Overview

URL go.workday.com/DWkq10b0ZHD00v266l040kJ
IP199.15.213.48
ASNAS53580 MARKETO
Location United States
Report completed2017-10-12 17:11:44 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 199.15.213.48

Date UQ / IDS / BL URL IP
2017-11-21 06:45:49 +0100
0 - 0 - 0 go.snowflake.net/v09U0C2u03bOR4dbF01e000 199.15.213.48
2017-11-20 20:46:37 +0100
0 - 0 - 0 go.whitehatsec.com 199.15.213.48
2017-11-20 18:29:46 +0100
0 - 0 - 0 pages.curaspan.com/R00Ro55GFY0000H0PjXXu30 199.15.213.48
2017-11-20 15:46:48 +0100
0 - 0 - 0 go.1105.net/dc/klVSSZaJe-rulP_tHdx_oLJL3QC0IO (...) 199.15.213.48
2017-11-20 14:02:16 +0100
0 - 0 - 0 go.1105.net/NP00eLPu0027znT1A8d0S1g 199.15.213.48
2017-11-17 17:55:06 +0100
0 - 0 - 0 mkto-d0143.com/m000Uy00k0HrikHqEuD0XL0 199.15.213.48
2017-11-17 17:00:52 +0100
0 - 0 - 0 info.on24.com/s0dQ0bs0fHCE0A06yO30y0N 199.15.213.48
2017-11-16 18:18:56 +0100
0 - 0 - 0 go.datameer.com/Xgo0FTG01000CncTS00sBU0 199.15.213.48
2017-11-16 17:27:16 +0100
0 - 0 - 0 go.contractlogix.com/kP0vc0k00lV03DkES30u00R 199.15.213.48
2017-11-16 16:59:57 +0100
0 - 0 - 0 go.1105.net/WL07o8P8g2W1Tul0091e600 199.15.213.48

Last 10 reports on ASN: AS53580 MARKETO

Date UQ / IDS / BL URL IP
2017-11-21 08:07:00 +0100
0 - 0 - 0 get.eaglecrk.com/tcP12i03SY0b300IKd000bN 199.15.215.8
2017-11-21 06:45:49 +0100
0 - 0 - 0 go.snowflake.net/v09U0C2u03bOR4dbF01e000 199.15.213.48
2017-11-20 20:47:15 +0100
0 - 0 - 0 info.whitehatsec.com 199.15.213.196
2017-11-20 20:46:37 +0100
0 - 0 - 0 go.whitehatsec.com 199.15.213.48
2017-11-20 20:22:40 +0100
0 - 0 - 0 ec.pecsafety.com/v/o002900hi000RJ04GXEeD20 199.15.215.8
2017-11-20 19:57:16 +0100
0 - 0 - 0 go.auth0.com/y47VDOzg0Z0qWXf09400020 199.15.215.8
2017-11-20 19:38:44 +0100
0 - 0 - 0 info.asuresoftware.com/u/CU00030tI0GQ0xMh3z04C0A 199.15.215.8
2017-11-20 19:31:49 +0100
0 - 0 - 0 info.asuresoftware.com/v/DQuA0040CUh00G04Ix300Mz 199.15.215.8
2017-11-20 18:32:56 +0100
0 - 0 - 0 go2.cleanpower.com/u/s0V20n50HB9H0H0v4310y0Z 199.15.215.8
2017-11-20 18:29:46 +0100
0 - 0 - 0 pages.curaspan.com/R00Ro55GFY0000H0PjXXu30 199.15.213.48

No other reports on domain: workday.com



JavaScript

Executed Scripts (9)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (54)


Request Response
                                        
                                            GET /DWkq10b0ZHD00v266l040kJ HTTP/1.1 
Host: go.workday.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         199.15.213.48
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 12 Oct 2017 15:11:12 GMT
Server: Apache
Cache-Control: private, no-cache, no-store, max-age=0
Connection: close
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
Set-Cookie: BIGipServerab_mailtracking_80=!O1dGKLUmg/PLH/oNEbaWaFcUiNHQQlUWNKq5+EBghCoqdo5UCjk81hQZH5WOhS0bGhUob6T67rog8uc=; path=/; Httponly


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   432
Md5:    750f174e1ae65c4e35c1802ae803c9a9
Sha1:   484f43c6acdf68be8a949fa2b25c132403c67272
Sha256: 7894cf998086b9b0b461b574c36d7c511b11db575d33c7ebef93d03cb78b1d77
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: go.workday.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: BIGipServerab_mailtracking_80=!O1dGKLUmg/PLH/oNEbaWaFcUiNHQQlUWNKq5+EBghCoqdo5UCjk81hQZH5WOhS0bGhUob6T67rog8uc=

                                         
                                         199.15.213.48
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 12 Oct 2017 15:11:12 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 101
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   101
Md5:    1c9a817585becb79830bbffcbc1fcc9e
Sha1:   e18688166c6a77e2102840c0d7494cce72710831
Sha256: 66f95b3b45987539f3f46e60bc5493b26efaa2bd4dd5a0ef06603312b41bdf22
                                        
                                            POST / HTTP/1.1 
Host: gp.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1415
Content-Transfer-Encoding: binary
Cache-Control: max-age=368351, public, no-transform, must-revalidate
Last-Modified: Mon, 9 Oct 2017 21:30:23 GMT
Expires: Mon, 16 Oct 2017 21:30:23 GMT
Date: Thu, 12 Oct 2017 15:11:12 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1415
Md5:    af920b138c6efcf6b45078e48b92579f
Sha1:   02ec047fba507b44e36a5d88e7b5ba7eb7c500ea
Sha256: 735666f6c60400d2b9e08748ea1d64bacf501d6ec40c9973e7560ae4abb64f9b
                                        
                                            GET /HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9 HTTP/1.1 
Host: hbrengage.wins.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://go.workday.com/DWkq10b0ZHD00v266l040kJ

