb06712e3a422757a778c146e8bfbbd
87806a128e1cfb32c55c63ffd02ea9c8ed8243eb7726964600ff7f4859a5f3f6
GET /p/effortattributes/extractEffortattributes/NBRK4404 HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!KWjYpNhqAxkabeM0QCUGrw3uOK3bWR4z1k7D66as65TKLIs0Ac51E95zhKrvYi1aL7bFdy1hBDz5LVU=; NBRK4404=; seerses=e; seerid=eb8b0adf-b986-4beb-b178-a9b087479600
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: application/json; charset=utf-8
Access-Control-Allow-Origin: *
Referrer-Policy: no-referrer-when-downgrade
Date: Sun, 05 May 2024 00:35:41 GMT
Content-Length: 771
Strict-Transport-Security: max-age=63072000; includeSubDomains
www.googletagmanager.com/gtag/js?id=G-BBMPM3EJHQ&l=dataLayer&cx=c
200 OK 104 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-BBMPM3EJHQ&l=dataLayer&cx=c
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (7711)
Size 104 kB (103908 bytes)
Hash a799868849e7fc1eb3034efbb252e545
e54a003d472bd24db510280a5aca07e98e748060
ac219244c5c270d8f5167d6d3abbff4ba6d37ccdd7ce6c1f40b8956fbf8a9f4a
GET /gtag/js?id=G-BBMPM3EJHQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:42 GMT
expires: Sun, 05 May 2024 00:35:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103908
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtm.js?id=GTM-WP5R8BX
200 OK 100 kB URL GET HTTP/3 www.googletagmanager.com/gtm.js?id=GTM-WP5R8BX
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (30186)
Hash 16ebe3a342c155715e8ff570868dbf11
c869285502011e0c2dddbcb6f71eaf60c244d2cd
ce1626d9f0d1bd19c54d5de269b91be18d8bd790426ff19313df5c157e0d932e
GET /gtm.js?id=GTM-WP5R8BX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:42 GMT
expires: Sun, 05 May 2024 00:35:42 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 May 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 99559
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash b8fefe0a47f27629d7904b2eea9fcd31
3f740ff7d4ee846d251e2badc1492bca8061ac7c
81f94e8c14b134e16877993cd00d39334061e13df7c653d3ee57b000315c16bc
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sun, 05 May 2024 00:35:42 GMT
Last-Modified: Sat, 04 May 2024 23:50:28 GMT
Server: ECAcc (amb/6B38)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jlAzUl9A3j51WJPpmaEOr0ZR5wBAKcYPEI5jgVkFmESGBosI6bzOIA==
Age: 2714
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash b8fefe0a47f27629d7904b2eea9fcd31
3f740ff7d4ee846d251e2badc1492bca8061ac7c
81f94e8c14b134e16877993cd00d39334061e13df7c653d3ee57b000315c16bc
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sun, 05 May 2024 00:35:42 GMT
Last-Modified: Sat, 04 May 2024 23:01:12 GMT
Server: ECAcc (amb/6B35)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bl2cB5w0iZYexYjskFR3_W-l7fXlEh9_EuObrwAVeidB_dRv9IdODA==
Age: 5670
s3.amazonaws.com/assets.oxfordclub.com/css/global/lytics-styles.css
200 OK 412 kB URL GET HTTP/1.1 s3.amazonaws.com/assets.oxfordclub.com/css/global/lytics-styles.css
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
Size 412 kB (412525 bytes)
Hash a28e8bcaea6238c47ad9da67bed4d6ce
8f59b3f2caac9370dcf55d10a0b4111026a41ca0
b46d152320d43c90d73ada81ef07bbe36f1ef0f2199e89ea9d6307824a9978b0
GET /assets.oxfordclub.com/css/global/lytics-styles.css HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: m+lIVs0US5zcUC9Cmi4oXQRm//J5ZD9iDCUiNv7ibeO6wPlsYNe4zURDq337hVTaJPY+JiaoHzo=
x-amz-request-id: BNRSBXMG3BMSA36R
Date: Sun, 05 May 2024 00:35:43 GMT
Last-Modified: Fri, 03 May 2024 20:41:08 GMT
ETag: "a28e8bcaea6238c47ad9da67bed4d6ce"
x-amz-server-side-encryption: AES256
x-amz-version-id: JO4b9Olpj1udXVa5nFyAzvfQUmljeKhR
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 412525
fast.wistia.com/assets/external/engines/hls_video.js
200 OK 118 kB URL GET HTTP/2 fast.wistia.com/assets/external/engines/hls_video.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 118 kB (118191 bytes)
Hash 684734572ab20dfca09fb5b6ddccd95b
9a90f98c201e64522c24d3ec55de54885a220354
fc04939bd10e64a44b9614e6e657bcb9b3f15cc2870b5358ac6aca80ddc461e1
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Fri, 03 May 2024 17:44:50 GMT
etag: "f3fe789bd36b9718e55118c2f924f9f8"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:42 GMT
age: 3098
x-served-by: cache-iad-kcgs7200054-IAD, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 53, 16
x-timer: S1714869342.495867,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4d5bc81afe0358a5328c14b0f1d142707476b3ca
content-length: 118191
X-Firefox-Spdy: h2
embed-ssl.wistia.com/deliveries/ad4b9b62ceff289d06520fdb00b932cc.webp?image_crop_resized=1280x720
200 OK 54 kB URL GET HTTP/2 embed-ssl.wistia.com/deliveries/ad4b9b62ceff289d06520fdb00b932cc.webp?image_crop_resized=1280x720
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.wistia.com
Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2
ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 88a47ac2832e70ad716aecc5ffea768b
9bd2b0f405afd1c167d61ef3211876995ea859f0
8ba715f1d45064e53cd698563eb80773485bd28fc568e347cce61435a9546688
GET /deliveries/ad4b9b62ceff289d06520fdb00b932cc.webp?image_crop_resized=1280x720 HTTP/1.1
Host: embed-ssl.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
accept-ranges: none
access-control-request-method: *
cache-control: max-age=31536000
content-disposition: inline
edge-cache-tag: ad4b9b62ceff289d06520fdb00b932cc
etag: kGg1mbUfolTJdhz7jevqLB7fGbg=
last-modified: Tue, 28 Nov 2023 14:39:32 UTC
surrogate-key: ad4b9b62ceff289d06520fdb00b932cc thumbnail-delivery
date: Sat, 04 May 2024 05:53:23 GMT
x-envoy-upstream-service-time: 226
server: envoy
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TLgch1qjQhRZuMT7zGBVgc_2TJQ2TIHgDS34yrozsC-EoS76MWKlGw==
age: 67338
x-cdn: cloudfront
vary: Origin
X-Firefox-Spdy: h2
cdn.mediago.io/js/pixel.js
200 OK 92 kB URL GET HTTP/2 cdn.mediago.io/js/pixel.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.mediago.io
FingerprintD4:6D:29:DE:0A:B4:82:54:F2:27:37:C3:E6:0A:2E:B9:B5:BC:A1:C5
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 04 Sep 2024 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 0586bb55e87c7d9894960ddc7909f7aa
d5357122aed927725bd0ff2b1412ede94afcfdf4
4c1e05799065b4c2ca77145bc0367164d2ecaf9a90c2ff476a5b4ae005394f9b
GET /js/pixel.js HTTP/1.1
Host: cdn.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
content-length: 92454
last-modified: Sun, 28 Apr 2024 07:08:42 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 2ScvmyMIhHc8ebWNP3OEt23vl3g.9crH
accept-ranges: bytes
server: AmazonS3
date: Sun, 05 May 2024 00:18:12 GMT
etag: "0586bb55e87c7d9894960ddc7909f7aa"
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gKL5ZLKzgY3-9t70Bu5go6yr7rtQGglp58arUcFTOHHDfA4vQVLTgw==
age: 1640
vary: Origin
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/destination?id=AW-780266039&l=dataLayer&cx=c
200 OK 79 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-780266039&l=dataLayer&cx=c
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (1822)
Hash b8aa0f74c1cd1b1fc08461a74cb5c21d
f67323f713efb14667ce54831e141f84b07d1ab6
44aecacbdb3e44ccbb3786d479961a03d6d0d8619e5f44bc6f93dd5d8a58771a
GET /gtag/destination?id=AW-780266039&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:42 GMT
expires: Sun, 05 May 2024 00:35:42 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 May 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79114
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/destination?id=AW-780296261&l=dataLayer&cx=c
200 OK 88 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-780296261&l=dataLayer&cx=c
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Hash f8a8b23352e6478868ec293ddd71076b
37687cc218503de5c343716ef37273b045000f79
4a60586b4bfe9c04033eacc2b1c4832c33abc8c964a7b66e8972caf8e8e5b90f
GET /gtag/destination?id=AW-780296261&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:42 GMT
expires: Sun, 05 May 2024 00:35:42 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 May 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88516
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fast.wistia.com/assets/external/E-v1.js
200 OK 137 kB URL GET HTTP/2 fast.wistia.com/assets/external/E-v1.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (65474)
Size 137 kB (136902 bytes)
Hash 80614b8d803f2c906aa3c7e77f8960ff
7a19443f27fb47fc8af0d969cd7872d4ad838c09
c0565c7259c86537c464248d3a2388eaea8fe765e69d6eb624b42f19e5951cf7
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 03 May 2024 17:44:50 GMT
etag: "91d641ace2bbc02e4c4b16d6564d8895"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:42 GMT
age: 3002
x-served-by: cache-iad-kcgs7200157-IAD, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 62, 613
x-timer: S1714869343.749295,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4d5bc81afe0358a5328c14b0f1d142707476b3ca
content-length: 136902
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/destination?id=AW-707706541&l=dataLayer&cx=c
200 OK 81 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-707706541&l=dataLayer&cx=c
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (1822)
Hash 4bde68a6fe0ca150dcc80ef4bc99718a
96e56160535cb3342049b41f4e2be8d0f3b158c1
ef2c32ba318f46752d4dbf7da8908dca370e1cd2157ba45c9103e766d4d45efa
GET /gtag/destination?id=AW-707706541&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:42 GMT
expires: Sun, 05 May 2024 00:35:42 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 May 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81448
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/destination?id=AW-665056240&l=dataLayer&cx=c
