r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 96367f956a4177aec7e7e80221539d58
8dcad10fde96c139d1ef212388cb6755fe3fe077
f4f9bdb5180359dfd734cef1e6f1b54bc9d8f72cae557366eb74f22100b94dc4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4F9BDB5180359DFD734CEF1E6F1B54BC9D8F72CAE557366EB74F22100B94DC4"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10401
Expires: Thu, 15 Dec 2022 21:29:14 GMT
Date: Thu, 15 Dec 2022 18:35:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ae86164fd9297dfdc05d67d69284d70e
5e5f27e3fd492f715baa6820f05c0fafde4040b3
be20f6ae6a51d20611cb4d350b52a5d0a339af6722fe9b2482ef58826c1e9de0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE20F6AE6A51D20611CB4D350B52A5D0A339AF6722FE9B2482EF58826C1E9DE0"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2448
Expires: Thu, 15 Dec 2022 19:16:41 GMT
Date: Thu, 15 Dec 2022 18:35:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51bd0cc75ed746fd33c950eb12936b7e
4a1007ea6c6e4f5e8b4a7d1f85f7a3e329dc8f50
188d4a0d544f40048dc7476cb4f5e478f1eb49a8ef1d51699fb155d2ae258655
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "188D4A0D544F40048DC7476CB4F5E478F1EB49A8EF1D51699FB155D2AE258655"
Last-Modified: Tue, 13 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7948
Expires: Thu, 15 Dec 2022 20:48:21 GMT
Date: Thu, 15 Dec 2022 18:35:53 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 15 Dec 2022 18:09:00 GMT
content-type: application/json
age: 1613
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +w/2YGePLCLP0ilmdbqNOrv6tu8acIfyBVCd5W5PltDWtatvtIxIDREANf90EaIHinL2sNmeslQ=
x-amz-request-id: 3DHDDD75W0G9PB9M
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 15 Dec 2022 17:51:00 GMT
age: 2693
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 96d1f677e47cb81e44c1f9784ddcb5be
c9d22a10aeb8344bf0e6c80cf23796716e78dc57
06fa39d07100b9ea10a548f75d44d9a9f6a0c7d6cc5edcab0851b477e574e316
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=109136
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:53 GMT
Etag: "639a7059-116"
Expires: Sat, 17 Dec 2022 00:54:49 GMT
Last-Modified: Thu, 15 Dec 2022 00:54:49 GMT
Server: nginx
Content-Length: 278
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 18:35:53 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 15 Dec 2022 18:08:00 GMT
age: 1673
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b9f0adeb27a19629aeff6f34de67f3ad
3876d1b871d7da6d18de23c2edb301eb30728066
c5744a90c8f66629aa2331465a32afe0d430b36d16fd98bc821e370f1b24463c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 186
Cache-Control: max-age=138853
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:53 GMT
Etag: "639ae3b4-1d7"
Expires: Sat, 17 Dec 2022 09:10:06 GMT
Last-Modified: Thu, 15 Dec 2022 09:07:00 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
code.jquery.com/jquery-3.6.0.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:53 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1671129353.dop208.sk1.t,1671129353.cds228.sk1.hn,1671129353.cds210.sk1.c
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0sPdKSaDor0829hZB9omyA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: pYLyPEfRlm6U+yz4TV7JNCIrK9s=
secure.opportunistictrader.com/store/PROD/js/revampstore/store-1c38615e78609b48e5dd.min.js
200 OK 17 kB URL HTTP/2 secure.opportunistictrader.com/store/PROD/js/revampstore/store-1c38615e78609b48e5dd.min.js
IP
File type ASCII text, with CRLF, LF line terminators
Hash 7f7b27066d05f76772347f75013befc7
1bc5a62ba59e493bbba70fd9191cfa8e8c8394fe
305bd0f1fb11255fdc8ae436ed86bace1d62bac7011320c58379a29d77110f98
GET /store/PROD/js/revampstore/store-1c38615e78609b48e5dd.min.js HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:54 GMT
content-type: application/javascript
content-length: 17412
x-amzn-requestid: e158976b-f307-4738-9d88-0a6b4a118600
last-modified: Thu, 08 Dec 2022 08:33:48 GMT
x-amz-version-id: dxKeENpop16LoQLAuec4SaM1ApNnjsXc
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: dMpriFM1oAMFZ-g=
x-amzn-remapped-server: cloudflare
x-content-type-options: nosniff
x-amzn-remapped-date: Thu, 15 Dec 2022 17:15:53 GMT
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront), 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
etag: W/"50a1c0ae3ad6d48ab9b02e9e05937dd8"
x-cache: RefreshHit from cloudfront
x-amz-cf-id: SPAo2PA1I3gO1zDzMf5UjZzVaaKCsDDcV6PbMJZhqEjah3g-wep8jQ==
server: cloudflare
cf-ray: 77a1481dffe00b31-OSL
X-Firefox-Spdy: h2
secure.opportunistictrader.com/store/PROD/js/mymixpanel.js
200 OK 778 B URL HTTP/2 secure.opportunistictrader.com/store/PROD/js/mymixpanel.js
IP
Hash 11ac749267e7c8d2d099e8fac37ca425
9754f3c98175a011a9c78d260b94c0548f438091
9608cbef0a3e4a064424c4d998d565ee3fbc9a8d6af2fe305bb37934638866d9
GET /store/PROD/js/mymixpanel.js HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:54 GMT
content-type: application/javascript
content-length: 778
x-amzn-requestid: c9c235c8-d05f-42ae-93a9-842bfcf70d1a
last-modified: Thu, 19 Nov 2020 00:44:24 GMT
x-amz-version-id: kgR13lhzSsVCRIE0MlY3UBQ0EPNv4JeB
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: dMpriGVRIAMF-QQ=
x-amzn-remapped-server: cloudflare
x-content-type-options: nosniff
x-amzn-remapped-date: Thu, 15 Dec 2022 17:15:53 GMT
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront), 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
etag: W/"52928b3325fc59cf3a4b91c0e7b59c52"
x-cache: RefreshHit from cloudfront
x-amz-cf-id: CPH4_NU3pp3zYOvwcx9TXmlyQffW-FPu4JQb5ydVfJ1DGaaRv-_d-w==
server: cloudflare
cf-ray: 77a1481dffe20b31-OSL
X-Firefox-Spdy: h2
secure.opportunistictrader.com/store/PROD/js/listrak.js
200 OK 506 B URL HTTP/2 secure.opportunistictrader.com/store/PROD/js/listrak.js
IP
Hash eec39ad77288b3cccbb9269fc151cb0a
55d0b45844622c81993e085a640ad74d87f4c237
0be7fbdc014aa272a15f784086de499e47c1413c45cd9d872ac4120417ee9608
GET /store/PROD/js/listrak.js HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:54 GMT
content-type: application/javascript
content-length: 506
x-amzn-requestid: 89e9ac4e-517c-4c65-8e3d-d02239ac25f6
last-modified: Thu, 28 Jun 2018 20:46:57 GMT
x-amz-version-id: W46Q95OyRSSEl7u8xZsbwfK4bzk35Yt_
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: dMprjE2BoAMF1Ag=
x-amzn-remapped-server: cloudflare
x-content-type-options: nosniff
x-amzn-remapped-date: Thu, 15 Dec 2022 17:15:53 GMT
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront), 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
etag: W/"cd9f94dd71125cb7fda1e1088aa19ec3"
x-cache: RefreshHit from cloudfront
x-amz-cf-id: Mce3sf-BwVhD_Hm3OSxvBWq9cUf1vwVyDD-z1ztOYxU_2KWNsmbDlg==
server: cloudflare
cf-ray: 77a1481dffe30b31-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302bca8b4776eca1d6dc94dfc7822bd9
3be17682c8639eda9854fbc8b21f5e43efdce33d
ae8438d6acbef18faace93a4421beb91356ad1290621032183a002d6c2151de3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AE8438D6ACBEF18FAACE93A4421BEB91356AD1290621032183A002D6C2151DE3"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2587
Expires: Thu, 15 Dec 2022 19:19:02 GMT
Date: Thu, 15 Dec 2022 18:35:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302bca8b4776eca1d6dc94dfc7822bd9
3be17682c8639eda9854fbc8b21f5e43efdce33d
ae8438d6acbef18faace93a4421beb91356ad1290621032183a002d6c2151de3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AE8438D6ACBEF18FAACE93A4421BEB91356AD1290621032183A002D6C2151DE3"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2587
Expires: Thu, 15 Dec 2022 19:19:02 GMT
Date: Thu, 15 Dec 2022 18:35:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 302bca8b4776eca1d6dc94dfc7822bd9
3be17682c8639eda9854fbc8b21f5e43efdce33d
ae8438d6acbef18faace93a4421beb91356ad1290621032183a002d6c2151de3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AE8438D6ACBEF18FAACE93A4421BEB91356AD1290621032183A002D6C2151DE3"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2587
Expires: Thu, 15 Dec 2022 19:19:02 GMT
Date: Thu, 15 Dec 2022 18:35:55 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F886cc6e3-a038-4e4d-8da0-caf399786ff4.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F886cc6e3-a038-4e4d-8da0-caf399786ff4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b76e8c43482cb1f6e9d3f5dd55185382
364236e338c799f7d7a604882451428d12cdc7c7
375600e8bedfec8fa85da9298fc3322b91e97261dee7fd94b1dad8e6f4faed67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F886cc6e3-a038-4e4d-8da0-caf399786ff4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4523
x-amzn-requestid: 5404595d-f42f-49a0-9438-093b2fb1b852
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dBXWTGEcIAMFdnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6396d28e-17f927945ee836a91a3148e0;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 07:04:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JBIoHXeeJIsyl_wj57ZEP_f1mg3eq0WJjgKveuc_DslNZzSiVf62Og==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 07:11:31 GMT