                                         
                                         65.52.217.59
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Content-Length: 7081
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/8.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Set-Cookie: ARRAffinity=6d7dad89c0ea4cb78c15f5e1f9e81e23614bc56f8e53b96e3e381b56aec19b66;Path=/;HttpOnly;Domain=hbrengage.wins.net
Date: Thu, 12 Oct 2017 15:11:12 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   7081
Md5:    18515d29922370429e1bf2c4372be40a
Sha1:   22c0b6ed0af68e597bf18d96f556baad08d5da80
Sha256: ed0d2106d53a70a5c2a988b4f2643394e2c711ab067a2e192991b9639d631d1b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 12 Oct 2017 15:11:13 GMT
Etag: "59df5bc5-1d7"
Expires: Sat, 14 Oct 2017 15:11:13 GMT
Last-Modified: Thu, 12 Oct 2017 12:10:45 GMT
Server: ECS (arn/467B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    a47e018cc5e630d48bcd80a97212b839
Sha1:   aad3f82c6bc0990df829fcc2328dbbfe01f61afe
Sha256: ddaca64308604b36fdfa61281a7126a45f42a71e44cdccee471ea30df8c3fce4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 12 Oct 2017 15:11:13 GMT
Etag: "59df468c-1d7"
Expires: Sat, 14 Oct 2017 15:11:13 GMT
Last-Modified: Thu, 12 Oct 2017 10:40:12 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    29ef5d677c9b24fe8eae906b64fad76c
Sha1:   e26122babeb34b327b84a8317373f8dcc8dadb77
Sha256: d1eaeeb0f9fc081433b479f960b74861b0a8079b8bd3f3b4af1b9cac99ef6ed0
                                        
                                            GET /Content/registration-hbr.css HTTP/1.1 
Host: hbrengage.wins.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: ARRAffinity=6d7dad89c0ea4cb78c15f5e1f9e81e23614bc56f8e53b96e3e381b56aec19b66

                                         
                                         65.52.217.59
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 6297
Content-Encoding: gzip
Last-Modified: Thu, 31 Aug 2017 16:06:39 GMT
Accept-Ranges: bytes
Etag: "8051c1207322d31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.0
X-Powered-By: ASP.NET
Date: Thu, 12 Oct 2017 15:11:12 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   6297
Md5:    c2e05082d3130a534dbd20a9d275b575
Sha1:   7a579d6e2763ac5713525a180f7aa61f02b2e737
Sha256: 240323ccca168ec5aff1fceaeae765362b52644fd4cfae85f9d973885d465417
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=537355, public, no-transform, must-revalidate
Last-Modified: Wed, 11 Oct 2017 20:24:58 GMT
Expires: Wed, 18 Oct 2017 20:24:58 GMT
Date: Thu, 12 Oct 2017 15:11:13 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1419
Md5:    e608bb56d536ce6725847b8016b980af
Sha1:   5a0e8a687e741ace2bba59bce92e76224f2bf0d4
Sha256: 478de89ba058d69e46e9f2587233e20e0df4da2b14e906b717f75b910bac30b4
                                        
                                            GET /9146204dcdccfe9dc3405fbec7e2354ec4405ec3/satelliteLib-5a0ff0ee106c60e3304dd3ad7f82bdaee1b3dda3.js HTTP/1.1 
Host: assets.adobedtm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         88.221.73.77
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: Apache
Etag: "364ac9f68e19ea5220c8764d5422b7fe:1507675265"
Last-Modified: Tue, 10 Oct 2017 22:41:05 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 38062
Timing-Allow-Origin: *, *
Date: Thu, 12 Oct 2017 15:11:13 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   38062
Md5:    08965cd08d70f70ce1af6cb4f641d99e
Sha1:   ed75752d5bc3ed52fc1b55d232d2582f24c10dc3
Sha256: cb7ea8676871398e339f2dbce2ecc4d5fe63e8e58deab1ea6935777c27c6a602
                                        
                                            GET /global/public/content-library/HBR_Engage/e1f836a6-8752-4002-8e83-fe79fb5b6230 HTTP/1.1 
Host: krm.vo.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         178.79.212.129
HTTP/1.1 200 OK
                                        
Date: Thu, 12 Oct 2017 15:11:13 GMT
Content-Length: 2916
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/5.4.16
Strict-Transport-Security: max-age=15768000; includeSubDomains; preload
Accept-Ranges: bytes
Age: 345477
Last-Modified: Wed, 09 Aug 2017 20:11:29 GMT


--- Additional Info ---
Magic:  PNG image, 580 x 110, 8-bit/color RGB, non-interlaced
Size:   2916
Md5:    d274fa9e1e384c1a0a485aed35ab7020
Sha1:   9e1f1fd32d1f75e755eea558ddb463dac66f84bd
Sha256: 9a24f16425181ed0149f51a190bcb3fd09a5cd45de7853824c051a7d6e670beb
                                        
                                            GET /global/public/content-library/HBR_Engage/18cc6289-f7c2-4a70-94b5-afcf32c5bcd8 HTTP/1.1 
Host: krm.vo.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         178.79.212.129
HTTP/1.1 200 OK
                                        
Date: Thu, 12 Oct 2017 15:11:13 GMT
Content-Length: 8803
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/5.4.16
Strict-Transport-Security: max-age=15768000; includeSubDomains; preload
Accept-Ranges: bytes
Age: 145871
Last-Modified: Fri, 04 Aug 2017 15:54:56 GMT


--- Additional Info ---
Magic:  PNG image, 640 x 300, 8-bit/color RGB, non-interlaced
Size:   8803
Md5:    5b0d5b95ffada4487f0c4404950a840b
Sha1:   010bf929e8f7499299439db5b03330d4cbbe25a9
Sha256: 56fa44425303714e53bce8d3b33108d6f2bb973858b517c4f59cc55d2e659dd1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.trustwave.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         195.159.219.9
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 638
Date: Thu, 12 Oct 2017 15:11:13 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   638
Md5:    a584f5340ff088e07f73f0042bf5866b
Sha1:   dd6e08755db33568c0336f299da483d9e4af0860
Sha256: c93ecfd0ef3a79b51dd274e0e5d7194283da69e028c188e6953f055956f713c3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.trustwave.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         195.159.219.9
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 1684
Date: Thu, 12 Oct 2017 15:11:13 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1684
Md5:    30e233ac6d59d1b15591e57ee7ee6f46
Sha1:   360f9d70b1feb1d092e3b189588b012bf5eeb2b5
Sha256: 4a0fb32e8859c41467e6105f6bcbce4184307114aeb9003f1ce151ffaa662e42
                                        