200 OK 82 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-665056240&l=dataLayer&cx=c
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Hash cf2225aa2df55ddf36e38b794b0d1af8
719c7779298470d2a8b8d21f827b25370e5817a2
e69322bf8e8bfe52fc0ee19a4cb6a1687692ebdc97c74445796d01970bce3247
GET /gtag/destination?id=AW-665056240&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:42 GMT
expires: Sun, 05 May 2024 00:35:42 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 May 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81830
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/destination?id=AW-757445324&l=dataLayer&cx=c
200 OK 82 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-757445324&l=dataLayer&cx=c
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Hash a09495ae0f03287318c2a128dc91b959
1f84e2a3b881d4bc83f8932ed3883d37778db22c
8e1e08ab44ff58563870b21dd39018e42646129f61059088be5a2cc851c53332
GET /gtag/destination?id=AW-757445324&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:42 GMT
expires: Sun, 05 May 2024 00:35:42 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 May 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82003
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/destination?id=AW-780277278&l=dataLayer&cx=c
200 OK 82 kB URL GET HTTP/3 www.googletagmanager.com/gtag/destination?id=AW-780277278&l=dataLayer&cx=c
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (4179)
Hash 60112f175d787fa2a9a5777d4abc4a60
0a57753faaa0af864a68d0757efc35056cac74c3
aa11c13f2b3b980ce1a78b5ae8dfb0cd2ffa3955ffae37dd1e69d7b938baf979
GET /gtag/destination?id=AW-780277278&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:42 GMT
expires: Sun, 05 May 2024 00:35:42 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 May 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81944
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
dnzkifeab6.execute-api.us-east-1.amazonaws.com/Prod/GetLyticsUserData
200 OK 76 B URL OPTIONS HTTP/2 dnzkifeab6.execute-api.us-east-1.amazonaws.com/Prod/GetLyticsUserData
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.execute-api.us-east-1.amazonaws.com
Fingerprint85:1D:9B:37:86:17:AA:A6:C5:3C:48:6E:1F:0C:1C:74:E8:35:81:5E
ValidityMon, 08 Jan 2024 00:00:00 GMT - Tue, 04 Feb 2025 23:59:59 GMT
Hash 74cd2ce4def6577d2db4502c943c3289
c5ac742f41f7052834573a7f11ec085cc8506d55
674d1ff7419bdf7f1dafd4a41db01a4feb1d802122213ecc456dd43f72791984
POST /Prod/GetLyticsUserData HTTP/1.1
Host: dnzkifeab6.execute-api.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 22
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 76
date: Sun, 05 May 2024 00:35:43 GMT
x-amzn-requestid: a46555c8-351e-4137-95ad-4f6aa551f6b0
access-control-allow-origin: *
access-control-allow-headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token
x-amz-apigw-id: XRYe4FVPoAMEUmQ=
access-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT
x-amzn-trace-id: Root=1-6636d45e-4b878a3e0a183e63570a6e15;Parent=599f862550f27d68;Sampled=0;lineage=17be0e8a:0
x-cache: Miss from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -65k0Nd0IIfLuHUjozBjLVsAcC6JFPQ0A7k8wcG_g1e3HbKOFiv7Bw==
X-Firefox-Spdy: h2
cdn.mediago.io/js/h/val.html?postM=1&trackingid=
200 OK 21 kB URL GET HTTP/2 cdn.mediago.io/js/h/val.html?postM=1&trackingid=
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.mediago.io
FingerprintD4:6D:29:DE:0A:B4:82:54:F2:27:37:C3:E6:0A:2E:B9:B5:BC:A1:C5
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 04 Sep 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (21187), with no line terminators
Hash 8b68d17f3da429ee620c7a63e2f5098b
eaf0aae3d7a7b45db174058b5ba1fe9a289545c7
ed85daebc59103ac9b249bd3676ec425915eec9bdf24018d880c1178a571c9d6
GET /js/h/val.html?postM=1&trackingid= HTTP/1.1
Host: cdn.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 21187
last-modified: Mon, 08 Apr 2024 09:54:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 7MwpAgvznRx1dcq8IlUNovs5vfdi4Ypg
accept-ranges: bytes
server: AmazonS3
date: Sun, 05 May 2024 00:34:19 GMT
etag: "8b68d17f3da429ee620c7a63e2f5098b"
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lZ-svPVVj2IU11tXnv0KrXGmOz7FcR1V5YFTTBlAU-hXs8yFfFi63w==
age: 934
vary: Origin
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/sr8r36952j.m3u8
200 OK 757 B URL GET HTTP/2 fast.wistia.com/embed/medias/sr8r36952j.m3u8
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
Hash 56f02a07f87baef2b88ce74a81bd955a
7046211269cb8f47bded7987cd89e720b47a695b
c000771054153c7ee49a23043fd4bb666b8683e027d8b3ffdbd12f0eb4cff7f1
GET /embed/medias/sr8r36952j.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-mpegURL
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"c000771054153c7ee49a23043fd4bb66"
x-request-id: 41870f8c-87e3-4d0b-be40-ce0d119e9951
x-runtime: 0.023375
x-envoy-upstream-service-time: 24
via: 1.1 38ecebcaa39c8742da2b6336935bb446.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: L8e9lVopFpa5NMhjqxmX12j0_PI1zoHH_HqHciW8IJ4UIKW7dVf5YQ==
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:43 GMT
age: 19
x-served-by: cache-iad-kiad7000030-IAD, cache-hel1410029-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 20302, 1
x-timer: S1714869343.273321,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 757
X-Firefox-Spdy: h2
fast.wistia.com/assets/images/blank.gif
200 OK 1.2 kB URL GET HTTP/2 fast.wistia.com/assets/images/blank.gif
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type GIF image data, version 89a, 100 x 100
Hash fbdc4ed9a1e2ee4917a265306927bcf1
6d177725d8230df0457e72004080f712e26fe624
a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Wed, 10 May 2023 19:48:54 GMT
etag: "fbdc4ed9a1e2ee4917a265306927bcf1"
x-amz-server-side-encryption: AES256
content-type: image/gif
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:43 GMT
age: 917
x-served-by: cache-iad-kcgs7200077-IAD, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 25, 18
x-timer: S1714869343.275159,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1214
X-Firefox-Spdy: h2
fast.wistia.com/assets/external/allIntegrations.js
200 OK 5.8 kB URL GET HTTP/2 fast.wistia.com/assets/external/allIntegrations.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66
ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File type JavaScript source, ASCII text, with very long lines (23371)
Hash d5dd13ae4e2cc9dbc4601c4d95143418
13405305698ad9cc7f44a86871fa1c0d057a9bf4
709f139528814cc9d5158ed469a578082a81607df49b40e41a6fb4b240567ecd
GET /assets/external/allIntegrations.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Fri, 03 May 2024 17:44:50 GMT
etag: "4d5cbf7cb285a542334e7de7bc37ed93"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Sun, 05 May 2024 00:35:43 GMT
age: 3002
x-served-by: cache-iad-kjyo7100106-IAD, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 55, 81
x-timer: S1714869343.277006,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4d5bc81afe0358a5328c14b0f1d142707476b3ca
content-length: 5773
X-Firefox-Spdy: h2
www.googletagmanager.com/a?v=3&t=l&pid=347196932&rv=4510&u=AAAAAAAI&h=Ag>m=45be4510za201&ccid=siloed__AW-707706541&cid=siloed_AW-707706541&l=L3848.S15.B12.E16.I3888.EC7.TC1.HTC0~gtm.init.S1.V1.E14~gtm.js.S1.V0.TS5rep.TI1.TE0~gtm.dom.S0.V0.E7~gtm.load.S1.V0.E8~*.S0.V0~gtm.scrollDepth.S1.V0~gtm.init_consent.S1.V0.E13
200 OK 0 B URL GET HTTP/3 www.googletagmanager.com/a?v=3&t=l&pid=347196932&rv=4510&u=AAAAAAAI&h=Ag>m=45be4510za201&ccid=siloed__AW-707706541&cid=siloed_AW-707706541&l=L3848.S15.B12.E16.I3888.EC7.TC1.HTC0~gtm.init.S1.V1.E14~gtm.js.S1.V0.TS5rep.TI1.TE0~gtm.dom.S0.V0.E7~gtm.load.S1.V0.E8~*.S0.V0~gtm.scrollDepth.S1.V0~gtm.init_consent.S1.V0.E13
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a?v=3&t=l&pid=347196932&rv=4510&u=AAAAAAAI&h=Ag>m=45be4510za201&ccid=siloed__AW-707706541&cid=siloed_AW-707706541&l=L3848.S15.B12.E16.I3888.EC7.TC1.HTC0~gtm.init.S1.V1.E14~gtm.js.S1.V0.TS5rep.TI1.TE0~gtm.dom.S0.V0.E7~gtm.load.S1.V0.E8~*.S0.V0~gtm.scrollDepth.S1.V0~gtm.init_consent.S1.V0.E13 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 00:35:43 GMT
content-type: text/html
server: Google Tag Manager
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
siteimproveanalytics.com/js/siteanalyze_6255350.js
200 OK 68 B URL GET HTTP/2 siteimproveanalytics.com/js/siteanalyze_6255350.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subjectsiteimproveanalytics.com
FingerprintAF:D6:9C:F7:A0:DC:1A:1D:90:B8:5F:FF:5B:F3:8A:31:24:E2:E3:2B
ValidityTue, 23 Apr 2024 07:22:16 GMT - Mon, 22 Jul 2024 07:22:15 GMT
File type ASCII text, with no line terminators
Hash 8452ae713340916635198c94e9c13359
8f8bd309c51274fcbc6eb1b99805f947cdd50a69
8708150ed307463ea1670f6644f73ec82e3b6e8d6ff95be629b1ba4727f31ac7
GET /js/siteanalyze_6255350.js HTTP/1.1
Host: siteimproveanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 68
x-amz-id-2: ubMixGKKopqzFLsaPk/UONC5kq7Sx1dcwO9z9YFKpC5Wz8ne1H1AMNvfpsCLZcSGW5fcVZBqJ3bH8glDDgtflw==
x-amz-request-id: JJTD07GF3AFPQW63
cache-control: max-age=86400, no-transform
content-encoding: gzip
last-modified: Fri, 23 Aug 2019 22:14:39 GMT
etag: "6ef42917cbd55a82896411683d106194"
cf-cache-status: HIT
age: 1052
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gj6jlwf9kaXWBPtFxKv2eMZqDmtM9KKTmmOuFoad9Whv8Yme2tR0OHFNaNLrS1y3Bd%2FsdNpuvQjMRQpnaWaQCUSM1BMPX1xRGAUNpoUgJ%2Bpefx2xkpApLu%2BvDXfFunro8cb%2FVs7m1cRUFMo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eca6f549635691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
distillery.wistia.com/x