age: 41064
etag: "364236e338c799f7d7a604882451428d12cdc7c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f949bdd-b2f9-4eba-91cf-0c0588f819de.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f949bdd-b2f9-4eba-91cf-0c0588f819de.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 860298771622d100fe1feafb0a1aac50
e5d9b7454c471d5e5dea8b4352ba7595a8a04ce3
93ea9f1b9a0276075ff9752dc31a5a19e4378ca481895a3cd22f461a8ca6040a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f949bdd-b2f9-4eba-91cf-0c0588f819de.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5166
x-amzn-requestid: fa8e9bd0-e5ee-48e9-86b6-0330ccac7d69
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6xc4GQYIAMFriA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63942f85-5f7472d631c1c9f560d88378;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 07:04:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xLdYmAD22dAMhCBqu5X65V9G-JzAEOWNNmHOG_Dcp1zgMzY8Tj80Jw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 07:53:14 GMT
age: 38561
etag: "e5d9b7454c471d5e5dea8b4352ba7595a8a04ce3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F874ce85e-7786-4e92-aea7-1c22181143e6.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F874ce85e-7786-4e92-aea7-1c22181143e6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 389fe7dd5f3f80351a97fe4106be49b5
a91f474e6d320797c2ea32ecaf7a341f5f77fe82
11957edbfb3dc06abbe8ee6aa9dac0a25f84ba909a6404030c9f081343384513
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F874ce85e-7786-4e92-aea7-1c22181143e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9108
x-amzn-requestid: ce72b199-1b81-4257-bcf0-3c9dc144b5d7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6s3rHhDoAMFZxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63942830-0751237e7103e2b9615db079;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 06:33:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3p17v7Bynhh_3E58b5uEpjmNfZ-bSee-_jhauzs3LtWRV9GJoT0Evg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 09:02:49 GMT
age: 34386
etag: "a91f474e6d320797c2ea32ecaf7a341f5f77fe82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56f56798-4039-4a1a-9490-f61d1b1e77da.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56f56798-4039-4a1a-9490-f61d1b1e77da.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 672ae812012d060ba75fbb8cb9d6038c
2ab1016451432b6cd1d6b9756c6cc6a926ffa7ce
cd9c002af775a6ba6ff8902a67e19c2ed2663d23bf8a1c3fe763598a60ba8d69
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56f56798-4039-4a1a-9490-f61d1b1e77da.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5259
x-amzn-requestid: 21c0e355-e696-4785-a162-5f96e02836f0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c3fV1HHKIAMFsjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6392df58-608335604793d9f46939a81a;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 07:10:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BYwjCf0sQ3F2gNE6x5Q5K6D_PhMXV-T8kPGRpVHIdouM_I9sU7bMOw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 02:09:49 GMT
age: 59166
etag: "2ab1016451432b6cd1d6b9756c6cc6a926ffa7ce"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 72a8bac36b4d259e54a931244fb57125
9b79071c578ff8f43c1038b39455bb11fa05ebee
b7f6931c0497790f3b882b87741dd87784e85528cd9e23c7c1a0b649ed03c712
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4315
Cache-Control: max-age=105552
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:55 GMT
Etag: "639a5180-2d7"
Expires: Fri, 16 Dec 2022 23:55:07 GMT
Last-Modified: Wed, 14 Dec 2022 22:43:12 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 727
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd4368d88-830e-4776-bbdb-c2457233983a.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd4368d88-830e-4776-bbdb-c2457233983a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b031e56b256ee8ed21093f8c5398815
ef4ac091b1804b68c1d8e073d73f7a57e08739a6
f332c68ba6b31d67c02d16412c85e760cbc2e7a67073876c8799365e80b6dbab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd4368d88-830e-4776-bbdb-c2457233983a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9851
x-amzn-requestid: 38f12682-d3c4-4e4f-9b24-afe81ca85dde
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c-FX9FsVoAMF5AQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63958299-3d25cec26bcb2ccf73e3526f;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 07:11:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dBS9TPBeVScdBuJSzheNE2lvUb3RqZTfZjJkWcbyuwkyhu0HrFmkIQ==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 14:33:16 GMT
age: 14559
etag: "ef4ac091b1804b68c1d8e073d73f7a57e08739a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed92d0a5-f6ed-4382-aa56-39c7021a6b76.png
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed92d0a5-f6ed-4382-aa56-39c7021a6b76.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1e1fb0ddf6ac86d38423a55841c78c6c
d31310f2441c9f7584f3c1605dd3fb38d5af41a6
8e91e724a42f8b0cf953570937c33465903c979297e439438d86c45b3d242d4a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed92d0a5-f6ed-4382-aa56-39c7021a6b76.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7163
x-amzn-requestid: 3c24d190-0c16-4aab-8da4-ab11a91c8e5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dE_HIEdEIAMFV8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63984560-4956b65205477bfe244bd4c3;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 09:26:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: c4v50kU254dC1EM2QEk8Z6dwH-th3wdnHc4XokHHUaNB-Vfe2AOsDw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 06:28:25 GMT
age: 43650
etag: "d31310f2441c9f7584f3c1605dd3fb38d5af41a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
200 OK 17 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
IP
File type ASCII text, with very long lines (755)
Hash caa762087e9d75cecc34b5d6626cb7b9
fcc68d485c2f42e0f880260c3e104cedf50d0d11
dc0ec55efae4c1f0ff095cf05133cc835e1cc4ff7906d3b7a2d0d86789bfe145
GET /libs/mixpanel-2-latest.min.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvpRTSskPsEjPQEKKVs9jIjmfeeDmI77JP0kTZuJ4WCccHN8YV935Cj7UZ-FAUYvn7lDI4-F2Erm3w46MI5YUIrrA
x-goog-generation: 1645129310876382
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17435
content-encoding: gzip
x-goog-hash: crc32c=PPVzJA==, md5=yqdiCH6ddc7MNLXWYmy3uQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 17435
access-control-allow-origin: *
server: UploadServer
date: Thu, 15 Dec 2022 18:31:50 GMT
expires: Thu, 15 Dec 2022 18:41:50 GMT
cache-control: public,max-age=600
age: 245
last-modified: Thu, 17 Feb 2022 20:21:50 GMT
etag: "caa762087e9d75cecc34b5d6626cb7b9"
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 72a8bac36b4d259e54a931244fb57125
9b79071c578ff8f43c1038b39455bb11fa05ebee
b7f6931c0497790f3b882b87741dd87784e85528cd9e23c7c1a0b649ed03c712
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4315
Cache-Control: max-age=105552
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:55 GMT
Etag: "639a5180-2d7"
Expires: Fri, 16 Dec 2022 23:55:07 GMT
Last-Modified: Wed, 14 Dec 2022 22:43:12 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 727
cdnjs.cloudflare.com/ajax/libs/jsencrypt/2.3.1/jsencrypt.min.js
200 OK 16 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jsencrypt/2.3.1/jsencrypt.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (13814)
Hash e5e4097d09b3f47c8f128dd657d9522a
6106bf701b5761445d7636e44ac654706b3736ee
a81fdcab5a72200658d11fd509f43c23cc64bc717f0a807c5f40b22a44f2cb5a
GET /ajax/libs/jsencrypt/2.3.1/jsencrypt.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/javascript; charset=utf-8
content-length: 15539
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec6-db4e"
last-modified: Mon, 04 May 2020 16:11:50 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1974378
expires: Tue, 05 Dec 2023 18:35:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RtXd3Cglaynt7rrldy3%2BuhClkcsQ2G3Gog%2Bjh40LLb0a%2BSk%2BNvFiPaCwUh49Qe4VZ6fKPua016gt0OYurEeme2tFAH3yN4Cxaf52D0HSMF%2B0nGCniCD%2F%2BmpFmqxgpqyJhzULOfaL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77a1482b4a61b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
code.jquery.com/ui/1.13.2/jquery-ui.min.js
200 OK 68 kB URL HTTP/2 code.jquery.com/ui/1.13.2/jquery-ui.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (64399)
Hash 0b40ae7ed6483048a0cb731cb71b53ee
e040823f5dbfcea646104abf00744e6fb45d3bc8
eb29daae7035e4ae9207e14f4ed35fbbdffb5da7984e2bc81bee7340a4e36a8e
GET /ui/1.13.2/jquery-ui.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-encoding: gzip
content-length: 67628
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
accept-ranges: bytes
server: nginx
etag: W/"28feccc0-3e46c"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1671129356.dop208.sk1.t,1671129356.cds228.sk1.hn,1671129356.cds216.sk1.c
X-Firefox-Spdy: h2
code.jquery.com/ui/1.13.2/themes/base/jquery-ui.css