                                            GET /global/public/content-library/HBR_Engage/6e5c9800-cfa5-4a41-8821-577a2403f349 HTTP/1.1 
Host: krm.vo.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         178.79.212.129
HTTP/1.1 200 OK
                                        
Date: Thu, 12 Oct 2017 15:11:13 GMT
Content-Length: 51747
Connection: keep-alive
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/5.4.16
Strict-Transport-Security: max-age=15768000; includeSubDomains; preload
Accept-Ranges: bytes
Age: 4493
Last-Modified: Wed, 09 Aug 2017 20:33:10 GMT


--- Additional Info ---
Magic:  PNG image, 200 x 200, 8-bit/color RGBA, non-interlaced
Size:   51747
Md5:    ee3fe3658c2f935b0aa444e68a0434ca
Sha1:   a7bef28b131c8600859d1c54b3490a9be2e6aba8
Sha256: a783069f64e8fcd9e5c1ef97784328ba05836f825d31b18025fd1cfd03711a1b
                                        
                                            GET /track/conv/?adv=a7s17mo&ct=0:jt2v7zb&fmt=3 HTTP/1.1 
Host: insight.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         54.247.165.114
HTTP/1.1 302 Found
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Thu, 12 Oct 2017 15:11:09 GMT
Location: https://ib.adnxs.com/getuid?https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fappnexus%3Fttd%3D1%26anid%3D%24UID&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=cb40a0d9-fe58-4067-adc4-4e96a22a0989; domain=.adsrvr.org; expires=Fri, 12-Oct-2018 15:11:09 GMT; path=/ TDCPM=CAESFwoIYXBwbmV4dXMSCwi-p9up9rC9NRAFGAUoATILCL6ftLbG48g1EAVCDyINCAESCQoFdGllcjMQAVoHYTdzMTdtb2ABcghhcHBuZXh1cw..; domain=.adsrvr.org; expires=Fri, 12-Oct-2018 15:11:09 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: rc.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1034
Content-Transfer-Encoding: binary
Cache-Control: max-age=455877, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Oct 2017 21:49:08 GMT
Expires: Tue, 17 Oct 2017 21:49:08 GMT
Date: Thu, 12 Oct 2017 15:11:13 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1034
Md5:    04f2c7ba98cb2162079319933ef2a8c6
Sha1:   2072f3298017352464cbfe922519bb0291b49de6
Sha256: da25a2e1ffd252d8c38a617bee46cd2c8e2e8fe2db68966588057173ff82058f
                                        
                                            GET /Scripts/Shared/utility.js HTTP/1.1 
Host: hbrengage.wins.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: ARRAffinity=6d7dad89c0ea4cb78c15f5e1f9e81e23614bc56f8e53b96e3e381b56aec19b66

                                         
                                         65.52.217.59
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Content-Length: 6256
Content-Encoding: gzip
Last-Modified: Tue, 03 Oct 2017 13:55:01 GMT
Accept-Ranges: bytes
Etag: "80e8cf344f3cd31:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.0
X-Powered-By: ASP.NET
Date: Thu, 12 Oct 2017 15:11:11 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   6256
Md5:    e13efe7efe9f304d4ad75713c25129d9
Sha1:   434776da20cdebe1ad673db881d86f322680f068
Sha256: b205dc709621fbda36d4d2ac40a7c8fb964ad2b6da8c01f3a1310f0fd175565b
                                        
                                            GET /register/HBR1017171/JS?m=hostedpage HTTP/1.1 
Host: hbrengage.wins.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: ARRAffinity=6d7dad89c0ea4cb78c15f5e1f9e81e23614bc56f8e53b96e3e381b56aec19b66

                                         
                                         65.52.217.59
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Cache-Control: private
Content-Length: 11432
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/8.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Thu, 12 Oct 2017 15:11:14 GMT


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   11432
Md5:    fae4f22b0f27621adba24817c7e62f83
Sha1:   10137071ba0700c34d45d6dfccebaeb36392710c
Sha256: d4e532d8ef07fbd1d630784f63a3a80d52a6df02189d3e73057bae21b781853f
                                        
                                            GET /getuid?https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fappnexus%3Fttd%3D1%26anid%3D%24UID&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         37.252.172.70
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Thu, 12 Oct 2017 15:11:16 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fmatch.adsrvr.org%252Ftrack%252Fcmf%252Fappnexus%253Fttd%253D1%2526anid%253D%2524UID%26ttd_tdid%3Dcb40a0d9-fe58-4067-adc4-4e96a22a0989
AN-X-Request-Uuid: 28f33ad4-afaf-4551-9a79-5454f6b6c602
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Fri, 13-Oct-2017 15:11:16 GMT; Domain=.adnxs.com; HttpOnly uuid2=5762655058247466041; Path=/; Max-Age=7776000; Expires=Wed, 10-Jan-2018 15:11:16 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 154.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.166:80


--- Additional Info ---
                                        
                                            GET /Content/Images/registration-pages/hbr/linkedin.png HTTP/1.1 
Host: hbrengage.wins.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: ARRAffinity=6d7dad89c0ea4cb78c15f5e1f9e81e23614bc56f8e53b96e3e381b56aec19b66

                                         
                                         65.52.217.59
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 1294
Last-Modified: Thu, 31 Aug 2017 16:06:39 GMT
Accept-Ranges: bytes
Etag: "2274c217322d31:0"
Server: Microsoft-IIS/8.0
X-Powered-By: ASP.NET
Date: Thu, 12 Oct 2017 15:11:13 GMT