204 No Content 0 B IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subjectstats-tap-production-cloudfront-app-cname.wistia.com
Fingerprint37:C6:AB:79:1C:DF:9B:5E:3A:B8:3E:F1:0C:1D:48:BF:89:2D:1F:40
ValidityWed, 13 Sep 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1650
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 05 May 2024 00:35:43 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
server: envoy
x-envoy-upstream-service-time: 1
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sKsr3VMZL-4CTZjZrfO4nIVH4LGfODIRY7Ne2qAbdJyyyzxsszHgDg==
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je4510v9106739609z8813057436za200&_p=1714869341272&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1464771833.1714869342&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714869342&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&dt=The%20Oxford%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&tfd=5003
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je4510v9106739609z8813057436za200&_p=1714869341272&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1464771833.1714869342&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714869342&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&dt=The%20Oxford%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&tfd=5003
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je4510v9106739609z8813057436za200&_p=1714869341272&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1464771833.1714869342&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714869342&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&dt=The%20Oxford%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&tfd=5003 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.oxfordclub.com
date: Sun, 05 May 2024 00:35:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
embed-cloudfront.wistia.com/deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8
200 OK 77 kB URL GET HTTP/2 embed-cloudfront.wistia.com/deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.wistia.com
Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2
ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
Hash 7f746bbd8437c11abda75462175cc003
b20652de0877480b02633a65586525b6847a4a38
a2914a76607431e4d17193f94f434524740bca6ca76ced7c9dfa2584b1a4cb20
GET /deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 77338
server: envoy
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 72c73c76f447d30de486b20dfb9bb339e8f61c6c-hls-segment
surrogate-key: 72c73c76f447d30de486b20dfb9bb339e8f61c6c-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 95
date: Sun, 05 May 2024 00:35:23 GMT
expires: Tue, 29 Apr 2025 07:10:44 GMT
cache-control: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ChyCRpK5ZCQ4KRcS-E263q_MfxTmUt7DA4bLm-IIBGl1uMXWfTrmPQ==
age: 494699
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
storage.googleapis.com/lioservices/2470-oxford-club/lytics_overrides.min.css
200 OK 602 B URL GET HTTP/2 storage.googleapis.com/lioservices/2470-oxford-club/lytics_overrides.min.css
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subjectstorage.googleapis.com
Fingerprint20:06:F0:40:84:A5:B3:5B:B0:13:3B:BF:C4:47:06:7C:D2:41:90:3A
ValidityTue, 16 Apr 2024 04:35:37 GMT - Tue, 09 Jul 2024 04:35:36 GMT
File type ASCII text, with very long lines (602), with no line terminators
Hash 9df2d5ae6031369aa6e0f3685608cd8c
cdf5ad44e5e1e9bf2b0413e046189830a1921e17
0efd1a0f2f52ed3d1bbd90257616b1f3f057163e50e3ed7d36af06ffa10b7b06
GET /lioservices/2470-oxford-club/lytics_overrides.min.css HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-goog-generation: 1538689646128559
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 602
x-goog-hash: crc32c=VZEimQ==, md5=nfLVrmAxNpqm4PNoVgjNjA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 602
access-control-allow-origin: *
access-control-expose-headers: Content-Type
x-guploader-uploadid: ABPtcPoR8fHJY4L1IbfFEh2RYx5cSaCgIUofUH2X7y-X0j6_EzC6OIXHcZae9itGgMJnS3p8U8rw4fusKA
server: UploadServer
date: Sat, 04 May 2024 23:56:43 GMT
expires: Sun, 05 May 2024 00:56:43 GMT
cache-control: public, max-age=3600
age: 2340
last-modified: Thu, 04 Oct 2018 21:47:26 GMT
etag: "9df2d5ae6031369aa6e0f3685608cd8c"
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
embed-cloudfront.wistia.com/deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8/seg-1-v1-a1.ts
200 OK 557 kB URL GET HTTP/2 embed-cloudfront.wistia.com/deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8/seg-1-v1-a1.ts
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.wistia.com
Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2
ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
File type MPEG transport stream data
Size 557 kB (556856 bytes)
Hash 702204fabf55d966f3384836d3a5491d
35a6899a732d867f92a1a664f76ea7c7df3fc467
d6169904e700805b4a88360cbc4e62aa7503a016d21e3e68a12620364b227a39
GET /deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: video/MP2T
content-length: 556856
server: envoy
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 72c73c76f447d30de486b20dfb9bb339e8f61c6c-hls-segment
surrogate-key: 72c73c76f447d30de486b20dfb9bb339e8f61c6c-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 118
date: Mon, 29 Apr 2024 07:24:37 GMT
expires: Tue, 29 Apr 2025 07:24:37 GMT
cache-control: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WmzKfcQXUNErt6QT9U0_VZeXcelJBeAmAOeW0Fj4Zru6SciUwvy3_Q==
age: 493866
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
gtrace.mediago.io/ju/cs/eplist?acid=&gdpr_consent=&dm=https%253A%252F%252Fpro.oxfordclub.com&mcb=mmgg_1714869342910_136
200 OK 44 B URL GET HTTP/2 gtrace.mediago.io/ju/cs/eplist?acid=&gdpr_consent=&dm=https%253A%252F%252Fpro.oxfordclub.com&mcb=mmgg_1714869342910_136
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerDigiCert Inc
Subject*.mediago.io
Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4
ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 2cc148e469b7139da2e8d3802688dd72
5d0b0d23e6a4ad6f6c0de6cd454898cd8a2d874e
8f8fbe6a0ce2488c4b89d001cfae5da30010b2a4572c2ffcdc9294c29cb7d6ed
GET /ju/cs/eplist?acid=&gdpr_consent=&dm=https%253A%252F%252Fpro.oxfordclub.com&mcb=mmgg_1714869342910_136 HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https%3A%2F%2Fpro.oxfordclub.com
content-length: 44
content-type: application/javascript; charset=utf-8
set-cookie: __mguid_=9df76ce1ee0f59042cggs400lvssxi4q; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None
date: Sun, 05 May 2024 00:35:43 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pipedream.wistia.com/mput?topic=metrics
200 OK 2 B URL POST HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subjectpipedream-production-cloudfront-app-cname.wistia.com
Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2195
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Sun, 05 May 2024 00:35:43 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PoW7mIG6Jj4RYhTFOUuET7xn5HZmNnVxpBdfDujBnzwphmVEh7QPFw==
X-Firefox-Spdy: h2
protect-us.mimecast.com/s/d4IGCAD74Js25qJyi9o4Az?domain=cdn1.decide.dev
307 Temporary Redirect 0 B URL GET HTTP/1.1 protect-us.mimecast.com/s/d4IGCAD74Js25qJyi9o4Az?domain=cdn1.decide.dev
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerDigiCert Inc
Subject*.mimecast.com
FingerprintCD:B1:F9:53:BD:55:54:E8:D2:14:46:80:DE:6B:50:27:E1:24:DC:F8
ValidityTue, 30 Jan 2024 00:00:00 GMT - Tue, 25 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/d4IGCAD74Js25qJyi9o4Az?domain=cdn1.decide.dev HTTP/1.1
Host: protect-us.mimecast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Date: Sun, 05 May 2024 00:35:43 GMT
Content-Length: 0
Connection: keep-alive
Location: https://protect-us.mimecast.com/r/KrpwNc6Py8pASOytvMygnBE9MffFobwEWKmoANEc65SV1F38LTJjnCdYFBmPWP8j90cqTpy1BAczii4-QaSgFIXSsSSnGXWWKiJ6ONSh6heBI2XXaIyq5x26b-P3z6T4Z1IbQ13gJ69ah44qU7nxdBd6lQ3oOLcIq2cjiuRSmK3J9tV7qVANn3ogy1xIzzc6qaFzxwRRtIHZjXS9Dkpzme8v76NeeXL3hqBIYtxZ-6zNR19NNT_WJ_8K86H7QisS8vhaz5WnhFQzWb4eceZOuQ06hAW2W0po4ebrwcUz4qppPIp33YE1nRFPVFt1Wi5Yqi9BtwdwKOgBQhEwFqz9Vgr1o2hbYm0lg23z5-odbHiZCtcyPxr7r7bpHHSBUrD3SM3t66Oh753YGC_QD70WRTDCb3abwCKSknJVDObbn3nefJxXPuFnY3Ca0p5OQ72CCMOXBQFkWvwTT6lbR5zk7LxHM0Qnm1tzG3O7Lbo5MvbLuFQMVCCOXfgrGOqV2wYzOFtJ7od56MKGvLRvLNhh__OLbMimfImKR1yvsgTIDRUAd9_6S5RWqNaZmdJDSgwkyBKPZnp23rlNWnFpTpp8HWdjlcvqg773fZtt22bEk-YAjEGXIXgZy7X-4EamZXuyErPnHneFaaQ8eXNZCf86tKu3m8MdDju_SjZmQ38E3iX9f0Hy3dgDymy6yeP0Gw2M3drWQ97C5VEsWKgHpyWdZyUjrwjJkOq-UrO4awNvP1F6_cxuz9QiQG-qDRSaOQTG-QDI9KOcsXSMrfqRYNgR0laQJbqjh-TpQgIEoHz1TIGcsBraiKaK3jdGuUXM2RL5B5EuHr5bbwpHcQ0g3slG4Yc0bnnTgpWepOcX7F2Sl21KArnLXlRBJVyJe3FsuoVWqydtVLxc2WaN4ePVq_SSN2qpY2SZNYPAgMD3EDX0AOzah1Veglj-AgZIgANipmfirrAq5ShOXGNJflB9ap71yjBeuKWb68kvHRcPKR2qGUfBvo9qYOx5DZhUm89itEJZ3B9ujF0GkGoSrEUn6xolk6hzKh_4nRXEVtI34PApRxrehlV7qSyFVTvkUVkbLCVZ401z_8JhoZ9owPOcYXXQwB_UF_o6jZVn9aVhJa4A6fv2R-uelzLFVC_wUQ9ZTASVLGRuClAki4UjLVt-4tHDLcXlV74eG4sZAf3VOk9xP2ijhwBPfcIetMdZ9gdaHJbtXIrJX4nVE60djABgziRlocFKDhmID2SGFgdXQwXE8YOFIKVIvEk_w_S0ynIqoaso7AI-XErnf2sCzYPGL1jfUsr3pdwN980zIQ5GqNnZvTIQ2zAvYOvZIza567Q9JjGEimypPZvh8vNyZmHdiBReFtk3UClq-HPtFX7TJqnN4D2YKK1_iVXgJoBusm_Z7sfJ2_jBVKBXEOpn9vCgd20lxpOd2LiNtnGdCFbbxiLdPxjVPVKbOJPUbbt4tvyYV7DGczCbLY-4qrGKnWzjqW9C62RWmh0mm13035O4uuLhCCKlwrfwvg7AMsum15FAaCvu8FO-ty1aUJXprUP3thWitKfavTS53t-EeXOsB9SkpH1W2b5flguMEXMZM6G04brDpVwB84TShq5R9kLR2MYdL7x0oumx6X8KXPkZwP046Szy0m4ZBKKqWGZK-PH6AabiaqgSfyyGO9FPzy8cIuExzvXW5T3DCDy-jzV5UeFZuaNVsPDWTeIGuJfKMIHnKdY46HiizbNXnigZq7GJoLCpziCl6sZlDr4WJBLA5YfWU7oNWs2LkQHJTGNm9D6Nh_wNyI1moEXoZzRc7R0p9HNZ9GVgRP5h8jNUqlkzbeT0fkcOSBOGvMMj-TbN-o-ocKQDX5f-hqXxATdsC7OHEdnxOVdyWO0z5vtW2IDRUi-UuWuGFtFjL1bTx5RGdvvNklG1qNSZvM39AvF452r9TKX0XrBbEpkDqN1zxP9Wr1f6JwjLEDU_8nxsWfYX7-32sEqOvezJhlvbA6EOVM_j1CHUuGUjzNJ9lxMWAoKakU5tcnlzjC4OSA-DfLuwdFnM3u5f7MsQsfzuwovzyBGmPCCVDY9dIh_yooJ9GOehtma76hI