200 OK 8.4 kB URL HTTP/2 code.jquery.com/ui/1.13.2/themes/base/jquery-ui.css
IP
File type ASCII text, with very long lines (2363)
Hash b0be9c684e7f2e9f5a7d13bb686fd5b3
d19c38a845691a804999059627fcc95b65469453
eaf5b79416cb6424a589dfcffdf9cac1c0ea065b77b477186a408165a9ff6dbf
GET /ui/1.13.2/themes/base/jquery-ui.css HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-encoding: gzip
content-length: 8356
content-type: text/css
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
accept-ranges: bytes
server: nginx
etag: W/"28feccc0-8d03"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1671129356.dop208.sk1.t,1671129356.cds228.sk1.hn,1671129356.cds225.sk1.c
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.14.0/css/all.min.css
200 OK 10 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.14.0/css/all.min.css
IP
File type ASCII text, with very long lines (58749)
Hash fd91519379203e4f5d95a93f2997019b
806d29dabc59c13f96d58a1b6b0412c227bbfedf
48fdb6e3181b07a35045c83b2ab1cd884bbadf0d6e7edade1259d56b7c79bacf
GET /ajax/libs/font-awesome/5.14.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: text/css; charset=utf-8
content-length: 10391
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f0f47d3-e637"
last-modified: Wed, 15 Jul 2020 18:15:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 14173183
expires: Tue, 05 Dec 2023 18:35:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LLvLyVvsTgTHB9QOJJtIqE1ha1ex0RFOKMrRvNnBE3oXj37iiWXzBa8FLHxUOMXpQ%2BO60gO9%2Fc3VOl6RmlAfK16uEfMxxwJ0xCcrW6WFgdHKBG011MU7bbtyCUtELQembFD5aAaV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77a1482b6a86b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d3bjnmbj12697.cloudfront.net/_/css/bootstrap/4.5.0/bootstrap.min.css
200 OK 162 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/_/css/bootstrap/4.5.0/bootstrap.min.css
IP
File type ASCII text, with very long lines (65324)
Size 162 kB (161736 bytes)
Hash 14e3036e583d9d5910ed515b6ebebb00
8d9621b0a2d309ce779cb458f04e6d87761c048b
fadadc49b4ca3c49a69a4ce2c17d56cab0a8b52af6b3fae5296ae1a9f56ed453
GET /_/css/bootstrap/4.5.0/bootstrap.min.css HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 161736
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 14:44:35 GMT
x-amz-meta-user-agent: AWSTransfer
x-amz-meta-user-agent-id: efiorani@s-c2cd08720a404b138
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 15 Dec 2022 17:15:55 GMT
ETag: "14e3036e583d9d5910ed515b6ebebb00"
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QwmwXS_HET7b3HL7htowo7L3iAKu86crgAy_tVWZzU8W1pddxxg1lw==
Age: 5960
ocsp.digicert.com/
200 OK 471 B IP
Hash 68214328be63f2238f90aa3cad5958a3
d814ab1cbb5ccbbefab5c0e399908d345eba8611
a3e71942b572ae491b6bca8782e977222865b5e047513c063e2f42a55391db77
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2587
Cache-Control: max-age=113194
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:56 GMT
Etag: "639a761b-1d7"
Expires: Sat, 17 Dec 2022 02:02:30 GMT
Last-Modified: Thu, 15 Dec 2022 01:19:23 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
d3bjnmbj12697.cloudfront.net/lb/22/ott/2208-launch/css/custom.css
200 OK 100 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/lb/22/ott/2208-launch/css/custom.css
IP
File type assembler source, ASCII text, with very long lines (837)
Hash b6b21d3a4bf9e28f090e6422b57feb72
068daa1528abe826dc95093697d6a6168294f537
64140eecca5362e72f2f512112251f27347e5b7d87a7575c47c6a06587227519
GET /lb/22/ott/2208-launch/css/custom.css HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 99607
Connection: keep-alive
Last-Modified: Tue, 02 Aug 2022 12:15:25 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 14 Dec 2022 21:20:08 GMT
ETag: "b6b21d3a4bf9e28f090e6422b57feb72"
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pAcFmU910YAXA32DutsOqAXMPvszmSVAZGWdYTyiJIJIbmm7v-sSXA==
Age: 76548
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7b3ec8f2b165188a8c51d8182ca1ec76
df25ded913d7cc7c8f23ec44f4b4cb2137847220
f66222d5c946fd777dd322daf66b1bbac9b7fdd2bd80d1bb189340297000f421
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0fbe3d80eaa6623da753aece08c3a818
d3c6fe97e3154f00f681647a3c74800008ac2d2f
cab890482eacc4298414a2aa0e41ea5bce399eccd4d5e50c9cdc55c735c83b1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.paypalobjects.com/api/checkout.js
200 OK 240 kB URL HTTP/2 www.paypalobjects.com/api/checkout.js
IP
Size 240 kB (239948 bytes)
Hash 1a79f774e86cef470e40f60a7573f57c
04dfedfead801ead6998d693940d937acdbb7142
452c8b8b984b8a666fda43e2ee92f9ac4836a5db0e1a031bb4cb7577b5713725
GET /api/checkout.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: gzip
content-type: application/javascript; charset=utf-8
etag: W/"6266d4b0-16d23e"
last-modified: Mon, 25 Apr 2022 17:04:48 GMT
paypal-debug-id: adec5d390a355
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000adec5d390a355-336cec9a4b47993f-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 15 Dec 2022 18:35:56 GMT
x-served-by: cache-sjc10020-SJC, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 221961, 6
x-timer: S1671129356.160010,VS0,VE0
vary: Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 239948
X-Firefox-Spdy: h2
static.zuora.com/Resources/libs/hosted/1.3.1/zuora-min.js
200 OK 6.6 kB URL HTTP/1.1 static.zuora.com/Resources/libs/hosted/1.3.1/zuora-min.js
IP
File type ASCII text, with very long lines (2265)
Hash dec5e172127825104fc0c160beb0d68b
e5fa94ebc271bd98a4ad4ecb9f31318d6a85e180
96b73848910e65aac41504595d3fbb0d818c67bfd26238212d5e0eb00db03d0b
GET /Resources/libs/hosted/1.3.1/zuora-min.js HTTP/1.1
Host: static.zuora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Server: nginx
Last-Modified: Thu, 17 Nov 2022 12:31:38 GMT
ETag: "637629aa-4724"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 15 Dec 2022 18:35:56 GMT
Content-Length: 6646
Connection: keep-alive
www.googletagmanager.com/gtm.js?id=GTM-KLPP5K7
200 OK 55 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KLPP5K7
IP
File type ASCII text, with very long lines (45825)
Hash a3a404774e4f4c7a22771414d88a3125
380e352ab3a92242939a0098f94e1702d49f6bff
fe20cb793d8797ec0c59cc6dbf3105d8db19b9e77e1e221ea0052ab6c70b32b0
GET /gtm.js?id=GTM-KLPP5K7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 15 Dec 2022 18:35:56 GMT
expires: Thu, 15 Dec 2022 18:35:56 GMT
cache-control: private, max-age=900
last-modified: Thu, 15 Dec 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 54650
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0fbe3d80eaa6623da753aece08c3a818
d3c6fe97e3154f00f681647a3c74800008ac2d2f
cab890482eacc4298414a2aa0e41ea5bce399eccd4d5e50c9cdc55c735c83b1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
secure.opportunistictrader.com/store/PROD/js/bss-px.min.js
200 OK 2.1 kB URL HTTP/2 secure.opportunistictrader.com/store/PROD/js/bss-px.min.js
IP
File type ASCII text, with very long lines (5176)
Hash f61de21dfd07671a9434c7c4dbdb79c8
179cb99c219fa62947db4004f4bf7a565414e612
e348a1d8dacacd762242572df0c197a0fa7513e7ad29baac9ec67e20655294e5
GET /store/PROD/js/bss-px.min.js HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Cookie: _dd_s=logs=1&id=736ff175-f2f1-4fc7-8705-90e6451a15cd&created=1671129352377&expire=1671130252382&rum=1; _sp_ses.6018=*; _sp_id.6018=8a74cb3c-83d8-4e49-9ce6-255f86aecd1e.1671129353.1.1671129353..7f33366e-9d5a-4ced-add0-77ef1b419c10..15d8a275-3b3a-4385-9700-0d59f112a78e.1671129353290.1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/javascript
content-length: 2052
x-amzn-requestid: 20eaadab-cfd2-46d6-8834-a4bee0b1ee33
last-modified: Tue, 01 Jun 2021 15:08:33 GMT
x-amz-version-id: fGaHECtcp1774Apxw3QoOeW87E1iGAd2
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: dMl4kG8-oAMFdgQ=
x-amzn-remapped-server: cloudflare
x-content-type-options: nosniff
x-amzn-remapped-date: Thu, 15 Dec 2022 16:49:58 GMT
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront), 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
etag: W/"3ee3506660c2ef343d6c68a229cd42be"
x-cache: RefreshHit from cloudfront
x-amz-cf-id: 4j-62Js74nUHY-3nETxXJmP0IE-4I3DbzKBCCszaHsFTSNt57STZmw==
server: cloudflare
cf-ray: 77a1482b9a2b0b31-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 814e7aa0e4eddeb6aa3e83626067fef5
c16b12cef33f40602cfd7b8a0a881c03057d9e96
a1b5d41bba04975835cb6530b84e184e49c7c84ca2b63540dc93d061fcbb0b78
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Dec 2022 18:35:56 GMT
Last-Modified: Thu, 15 Dec 2022 18:21:48 GMT
Server: ECS (nyb/1D16)
X-Cache: Miss from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zyf8QU-kUrI2DDdi_kbZSUx_95s1ySEl6fBye1HPyk3PALdHgt-bfQ==
Age: 848
secure.opportunistictrader.com/store/PROD/js/postToIframe.js
200 OK 607 B URL HTTP/2 secure.opportunistictrader.com/store/PROD/js/postToIframe.js
IP
Hash feabd40e1fde8c197ac78264bbe27af9
8610b4c2e85144b3ce4536feefc3f884041cc068
e013a7b89cfcb17fa0c4ae09724bb0f647ec15320d124ef15036a6ff215f968b