--- Additional Info ---
Magic:  PNG image, 78 x 26, 8-bit/color RGBA, non-interlaced
Size:   1294
Md5:    f46bd631b6097d1a90b8b4c29a2fb91f
Sha1:   83d6ae797977872916f0d8e1073650550071c796
Sha256: 4a05133df8a5fd62d3528fe9180679d73dc4376835a243c4d38a8252177551b2
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Oct 2017 15:11:14 GMT
Expires: Mon, 16 Oct 2017 15:11:14 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    aacde496acab2b2f50b9af6de6938636
Sha1:   f820ed61e701750197956898bf8c057f913b9d9c
Sha256: db96b05076901deab76936f31b29d8cc8051ce404ba97693280e0576830641c9
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=379405, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Oct 2017 00:34:08 GMT
Expires: Tue, 17 Oct 2017 00:34:08 GMT
Date: Thu, 12 Oct 2017 15:11:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    fccd40351d25d6f5eecda73fdef9b3d8
Sha1:   0d2d2f37814bb53b7dca796acc9ee278ef6297ba
Sha256: 23e276d6aa20791de9110019cb7992bae490040d4cc3a06678449d1b3f2063e4
                                        
                                            GET /track/conv/?adv=a7s17mo&ct=0:jt2v7zb&fmt=3 HTTP/1.1 
Host: insight.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: TDID=cb40a0d9-fe58-4067-adc4-4e96a22a0989; TDCPM=CAESFwoIYXBwbmV4dXMSCwi-p9up9rC9NRAFGAUoATILCL6ftLbG48g1EAVCDyINCAESCQoFdGllcjMQAVoHYTdzMTdtb2ABcghhcHBuZXh1cw..

                                         
                                         54.247.165.114
HTTP/1.1 302 Found
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Thu, 12 Oct 2017 15:10:58 GMT
Location: https://ads.yahoo.com/cms/v1?esig=1~fac06801624107e5d8ee63717a17d281e39cf167&nwid=10000480789&sigv=1&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=cb40a0d9-fe58-4067-adc4-4e96a22a0989; domain=.adsrvr.org; expires=Fri, 12-Oct-2018 15:10:59 GMT; path=/ TDCPM=CAESFwoIYXBwbmV4dXMSCwi-p9up9rC9NRAFEhkKCnJpZ2h0bWVkaWESCwisl5LF9bC9NRAFGAUoATILCKyP69HF48g1EAVCDyINCAESCQoFdGllcjMQAVoHYTdzMTdtb2ABcgpyaWdodG1lZGlh; domain=.adsrvr.org; expires=Fri, 12-Oct-2018 15:10:59 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 0
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fmatch.adsrvr.org%252Ftrack%252Fcmf%252Fappnexus%253Fttd%253D1%2526anid%253D%2524UID%26ttd_tdid%3Dcb40a0d9-fe58-4067-adc4-4e96a22a0989 HTTP/1.1 
Host: ib.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: sess=1; uuid2=5762655058247466041

                                         
                                         37.252.172.70
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.13.4
Date: Thu, 12 Oct 2017 15:11:16 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=5762655058247466041&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989
AN-X-Request-Uuid: 7a76f61b-3cfa-4287-b7b9-a7569bb1669f
Set-Cookie: sess=1; Path=/; Max-Age=86400; Expires=Fri, 13-Oct-2017 15:11:16 GMT; Domain=.adnxs.com; HttpOnly uuid2=5762655058247466041; Path=/; Max-Age=7776000; Expires=Wed, 10-Jan-2018 15:11:16 GMT; Domain=.adnxs.com; HttpOnly
X-Proxy-Origin: 77.40.129.123; 77.40.129.123; 154.bm-nginx-loadbalancer.mgmt.fra1; *.adnxs.com; 37.252.172.23:80


--- Additional Info ---
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 13:50:39 GMT
Expires: Thu, 12 Oct 2017 15:50:39 GMT
Last-Modified: Thu, 28 Sep 2017 22:31:34 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14089
Cache-Control: public, max-age=7200
Age: 4835
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14089
Md5:    7b1f226d2f5f01597e62889513d4bc8c
Sha1:   ff78ed289a65fa3c91b0ff470fb0c6536bcab745
Sha256: 80eeeea7639a7b6a6205b8862b9060a7c60da47855e8dd9c74e64b0a0fce8b9a
                                        
                                            POST / HTTP/1.1 
Host: ss.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1609
Content-Transfer-Encoding: binary
Cache-Control: max-age=335142, public, no-transform, must-revalidate
Last-Modified: Mon, 9 Oct 2017 12:14:30 GMT
Expires: Mon, 16 Oct 2017 12:14:30 GMT
Date: Thu, 12 Oct 2017 15:11:15 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1609
Md5:    94704c390b91cb9170263d4e6f89bb98
Sha1:   16501c14972871c24fa46a81f585c330a8ad1866
Sha256: 228a68f95618f17acc8ba6de1b531cad1fcb663265dbedd1c24ebc2c08de34d7
                                        
                                            GET /Content/Images/registration-pages/hbr/facebook.png HTTP/1.1 
Host: hbrengage.wins.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: ARRAffinity=6d7dad89c0ea4cb78c15f5e1f9e81e23614bc56f8e53b96e3e381b56aec19b66

                                         
                                         65.52.217.59
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 1302
Last-Modified: Thu, 31 Aug 2017 16:06:39 GMT
Accept-Ranges: bytes
Etag: "7e04b217322d31:0"
Server: Microsoft-IIS/8.0
X-Powered-By: ASP.NET
Date: Thu, 12 Oct 2017 15:11:13 GMT


--- Additional Info ---
Magic:  PNG image, 78 x 26, 8-bit/color RGBA, non-interlaced
Size:   1302
Md5:    27110348ebcf0580e8844fcf03267ee4
Sha1:   a42b6fdbfd76d439b3a91b2909b0dba49b205cda
Sha256: 02d8bcd91db510d5219934bf7336157de5b998ad8440dfe6e139a9a27c39cccd
                                        
                                            GET /Content/Images/registration-pages/hbr/twitter.png HTTP/1.1 
Host: hbrengage.wins.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: ARRAffinity=6d7dad89c0ea4cb78c15f5e1f9e81e23614bc56f8e53b96e3e381b56aec19b66