Cache-control: no-store
Pragma: no-cache
X-Robots-Tag: noindex, nofollow
pipedream.wistia.com/mput?topic=metrics
200 OK 2 B URL POST HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subjectpipedream-production-cloudfront-app-cname.wistia.com
Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 754
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Sun, 05 May 2024 00:35:43 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Sb4gULYWU6wNqAXHi3ejJ52c5MdO3pOjpbjwd6T6GGalmqH6yDwPOg==
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 429c992553fbf5033aead53391c96432
f14d63706111e8ff6a8111c5e25001b8e8fdf86e
d97075d76217d43ff40c18fca1c96e5c70366e0dbfcaec169238846ebb8a17e2
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sun, 05 May 2024 00:35:43 GMT
Last-Modified: Sat, 04 May 2024 23:00:54 GMT
Server: ECAcc (ska/F7A3)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: O8QklIfLg-EAqWWDO-CrjJtbnICbWsALZf_neeJ32rsxNpasAB5Reg==
Age: 5689
libertythroughwealthnews.com/split-test-for-elementor/v1/tests//track-conversion/
301 Moved Permanently 0 B URL GET HTTP/1.1 libertythroughwealthnews.com/split-test-for-elementor/v1/tests//track-conversion/
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /split-test-for-elementor/v1/tests//track-conversion/ HTTP/1.1
Host: libertythroughwealthnews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 05 May 2024 00:35:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Redirect-By: WordPress
Set-Cookie: elementor_split_test_client_id=320f0d96a-b6da1fde-5ee8-4f50-bfa7-5df9d743fda7; expires=Mon, 05-May-2025 00:35:43 GMT; Max-Age=31536000; path=/; domain=libertythroughwealthnews.com
Location: https://libertythroughwealthnews.com/split-test-for-elementor/v1/tests/track-conversion/
Referrer-Policy: unsafe-url
www.googletagmanager.com/gtm.js?id=GTM-NKXCSCL
200 OK 44 B URL GET HTTP/3 www.googletagmanager.com/gtm.js?id=GTM-NKXCSCL
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
Hash 838ed8ae9037f06ec0bed0e956890466
10db1db127922087588d22b566ab61207867fd64
36983fef7ed7119dcbb702aa8997757f2d55114d09940f212ea7c19c5a92a9d0
GET /gtm.js?id=GTM-NKXCSCL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:42 GMT
expires: Sun, 05 May 2024 00:35:42 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 May 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 104098
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
buildawealthyretirement.com/split-test-for-elementor/v1/tests/38/track-conversion/
200 OK 43 B URL GET HTTP/1.1 buildawealthyretirement.com/split-test-for-elementor/v1/tests/38/track-conversion/
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/38/track-conversion/ HTTP/1.1
Host: buildawealthyretirement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 00:35:43 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-98bcbb57-2a8f-4770-83a1-417722915152; expires=Mon, 05-May-2025 00:35:43 GMT; Max-Age=31536000; path=/; domain=buildawealthyretirement.com
Referrer-Policy: unsafe-url
buildawealthyretirement.com/split-test-for-elementor/v1/tests/47/track-conversion/
200 OK 43 B URL GET HTTP/1.1 buildawealthyretirement.com/split-test-for-elementor/v1/tests/47/track-conversion/
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/47/track-conversion/ HTTP/1.1
Host: buildawealthyretirement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 00:35:43 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-6b445454-2ee5-4ca2-8eba-3c333b70a20c; expires=Mon, 05-May-2025 00:35:43 GMT; Max-Age=31536000; path=/; domain=buildawealthyretirement.com
Referrer-Policy: unsafe-url
leadgen.oxfordclub.com/split-test-for-elementor/v1/tests//track-conversion/
301 Moved Permanently 0 B URL GET HTTP/1.1 leadgen.oxfordclub.com/split-test-for-elementor/v1/tests//track-conversion/
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /split-test-for-elementor/v1/tests//track-conversion/ HTTP/1.1
Host: leadgen.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
DNT: 1
Connection: keep-alive
Cookie: _ga_BBMPM3EJHQ=GS1.1.1714869342.1.0.1714869342.60.0.0; _ga=GA1.1.1464771833.1714869342; _gcl_au=1.1.1483350693.1714869343
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 05 May 2024 00:35:43 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Redirect-By: WordPress
Set-Cookie: elementor_split_test_client_id=320f0d96a-80f42206-0b62-424f-aada-a46f8e517da9; expires=Mon, 05-May-2025 00:35:43 GMT; Max-Age=31536000; path=/; domain=leadgen.oxfordclub.com
Location: https://leadgen.oxfordclub.com/split-test-for-elementor/v1/tests/track-conversion/
Referrer-Policy: unsafe-url
libertythroughwealthnews.com/split-test-for-elementor/v1/tests/39/track-conversion/
200 OK 43 B URL GET HTTP/1.1 libertythroughwealthnews.com/split-test-for-elementor/v1/tests/39/track-conversion/
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/39/track-conversion/ HTTP/1.1
Host: libertythroughwealthnews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 00:35:43 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-e5325fb2-a1b1-4872-9dc5-a6a4384ade19; expires=Mon, 05-May-2025 00:35:43 GMT; Max-Age=31536000; path=/; domain=libertythroughwealthnews.com
Referrer-Policy: unsafe-url
buildawealthyretirement.com/split-test-for-elementor/v1/tests/45/track-conversion/
200 OK 43 B URL GET HTTP/1.1 buildawealthyretirement.com/split-test-for-elementor/v1/tests/45/track-conversion/
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/45/track-conversion/ HTTP/1.1
Host: buildawealthyretirement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 00:35:44 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-3b472fcb-76ef-4589-b937-2ec9b73b3296; expires=Mon, 05-May-2025 00:35:43 GMT; Max-Age=31536000; path=/; domain=buildawealthyretirement.com
Referrer-Policy: unsafe-url
c.pmsrv.co/v2/acvr3?a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=page-land&weight=0&dnt=false&_ible=1&ej=%7B%22dnt%22%3Afalse%7D&ord=4071488309500076.5&sid=38fb9fd1-62c2-426b-8ad4-f952aaa603b7&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&_ii=0&ppg=&_tk=%7B%7D
204 No Content 0 B URL GET HTTP/2 c.pmsrv.co/v2/acvr3?a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=page-land&weight=0&dnt=false&_ible=1&ej=%7B%22dnt%22%3Afalse%7D&ord=4071488309500076.5&sid=38fb9fd1-62c2-426b-8ad4-f952aaa603b7&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&_ii=0&ppg=&_tk=%7B%7D
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subjectpmsrv.co
Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47
ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/acvr3?a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=page-land&weight=0&dnt=false&_ible=1&ej=%7B%22dnt%22%3Afalse%7D&ord=4071488309500076.5&sid=38fb9fd1-62c2-426b-8ad4-f952aaa603b7&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&_ii=0&ppg=&_tk=%7B%7D HTTP/1.1
Host: c.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: tpc=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 05 May 2024 00:35:44 GMT
x-powered-by: Express
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
access-control-allow-origin: *
etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk"
x-cache: Miss from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UdPcaQ3oplQOO8dWrPzgS1-cBiFKxBWFGkbgDtGB4c586XP0_kjobA==
X-Firefox-Spdy: h2
api.getblueshift.com/unity.gif?t=1714869343&e=pageload&r=&z=468581&x=5475fa15fca6698857e67e2705849cfa&k=21930a27-149a-4b90-8ba3-d92b633d0a32&u=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue
200 OK 42 B URL GET HTTP/2 api.getblueshift.com/unity.gif?t=1714869343&e=pageload&r=&z=468581&x=5475fa15fca6698857e67e2705849cfa&k=21930a27-149a-4b90-8ba3-d92b633d0a32&u=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.getblueshift.com
FingerprintD1:61:A7:FF:D0:FD:A2:46:9B:FE:0C:A8:F1:8A:A9:24:9B:70:04:65
ValidityWed, 07 Feb 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /unity.gif?t=1714869343&e=pageload&r=&z=468581&x=5475fa15fca6698857e67e2705849cfa&k=21930a27-149a-4b90-8ba3-d92b633d0a32&u=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue HTTP/1.1
Host: api.getblueshift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:44 GMT
content-type: image/gif
content-length: 42
access-control-allow-origin: https://pro.oxfordclub.com
access-control-expose-headers: etag
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
X-Firefox-Spdy: h2
embed-cloudfront.wistia.com/deliveries/295bd86807b7c50fc99149048c79bb3fa085e56e.m3u8
200 OK 77 kB URL GET HTTP/2 embed-cloudfront.wistia.com/deliveries/295bd86807b7c50fc99149048c79bb3fa085e56e.m3u8
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.wistia.com
Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2
ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
Hash 13a7c8e5f3849add622c18cd60650714
6b03548c75227c8019fa266c0485eb45968ea171
5c5f9a6bd23a6d1c6d76b58c957936f8f3665be944a34bbda213823c70b91d41
GET /deliveries/295bd86807b7c50fc99149048c79bb3fa085e56e.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 77338
server: envoy
date: Mon, 29 Apr 2024 03:43:42 GMT
expires: Tue, 29 Apr 2025 03:43:42 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 295bd86807b7c50fc99149048c79bb3fa085e56e-hls-segment
surrogate-key: 295bd86807b7c50fc99149048c79bb3fa085e56e-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 182
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CUuu4w4hx8QQJUcjlzpmKORZjOsOLG-YMGnY2Txkkb4mtw_QDpz6_Q==