GET /store/PROD/js/postToIframe.js HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Cookie: _dd_s=logs=1&id=736ff175-f2f1-4fc7-8705-90e6451a15cd&created=1671129352377&expire=1671130252382&rum=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/javascript
content-length: 607
x-amzn-requestid: 6283a383-2f60-48ca-bfc3-7204bb3186f2
last-modified: Sat, 22 Sep 2018 10:04:10 GMT
x-amz-version-id: jcZd1q0X4PG.0tDIV.AM4TZ5jHnAmWBj
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: dMpr1EX4IAMF0ug=
x-amzn-remapped-server: cloudflare
x-content-type-options: nosniff
x-amzn-remapped-date: Thu, 15 Dec 2022 17:15:55 GMT
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront), 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
etag: W/"3934dce8d049fb2790a29e7de331d9c9"
x-cache: RefreshHit from cloudfront
x-amz-cf-id: rLhYFBDxLAStBv3H7HQdWjxtTxwt25nQMOsUqH8ltY6pxH0Oo6FoMw==
server: cloudflare
cf-ray: 77a1482b39cc0b31-OSL
X-Firefox-Spdy: h2
marketingassets.cloudsna.com/prod/javascript/legacy/OpportunisticExternalJS.js
200 OK 559 B URL HTTP/1.1 marketingassets.cloudsna.com/prod/javascript/legacy/OpportunisticExternalJS.js
IP
Hash 2f5fbdfb0f8aebfdf19536d45e9c3285
bdbd11c589fe554819e17a355d274fe16464ac05
721fe0d7d7130fabb9b183221c9c8a82c7598e2327845aa8ff64684d82c97092
GET /prod/javascript/legacy/OpportunisticExternalJS.js HTTP/1.1
Host: marketingassets.cloudsna.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 18:35:56 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: 0as39hCS0EV6WMqj7S9mTJQCRrANKmUgwQmUQJizWi5eXFKjghz2x9L/s+62M0OzbXQmGN68pB8=
x-amz-request-id: E0BXVSZTQF4RV7GZ
Last-Modified: Thu, 11 Feb 2021 16:14:51 GMT
x-amz-version-id: nmAylXcC_2TcBTmNGinpVWAXaIAWuQJo
ETag: W/"873c50deb129cdb6d364e252de9e93c7"
CF-Cache-Status: DYNAMIC
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 77a1482bcfa6b521-OSL
Content-Encoding: gzip
secure.opportunistictrader.com/store/PROD/plugins/jquery-payment/jquery.payment.min.js
200 OK 2.7 kB URL HTTP/2 secure.opportunistictrader.com/store/PROD/plugins/jquery-payment/jquery.payment.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (8392), with no line terminators
Hash fa59884f7fab9a2e42e569045078cfc3
6f7b58a5f3f55a5123e9ffeb3cf16c72084bb612
d2cc503b030cf947c9cc2d554344f5ecde4b936d2f96af5f53cf8f2b9f612dfa
GET /store/PROD/plugins/jquery-payment/jquery.payment.min.js HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Cookie: _dd_s=logs=1&id=736ff175-f2f1-4fc7-8705-90e6451a15cd&created=1671129352377&expire=1671130252382&rum=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/javascript
content-length: 2713
x-amzn-requestid: d25158b9-4066-4100-987c-ad68b6734eb0
last-modified: Wed, 21 Aug 2019 20:18:01 GMT
x-amz-version-id: uVxF0OX6Rj_lsOZHo0OKGG0I2eVEXwcB
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: dMpr1ESNoAMFeQw=
x-amzn-remapped-server: cloudflare
x-content-type-options: nosniff
x-amzn-remapped-date: Thu, 15 Dec 2022 17:15:55 GMT
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront), 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
etag: W/"2ccb4360a6b212383716224d0b56bd21"
x-cache: RefreshHit from cloudfront
x-amz-cf-id: bRx43PpBo_WRs23RcqL7_bNLjm8PLzgFLPU9JIdqR40JCKgzSWiFgg==
server: cloudflare
cf-ray: 77a1482b49db0b31-OSL
X-Firefox-Spdy: h2
secure.opportunistictrader.com/store/PROD/js/HPM2Security-min.js
200 OK 13 kB URL HTTP/2 secure.opportunistictrader.com/store/PROD/js/HPM2Security-min.js
IP
File type ASCII text, with very long lines (3060)
Hash 54eb0cdb63f58483063edede5de7840b
a12a574e62906df6302cd63bb11796dbe8e446ea
9503d1481e93bd0c2512762d0587db9d2bbc88d9a4ab2dbb9b7aae78246c92bd
GET /store/PROD/js/HPM2Security-min.js HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Cookie: _dd_s=logs=1&id=736ff175-f2f1-4fc7-8705-90e6451a15cd&created=1671129352377&expire=1671130252382&rum=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/javascript
content-length: 13432
x-amzn-requestid: 4ca6d55a-16a8-4c47-8641-0c2ab9016c7d
last-modified: Thu, 20 Sep 2018 10:42:47 GMT
x-amz-version-id: F1zb.i6q7MEDZAdQsvHFruscv_FKHXVQ
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: dMpr0H04oAMFSHQ=
x-amzn-remapped-server: cloudflare
x-content-type-options: nosniff
x-amzn-remapped-date: Thu, 15 Dec 2022 17:15:55 GMT
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront), 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
etag: W/"5c56f33a7d1fcd065fa2bd0fa7758d42"
x-cache: RefreshHit from cloudfront
x-amz-cf-id: LV7UBfdqCa1bGGlzgGKalJ7H7tr983zumfYFsRlwRIOSIKEUi9uRcQ==
server: cloudflare
cf-ray: 77a1482b49d10b31-OSL
X-Firefox-Spdy: h2
secure.opportunistictrader.com/store/PROD/js/encryption_util.js
200 OK 1.5 kB URL HTTP/2 secure.opportunistictrader.com/store/PROD/js/encryption_util.js
IP
Hash ccb09b59ba86a488059a7fe2f2ad1fe5
c8643351563970a9086f84f8bc153d356d1574ff
459ecfbe016137deff7685d4aacd384e9be038ef5af64157eda1fbb39ca86ad9
GET /store/PROD/js/encryption_util.js HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Cookie: _dd_s=logs=1&id=736ff175-f2f1-4fc7-8705-90e6451a15cd&created=1671129352377&expire=1671130252382&rum=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/javascript
content-length: 1539
x-amzn-requestid: 2d0abf36-a1bf-438b-b7e1-cb655d6f4f1d
last-modified: Thu, 20 Sep 2018 10:42:47 GMT
x-amz-version-id: .RXPgt8IOHDC5kcSlGGlyGGq.lruUQic
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: dMpr1EngoAMFZQw=
x-amzn-remapped-server: cloudflare
x-content-type-options: nosniff
x-amzn-remapped-date: Thu, 15 Dec 2022 17:15:55 GMT
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront), 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
etag: W/"a4562de2bcce9e6631abf61e5a04728b"
x-cache: RefreshHit from cloudfront
x-amz-cf-id: rwfkhKKmXBQUs2fmgFwcwxVdVQ6b4Ev4MzcivQJ0rr7hzOfQ7Y7r1Q==
server: cloudflare
cf-ray: 77a1482b49ce0b31-OSL
X-Firefox-Spdy: h2
gsdpeazjjf.execute-api.us-east-1.amazonaws.com/prod/assets/asset/OTT/VideoLandingPage/1658850474171.html/versionId=RrQvbyWnmeE8PGiS6WjB8_Nr.Vxe6T46
200 OK 8.2 kB URL HTTP/2 gsdpeazjjf.execute-api.us-east-1.amazonaws.com/prod/assets/asset/OTT/VideoLandingPage/1658850474171.html/versionId=RrQvbyWnmeE8PGiS6WjB8_Nr.Vxe6T46
IP
File type exported SGML document, Unicode text, UTF-8 text, with very long lines (8163), with no line terminators
Hash 067e32225bd76c72d1a3506c76ee7b4b
711dffbe3bed10b48dcaa3a95bcd0024fcd2f15c
a921da1a70c1b059f8e4d5f90191bd444874760845b5988079c86a53f49fbc77
GET /prod/assets/asset/OTT/VideoLandingPage/1658850474171.html/versionId=RrQvbyWnmeE8PGiS6WjB8_Nr.Vxe6T46 HTTP/1.1
Host: gsdpeazjjf.execute-api.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 8224
date: Thu, 15 Dec 2022 18:35:56 GMT
x-amzn-requestid: 2e0d1199-6da5-4fe2-9c7a-4c88755eea2c
access-control-allow-origin: *
x-amz-apigw-id: dM1Z9GrnoAMFaaw=
x-amzn-trace-id: Root=1-639b690c-0a7dd3266536c85f5499142b;Sampled=0
x-cache: Miss from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mtqqlDv7Siy7tfMDHycMMJd0YoT4B7akoTlCMXSs8XMkh_RtJYtgYg==
X-Firefox-Spdy: h2
www.paypal.com/tagmanager/pptm.js?id=secure.opportunistictrader.com&source=checkoutjs&t=xo&v=4.0.336
200 OK 4.3 kB URL HTTP/2 www.paypal.com/tagmanager/pptm.js?id=secure.opportunistictrader.com&source=checkoutjs&t=xo&v=4.0.336
IP
File type ASCII text, with very long lines (12084), with no line terminators
Hash da1b94bdea2eb1769e74df6fbd2c1a2e
4c7f6b5318ffd3d36b6b431f4bd113b55d8f14a7
45cc4e008a654e4ef3f3b3eb0ca92f52ade64445039059b5395b11734b033be4
GET /tagmanager/pptm.js?id=secure.opportunistictrader.com&source=checkoutjs&t=xo&v=4.0.336 HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-2l0xldk8I8ywT0P9iXacO9r325z5Gc11mWrqn+0kWGrDWYsh' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
etag: W/"2f34-zQQ0FVqIlbkbuS4WgpPW/nUPXC4"
paypal-debug-id: f1727851f50b5
traceparent: 00-0000000000000000000f1727851f50b5-f5253f8bf2bce465-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 15 Dec 2022 18:35:56 GMT
age: 40708
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220065-HHN, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 38, 1
x-timer: S1671129356.451732,VS0,VE2
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f1727851f50b5-df89d374e04444e3-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 4299
X-Firefox-Spdy: h2
secure.opportunistictrader.com/snowflake/generic
200 OK 21 B URL HTTP/2 secure.opportunistictrader.com/snowflake/generic
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0b5485f2ffbbf65fc1412050ac43e658
0d7243100772fd39254322310dee9368595d5f0e
64a1ca8c093b60d9abfe26d042cfaacf464c5d928c26e7ce6e5528f1cb1d6899
POST /snowflake/generic HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-api-key: g5wZnpMOAV6d3DVWjACKU9Pz86tj10Es39Avoa3n
Content-Length: 728
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Cookie: _dd_s=logs=1&id=736ff175-f2f1-4fc7-8705-90e6451a15cd&created=1671129352377&expire=1671130252382&rum=1; _sp_ses.6018=*; _sp_id.6018=8a74cb3c-83d8-4e49-9ce6-255f86aecd1e.1671129353.1.1671129353..7f33366e-9d5a-4ced-add0-77ef1b419c10..15d8a275-3b3a-4385-9700-0d59f112a78e.1671129353290.1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/json