                                         
                                         65.52.217.59
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 1525
Last-Modified: Thu, 31 Aug 2017 16:06:39 GMT
Accept-Ranges: bytes
Etag: "3e2e4c217322d31:0"
Server: Microsoft-IIS/8.0
X-Powered-By: ASP.NET
Date: Thu, 12 Oct 2017 15:11:13 GMT


--- Additional Info ---
Magic:  PNG image, 78 x 26, 8-bit/color RGBA, non-interlaced
Size:   1525
Md5:    e32d91d1aa502e527f8ce7b21e134b6f
Sha1:   14d49c30ef230b64f53a0a61ac9436dda043e013
Sha256: c0f3a6bed63ef33b0a2f94f7a25cb7d2d907f4ee9aca8226c51de4728d3c4471
                                        
                                            GET /r/collect?v=1&_v=j64&a=1384886544&t=pageview&_s=1&dl=https%3A%2F%2Fhbrengage.wins.net%2FHBR1017171%3Fm%3D.EMFINS%26mkt_tok%3DeyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9&dr=http%3A%2F%2Fgo.workday.com%2FDWkq10b0ZHD00v266l040kJ&ul=en-us&de=UTF-8&dt=Growth%20Strategies%20for%20Business%20Leaders&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=YEBAAEQAI~&jid=1929144486&gjid=52315530&cid=246373792.1507821076&tid=UA-1050442-1&_gid=1870497518.1507821076&_r=1&cg1=HBR&z=2040559041 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         172.217.22.174
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-1050442-1&cid=246373792.1507821076&jid=1929144486&_gid=1870497518.1507821076&gjid=52315530&_v=j64&z=2040559041
Access-Control-Allow-Origin: *
Date: Thu, 12 Oct 2017 15:11:15 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Server: Golfe2
Content-Length: 416
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   416
Md5:    0378e4dff2d39dbfb166bf884ee0fd41
Sha1:   faaf6442ce11034ee60d026e4c0bebe95b9feab6
Sha256: c3af013dded511881f8e41ededcc9442d853a5dbe26e9e51294fd9079c08370e
                                        
                                            GET /track/cmf/appnexus?ttd=1&anid=5762655058247466041&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989 HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: TDID=cb40a0d9-fe58-4067-adc4-4e96a22a0989; TDCPM=CAESFwoIYXBwbmV4dXMSCwi-p9up9rC9NRAFEhkKCnJpZ2h0bWVkaWESCwisl5LF9bC9NRAFGAUoATILCKyP69HF48g1EAVCDyINCAESCQoFdGllcjMQAVoHYTdzMTdtb2ABcgpyaWdodG1lZGlh

                                         
                                         176.34.121.127
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Thu, 12 Oct 2017 15:11:11 GMT
Location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=cb40a0d9-fe58-4067-adc4-4e96a22a0989; domain=.adsrvr.org; expires=Fri, 12-Oct-2018 15:11:11 GMT; path=/ TDCPM=CAESFwoIYXBwbmV4dXMSCwio28KasOPINRAFEhkKCnJpZ2h0bWVkaWESCwisl5LF9bC9NRAFEhUKBmdvb2dsZRILCKjb7Lr2sL01EAUYBSABKAEyCwisj-vRxePINRAFQg8iDQgBEgkKBXRpZXIzEAFaB2E3czE3bW9gAXIGZ29vZ2xl; domain=.adsrvr.org; expires=Fri, 12-Oct-2018 15:11:11 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 279
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   279
Md5:    4ecee40d86450e0cce40e6786e57ce4b
Sha1:   4099b2a37b4d380d76fc36bbb1a8dca6f429c6e0
Sha256: 61458b2100e5888a251797364103efa746e52eaf3dd157e756c0dde80fc9295e
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: go.workday.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: BIGipServerab_mailtracking_80=!O1dGKLUmg/PLH/oNEbaWaFcUiNHQQlUWNKq5+EBghCoqdo5UCjk81hQZH5WOhS0bGhUob6T67rog8uc=

                                         
                                         199.15.213.48
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 12 Oct 2017 15:11:15 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 101
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   101
Md5:    1c9a817585becb79830bbffcbc1fcc9e
Sha1:   e18688166c6a77e2102840c0d7494cce72710831
Sha256: 66f95b3b45987539f3f46e60bc5493b26efaa2bd4dd5a0ef06603312b41bdf22
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Oct 2017 15:11:15 GMT
Expires: Mon, 16 Oct 2017 15:11:15 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    3275d49d7e3a7f48327f78109f4270a7
Sha1:   867f4efb13eb25f8c09923fe8a0fa5e718aacf59
Sha256: 2e279560b14f11cb4fa4348d9640fe6bdf5a8ab09d9d3043299483a01a910ab2
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Oct 2017 15:11:15 GMT
Expires: Mon, 16 Oct 2017 15:11:15 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c2e5f607af8a6fffa2351eb8e580ed71
Sha1:   8114bed8db585c2890d001c8ef2f838ba37615a2
Sha256: 1acecc5a8a0c2e2a561160c14d3734598e2fe3555e490d96d1db4827148f00a1
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Oct 2017 15:11:15 GMT
Expires: Mon, 16 Oct 2017 15:11:15 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /cms/v1?esig=1~fac06801624107e5d8ee63717a17d281e39cf167&nwid=10000480789&sigv=1&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989 HTTP/1.1 
Host: ads.yahoo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         217.12.15.83
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Date: Thu, 12 Oct 2017 15:11:15 GMT
P3P: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Set-Cookie: B=avog58lctv1gj&b=3&s=dq; expires=Fri, 12-Oct-2018 15:11:15 GMT; path=/; domain=.yahoo.com
Location: https://match.adsrvr.org/track/cmf/rightmedia?xid=EimPQm6D4DNpZCZGdIbiwJ7K&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989
Cache-Control: private
Content-Length: 0
Age: 0
Connection: keep-alive
Strict-Transport-Security: max-age=0
Server: ATS