age: 507122
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
a.mgid.com/1x1.gif?id=444673&type=c&tg=&r=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&nv=1&clid=&d=1714869343895
200 OK 43 B URL GET HTTP/3 a.mgid.com/1x1.gif?id=444673&type=c&tg=&r=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&nv=1&clid=&d=1714869343895
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectmgid.com
Fingerprint9C:6C:5A:48:88:44:CB:C2:F4:76:D3:2E:DC:07:0D:D4:CA:6A:25:F5
ValiditySun, 10 Mar 2024 23:31:34 GMT - Sat, 08 Jun 2024 23:31:33 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /1x1.gif?id=444673&type=c&tg=&r=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&nv=1&clid=&d=1714869343895 HTTP/1.1
Host: a.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: __cf_bm=fPpmO_vqEmed75jbUTOvjHzNbbp6zWitOH_vg.ax7U4-1714869342-1.0.1.1-C4uk3X1FaAs4AeDxkwKmDBNDg9mVzsgUm0uiuusGVN62iNYvCoP1YsBZ543k1fAaOUwvF88lbkMcKhdoz5W8QA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 00:35:44 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87eca6f9ef9c56aa-OSL
alt-svc: h3=":443"; ma=86400
protect-us.mimecast.com/r/KrpwNc6Py8pASOytvMygnBE9MffFobwEWKmoANEc65SV1F38LTJjnCdYFBmPWP8j90cqTpy1BAczii4-QaSgFIXSsSSnGXWWKiJ6ONSh6heBI2XXaIyq5x26b-P3z6T4Z1IbQ13gJ69ah44qU7nxdBd6lQ3oOLcIq2cjiuRSmK3J9tV7qVANn3ogy1xIzzc6qaFzxwRRtIHZjXS9Dkpzme8v76NeeXL3hqBIYtxZ-6zNR19NNT_WJ_8K86H7QisS8vhaz5WnhFQzWb4eceZOuQ06hAW2W0po4ebrwcUz4qppPIp33YE1nRFPVFt1Wi5Yqi9BtwdwKOgBQhEwFqz9Vgr1o2hbYm0lg23z5-odbHiZCtcyPxr7r7bpHHSBUrD3SM3t66Oh753YGC_QD70WRTDCb3abwCKSknJVDObbn3nefJxXPuFnY3Ca0p5OQ72CCMOXBQFkWvwTT6lbR5zk7LxHM0Qnm1tzG3O7Lbo5MvbLuFQMVCCOXfgrGOqV2wYzOFtJ7od56MKGvLRvLNhh__OLbMimfImKR1yvsgTIDRUAd9_6S5RWqNaZmdJDSgwkyBKPZnp23rlNWnFpTpp8HWdjlcvqg773fZtt22bEk-YAjEGXIXgZy7X-4EamZXuyErPnHneFaaQ8eXNZCf86tKu3m8MdDju_SjZmQ38E3iX9f0Hy3dgDymy6yeP0Gw2M3drWQ97C5VEsWKgHpyWdZyUjrwjJkOq-UrO4awNvP1F6_cxuz9QiQG-qDRSaOQTG-QDI9KOcsXSMrfqRYNgR0laQJbqjh-TpQgIEoHz1TIGcsBraiKaK3jdGuUXM2RL5B5EuHr5bbwpHcQ0g3slG4Yc0bnnTgpWepOcX7F2Sl21KArnLXlRBJVyJe3FsuoVWqydtVLxc2WaN4ePVq_SSN2qpY2SZNYPAgMD3EDX0AOzah1Veglj-AgZIgANipmfirrAq5ShOXGNJflB9ap71yjBeuKWb68kvHRcPKR2qGUfBvo9qYOx5DZhUm89itEJZ3B9ujF0GkGoSrEUn6xolk6hzKh_4nRXEVtI34PApRxrehlV7qSyFVTvkUVkbLCVZ401z_8JhoZ9owPOcYXXQwB_UF_o6jZVn9aVhJa4A6fv2R-uelzLFVC_wUQ9ZTASVLGRuClAki4UjLVt-4tHDLcXlV74eG4sZAf3VOk9xP2ijhwBPfcIetMdZ9gdaHJbtXIrJX4nVE60djABgziRlocFKDhmID2SGFgdXQwXE8YOFIKVIvEk_w_S0ynIqoaso7AI-XErnf2sCzYPGL1jfUsr3pdwN980zIQ5GqNnZvTIQ2zAvYOvZIza567Q9JjGEimypPZvh8vNyZmHdiBReFtk3UClq-HPtFX7TJqnN4D2YKK1_iVXgJoBusm_Z7sfJ2_jBVKBXEOpn9vCgd20lxpOd2LiNtnGdCFbbxiLdPxjVPVKbOJPUbbt4tvyYV7DGczCbLY-4qrGKnWzjqW9C62RWmh0mm13035O4uuLhCCKlwrfwvg7AMsum15FAaCvu8FO-ty1aUJXprUP3thWitKfavTS53t-EeXOsB9SkpH1W2b5flguMEXMZM6G04brDpVwB84TShq5R9kLR2MYdL7x0oumx6X8KXPkZwP046Szy0m4ZBKKqWGZK-PH6AabiaqgSfyyGO9FPzy8cIuExzvXW5T3DCDy-jzV5UeFZuaNVsPDWTeIGuJfKMIHnKdY46HiizbNXnigZq7GJoLCpziCl6sZlDr4WJBLA5YfWU7oNWs2LkQHJTGNm9D6Nh_wNyI1moEXoZzRc7R0p9HNZ9GVgRP5h8jNUqlkzbeT0fkcOSBOGvMMj-TbN-o-ocKQDX5f-hqXxATdsC7OHEdnxOVdyWO0z5vtW2IDRUi-UuWuGFtFjL1bTx5RGdvvNklG1qNSZvM39AvF452r9TKX0XrBbEpkDqN1zxP9Wr1f6JwjLEDU_8nxsWfYX7-32sEqOvezJhlvbA6EOVM_j1CHUuGUjzNJ9lxMWAoKakU5tcnlzjC4OSA-DfLuwdFnM3u5f7MsQsfzuwovzyBGmPCCVDY9dIh_yooJ9GOehtma76hI
307 Temporary Redirect 0 B URL GET HTTP/1.1 protect-us.mimecast.com/r/KrpwNc6Py8pASOytvMygnBE9MffFobwEWKmoANEc65SV1F38LTJjnCdYFBmPWP8j90cqTpy1BAczii4-QaSgFIXSsSSnGXWWKiJ6ONSh6heBI2XXaIyq5x26b-P3z6T4Z1IbQ13gJ69ah44qU7nxdBd6lQ3oOLcIq2cjiuRSmK3J9tV7qVANn3ogy1xIzzc6qaFzxwRRtIHZjXS9Dkpzme8v76NeeXL3hqBIYtxZ-6zNR19NNT_WJ_8K86H7QisS8vhaz5WnhFQzWb4eceZOuQ06hAW2W0po4ebrwcUz4qppPIp33YE1nRFPVFt1Wi5Yqi9BtwdwKOgBQhEwFqz9Vgr1o2hbYm0lg23z5-odbHiZCtcyPxr7r7bpHHSBUrD3SM3t66Oh753YGC_QD70WRTDCb3abwCKSknJVDObbn3nefJxXPuFnY3Ca0p5OQ72CCMOXBQFkWvwTT6lbR5zk7LxHM0Qnm1tzG3O7Lbo5MvbLuFQMVCCOXfgrGOqV2wYzOFtJ7od56MKGvLRvLNhh__OLbMimfImKR1yvsgTIDRUAd9_6S5RWqNaZmdJDSgwkyBKPZnp23rlNWnFpTpp8HWdjlcvqg773fZtt22bEk-YAjEGXIXgZy7X-4EamZXuyErPnHneFaaQ8eXNZCf86tKu3m8MdDju_SjZmQ38E3iX9f0Hy3dgDymy6yeP0Gw2M3drWQ97C5VEsWKgHpyWdZyUjrwjJkOq-UrO4awNvP1F6_cxuz9QiQG-qDRSaOQTG-QDI9KOcsXSMrfqRYNgR0laQJbqjh-TpQgIEoHz1TIGcsBraiKaK3jdGuUXM2RL5B5EuHr5bbwpHcQ0g3slG4Yc0bnnTgpWepOcX7F2Sl21KArnLXlRBJVyJe3FsuoVWqydtVLxc2WaN4ePVq_SSN2qpY2SZNYPAgMD3EDX0AOzah1Veglj-AgZIgANipmfirrAq5ShOXGNJflB9ap71yjBeuKWb68kvHRcPKR2qGUfBvo9qYOx5DZhUm89itEJZ3B9ujF0GkGoSrEUn6xolk6hzKh_4nRXEVtI34PApRxrehlV7qSyFVTvkUVkbLCVZ401z_8JhoZ9owPOcYXXQwB_UF_o6jZVn9aVhJa4A6fv2R-uelzLFVC_wUQ9ZTASVLGRuClAki4UjLVt-4tHDLcXlV74eG4sZAf3VOk9xP2ijhwBPfcIetMdZ9gdaHJbtXIrJX4nVE60djABgziRlocFKDhmID2SGFgdXQwXE8YOFIKVIvEk_w_S0ynIqoaso7AI-XErnf2sCzYPGL1jfUsr3pdwN980zIQ5GqNnZvTIQ2zAvYOvZIza567Q9JjGEimypPZvh8vNyZmHdiBReFtk3UClq-HPtFX7TJqnN4D2YKK1_iVXgJoBusm_Z7sfJ2_jBVKBXEOpn9vCgd20lxpOd2LiNtnGdCFbbxiLdPxjVPVKbOJPUbbt4tvyYV7DGczCbLY-4qrGKnWzjqW9C62RWmh0mm13035O4uuLhCCKlwrfwvg7AMsum15FAaCvu8FO-ty1aUJXprUP3thWitKfavTS53t-EeXOsB9SkpH1W2b5flguMEXMZM6G04brDpVwB84TShq5R9kLR2MYdL7x0oumx6X8KXPkZwP046Szy0m4ZBKKqWGZK-PH6AabiaqgSfyyGO9FPzy8cIuExzvXW5T3DCDy-jzV5UeFZuaNVsPDWTeIGuJfKMIHnKdY46HiizbNXnigZq7GJoLCpziCl6sZlDr4WJBLA5YfWU7oNWs2LkQHJTGNm9D6Nh_wNyI1moEXoZzRc7R0p9HNZ9GVgRP5h8jNUqlkzbeT0fkcOSBOGvMMj-TbN-o-ocKQDX5f-hqXxATdsC7OHEdnxOVdyWO0z5vtW2IDRUi-UuWuGFtFjL1bTx5RGdvvNklG1qNSZvM39AvF452r9TKX0XrBbEpkDqN1zxP9Wr1f6JwjLEDU_8nxsWfYX7-32sEqOvezJhlvbA6EOVM_j1CHUuGUjzNJ9lxMWAoKakU5tcnlzjC4OSA-DfLuwdFnM3u5f7MsQsfzuwovzyBGmPCCVDY9dIh_yooJ9GOehtma76hI
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerDigiCert Inc
Subject*.mimecast.com
FingerprintCD:B1:F9:53:BD:55:54:E8:D2:14:46:80:DE:6B:50:27:E1:24:DC:F8
ValidityTue, 30 Jan 2024 00:00:00 GMT - Tue, 25 Feb 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/KrpwNc6Py8pASOytvMygnBE9MffFobwEWKmoANEc65SV1F38LTJjnCdYFBmPWP8j90cqTpy1BAczii4-QaSgFIXSsSSnGXWWKiJ6ONSh6heBI2XXaIyq5x26b-P3z6T4Z1IbQ13gJ69ah44qU7nxdBd6lQ3oOLcIq2cjiuRSmK3J9tV7qVANn3ogy1xIzzc6qaFzxwRRtIHZjXS9Dkpzme8v76NeeXL3hqBIYtxZ-6zNR19NNT_WJ_8K86H7QisS8vhaz5WnhFQzWb4eceZOuQ06hAW2W0po4ebrwcUz4qppPIp33YE1nRFPVFt1Wi5Yqi9BtwdwKOgBQhEwFqz9Vgr1o2hbYm0lg23z5-odbHiZCtcyPxr7r7bpHHSBUrD3SM3t66Oh753YGC_QD70WRTDCb3abwCKSknJVDObbn3nefJxXPuFnY3Ca0p5OQ72CCMOXBQFkWvwTT6lbR5zk7LxHM0Qnm1tzG3O7Lbo5MvbLuFQMVCCOXfgrGOqV2wYzOFtJ7od56MKGvLRvLNhh__OLbMimfImKR1yvsgTIDRUAd9_6S5RWqNaZmdJDSgwkyBKPZnp23rlNWnFpTpp8HWdjlcvqg773fZtt22bEk-YAjEGXIXgZy7X-4EamZXuyErPnHneFaaQ8eXNZCf86tKu3m8MdDju_SjZmQ38E3iX9f0Hy3dgDymy6yeP0Gw2M3drWQ97C5VEsWKgHpyWdZyUjrwjJkOq-UrO4awNvP1F6_cxuz9QiQG-qDRSaOQTG-QDI9KOcsXSMrfqRYNgR0laQJbqjh-TpQgIEoHz1TIGcsBraiKaK3jdGuUXM2RL5B5EuHr5bbwpHcQ0g3slG4Yc0bnnTgpWepOcX7F2Sl21KArnLXlRBJVyJe3FsuoVWqydtVLxc2WaN4ePVq_SSN2qpY2SZNYPAgMD3EDX0AOzah1Veglj-AgZIgANipmfirrAq5ShOXGNJflB9ap71yjBeuKWb68kvHRcPKR2qGUfBvo9qYOx5DZhUm89itEJZ3B9ujF0GkGoSrEUn6xolk6hzKh_4nRXEVtI34PApRxrehlV7qSyFVTvkUVkbLCVZ401z_8JhoZ9owPOcYXXQwB_UF_o6jZVn9aVhJa4A6fv2R-uelzLFVC_wUQ9ZTASVLGRuClAki4UjLVt-4tHDLcXlV74eG4sZAf3VOk9xP2ijhwBPfcIetMdZ9gdaHJbtXIrJX4nVE60djABgziRlocFKDhmID2SGFgdXQwXE8YOFIKVIvEk_w_S0ynIqoaso7AI-XErnf2sCzYPGL1jfUsr3pdwN980zIQ5GqNnZvTIQ2zAvYOvZIza567Q9JjGEimypPZvh8vNyZmHdiBReFtk3UClq-HPtFX7TJqnN4D2YKK1_iVXgJoBusm_Z7sfJ2_jBVKBXEOpn9vCgd20lxpOd2LiNtnGdCFbbxiLdPxjVPVKbOJPUbbt4tvyYV7DGczCbLY-4qrGKnWzjqW9C62RWmh0mm13035O4uuLhCCKlwrfwvg7AMsum15FAaCvu8FO-ty1aUJXprUP3thWitKfavTS53t-EeXOsB9SkpH1W2b5flguMEXMZM6G04brDpVwB84TShq5R9kLR2MYdL7x0oumx6X8KXPkZwP046Szy0m4ZBKKqWGZK-PH6AabiaqgSfyyGO9FPzy8cIuExzvXW5T3DCDy-jzV5UeFZuaNVsPDWTeIGuJfKMIHnKdY46HiizbNXnigZq7GJoLCpziCl6sZlDr4WJBLA5YfWU7oNWs2LkQHJTGNm9D6Nh_wNyI1moEXoZzRc7R0p9HNZ9GVgRP5h8jNUqlkzbeT0fkcOSBOGvMMj-TbN-o-ocKQDX5f-hqXxATdsC7OHEdnxOVdyWO0z5vtW2IDRUi-UuWuGFtFjL1bTx5RGdvvNklG1qNSZvM39AvF452r9TKX0XrBbEpkDqN1zxP9Wr1f6JwjLEDU_8nxsWfYX7-32sEqOvezJhlvbA6EOVM_j1CHUuGUjzNJ9lxMWAoKakU5tcnlzjC4OSA-DfLuwdFnM3u5f7MsQsfzuwovzyBGmPCCVDY9dIh_yooJ9GOehtma76hI HTTP/1.1
Host: protect-us.mimecast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Date: Sun, 05 May 2024 00:35:44 GMT
Content-Length: 0
Connection: keep-alive
Location: https://cdn1.decide.dev/tracking/theoxfordclub_lander.js
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Cache-control: no-store
Pragma: no-cache
X-Robots-Tag: noindex, nofollow
cdn1.decide.dev/tracking/theoxfordclub_lander.js
200 OK 834 B URL GET HTTP/2 cdn1.decide.dev/tracking/theoxfordclub_lander.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.decide.dev
Fingerprint55:47:DD:D7:EE:11:C6:32:7C:43:A8:63:D1:78:CA:39:D6:A8:A1:34
ValiditySun, 26 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File type JavaScript source, ASCII text
Hash b1cbc790e84a45c80719c25350afbe93
791fad5f544492d979cf7043794afda21e99cca0
1ba64776e363ce48a44800790b7d1d35618e472a05c4d0d2e86ac8e81320af02
GET /tracking/theoxfordclub_lander.js HTTP/1.1
Host: cdn1.decide.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 834
date: Sat, 04 May 2024 05:50:35 GMT
last-modified: Wed, 05 Oct 2022 22:05:01 GMT
etag: "b1cbc790e84a45c80719c25350afbe93"
x-amz-version-id: .IqB6vnfPtu.ANgAywev0qNgFahOe7Ox
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pFqZvv6h91nH-clqt0Njqr8TkU4Pcq0DBz0XBBCBNlklm5P09smRoQ==
age: 67510
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 13 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
Fingerprint02:83:27:F9:50:D8:BE:B9:5E:DF:1A:4A:45:3B:6D:3C:BC:30:F2:58
ValidityWed, 01 May 2024 01:58:25 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Hash 72bca04fd669eb89fc65d59052d0fc00
27e60aef86f0cb1b2f6b6ed9df9a4e3ba88efd21
823804a7807864b44093a3843788f4cd076e89cf4a6fdeb8d153ae5c2c2df721
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13261