content-length: 21
x-amzn-requestid: cf017fc4-f9c0-4c61-b92c-358410218c6f
access-control-allow-origin: *
x-amz-apigw-id: dM1Z9HD4IAMFnYw=
x-amzn-trace-id: Root=1-639b690c-1a4d8f60662b7a3846bb0d7f
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront), 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
x-amz-cf-id: I96IdxD9eVUFms56xi5aGBt2FjKJqBm0XHqwaAgZWJxdHodOzTlGEA==
server: cloudflare
cf-ray: 77a1482b9a2e0b31-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c81a5fde527ab829b2a6d09a82a9357a
deefe46e394c45b56d651dab4240098e7c63b327
6adea16d796bedabe3514a9f155a8eb34f9c1dc8d6860fef97520a36fb4ceddd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=131348
Date: Thu, 15 Dec 2022 18:35:56 GMT
Etag: "639ab98c-1d7"
Expires: Sat, 17 Dec 2022 07:05:04 GMT
Last-Modified: Thu, 15 Dec 2022 06:07:08 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mEwu0wErdCh1SH_rQiZv-miJc5xJrzYUCqLAhIc5L2TyXXf5TRXaZg==
Age: 3476
s3.amazonaws.com/marketingassets.cloudsna.com/prod/common/OTT/inlinecss/1659414302452.css?versionId=PZ4EICaMIJtO9FqpeVsLEuXuIchWzVFW
200 OK 641 B URL HTTP/1.1 s3.amazonaws.com/marketingassets.cloudsna.com/prod/common/OTT/inlinecss/1659414302452.css?versionId=PZ4EICaMIJtO9FqpeVsLEuXuIchWzVFW
IP
Hash 1565d03978a7aa88f6383927f55620b3
69a54998ead4c50b1ed5b6fc80212440a29b31da
4a0e07a54f7579e3a1ef91be847a66c6eaba46a0b994f9af0af0fb8184512c67
GET /marketingassets.cloudsna.com/prod/common/OTT/inlinecss/1659414302452.css?versionId=PZ4EICaMIJtO9FqpeVsLEuXuIchWzVFW HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: qbPiTIFdpHywZOcM6wmqHTwvxW3UqlknCMEZWJgCheWWxGhvqhtWt/CQLILPjxPUMINC1l0JFQw=
x-amz-request-id: E0BYQ6P9FAAB42E4
Date: Thu, 15 Dec 2022 18:35:57 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Tue, 02 Aug 2022 04:25:03 GMT
ETag: "1565d03978a7aa88f6383927f55620b3"
Content-Encoding: utf8
x-amz-version-id: PZ4EICaMIJtO9FqpeVsLEuXuIchWzVFW
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 641
ocsp.digicert.com/
200 OK 471 B IP
Hash 8760fa5f09b26ba0f3616c716e7d4c86
0577f8043628e890dfaf947c6d88e0564fab666c
247f188fd87efdf98b84e4be139cbf7b98f936a810f93aebe609a3efdcf690d1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2950
Cache-Control: max-age=136200
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:56 GMT
Etag: "639ace8e-1d7"
Expires: Sat, 17 Dec 2022 08:25:56 GMT
Last-Modified: Thu, 15 Dec 2022 07:36:46 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.14.0/webfonts/fa-solid-900.woff2
200 OK 80 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.14.0/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 80148, version 331.17301\012- data
Hash c500da19d776384ba69573ae6fe274e7
6290834672aba86d5b6c1c73b30b57c9c53996f7
cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
GET /ajax/libs/font-awesome/5.14.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 80148
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5f0f47d3-13914"
last-modified: Wed, 15 Jul 2020 18:15:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 6133567
expires: Tue, 05 Dec 2023 18:35:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SiYcGUuCbQBpkZ9ywzhaWRkLRfpH1KAoZiXLPWsh7ojUM8FtAiDf%2FrWZchN8TVKTfvstvc9dxbfl59yGKEzsARkntxGvUrXb%2BegemuHbPPB2scKqGeoFnlEbJn5fbFzaQ%2FzruYGa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77a1482e6c510b31-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c81a5fde527ab829b2a6d09a82a9357a
deefe46e394c45b56d651dab4240098e7c63b327
6adea16d796bedabe3514a9f155a8eb34f9c1dc8d6860fef97520a36fb4ceddd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Dec 2022 18:35:56 GMT
Etag: "639ab98c-1d7"
Last-Modified: Thu, 15 Dec 2022 18:11:35 GMT
Server: ECS (dcb/7EEE)
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HaGArM_osthJIykn_oZfEAQwruqugvyoGigv8kDcVar5ikUDM_ybbA==
Age: 1461
c.lytics.io/c/6754fc8577b0e933befa552acea53d64?gtm.start=1671129353299&event=gtm.js>m.uniqueEventId=1&_ts=1671129353664&_nmob=t&_device=desktop&url=secure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176&_v=3.0.29&_uid=ce58b857-7d2b-45c3-8b4d-e1cc2bc33190&_getid=t
200 OK 35 B URL HTTP/2 c.lytics.io/c/6754fc8577b0e933befa552acea53d64?gtm.start=1671129353299&event=gtm.js>m.uniqueEventId=1&_ts=1671129353664&_nmob=t&_device=desktop&url=secure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176&_v=3.0.29&_uid=ce58b857-7d2b-45c3-8b4d-e1cc2bc33190&_getid=t
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /c/6754fc8577b0e933befa552acea53d64?gtm.start=1671129353299&event=gtm.js>m.uniqueEventId=1&_ts=1671129353664&_nmob=t&_device=desktop&url=secure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176&_v=3.0.29&_uid=ce58b857-7d2b-45c3-8b4d-e1cc2bc33190&_getid=t HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: image/gif
content-length: 35
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cookie, *
access-control-allow-methods: GET, POST
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: seerid=ce58b857-7d2b-45c3-8b4d-e1cc2bc33190; Path=/; Domain=lytics.io; Max-Age=77760000; Secure; SameSite=None
strict-transport-security: max-age=63072000;
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eHF64Pntp7Gj03RGTOeBnPUo45xF389RMesRIABYQ9x9dpL5WghaZhzEG5SKpdQdBgbXJ9Dmqb%2FsCKm7Yqs7I2ECUG%2BHiZaZdP6q4fmCWK8%2BqTgW6Lahs0qTC%2B2c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77a1482dbdc2b4fd-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e709a04ea80113c435ca4f9d37e93e7
053f34d74eded192d698bb20956897ec3e3ad23b
2535554bd9d9004c7888cde496278d847002218fb1d35a3d4bacdd98c8a92ff9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/domine/v19/L0xhDFMnlVwD4h3Lt9JWnbX3jG-2X5XHE1ofEw.woff2
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/domine/v19/L0xhDFMnlVwD4h3Lt9JWnbX3jG-2X5XHE1ofEw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17616, version 1.0\012- data
Hash e404cc6f099dc681be73ab294d6025d4
3801c5c397a6af37ada25603bbe30bbde168b4a0
25fe7a3a5dc86c59fc1464ea9ae17e19640cbee27bf9f1ad90b3be9b054a4e3c
GET /s/domine/v19/L0xhDFMnlVwD4h3Lt9JWnbX3jG-2X5XHE1ofEw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17616
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 13:34:54 GMT
expires: Sat, 09 Dec 2023 13:34:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 19:06:58 GMT
content-type: font/woff2
age: 536462
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
players.brightcove.net/5102072647001/PYvSECOe2_default/index.min.js
200 OK 225 kB URL HTTP/1.1 players.brightcove.net/5102072647001/PYvSECOe2_default/index.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 225 kB (224973 bytes)
Hash 59487516ded6d01dd8337536b93ee08b
89a2d80e36f0ec3ccb24b73c82048fce3ad18623
831a8475bacfe711f4a93ace3d67531daefec9e4de4dcfbde1e8fe2ce8cc5f4b
GET /5102072647001/PYvSECOe2_default/index.min.js HTTP/1.1
Host: players.brightcove.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 224973
x-amz-id-2: JrWhZ5CDA9yhE5Wbk7QM+NDLdjeXv1tlfZVleNmuyKrKDK9xPUPkT05ab6nP/4CfPsbACNMcZnw=
x-amz-request-id: AQBSFSMEEBC4377J
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 10 Mar 2022 15:49:51 GMT
ETag: "59487516ded6d01dd8337536b93ee08b"
Content-Encoding: gzip
x-amz-version-id: H6xJ3HO2yThy5TqLGpIt7ugQ5TR7JRIC
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Accept-Ranges: bytes
X-Served-By: cache-hhn4053-HHN
X-Cache-Hits: 0
X-Timer: S1649236477.917674,VS0,VE722
Vary: Accept-Encoding
X-BCOV-Response-Mode: 1
Cache-Control: public, max-age=180
Date: Thu, 15 Dec 2022 18:35:56 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e709a04ea80113c435ca4f9d37e93e7
053f34d74eded192d698bb20956897ec3e3ad23b
2535554bd9d9004c7888cde496278d847002218fb1d35a3d4bacdd98c8a92ff9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.lytics.io/c/6754fc8577b0e933befa552acea53d64?_e=pv&_sesstart=1&_tz=0&_ul=en-US&_sz=1280x1024&_ts=1671129353766&_nmob=t&_device=desktop&url=secure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&_uid=ce58b857-7d2b-45c3-8b4d-e1cc2bc33190&_v=3.0.29
200 OK 35 B URL HTTP/2 c.lytics.io/c/6754fc8577b0e933befa552acea53d64?_e=pv&_sesstart=1&_tz=0&_ul=en-US&_sz=1280x1024&_ts=1671129353766&_nmob=t&_device=desktop&url=secure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&_uid=ce58b857-7d2b-45c3-8b4d-e1cc2bc33190&_v=3.0.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /c/6754fc8577b0e933befa552acea53d64?_e=pv&_sesstart=1&_tz=0&_ul=en-US&_sz=1280x1024&_ts=1671129353766&_nmob=t&_device=desktop&url=secure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&_uid=ce58b857-7d2b-45c3-8b4d-e1cc2bc33190&_v=3.0.29 HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: image/gif
content-length: 35
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cookie, *
access-control-allow-methods: GET, POST