--- Additional Info ---
                                        
                                            GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-1050442-1&cid=246373792.1507821076&jid=1929144486&_gid=1870497518.1507821076&gjid=52315530&_v=j64&z=2040559041 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         173.194.220.154
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Date: Thu, 12 Oct 2017 15:11:15 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989 HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         216.58.209.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm=&google_sc=&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989&google_tc=
Date: Thu, 12 Oct 2017 15:11:15 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 350
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 12-Oct-2017 15:26:15 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   350
Md5:    4ceb4b73388f3bef95f3a3f7efe3e2de
Sha1:   7c3207e0782681d3696888951e2b9fd31983198d
Sha256: 5345097278b59aafd08585e33997ec1e7f3f379bdfe7dcf65fe6c26eadc63b18
                                        
                                            GET /track/cmf/rightmedia?xid=EimPQm6D4DNpZCZGdIbiwJ7K&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989 HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: TDID=cb40a0d9-fe58-4067-adc4-4e96a22a0989; TDCPM=CAESFwoIYXBwbmV4dXMSCwio28KasOPINRAFEhkKCnJpZ2h0bWVkaWESCwisl5LF9bC9NRAFEhUKBmdvb2dsZRILCKjb7Lr2sL01EAUYBSABKAEyCwisj-vRxePINRAFQg8iDQgBEgkKBXRpZXIzEAFaB2E3czE3bW9gAXIGZ29vZ2xl

                                         
                                         176.34.121.127
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Thu, 12 Oct 2017 15:11:11 GMT
Location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=cb40a0d9-fe58-4067-adc4-4e96a22a0989&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=cb40a0d9-fe58-4067-adc4-4e96a22a0989; domain=.adsrvr.org; expires=Fri, 12-Oct-2018 15:11:11 GMT; path=/ TDCPM=CAESFwoIYXBwbmV4dXMSCwio28KasOPINRAFEhkKCnJpZ2h0bWVkaWESCwii2c2csOPINRAFEhUKBmdvb2dsZRILCKjb7Lr2sL01EAUSFgoHcnViaWNvbhILCKLZzZyw48g1EAUYBSACKAEyCwisj-vRxePINRAFQg8iDQgBEgkKBXRpZXIzEAFaB2E3czE3bW9gAXIHcnViaWNvbg..; domain=.adsrvr.org; expires=Fri, 12-Oct-2018 15:11:11 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 367
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   367
Md5:    b66348528f26e0d864d2d77ae573e1bb
Sha1:   2b1fe866942ef5a0664e2cceb1cd60ca5ad1901f
Sha256: 5d27adcb2fbd304ed4b937a13056ba893611253554dbfeb4840af00093147ad4
                                        
                                            GET /pixel?google_nid=TheTradeDesk&google_cm=&google_sc=&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.209.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://match.adsrvr.org/track/cmf/google?g_uuid=&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989&google_gid=CAESECW3lmiMLEPCQFNCSSdpYSM&google_cver=1
Date: Thu, 12 Oct 2017 15:11:15 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 357
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUlLVCTxBop_c-G4eLXUe6kzR73xO0mXM4DHdiIA64V7vn3FfzQlJQ; expires=Sat, 12-Oct-2019 15:11:15 GMT; path=/; domain=.doubleclick.net; HttpOnly
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="39,38,37,35",quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  HTML document text
Size:   357
Md5:    3c82470018a2c805f331f28950ed4335
Sha1:   e0fed345ba97acdc58ec7a1de6cd46ed4e8e8e1e
Sha256: 19abf74858c63c54e3e10a9531714ad6a5b0a6d06ffbcb9c632ef86ffa6141a3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 12 Oct 2017 15:11:15 GMT
Etag: "59df154d-1d7"
Expires: Sat, 14 Oct 2017 15:11:15 GMT
Last-Modified: Thu, 12 Oct 2017 07:10:05 GMT
Server: ECS (arn/46BA)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    2a6bb6748e15b716771b382fefd51e12
Sha1:   4b5cd4e02ec1d697ac58850b553fc9a585aa0771
Sha256: 01039f655a3adbc0f66462dd47f87962118c76c30d34c25906e925cc617c5c2d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Thu, 12 Oct 2017 15:11:15 GMT
Etag: "59df607e-1d7"
Expires: Sat, 14 Oct 2017 15:11:15 GMT
Last-Modified: Thu, 12 Oct 2017 12:30:54 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    26777dedbd9a32bbf79a4503e22f42f2
Sha1:   862e70a5fade0f66b18010b89c4c62096f15fbd9
Sha256: da7c469f04559126d3b3a48778f85b33367c191d5af8deb09e8024a189d798fb
                                        
                                            GET /track/cmf/google?g_uuid=&ttd_tdid=cb40a0d9-fe58-4067-adc4-4e96a22a0989&google_gid=CAESECW3lmiMLEPCQFNCSSdpYSM&google_cver=1 HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: TDID=cb40a0d9-fe58-4067-adc4-4e96a22a0989; TDCPM=CAESFwoIYXBwbmV4dXMSCwio28KasOPINRAFEhkKCnJpZ2h0bWVkaWESCwii2c2csOPINRAFEhUKBmdvb2dsZRILCKjb7Lr2sL01EAUSFgoHcnViaWNvbhILCKLZzZyw48g1EAUYBSACKAEyCwisj-vRxePINRAFQg8iDQgBEgkKBXRpZXIzEAFaB2E3czE3bW9gAXIHcnViaWNvbg..

                                         
                                         176.34.121.127
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Thu, 12 Oct 2017 15:11:11 GMT
Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=cb40a0d9-fe58-4067-adc4-4e96a22a0989&expiration=1510413072
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=cb40a0d9-fe58-4067-adc4-4e96a22a0989; domain=.adsrvr.org; expires=Fri, 12-Oct-2018 15:11:12 GMT; path=/ TDCPM=CAESFwoIYXBwbmV4dXMSCwio28KasOPINRAFEhkKCnJpZ2h0bWVkaWESCwii2c2csOPINRAFEhUKBmdvb2dsZRILCKCIrZ2w48g1EAUSFgoHcnViaWNvbhILCKLZzZyw48g1EAUSFQoGY2FzYWxlEgsIoIitnbDjyDUQBRgFIAMoATILCKyP69HF48g1EAVCDyINCAESCQoFdGllcjMQAVoHYTdzMTdtb2ABcgZjYXNhbGU.; domain=.adsrvr.org; expires=Fri, 12-Oct-2018 15:11:12 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 281
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   281
Md5:    154bb0410cc233954b2094291be7acde
Sha1:   6d956fbc78792585b4e4ab02dc82826de34a88d8
Sha256: f6c29f42a65f37a2b0a34426de3aa2a81e9aec8c8d646c9fef4842a850010843
                                        