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 29 Feb 2024 19:58:06 GMT
accept-ranges: bytes
etag: "01b4e9c496bda1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 88F9D6A56A204133A36E50B9DA255F21 Ref B: OSL30EDGE0112 Ref C: 2024-05-05T00:35:45Z
date: Sun, 05 May 2024 00:35:44 GMT
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 13 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
Fingerprint02:83:27:F9:50:D8:BE:B9:5E:DF:1A:4A:45:3B:6D:3C:BC:30:F2:58
ValidityWed, 01 May 2024 01:58:25 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Hash 72bca04fd669eb89fc65d59052d0fc00
27e60aef86f0cb1b2f6b6ed9df9a4e3ba88efd21
823804a7807864b44093a3843788f4cd076e89cf4a6fdeb8d153ae5c2c2df721
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13261
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 29 Feb 2024 19:58:06 GMT
accept-ranges: bytes
etag: "01b4e9c496bda1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 58EE81F517404B3BAF876A581752B028 Ref B: OSL30EDGE0112 Ref C: 2024-05-05T00:35:45Z
date: Sun, 05 May 2024 00:35:44 GMT
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BBMPM3EJHQ&cid=1464771833.1714869342>m=45je4510v9106739609z8813057436za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=2017286667
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BBMPM3EJHQ&cid=1464771833.1714869342>m=45je4510v9106739609z8813057436za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=2017286667
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint7D:68:6D:B1:32:34:52:51:20:C9:53:FF:B9:B7:8F:7E:05:F9:F5:97
ValidityTue, 16 Apr 2024 04:31:00 GMT - Tue, 09 Jul 2024 04:30:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BBMPM3EJHQ&cid=1464771833.1714869342>m=45je4510v9106739609z8813057436za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=2017286667 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 05 May 2024 00:35:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 6.3 kB IP
ASN #203220 Yahoo-UK Limited
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96
ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: WXu4Z42wInOmQ8YF7YsKejTgU98GRuOHl+mKaP+EqhUfa3mg83V+3BgLLlErMGZx3uIe6os4JYA=
x-amz-request-id: CG1V9F5G4XGMCTNM
date: Sun, 05 May 2024 00:26:56 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 530
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 6.3 kB IP
ASN #203220 Yahoo-UK Limited
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96
ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: WXu4Z42wInOmQ8YF7YsKejTgU98GRuOHl+mKaP+EqhUfa3mg83V+3BgLLlErMGZx3uIe6os4JYA=
x-amz-request-id: CG1V9F5G4XGMCTNM
date: Sun, 05 May 2024 00:26:56 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 530
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
leadgen.oxfordclub.com/split-test-for-elementor/v1/tests/track-conversion/
404 Not Found 10 kB URL GET HTTP/1.1 leadgen.oxfordclub.com/split-test-for-elementor/v1/tests/track-conversion/
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (5490)
Hash 4a03886c7f9733c567729b6f817fb61f
2794e84786f64e827a7b6f3a3556eed9e284519b
60dd5fb9fa4914eea3bee7f55fa0bd2808f67109e13039e5be7822bd6a86b3f3
GET /split-test-for-elementor/v1/tests/track-conversion/ HTTP/1.1
Host: leadgen.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
DNT: 1
Connection: keep-alive
Cookie: _ga_BBMPM3EJHQ=GS1.1.1714869342.1.0.1714869342.60.0.0; _ga=GA1.1.1464771833.1714869342; _gcl_au=1.1.1483350693.1714869343; _mg_ckp=eyJja1RrZERGIjoiIn0=; _pmedia_sid=38fb9fd1-62c2-426b-8ad4-f952aaa603b7; elementor_split_test_client_id=320f0d96a-80f42206-0b62-424f-aada-a46f8e517da9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Sun, 05 May 2024 00:35:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://leadgen.oxfordclub.com/wp-json/>; rel="https://api.w.org/"
Content-Encoding: br
libertythroughwealthnews.com/split-test-for-elementor/v1/tests/track-conversion/
404 Not Found 10 kB URL GET HTTP/1.1 libertythroughwealthnews.com/split-test-for-elementor/v1/tests/track-conversion/
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (5490)
Hash 466a4fb22101ccfe5456534e8a2c30b6
2d8f3cd0e13d6fa5d67560f37509e1539cbb2d7d
a705aa245fe716c5258c3c6ab2381efa189aa49beefa7cf4d1ff68d571b2deb7
GET /split-test-for-elementor/v1/tests/track-conversion/ HTTP/1.1
Host: libertythroughwealthnews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Sun, 05 May 2024 00:35:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://libertythroughwealthnews.com/wp-json/>; rel="https://api.w.org/"
Set-Cookie: elementor_split_test_client_id=320f0d96a-a9c7a7a2-236f-4d30-bfa0-e833baa06f16; expires=Mon, 05-May-2025 00:35:44 GMT; Max-Age=31536000; path=/; domain=libertythroughwealthnews.com
Content-Encoding: br
s.yimg.com/wi/config/10090329.json
200 OK 2 B URL GET HTTP/2 s.yimg.com/wi/config/10090329.json
IP
ASN #203220 Yahoo-UK Limited
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96
ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10090329.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: YX20CKXJTFYBS5D7
x-amz-id-2: d2JXsN7q9FClgSPOPyQYob8r3/51an99/GAnpiW6/xGdX0V7QYCQWb3pqxK1uYAn+9Sa/gA29DKUSjKiKjusVg==
content-type: application/json
date: Sun, 05 May 2024 00:35:25 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 20
ats-carp-promotion: 1
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10150636.json
200 OK 46 B URL GET HTTP/2 s.yimg.com/wi/config/10150636.json
IP
ASN #203220 Yahoo-UK Limited
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerDigiCert Inc
Subject*.fantasysports.yahoo.com
FingerprintFB:A0:5A:E1:EC:89:4D:F2:05:92:12:26:0C:97:C8:C6:CF:19:2F:96
ValidityTue, 30 Apr 2024 00:00:00 GMT - Wed, 19 Jun 2024 23:59:59 GMT
Hash 19b8572021b9e0a07b89bf86a82652ee
44c278b022175472711a5571a8e6ee825cf435a2
49ab5900241048e3f52a32cf9cf405ec5403001dceef55eba1f128b7809cef2b
GET /wi/config/10150636.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 0n/z9Nxch++NWGjNkb06c64c0vF9snxBAI0Kwc67r+GR+hkhOs3vnuvb8kdYL3x+OdzckU1QDIg=
x-amz-request-id: X3NCNCZQXDYBX4NW
date: Sun, 05 May 2024 00:35:27 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Sun, 05 May 2024 00:34:34 GMT
x-amz-expiration: expiry-date="Tue, 10 Jun 2025 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
x-amz-version-id: 9qeJDwVEAcu9.yphLwhitqMVYsowprce
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
etag: "19b8572021b9e0a07b89bf86a82652ee"
age: 20
ats-carp-promotion: 1
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
bat.bing.com/p/action/15322609.js
204 No Content 0 B URL GET HTTP/2 bat.bing.com/p/action/15322609.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
Fingerprint02:83:27:F9:50:D8:BE:B9:5E:DF:1A:4A:45:3B:6D:3C:BC:30:F2:58
ValidityWed, 01 May 2024 01:58:25 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/15322609.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0C82F591740B4532B22CC097BC608406 Ref B: OSL30EDGE0112 Ref C: 2024-05-05T00:35:45Z
date: Sun, 05 May 2024 00:35:45 GMT
X-Firefox-Spdy: h2
fg8vvsvnieiv3ej16jby.litix.io/
200 OK 0 B URL POST HTTP/1.1 fg8vvsvnieiv3ej16jby.litix.io/
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subject*.litix.io
Fingerprint4E:E4:65:84:18:ED:3D:B2:6C:A5:E8:DD:7D:D5:90:13:9B:17:8C:F3
ValidityMon, 24 Jul 2023 00:00:00 GMT - Wed, 21 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: fg8vvsvnieiv3ej16jby.litix.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1623
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
access-control-allow-methods: POST, GET
access-control-allow-origin: *
date: Sun, 05 May 2024 00:35:45 GMT
content-length: 0
x-envoy-upstream-service-time: 0
server: envoy
bat.bing.com/action/0?ti=15322609&Ver=2&mid=0c86831b-b17c-44dd-8f9d-f387fe9a9de8&sid=695130b00a7711efac6205b6218b8fcc&vid=69513c200a7711efa5a2a19698a2e96b&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=The%20Oxford%20Club&p=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&r=<=4586&evt=pageLoad&sv=1&rn=244216
204 No Content 0 B URL GET HTTP/2 bat.bing.com/action/0?ti=15322609&Ver=2&mid=0c86831b-b17c-44dd-8f9d-f387fe9a9de8&sid=695130b00a7711efac6205b6218b8fcc&vid=69513c200a7711efa5a2a19698a2e96b&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=The%20Oxford%20Club&p=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&r=<=4586&evt=pageLoad&sv=1&rn=244216
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
Fingerprint02:83:27:F9:50:D8:BE:B9:5E:DF:1A:4A:45:3B:6D:3C:BC:30:F2:58
ValidityWed, 01 May 2024 01:58:25 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=15322609&Ver=2&mid=0c86831b-b17c-44dd-8f9d-f387fe9a9de8&sid=695130b00a7711efac6205b6218b8fcc&vid=69513c200a7711efa5a2a19698a2e96b&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=The%20Oxford%20Club&p=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&r=<=4586&evt=pageLoad&sv=1&rn=244216 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=39836298C0D96EB21F8476EEC12C6FAF; domain=.bing.com; expires=Fri, 30-May-2025 00:35:45 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 79CE8C0D22724735B636118A9043CC04 Ref B: OSL30EDGE0112 Ref C: 2024-05-05T00:35:45Z
date: Sun, 05 May 2024 00:35:45 GMT
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je4510v9106739609za200&_p=1714869341272&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1464771833.1714869342&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=2&sid=1714869342&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&dt=The%20Oxford%20Club&en=scroll&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&epn.percent_scrolled=90&tfd=10101