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: seerid=ce58b857-7d2b-45c3-8b4d-e1cc2bc33190; Path=/; Domain=lytics.io; Max-Age=77760000; Secure; SameSite=None
strict-transport-security: max-age=63072000;
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mYbblbutnesgnjKd8Ohz3vRoTVAhfwndxZsq%2Fzl1oofw0ZBNhxGGIqdrwd84NE7lMr7El3jlPVaaDquABwhjWNbjM4beLgueOWPxkGKqITkr6UjPhT3NqSsqjWlN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77a1482e5eaeb4fd-OSL
X-Firefox-Spdy: h2
com-marketwise-prod1.collector.snplow.net/com.snowplowanalytics.snowplow/tp2
200 OK 0 B URL HTTP/2 com-marketwise-prod1.collector.snplow.net/com.snowplowanalytics.snowplow/tp2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: com-marketwise-prod1.collector.snplow.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://secure.opportunistictrader.com/
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-length: 0
server: nginx
access-control-allow-origin: https://secure.opportunistictrader.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 600
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&pt=Opportunistic%20Trader&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1671129353762&g=0&completeurl=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D
200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&pt=Opportunistic%20Trader&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1671129353762&g=0&completeurl=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&pt=Opportunistic%20Trader&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1671129353762&g=0&completeurl=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
date: Thu, 15 Dec 2022 18:35:56 GMT
expires: Thu, 15 Dec 2022 18:35:56 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 44526baca4457
pragma: no-cache
server: ECAcc (lhd/35DE)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast"
set-cookie: ts=vreXpYrS%3D1765823756%26vteXpYrS%3D1671131156%26vr%3D171259761850a4622ae0e053ffffffff%26vt%3D171259761850a4622ae0e053fffffffe; Expires=Mon, 15 Dec 2025 18:35:56 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3D171259761850a4622ae0e053ffffffff%26vt%3D171259761850a4622ae0e053fffffffe; Expires=Mon, 15 Dec 2025 18:35:56 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-000000000000000000044526baca4457-749bdbd6fbec4158-01
content-length: 42
X-Firefox-Spdy: h2
com-marketwise-prod1.collector.snplow.net/com.snowplowanalytics.snowplow/tp2
200 OK 2 B URL HTTP/2 com-marketwise-prod1.collector.snplow.net/com.snowplowanalytics.snowplow/tp2
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1
Host: com-marketwise-prod1.collector.snplow.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1753
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
server: nginx
set-cookie: sp=688882c9-e18d-418e-bae1-f6b7df95195c; Expires=Fri, 15 Dec 2023 18:35:56 GMT; Domain=; Path=/; Secure; HttpOnly; SameSite=Lax
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://secure.opportunistictrader.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4813a3a1a116690c630c79af8ddb30b8
5dd1caf49bacffe4b8261a0d4e935ddb76bf5584
d809cb37717c81a30c27a78f91d4eca23006dcffaedbea98760bedac39ae3dd5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=105899
Date: Thu, 15 Dec 2022 18:35:56 GMT
Etag: "639a63b7-1d7"
Expires: Sat, 17 Dec 2022 00:00:55 GMT
Last-Modified: Thu, 15 Dec 2022 00:00:55 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9G-Dnc9UFEx9WdSkKnEdbmpuOQFtGbvqt93D42V_jzGvV_64v4CI_Q==
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=3536d0ee-416a-422c-9f4b-97ae0639d41c&batch_time=1671129353535
403 Forbidden 155 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=3536d0ee-416a-422c-9f4b-97ae0639d41c&batch_time=1671129353535
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fc67958452c97e44cf23bb7e5d8fde62
94672c8c8e79d15de051bdd91c4d257232a7cf3d
a38cc86a8cf49c36214d3e013cb427f24806526109299c950a255748a76ea72e
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=3536d0ee-416a-422c-9f4b-97ae0639d41c&batch_time=1671129353535 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15920
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/json
content-length: 155
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
tracking.legacyoffers.com/aff_goal?a=l&goal_id=494
200 OK 101 B URL HTTP/1.1 tracking.legacyoffers.com/aff_goal?a=l&goal_id=494
IP
File type HTML document, ASCII text, with no line terminators
Hash 78c65dfd1190e4c75ea0c88192982517
bc6a9802fbd1cc58736f3a99ddbc4af508d64511
a99af92a72c2e9d81607963d2c6e10c4b260b8e7a00f2ba6e630741c0fb09fa5
GET /aff_goal?a=l&goal_id=494 HTTP/1.1
Host: tracking.legacyoffers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Dec 2022 18:35:56 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-Request-Id: 61eea5e23f6535f8a69e23afc512ac51
Access-Control-Allow-Headers: Tune-SDK-Version
Content-Encoding: gzip
vjs.zencdn.net/vttjs/0.12.5/vtt.global.min.js
200 OK 7.2 kB URL HTTP/2 vjs.zencdn.net/vttjs/0.12.5/vtt.global.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (20659)
Hash 31642a5a8c1bf64a8de22cef2e8a01f8
ff35caf10c35f606c156ebc74eb7e4a477fd83fb
3ba73d92903d980d8049bd6235cf8ff945bd8eff9ba37bd2d5c86211cbf97872
GET /vttjs/0.12.5/vtt.global.min.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 31 Aug 2017 21:04:55 GMT
etag: "f30dac97e5c2aaa10a7695b93cc66699"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Thu, 15 Dec 2022 18:35:56 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 9271
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 7231
X-Firefox-Spdy: h2
edge.api.brightcove.com/playback/v1/accounts/5102072647001/videos/6310329510112
200 OK 0 B URL HTTP/2 edge.api.brightcove.com/playback/v1/accounts/5102072647001/videos/6310329510112
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /playback/v1/accounts/5102072647001/videos/6310329510112 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: accept
Referer: https://secure.opportunistictrader.com/
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-max-age: 86400
accept-ranges: bytes
date: Thu, 15 Dec 2022 18:35:57 GMT
via: 1.1 varnish
x-served-by: cache-bma1635-BMA
x-cache: HIT
x-cache-hits: 0
x-timer: S1671129357.013185,VS0,VE0
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 0
X-Firefox-Spdy: h2
edge.api.brightcove.com/playback/v1/accounts/5102072647001/videos/6310329510112
200 OK 4.6 kB URL HTTP/2 edge.api.brightcove.com/playback/v1/accounts/5102072647001/videos/6310329510112
IP
File type JSON data\012- , ASCII text, with very long lines (4629)
Hash 70f48ce7abe52fec7937c5df82673cdc
88897946f945700d354825c4b1a62dcbe60e86d3
0d4598493cae4b7b966d647de8792003ab2f214f0b5d4166b8a3314ece01924f
GET /playback/v1/accounts/5102072647001/videos/6310329510112 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json;pk=BCpkADawqM2fZBkh0mZYa-V5pMzwB1CBXwqu13GUhQiJLEzsnohNz4gzq0HcVntdzgLMWQrrt9teYpNkbg_wANJKmQK4aSsej_ohCDqEaOChluH4WTY5pLXl71U06lPnV4dCnoNYw2ct2YyQ
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
account-status: APPROVED
bc-override-client-ip: 83.185.80.47
bcov-request-id: 37be5114-989a-421f-b415-4d406e898dee
content-type: application/json; charset=UTF-8
policy-key-accountid: 5102072647001
policy-key-raw: BCpkADawqM2fZBkh0mZYa-V5pMzwB1CBXwqu13GUhQiJLEzsnohNz4gzq0HcVntdzgLMWQrrt9teYpNkbg_wANJKmQK4aSsej_ohCDqEaOChluH4WTY5pLXl71U06lPnV4dCnoNYw2ct2YyQ
powered-by: BC
powered-from: eu-central-1a
accept-ranges: bytes
date: Thu, 15 Dec 2022 18:35:57 GMT
via: 1.1 varnish
age: 1047
x-served-by: cache-bma1635-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1671129357.030190,VS0,VE1
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 4630
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 6530dadebf87162bb47d3a1786814597
f93b4d7d674e95d28310bae9401b26190dbd19c0
1c824a59755d5f721a81ce45257275f5585cfdd278fc730706d5bb72407d4216
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5689
Cache-Control: max-age=103299
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:57 GMT
Etag: "639a4357-138"
Expires: Fri, 16 Dec 2022 23:17:36 GMT
Last-Modified: Wed, 14 Dec 2022 21:42:47 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 312
secure.opportunistictrader.com/snowflake/logger
200 OK 21 B URL HTTP/2 secure.opportunistictrader.com/snowflake/logger
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0b5485f2ffbbf65fc1412050ac43e658
0d7243100772fd39254322310dee9368595d5f0e
64a1ca8c093b60d9abfe26d042cfaacf464c5d928c26e7ce6e5528f1cb1d6899
POST /snowflake/logger HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-api-key: O1I1d31dqY5iHR07pLHrf7rKAOxDeMhQ2JsWck8c
Content-Length: 488
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Cookie: _dd_s=logs=1&id=736ff175-f2f1-4fc7-8705-90e6451a15cd&created=1671129352377&expire=1671130252382&rum=1; _sp_ses.6018=*; _sp_id.6018=8a74cb3c-83d8-4e49-9ce6-255f86aecd1e.1671129353.1.1671129353..7f33366e-9d5a-4ced-add0-77ef1b419c10..15d8a275-3b3a-4385-9700-0d59f112a78e.1671129353290.1; bssSessionId=be38dfe2-ddb2-4141-8724-9973c896e21b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:57 GMT