                                            POST / HTTP/1.1 
Host: gn.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1419
Content-Transfer-Encoding: binary
Cache-Control: max-age=313123, public, no-transform, must-revalidate
Last-Modified: Mon, 9 Oct 2017 06:09:23 GMT
Expires: Mon, 16 Oct 2017 06:09:23 GMT
Date: Thu, 12 Oct 2017 15:11:15 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1419
Md5:    9cadfe4e72c42f5b994968c4c80028b7
Sha1:   b9dc2b2498a8af8c264ce44721777010c443e474
Sha256: 37fba3188ec3d8f94b466d0fbccbfc06469b2bd797b7d97a52eccbbfd078db8e
                                        
                                            GET /tap.php?v=8981&nid=2307&put=cb40a0d9-fe58-4067-adc4-4e96a22a0989&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         213.19.162.80
HTTP/1.1 307 Temporary Redirect
                                        
Set-Cookie: c=1; Path=/
Location: /tap.php?cookie_redirect=1&v=8981&nid=2307&put=cb40a0d9-fe58-4067-adc4-4e96a22a0989&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Thu, 12 Oct 2017 15:11:15 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /tap.php?cookie_redirect=1&v=8981&nid=2307&put=cb40a0d9-fe58-4067-adc4-4e96a22a0989&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon HTTP/1.1 
Host: pixel.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: c=1

                                         
                                         213.19.162.80
HTTP/1.1 302 Found
Content-Type: text/html;charset=utf-8
                                        
X-RPHost: 0AbCw0K1iRaBbaWzsx6M6w
Set-Cookie: rpb=8981%3D1; Domain=.rubiconproject.com; Expires=Sat, 11-Nov-2017 15:11:16 GMT; Path=/ put_2307=cb40a0d9-fe58-4067-adc4-4e96a22a0989; Domain=.rubiconproject.com; Expires=Sat, 11-Nov-2017 15:59:59 GMT; Path=/ rpx=8981%3D68191%2C0%2C1%2C%2C; Domain=.pixel.rubiconproject.com; Expires=Sat, 11-Nov-2017 15:11:16 GMT; Path=/ khaos=J8OLQKBF-1M-9AHW; Domain=.rubiconproject.com; Expires=Fri, 13-Apr-2018 03:11:16 GMT; Path=/
Location: https://match.adsrvr.org/track/cmf/rubicon
Connection: keep-alive
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Content-Length: 0
Date: Thu, 12 Oct 2017 15:11:15 GMT
Server: Rubicon Project


--- Additional Info ---
                                        
                                            GET /rum?cm_dsp_id=39&external_user_id=cb40a0d9-fe58-4067-adc4-4e96a22a0989&expiration=1510413072 HTTP/1.1 
Host: dsum-sec.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         88.221.73.188
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=iso-8859-1
                                        
Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=cb40a0d9-fe58-4067-adc4-4e96a22a0989&expiration=1510413072&C=1
Content-Length: 325
Expires: Thu, 12 Oct 2017 15:11:16 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 12 Oct 2017 15:11:16 GMT
Connection: keep-alive
Set-Cookie: CMID=Wd.GFFVbLEcAAHrkIfkAAAAY;domain=casalemedia.com;path=/;expires=Fri, 12 Oct 2018 15:11:16 GMT CMPS=1199;domain=casalemedia.com;path=/;expires=Wed, 10 Jan 2018 15:11:16 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   325
Md5:    800cb6268bfc85c9df52a2f661dcee4e
Sha1:   9124c330d246b5e175f39dc5e793fdb0c5607a2c
Sha256: 033dbb1033a721ded456b1e091f3a00aebe2e736dc10b6ae69a10c3bfd934244
                                        
                                            GET /track/cmf/rubicon HTTP/1.1 
Host: match.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: TDID=cb40a0d9-fe58-4067-adc4-4e96a22a0989; TDCPM=CAESFwoIYXBwbmV4dXMSCwio28KasOPINRAFEhkKCnJpZ2h0bWVkaWESCwii2c2csOPINRAFEhUKBmdvb2dsZRILCKCIrZ2w48g1EAUSFgoHcnViaWNvbhILCKLZzZyw48g1EAUSFQoGY2FzYWxlEgsIoIitnbDjyDUQBRgFIAMoATILCKyP69HF48g1EAVCDyINCAESCQoFdGllcjMQAVoHYTdzMTdtb2ABcgZjYXNhbGU.

                                         
                                         176.34.121.127
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Cache-Control: private,no-cache, must-revalidate
Date: Thu, 12 Oct 2017 15:11:00 GMT
Location: https://x.bidswitch.net/sync?dsp_id=93&user_id=cb40a0d9-fe58-4067-adc4-4e96a22a0989&expires=30
P3P: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
Pragma: no-cache
Server: Microsoft-IIS/8.5
Set-Cookie: TDID=cb40a0d9-fe58-4067-adc4-4e96a22a0989; domain=.adsrvr.org; expires=Fri, 12-Oct-2018 15:11:01 GMT; path=/ TDCPM=CAESFwoIYXBwbmV4dXMSCwio28KasOPINRAFEhkKCnJpZ2h0bWVkaWESCwii2c2csOPINRAFEhUKBmdvb2dsZRILCKCIrZ2w48g1EAUSFgoHcnViaWNvbhILCKLZzZyw48g1EAUSFQoGY2FzYWxlEgsIoIitnbDjyDUQBRIYCgliaWRzd2l0Y2gSCwiA5qe0r-PINRAFGAUgBCgBMgsIrI_r0cXjyDUQBUIPIg0IARIJCgV0aWVyMxABWgdhN3MxN21vYAFyCWJpZHN3aXRjaA..; domain=.adsrvr.org; expires=Fri, 12-Oct-2018 15:11:01 GMT; path=/
X-AspNet-Version: 4.0.30319
Content-Length: 219
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   219
Md5:    466ed1ad62b861d7f55c1b902b014a33
Sha1:   eb995e57a66b39dd644ebeef436ba32e7fa39357
Sha256: 4c26494e18ba966715da5da2ffe56ea2cc48fe092093165eae9ee76beb0f4b1c
                                        