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je4510v9106739609za200&_p=1714869341272&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1464771833.1714869342&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=2&sid=1714869342&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&dt=The%20Oxford%20Club&en=scroll&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&epn.percent_scrolled=90&tfd=10101
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je4510v9106739609za200&_p=1714869341272&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1464771833.1714869342&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=2&sid=1714869342&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&dt=The%20Oxford%20Club&en=scroll&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&epn.percent_scrolled=90&tfd=10101 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.oxfordclub.com
date: Sun, 05 May 2024 00:35:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
analytics.pmsrv.co/v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s004&weight=0&_ible=1&sid=38fb9fd1-62c2-426b-8ad4-f952aaa603b7&ord=1518297803120012.2&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&ppg=&_tk=%7B%7D
204 No Content 0 B URL GET HTTP/2 analytics.pmsrv.co/v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s004&weight=0&_ible=1&sid=38fb9fd1-62c2-426b-8ad4-f952aaa603b7&ord=1518297803120012.2&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&ppg=&_tk=%7B%7D
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subjectpmsrv.co
Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47
ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s004&weight=0&_ible=1&sid=38fb9fd1-62c2-426b-8ad4-f952aaa603b7&ord=1518297803120012.2&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&ppg=&_tk=%7B%7D HTTP/1.1
Host: analytics.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 04 May 2024 10:17:03 GMT
x-powered-by: Express
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F1fjJGt7IW4lqo2GUKnf30RMQVhLJ1z2ZSjGPaGzGgrLHI5MsSm8_Q==
age: 51530
X-Firefox-Spdy: h2
gtrace.mediago.io/ju/log/c?tn=f9f2b1ef23fe2759c2cad0953029a94b&trackingid=&mguid=&app=ERR-PIXEL&ext={%22type%22:%22PIXEL%22,%22msg%22:%22addIframe%20timeout%22,%22acid%22:%22%22,%22cpid%22:%22%22,%22jsversion%22:%22155126437%22}
0 B URL gtrace.mediago.io/ju/log/c?tn=f9f2b1ef23fe2759c2cad0953029a94b&trackingid=&mguid=&app=ERR-PIXEL&ext={%22type%22:%22PIXEL%22,%22msg%22:%22addIframe%20timeout%22,%22acid%22:%22%22,%22cpid%22:%22%22,%22jsversion%22:%22155126437%22}
IP
Certificate IssuerDigiCert Inc
Subject*.mediago.io
Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4
ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ju/log/c?tn=f9f2b1ef23fe2759c2cad0953029a94b&trackingid=&mguid=&app=ERR-PIXEL&ext={%22type%22:%22PIXEL%22,%22msg%22:%22addIframe%20timeout%22,%22acid%22:%22%22,%22cpid%22:%22%22,%22jsversion%22:%22155126437%22} HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: __mguid_=9df76ce1ee0f59042cggs400lvssxi4q
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 0
content-type: text/html; charset=utf-8
date: Sun, 05 May 2024 00:36:02 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=936ffc6e44bc4b95a38d8d7811143beb&ptd=&tkd=&acd=&cpid=&v=155126437
0 B URL gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=936ffc6e44bc4b95a38d8d7811143beb&ptd=&tkd=&acd=&cpid=&v=155126437
IP
Certificate IssuerDigiCert Inc
Subject*.mediago.io
Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4
ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=936ffc6e44bc4b95a38d8d7811143beb&ptd=&tkd=&acd=&cpid=&v=155126437 HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: __mguid_=9df76ce1ee0f59042cggs400lvssxi4q
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
date: Sun, 05 May 2024 00:36:03 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
at-api.tribeos.io/a/5e554fee6b742527f85286135595/setup.js
7.1 kB URL GET at-api.tribeos.io/a/5e554fee6b742527f85286135595/setup.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
File type HTML document, ASCII text, with very long lines (460)
Hash 91447ba152c6617e197cd34f7e6d30df
c5d4b83a46d59a0c426c3daf03960770803252f2
76ce5e3abcc6ddca0f6fbb74f10f4e1d492e38df272d44979e43c063f6b513a4
GET /a/5e554fee6b742527f85286135595/setup.js HTTP/1.1
Host: at-api.tribeos.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 522 No Reason Phrase
date: Sun, 05 May 2024 00:36:03 GMT
content-type: text/html; charset=UTF-8
content-length: 7090
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QJRhrzJWcrlAaUn9jF2y9941KTxzeUv93Y8klWfS33DRcQ3LFop2F9wOVDK%2ByH9ZJ1j9JLYHLriGzOQCswxtItOg3cx5n6i5UIXKrdBLwsVapyNWdZeeBcGZWBs7Hl1kClr4AQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 87eca6f53bb70b41-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=e1d9d14d0ac14d2bb748b0f828001231&ptd=&tkd=&acd=&cpid=&v=155126437
0 B URL gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=e1d9d14d0ac14d2bb748b0f828001231&ptd=&tkd=&acd=&cpid=&v=155126437
IP
Certificate IssuerDigiCert Inc
Subject*.mediago.io
Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4
ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=e1d9d14d0ac14d2bb748b0f828001231&ptd=&tkd=&acd=&cpid=&v=155126437 HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: __mguid_=9df76ce1ee0f59042cggs400lvssxi4q
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
date: Sun, 05 May 2024 00:36:03 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
analytics.pmsrv.co/v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s000&weight=0&_ible=1&sid=38fb9fd1-62c2-426b-8ad4-f952aaa603b7&ord=3723505256403846&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&ppg=&_tk=%7B%7D
0 B URL analytics.pmsrv.co/v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s000&weight=0&_ible=1&sid=38fb9fd1-62c2-426b-8ad4-f952aaa603b7&ord=3723505256403846&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&ppg=&_tk=%7B%7D
IP
Certificate IssuerAmazon
Subjectpmsrv.co
Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47
ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s000&weight=0&_ible=1&sid=38fb9fd1-62c2-426b-8ad4-f952aaa603b7&ord=3723505256403846&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue&ppg=&_tk=%7B%7D HTTP/1.1
Host: analytics.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sat, 04 May 2024 10:17:03 GMT
x-powered-by: Express
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O91H8Y6edPsmzmX-6oa0oe8WZ3qCo9CnnNHbHL_Se0P9H5r_0N_9IQ==
age: 51540
X-Firefox-Spdy: h2
c.pmsrv.co/v1/analytics.js?d=pro.oxfordclub.com
200 OK 9.7 kB URL GET HTTP/2 c.pmsrv.co/v1/analytics.js?d=pro.oxfordclub.com
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subjectpmsrv.co
Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47
ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (10015), with no line terminators
Hash 5770d811d5c7b150913493ade2195adb
7e37f2f2989092bab262e862c63dd042997f7d17
af3e9d36faf85e71bb9c9bdbf74d0205225f7f5dcc9c3427ca50ac4443f3a730
GET /v1/analytics.js?d=pro.oxfordclub.com HTTP/1.1
Host: c.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Sat, 04 May 2024 14:43:01 GMT
x-powered-by: Express
set-cookie: tpc=1; Domain=c.pmsrv.co; Path=/; Secure; SameSite=None
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
content-encoding: br
etag: W/"2608-ON79WHDBVOZGjekelYGZWI6GYLU"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: viK3nTlWokm_ofQ5tQdnABugiXj_I2IlJZzyhnVZgkF17ecH47ltcQ==
age: 35562
X-Firefox-Spdy: h2
c.lytics.io/static/pathfora.min.js
200 OK 105 kB URL GET HTTP/2 c.lytics.io/static/pathfora.min.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 105 kB (105002 bytes)
Hash 1dda5c62f6d686fe449a9d217388da4b
a2cfd95511bd1a0f8ae3275e44d309c7279c4a69
1f6e70fc4337b6769a4c498cf721491cb1f31a14e342cb9c584ccea00fee9d1b
GET /static/pathfora.min.js HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: seerid=eb8b0adf-b986-4beb-b178-a9b087479600
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:43 GMT
content-type: text/javascript; charset=utf-8
strict-transport-security: max-age=63072000;
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: HIT
age: 711
last-modified: Sun, 05 May 2024 00:23:52 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rDvof2r3pRYd07C5B6L78Xm8I9fU0YP28T66dn1v%2FxYR58RFpGIoh6QMYdo2zcQwGLXXXMiiPGG%2FypO8lY9IA8nNWFArXig%2FFJJxoGkObao5GcxsF7%2BTPl%2F1LxSb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eca6f35f4c0b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
c.lytics.io/api/personalize/9c32784e3cc4888a693a7988ad64c63d/user/_uid/eb8b0adf-b986-4beb-b178-a9b087479600?segments=true&mergestate=true&state=%7B%22_uid%22%3A%22eb8b0adf-b986-4beb-b178-a9b087479600%22%2C%22_sesstart%22%3A%221%22%2C%22_tz%22%3A0%2C%22_ul%22%3A%22en-US%22%2C%22_sz%22%3A%221280x1024%22%2C%22_nmob%22%3A%22t%22%2C%22_device%22%3A%22desktop%22%2C%22url%22%3A%22pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue%22%2C%22_v%22%3A%223.0.35%22%7D&ts=1714869341701&callback=u_556484261459777340
0 B URL GET c.lytics.io/api/personalize/9c32784e3cc4888a693a7988ad64c63d/user/_uid/eb8b0adf-b986-4beb-b178-a9b087479600?segments=true&mergestate=true&state=%7B%22_uid%22%3A%22eb8b0adf-b986-4beb-b178-a9b087479600%22%2C%22_sesstart%22%3A%221%22%2C%22_tz%22%3A0%2C%22_ul%22%3A%22en-US%22%2C%22_sz%22%3A%221280x1024%22%2C%22_nmob%22%3A%22t%22%2C%22_device%22%3A%22desktop%22%2C%22url%22%3A%22pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue%22%2C%22_v%22%3A%223.0.35%22%7D&ts=1714869341701&callback=u_556484261459777340