content-type: application/json
content-length: 21
x-amzn-requestid: d22b8b09-6450-4226-a797-d391f59bedd1
access-control-allow-origin: *
x-amz-apigw-id: dM1aCGSTiYcFbTQ=
x-amzn-trace-id: Root=1-639b690c-0def2d60404952a75f1d09d7
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZuJVc0myQPjUKUOfaXtMENgoZfQbiwN2nK3jvS-ACJ6quxyylFLRIA==
server: cloudflare
cf-ray: 77a1482d8ba10b31-OSL
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=84e6c2f4-c72d-47cd-8da1-fa5daf772c31&batch_time=1671129354238
403 Forbidden 155 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=84e6c2f4-c72d-47cd-8da1-fa5daf772c31&batch_time=1671129354238
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ac823733a0d6ac05d6e7d9fd255f32aa
79b6666864b5d4b85b583372112444591b745064
205b5c5904607d293ca83f8a7ee8bda86548bc066267e2b53c19d09a2e4aad04
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=84e6c2f4-c72d-47cd-8da1-fa5daf772c31&batch_time=1671129354238 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15441
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Thu, 15 Dec 2022 18:35:57 GMT
content-type: application/json
content-length: 155
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
cdn.evgnet.com/beacon/stansberryholdings/legacy_prod/scripts/evergage.min.js
200 OK 42 kB URL HTTP/2 cdn.evgnet.com/beacon/stansberryholdings/legacy_prod/scripts/evergage.min.js
IP
File type ASCII text, with very long lines (594)
Hash 890a83e116f693e1c5f673adbf3fe9e7
a736ebf402380e3eb3f8b687f1e72f1d16b9f9c0
1f28bf256523bc04419034beb5b988d5582dcea397f89971ed2243a863545369
GET /beacon/stansberryholdings/legacy_prod/scripts/evergage.min.js HTTP/1.1
Host: cdn.evgnet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: jbaNPv7Hz2XvgseAYZBOv0JYG5Ikqcx61z7ZlGdMSSrImUMDSPzgJTVw28Q3khBjGpomzwJahiw=
x-amz-request-id: 3N36Z8RFBR0RP347
x-amz-replication-status: COMPLETED
last-modified: Wed, 14 Dec 2022 17:43:28 GMT
etag: "890a83e116f693e1c5f673adbf3fe9e7"
cache-control: max-age=120
content-encoding: gzip
x-amz-meta-evergage-beacon-ver: 16
x-amz-meta-evergage-sum: b719f6eb073c03c39e0959a27d4b7efa14ad792f
x-amz-version-id: 3ffaN1GALeUIdtPZlGPzwl5RXlYefCoZ
content-type: application/javascript; charset=utf-8
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 15 Dec 2022 18:35:57 GMT
age: 50
x-served-by: cache-iad-kcgs7200068-IAD, cache-bma1648-BMA
x-cache: HIT, HIT
x-cache-hits: 122, 1
x-timer: S1671129357.041814,VS0,VE92
vary: Accept-Encoding
timing-allow-origin: *
content-length: 42045
X-Firefox-Spdy: h2
cf-images.us-east-1.prod.boltdns.net/v1/static/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/c2f3448a-cd68-4524-b379-609014c3adcc/1280x720/match/image.jpg
200 OK 233 kB URL HTTP/1.1 cf-images.us-east-1.prod.boltdns.net/v1/static/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/c2f3448a-cd68-4524-b379-609014c3adcc/1280x720/match/image.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size 233 kB (232722 bytes)
Hash ba2053203ccebab013cc6ffa3c058bbc
add5ae03f6697599baad98a81a34f34128845b78
63a604e6c852b1b42cf4af8d7ec0274193ed819f82bc10edd6386d892b0f58a8
GET /v1/static/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/c2f3448a-cd68-4524-b379-609014c3adcc/1280x720/match/image.jpg HTTP/1.1
Host: cf-images.us-east-1.prod.boltdns.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
Date: Tue, 29 Nov 2022 05:06:31 GMT
Expires: Wed, 29 Nov 2023 05:06:31 GMT
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Cache: Hit from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5xSPi6sY86o_EeKK8v7Zzmh2vT43-DDxKi-Qg4lfF3vcSCcdDf0G1g==
Age: 1430966
manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/10s/master.m3u8?fastly_token=NjM5YmM3ZjZfOGI0YWFjMWNjZjRiOWNiNDExNjljOWFlNDg4MmZiMTU1ZDUzZDQ1NjU3NGU3MzBmYjVkZjNmMzA1YWQ1YzMwOA%3D%3D
200 OK 7.3 kB URL HTTP/2 manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/10s/master.m3u8?fastly_token=NjM5YmM3ZjZfOGI0YWFjMWNjZjRiOWNiNDExNjljOWFlNDg4MmZiMTU1ZDUzZDQ1NjU3NGU3MzBmYjVkZjNmMzA1YWQ1YzMwOA%3D%3D
IP
File type M3U playlist, ASCII text, with very long lines (392)
Hash c860634b09bf28e1cde8a4c9e2c4eb4b
0de5250348abbb39f66ba17cd6bed12c94e52179
e4e813b668deaa24eb1266f65b2639f178adb8ddcb6e748c9f6c5455b3cad653
GET /manifest/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/10s/master.m3u8?fastly_token=NjM5YmM3ZjZfOGI0YWFjMWNjZjRiOWNiNDExNjljOWFlNDg4MmZiMTU1ZDUzZDQ1NjU3NGU3MzBmYjVkZjNmMzA1YWQ1YzMwOA%3D%3D HTTP/1.1
Host: manifest.prod.boltdns.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: s-maxage=10800, max-age=10800
content-type: application/x-mpegURL
x-bolt-device-group: desktop-firefox
x-powered-by: BC
x-powered-from: gantry
accept-ranges: bytes
date: Thu, 15 Dec 2022 18:35:57 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1635-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1671129357.163898,VS0,VE55
x-device-group: desktop-firefox
content-length: 7279
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash fb6c10db5d6b8943e5b52094b9c5a0c6
155e5392831b0a6d97b7426151b79f529052afc7
bf410b9dea54e74573e109806b72c087a1077bf554d14abfdd4101fbc0197f02
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 481
Cache-Control: max-age=146328
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:57 GMT
Etag: "639affc4-139"
Expires: Sat, 17 Dec 2022 11:14:45 GMT
Last-Modified: Thu, 15 Dec 2022 11:06:44 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
manifest.prod.boltdns.net/thumbnail/v1/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/da3267e5-d593-493e-9472-d888b3e0ad98/thumbnail.webvtt?fastly_token=NjM5YmM3ZjZfYTBjNzExNmMzYjEyZTdjNTQ0NzVlMGY5NjFmYjZjMmZhMDVmMzE1MWFiNzBkZGViYTc5ZDMxYzM2YzIwMGE0OA%3D%3D
200 OK 180 kB URL HTTP/2 manifest.prod.boltdns.net/thumbnail/v1/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/da3267e5-d593-493e-9472-d888b3e0ad98/thumbnail.webvtt?fastly_token=NjM5YmM3ZjZfYTBjNzExNmMzYjEyZTdjNTQ0NzVlMGY5NjFmYjZjMmZhMDVmMzE1MWFiNzBkZGViYTc5ZDMxYzM2YzIwMGE0OA%3D%3D
IP
File type ASCII text, with very long lines (343)
Size 180 kB (179628 bytes)
Hash 21588566f90489c39b70dc5c63c69e11
b8d9a9a2f92043a1714402ad88ecc2dda9af4be8
338f2f39dcf876c7ebc376568bf0c5d42e3ad6a864490662d0cc45a5f125dbcd
GET /thumbnail/v1/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/da3267e5-d593-493e-9472-d888b3e0ad98/thumbnail.webvtt?fastly_token=NjM5YmM3ZjZfYTBjNzExNmMzYjEyZTdjNTQ0NzVlMGY5NjFmYjZjMmZhMDVmMzE1MWFiNzBkZGViYTc5ZDMxYzM2YzIwMGE0OA%3D%3D HTTP/1.1
Host: manifest.prod.boltdns.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: s-maxage=10800, max-age=10800
content-type: text/vtt; charset=UTF-8
x-powered-by: BC
x-powered-from: gantry
accept-ranges: bytes
date: Thu, 15 Dec 2022 18:35:57 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1635-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1671129357.139476,VS0,VE101
x-device-group: desktop-firefox
content-length: 179628
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 4a0391e21483845becaad7d2108f91b6
2a5ed3d879e7a4bdbed6f6da6d79a2a864028a5d
86379e84db37ec9cd4db0774d5876ae48dbcaa253eed8c9af71ead4dd6165660
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 169
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:57 GMT
Last-Modified: Thu, 15 Dec 2022 18:33:09 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 314
secure.opportunistictrader.com/snowflake/generic
200 OK 21 B URL HTTP/2 secure.opportunistictrader.com/snowflake/generic
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0b5485f2ffbbf65fc1412050ac43e658
0d7243100772fd39254322310dee9368595d5f0e
64a1ca8c093b60d9abfe26d042cfaacf464c5d928c26e7ce6e5528f1cb1d6899
POST /snowflake/generic HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-api-key: g5wZnpMOAV6d3DVWjACKU9Pz86tj10Es39Avoa3n
Content-Length: 727
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176&assetId=AST253490&page=1
Cookie: _dd_s=logs=1&id=736ff175-f2f1-4fc7-8705-90e6451a15cd&created=1671129352377&expire=1671130252382&rum=1; _sp_ses.6018=*; _sp_id.6018=8a74cb3c-83d8-4e49-9ce6-255f86aecd1e.1671129353.1.1671129353..7f33366e-9d5a-4ced-add0-77ef1b419c10..15d8a275-3b3a-4385-9700-0d59f112a78e.1671129353290.1; bssSessionId=be38dfe2-ddb2-4141-8724-9973c896e21b; seerses=e; seerid=ce58b857-7d2b-45c3-8b4d-e1cc2bc33190; MKT654530_MKT703176_AST253490=visited
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:57 GMT
content-type: application/json
content-length: 21
x-amzn-requestid: 1b4ad5d9-6b0f-4834-b8a6-7c75bdae4487
access-control-allow-origin: *
x-amz-apigw-id: dM1aGGU1oAMFpCQ=
x-amzn-trace-id: Root=1-639b690d-5d0422b1589296394165cdc0
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront), 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
x-amz-cf-id: uIppkBOYhFtZSO9LTWSyzKRX4emKhNI5Xp8VYhYrEBe7n_AnASo_cw==
server: cloudflare
cf-ray: 77a148313ec70b31-OSL