                                            GET /rum?cm_dsp_id=39&external_user_id=cb40a0d9-fe58-4067-adc4-4e96a22a0989&expiration=1510413072&C=1 HTTP/1.1 
Host: dsum-sec.casalemedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: CMID=Wd.GFFVbLEcAAHrkIfkAAAAY; CMPS=1199

                                         
                                         88.221.73.188
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Expires: Thu, 12 Oct 2017 15:11:16 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Thu, 12 Oct 2017 15:11:16 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: CMID=Wd.GFFVbLEcAAHrkIfkAAAAY;domain=casalemedia.com;path=/;expires=Fri, 12 Oct 2018 15:11:16 GMT CMPS=1199;domain=casalemedia.com;path=/;expires=Wed, 10 Jan 2018 15:11:16 GMT CMPRO=1199;domain=casalemedia.com;path=/;expires=Wed, 10 Jan 2018 15:11:16 GMT CMST=Wd+GFFnfhhQA;domain=casalemedia.com;path=/;expires=Fri, 13 Oct 2017 15:11:16 GMT CMDD=;domain=casalemedia.com;path=/;expires=Fri, 13 Oct 2017 15:11:16 GMT CMRUM3=2759df86142760cb40a0d9-fe58-4067-adc4-4e96a22a0989;domain=casalemedia.com;path=/;expires=Fri, 12 Oct 2018 15:11:16 GMT CMSC=Wd+GFA**;domain=casalemedia.com;path=/;


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Oct 2017 15:11:16 GMT
Server: Apache
Last-Modified: Thu, 12 Oct 2017 13:44:52 GMT
Expires: Thu, 19 Oct 2017 13:44:52 GMT
Etag: A4C96EF6FF48E52A7054D27309B908D7EE1753EE
Cache-Control: max-age=599015,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp30
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    307f8a3f81e74032162f8959d2ea10e4
Sha1:   a4c96ef6ff48e52a7054d27309b908d7ee1753ee
Sha256: cf6783597a57bbf9b6da9de280c465fa0f45d1e22b3521d35704e463b3a7631f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Oct 2017 15:11:16 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: CAE2D4E36B01556EB5A7DFCAC91643A06697B94B
Cache-Control: max-age=498092,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp30
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    b1e50e73281d4487d8b1cf3cdaf74bd5
Sha1:   cae2d4e36b01556eb5a7dfcac91643a06697b94b
Sha256: ba282a3cc79d8121086cb931af7199775bd48fef7699ba80e61d794c382b880c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Oct 2017 15:11:16 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: 8A7BC9885D9FFAFD7270D5324F22275F2B2C0D13
Cache-Control: max-age=498092,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp21
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d7daaf5088b1b8633e7e0d6600507656
Sha1:   8a7bc9885d9ffafd7270d5324f22275f2b2c0d13
Sha256: 9ea32e88334ce42853f79b00abaff0d4ee00214175cd3e1d189a0aa1b4a4ceba
                                        
                                            GET /sync?dsp_id=93&user_id=cb40a0d9-fe58-4067-adc4-4e96a22a0989&expires=30 HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         35.189.239.83
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.12.0
Date: Thu, 12 Oct 2017 15:11:16 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=10
Cache-Control: no-cache, no-store, must-revalidate
Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=93&user_id=cb40a0d9-fe58-4067-adc4-4e96a22a0989&expires=30
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: tuuid=9d753f84-7191-4d3e-aa64-5d63a373c914; path=/; expires=Fri, 12-Oct-2018 15:11:16 GMT; domain=.bidswitch.net tuuid_last_update=1507821076; path=/; expires=Fri, 12-Oct-2018 15:11:16 GMT; domain=.bidswitch.net c=1507821076; path=/; expires=Fri, 12-Oct-2018 15:11:16 GMT; domain=.bidswitch.net


--- Additional Info ---
                                        
                                            GET /ul_cb/sync?dsp_id=93&user_id=cb40a0d9-fe58-4067-adc4-4e96a22a0989&expires=30 HTTP/1.1 
Host: x.bidswitch.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9
Cookie: tuuid=9d753f84-7191-4d3e-aa64-5d63a373c914; tuuid_last_update=1507821076; c=1507821076

                                         
                                         35.189.239.83
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.12.0
Date: Thu, 12 Oct 2017 15:11:16 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=10
Cache-Control: no-cache, no-store, must-revalidate
Location: //cm.adform.net/pixel?adform_pid=3&adform_pc=9d753f84-7191-4d3e-aa64-5d63a373c914&adform_v=1
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: tuuid=9d753f84-7191-4d3e-aa64-5d63a373c914; path=/; expires=Fri, 12-Oct-2018 15:11:16 GMT; domain=.bidswitch.net tuuid_last_update=1507821076; path=/; expires=Fri, 12-Oct-2018 15:11:16 GMT; domain=.bidswitch.net


--- Additional Info ---
                                        
                                            GET /pixel?adform_pid=3&adform_pc=9d753f84-7191-4d3e-aa64-5d63a373c914&adform_v=1 HTTP/1.1 
Host: cm.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://hbrengage.wins.net/HBR1017171?m=.EMFINS&mkt_tok=eyJpIjoiTkdVelptUXlOR05oTldJMSIsInQiOiJQNVdWWXRQQm5QeWJoYTlpWUJEXC9hNHNKYjFVeDdFaUpHNGZ5Z1ExWWpHMzNWVVc5eFBkcmI4M3oyKzZCaXlCdE1OWjN0bEZ3WDliTlRyTGdqdmw5dklMaWR2amJTNU5cL21mZ3VtT0ltb21rSUk5OSsyYmg4d3FTWTg4QlwvWWlScCJ9

                                         
                                         0.0.0.0
                                        


--- Additional Info ---