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/personalize/9c32784e3cc4888a693a7988ad64c63d/user/_uid/eb8b0adf-b986-4beb-b178-a9b087479600?segments=true&mergestate=true&state=%7B%22_uid%22%3A%22eb8b0adf-b986-4beb-b178-a9b087479600%22%2C%22_sesstart%22%3A%221%22%2C%22_tz%22%3A0%2C%22_ul%22%3A%22en-US%22%2C%22_sz%22%3A%221280x1024%22%2C%22_nmob%22%3A%22t%22%2C%22_device%22%3A%22desktop%22%2C%22url%22%3A%22pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3D54dd3614f68c4606aa337aedc27e997b%26h%3Dtrue%22%2C%22_v%22%3A%223.0.35%22%7D&ts=1714869341701&callback=u_556484261459777340 HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:41 GMT
content-type: application/json
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Cookie, *
access-control-allow-methods: GET
access-control-allow-origin:
strict-transport-security: max-age=63072000;
x-lytics-trace: dd26519fba557fe01fc993ba3c57bc23
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6JVpVF4aSGanaJYF56bD3pTp7A1YBsMt4DWGAG91OheDp23YpMca7N4QBIIJd77JcuJHhAwhXQiq6%2BL1CpKeZNbICtGOVLVwT4y46whxbQEpjvoI0%2BYK8STlgOXh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eca6e9db9d0b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
a.mgid.com/mgsensor.js?d=1714869342551&source=gtm
200 OK 17 kB URL GET HTTP/2 a.mgid.com/mgsensor.js?d=1714869342551&source=gtm
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectmgid.com
Fingerprint9C:6C:5A:48:88:44:CB:C2:F4:76:D3:2E:DC:07:0D:D4:CA:6A:25:F5
ValiditySun, 10 Mar 2024 23:31:34 GMT - Sat, 08 Jun 2024 23:31:33 GMT
File type JavaScript source, ASCII text, with very long lines (16960), with no line terminators
Hash 55f2e03ea5c17124ec95ef6b177ffce2
07a2522117e2b756ae1eae210be12e7412083e48
45d2c055791d072ed388bb395f90aaebf2425189bbd03942b8f60855ba4f6988
GET /mgsensor.js?d=1714869342551&source=gtm HTTP/1.1
Host: a.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:42 GMT
content-type: application/javascript
vary: Accept-Encoding
x-mg-request-uuid: ed1b2f25-81ff-4c84-82ef-69e50edf16e4
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=fPpmO_vqEmed75jbUTOvjHzNbbp6zWitOH_vg.ax7U4-1714869342-1.0.1.1-C4uk3X1FaAs4AeDxkwKmDBNDg9mVzsgUm0uiuusGVN62iNYvCoP1YsBZ543k1fAaOUwvF88lbkMcKhdoz5W8QA; path=/; expires=Sun, 05-May-24 01:05:42 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87eca6efd93db521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
c.lytics.io/c/9c32784e3cc4888a693a7988ad64c63d/portrait
200 OK 0 B URL POST HTTP/2 c.lytics.io/c/9c32784e3cc4888a693a7988ad64c63d/portrait
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /c/9c32784e3cc4888a693a7988ad64c63d/portrait HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2304
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Cookie: seerid=eb8b0adf-b986-4beb-b178-a9b087479600
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:42 GMT
content-type: text/html
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cookie, *
access-control-allow-methods: GET, POST
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
strict-transport-security: max-age=63072000;
x-lytics-trace: a60deb9a8ab39c80ec735ff14517fd1c
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=94I6LX8%2FOBRquQ%2FKc7TtzpGMdCt3tfxyPoG%2FhL2Q%2FvNc%2F7SxKLB5in0Oh%2Bw3NfrqK41AUaDdQFybqdZ%2BF7eYrLTCONGS576y9xvzNnvsJ%2B2I7CkG3jjtfIjpdkBl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eca6ed6d1f0b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.p3lstrk.com/2MGNK7T/CXW7M6/?sub1=3415447649292147582
302 Found 17 kB URL User Request GET HTTP/2 www.p3lstrk.com/2MGNK7T/CXW7M6/?sub1=3415447649292147582
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerStarfield Technologies, Inc.
Subjectof59trk.com
Fingerprint7C:22:67:15:07:7A:A8:A1:66:C3:A0:CD:C5:3A:BA:6B:FF:2A:61:81
ValidityFri, 23 Feb 2024 15:04:31 GMT - Tue, 11 Feb 2025 14:26:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2MGNK7T/CXW7M6/?sub1=3415447649292147582 HTTP/1.1
Host: www.p3lstrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sun, 05 May 2024 00:35:39 GMT
content-type: text/html; charset=utf-8
content-length: 95
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://pro.oxfordclub.com/m/2314530?s1=54dd3614f68c4606aa337aedc27e997b
set-cookie: uniqueClick_CXW7M6=1985a50c-cedf-4890-89e7-a7234d480adb:1714869339; Path=/; Expires=Sun, 02 Jun 2024 00:35:39 GMT; Secure; SameSite=None
transaction_id=54dd3614f68c4606aa337aedc27e997b; Path=/; Expires=Sat, 03 Aug 2024 00:35:39 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 2710e4e3-9886-459a-b090-7d475d0fc609
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-KTM4C7C
200 OK 358 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KTM4C7C
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File type JavaScript source, ASCII text, with very long lines (40765)
Size 358 kB (358348 bytes)
Hash e62686026a2a181c71ca33b78a70b537
63b2a4fb941296b95f6a95f79b886729e13ca43a
fc0de23467e9da6f375697b04b20588ddb4cfc4957f759026e990f2cfb6fa892
GET /gtm.js?id=GTM-KTM4C7C HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:41 GMT
expires: Sun, 05 May 2024 00:35:41 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 May 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 106265
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c.lytics.io/api/experience/candidate/9c32784e3cc4888a693a7988ad64c63d/config.js
200 OK 237 kB URL GET HTTP/2 c.lytics.io/api/experience/candidate/9c32784e3cc4888a693a7988ad64c63d/config.js
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
Size 237 kB (236586 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/experience/candidate/9c32784e3cc4888a693a7988ad64c63d/config.js HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: seerid=eb8b0adf-b986-4beb-b178-a9b087479600
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:43 GMT
content-type: application/javascript
access-control-allow-origin: *
strict-transport-security: max-age=63072000;
x-lytics-trace: 3d6daa7c265b692af923ca6057fc0a59
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: HIT
age: 19
last-modified: Sun, 05 May 2024 00:35:24 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2CCrV2Ay50PouPjheOw4ACH1cLQCVv8jEI9RcdO1jgsMxlLgXROJ%2FH4Kk%2F1sAF2JY%2FJZDri%2BbF%2BcBWlWkq4%2BYH44TxXyJgaoP5OKteTvWOdt%2F%2FSteE1QMwPXcy09"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eca6f758fc0b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
buildawealthyretirement.com/split-test-for-elementor/v1/tests/46/track-conversion/
200 OK 43 B URL GET HTTP/1.1 buildawealthyretirement.com/split-test-for-elementor/v1/tests/46/track-conversion/
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectleadgen.oxfordclub.com
FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4
ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File type GIF image data, version 89a, 1 x 1
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/46/track-conversion/ HTTP/1.1
Host: buildawealthyretirement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 00:35:43 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-1cf61d18-5f5d-454e-93fe-7c901011d61e; expires=Mon, 05-May-2025 00:35:43 GMT; Max-Age=31536000; path=/; domain=buildawealthyretirement.com
Referrer-Policy: unsafe-url
c.lytics.io/static/pathfora.min.css
200 OK 21 kB URL GET HTTP/2 c.lytics.io/static/pathfora.min.css
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerLet's Encrypt
Subjectlytics.io
FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79
ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File type ASCII text, with very long lines (20939), with no line terminators
Hash eecb9ff4af0757a947f791bc35393abc
2d23a8718b63c1cd96a10674bdc92ca61682e85b
464ad5d70f6d5fe4adef4d3057e1ae91e4983b02ef4ec9db0b067dcad4e53685
GET /static/pathfora.min.css HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: seerid=eb8b0adf-b986-4beb-b178-a9b087479600
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:43 GMT
content-type: text/css; charset=utf-8
strict-transport-security: max-age=63072000;
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: HIT
age: 3762
last-modified: Sat, 04 May 2024 23:33:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p7XRUR8X0%2FanZZ%2FSPC1ZTNXKGPkFEmXq2YIIBAFhdMSVpm%2BWZ1vrPbZIh2anjr8ZtL1b%2FJg0pQPl2RSmru3N%2Fg4QktItNJu43IU6dBqC2ZYDaJi3W7fJPGkZMISj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eca6f50fe40b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
analytics.pmsrv.co/v1/tracking.js?d=pro.oxfordclub.com&a=50bbcf39-5fab-4416-a13c-acc35b621b86
200 OK 3.0 kB URL GET HTTP/2 analytics.pmsrv.co/v1/tracking.js?d=pro.oxfordclub.com&a=50bbcf39-5fab-4416-a13c-acc35b621b86
IP
Requested by https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=54dd3614f68c4606aa337aedc27e997b&h=true
Certificate IssuerAmazon
Subjectpmsrv.co
Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47
ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3099), with no line terminators
Hash e67eeb0a5fde100a9a9b8218be6ff7b7
900455bf5702428b4260ae17a16226e8f730896a
1ac534d6bbb2bfc01317c298911ee45cd0199cadebe1b7d8cf43dd178ec2a49d
GET /v1/tracking.js?d=pro.oxfordclub.com&a=50bbcf39-5fab-4416-a13c-acc35b621b86 HTTP/1.1
Host: analytics.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Sun, 05 May 2024 00:18:13 GMT
x-powered-by: Express
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
content-encoding: gzip
etag: W/"bc8-CwjlEyZMeJT2T4gdzys39D9fgms"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y8DEhHHzHo-8N8ODqQmjjy6OJAQu3zPKCX5fythw0AAm6nqpzQkmfQ==
age: 1050
X-Firefox-Spdy: h2
172.67.172.49
104.17.25.14
23.36.76.122
35.214.168.80
87.248.119.252
0.0.0.0