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?topUrl=secure.opportunistictrader.com&origin=onetag
200 OK 5.1 kB URL HTTP/2 gum.criteo.com/syncframe?topUrl=secure.opportunistictrader.com&origin=onetag
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (13465)
Hash 59a13186f66c0534c2491142f7e77e3e
6cefc66825cde1c4c35bbb3df5d39daa43f40097
a48bc357202d65e8b48cfc3f7dc563ef7a75b5a5fe10c63c87f9191f3a2edf59
GET /syncframe?topUrl=secure.opportunistictrader.com&origin=onetag HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:57 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=abee0db5-5fba-4a2f-9643-ff56371ab200; expires=Tue, 09 Jan 2024 18:35:57 GMT; domain=.criteo.com; path=/; secure; samesite=none
optout=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=.criteo.com; path=/
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 782177
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 808b529439295d321a06913c4fc16f29
21de5760251f611fa199e65f462abe8f6e29007d
7ee0248d2de07980100cd6fd4aca0bb02c2d57c1f8a6221f8909706cc4d45be4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 499
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:57 GMT
Last-Modified: Thu, 15 Dec 2022 18:27:38 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 808b529439295d321a06913c4fc16f29
21de5760251f611fa199e65f462abe8f6e29007d
7ee0248d2de07980100cd6fd4aca0bb02c2d57c1f8a6221f8909706cc4d45be4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 499
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:57 GMT
Last-Modified: Thu, 15 Dec 2022 18:27:38 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/b423b788-0caf-4f59-b070-1c90343a9c65/10s/rendition.m3u8?fastly_token=NjM5YmNjMGVfYWNkOTNkMWVhMThkNjI5MDRmY2E2YWQyM2QxY2RhZmY4MjY5YzJmNjg1ZDI2ZDAzZGYxNjA3YTY0ZTYzNGM3Nw%3D%3D
200 OK 116 kB URL HTTP/2 manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/b423b788-0caf-4f59-b070-1c90343a9c65/10s/rendition.m3u8?fastly_token=NjM5YmNjMGVfYWNkOTNkMWVhMThkNjI5MDRmY2E2YWQyM2QxY2RhZmY4MjY5YzJmNjg1ZDI2ZDAzZGYxNjA3YTY0ZTYzNGM3Nw%3D%3D
IP
File type M3U playlist, ASCII text, with very long lines (455)
Size 116 kB (115499 bytes)
Hash ae2a8a5d3a691384205ad8e06dc8456a
ad40c9e77d4fc4300e6efd5f1e1a4aa8e14fa188
050ac397d831ba2befd6d2846996896bae6a0d16171cf45ffff9c592dc7c61bc
GET /manifest/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/b423b788-0caf-4f59-b070-1c90343a9c65/10s/rendition.m3u8?fastly_token=NjM5YmNjMGVfYWNkOTNkMWVhMThkNjI5MDRmY2E2YWQyM2QxY2RhZmY4MjY5YzJmNjg1ZDI2ZDAzZGYxNjA3YTY0ZTYzNGM3Nw%3D%3D HTTP/1.1
Host: manifest.prod.boltdns.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: s-maxage=10800, max-age=10800
content-type: application/x-mpegURL
x-powered-by: BC
x-powered-from: gantry
accept-ranges: bytes
date: Thu, 15 Dec 2022 18:35:57 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1635-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1671129357.251147,VS0,VE248
x-device-group: desktop-firefox
content-length: 115499
X-Firefox-Spdy: h2
bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/b423b788-0caf-4f59-b070-1c90343a9c65/ec15dff9-5ffc-44f2-8776-1bac60264780/5x/segment0.ts?akamai_token=exp=1671154702~acl=/media/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/b423b788-0caf-4f59-b070-1c90343a9c65/ec15dff9-5ffc-44f2-8776-1bac60264780/*~hmac=dd1d07fd43db1bd779d1c0350b2625c0e367d404a235483bdcac6ee7777a50a5
200 OK 2.2 MB URL HTTP/1.1 bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/b423b788-0caf-4f59-b070-1c90343a9c65/ec15dff9-5ffc-44f2-8776-1bac60264780/5x/segment0.ts?akamai_token=exp=1671154702~acl=/media/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/b423b788-0caf-4f59-b070-1c90343a9c65/ec15dff9-5ffc-44f2-8776-1bac60264780/*~hmac=dd1d07fd43db1bd779d1c0350b2625c0e367d404a235483bdcac6ee7777a50a5
IP
ASN #20940 Akamai International B.V.
Size 2.2 MB (2190208 bytes)
Hash 51f29d04b924a7265e59cc49a236ab4e
436080898aa2fa2145a963def5e9917c173c47ab
3d999dafe25be28a1418be9e6bd92096bedce024bee8a193a62b85dc75e80a93
GET /media/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/b423b788-0caf-4f59-b070-1c90343a9c65/ec15dff9-5ffc-44f2-8776-1bac60264780/5x/segment0.ts?akamai_token=exp=1671154702~acl=/media/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/b423b788-0caf-4f59-b070-1c90343a9c65/ec15dff9-5ffc-44f2-8776-1bac60264780/*~hmac=dd1d07fd43db1bd779d1c0350b2625c0e367d404a235483bdcac6ee7777a50a5 HTTP/1.1
Host: bcbolt446c5271-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 2190208
ETag: "1eb5efb11900e542427880cb8afa91e1"
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Amz-Cf-Pop: JFK50-P1
X-Amz-Cf-Id: nIz_eA3eYX8zp_zrKWC6-r0tZ24A5oz4Ji7OtLc2sbGDDdnD_2rj0w==
Backend-IP: 108.139.46.125
Accept-Ranges: bytes
X-Served-By: cache-ewr18148-EWR
X-Cache-Hits: 1
X-Timer: S1669713055.215368,VS0,VE8
BC-MID: true
Cache-Control: public, max-age=30107143
Expires: Wed, 29 Nov 2023 05:41:40 GMT
Date: Thu, 15 Dec 2022 18:35:57 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 1315351
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/MP2T
Access-Control-Allow-Methods: GET,HEAD,OPTIONS
Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC
Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
secure.opportunistictrader.com/snowflake/logger
200 OK 21 B URL HTTP/2 secure.opportunistictrader.com/snowflake/logger
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0b5485f2ffbbf65fc1412050ac43e658
0d7243100772fd39254322310dee9368595d5f0e
64a1ca8c093b60d9abfe26d042cfaacf464c5d928c26e7ce6e5528f1cb1d6899
POST /snowflake/logger HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-api-key: O1I1d31dqY5iHR07pLHrf7rKAOxDeMhQ2JsWck8c
Content-Length: 513
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176&assetId=AST253490&page=1
Cookie: _dd_s=logs=1&id=736ff175-f2f1-4fc7-8705-90e6451a15cd&created=1671129352377&expire=1671130252382&rum=1; _sp_ses.6018=*; _sp_id.6018=8a74cb3c-83d8-4e49-9ce6-255f86aecd1e.1671129353.1.1671129353..7f33366e-9d5a-4ced-add0-77ef1b419c10..15d8a275-3b3a-4385-9700-0d59f112a78e.1671129353290.1; bssSessionId=be38dfe2-ddb2-4141-8724-9973c896e21b; seerses=e; seerid=ce58b857-7d2b-45c3-8b4d-e1cc2bc33190; MKT654530_MKT703176_AST253490=visited; _gcl_au=1.1.983736710.1671129354
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:57 GMT
content-type: application/json
content-length: 21
x-amzn-requestid: 73cd55ff-91fd-4b7c-a32d-27c299b4895e
access-control-allow-origin: *
x-amz-apigw-id: dM1aIHi8iYcF6Dg=
x-amzn-trace-id: Root=1-639b690d-1efe615c3f756928256a8fd6
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YrvnalvOYEaer3D7wy7LBYjw2hfY3U0DuRMniBRvjnQmvfR5-87W3A==
server: cloudflare
cf-ray: 77a1483388860b31-OSL
X-Firefox-Spdy: h2
manifest.prod.boltdns.net/license/v1/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/ec15dff9-5ffc-44f2-8776-1bac60264780?fastly_token=NjM5YmNjMGVfYjI3MDQ4M2VmZGFhMjk2NzliMTNmYTVmMGUyMjJmNGE2MWEzODljNWNlMjYzN2ZlYTFiNjI4NThkOGY5YThkZA%3D%3D
200 OK 16 B URL HTTP/2 manifest.prod.boltdns.net/license/v1/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/ec15dff9-5ffc-44f2-8776-1bac60264780?fastly_token=NjM5YmNjMGVfYjI3MDQ4M2VmZGFhMjk2NzliMTNmYTVmMGUyMjJmNGE2MWEzODljNWNlMjYzN2ZlYTFiNjI4NThkOGY5YThkZA%3D%3D
IP
Hash 3b6efb3e87bebd56b9e51807d1bdc0b9
07c3587b91af42afba9cd0d12d910b8cfbf51fcb
b6ce39a9aadeea0e1207bc1c3278dd913e87f2166d1161e30bd7b5e97a8e5e4c
GET /license/v1/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/ec15dff9-5ffc-44f2-8776-1bac60264780?fastly_token=NjM5YmNjMGVfYjI3MDQ4M2VmZGFhMjk2NzliMTNmYTVmMGUyMjJmNGE2MWEzODljNWNlMjYzN2ZlYTFiNjI4NThkOGY5YThkZA%3D%3D HTTP/1.1
Host: manifest.prod.boltdns.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
bcov-request-id: 6c94baa9-58bb-4a7c-9631-2e65f1344a51
cache-control: private, max-age=4876
content-type: application/octet-stream
x-hosted-on: Gantry
x-powered-by: BC
x-powered-from: eu-west-1b
accept-ranges: bytes
date: Thu, 15 Dec 2022 18:35:57 GMT
via: 1.1 varnish
x-served-by: cache-bma1635-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1671129358.540991,VS0,VE131
x-device-group: desktop-firefox
content-length: 16
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=onetag&domain=opportunistictrader.com&sn=FirefoxSyncframe&so=0&topUrl=secure.opportunistictrader.com&info=n-IIql80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFjMEtVb3hLRXpBYklTSlpndWxUOUMyZUF3T2FVOFlHdmFldlNnOWdUJTJGYg&idsd=1563447389,523235011&cw=1&lsw=1
200 OK 116 kB URL HTTP/2 gum.criteo.com/sid/json?origin=onetag&domain=opportunistictrader.com&sn=FirefoxSyncframe&so=0&topUrl=secure.opportunistictrader.com&info=n-IIql80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFjMEtVb3hLRXpBYklTSlpndWxUOUMyZUF3T2FVOFlHdmFldlNnOWdUJTJGYg&idsd=1563447389,523235011&cw=1&lsw=1
IP
Size 116 kB (116522 bytes)
Hash 0c738ea850f29a7dc95f619f5925071a
b03edbef9edb35e102e8d8afce9ef0797223ed04
96fbddd2b8e9e673624afc1e6d0c81fbd36eb69b58f6f055b51857c9740bb628
GET /sid/json?origin=onetag&domain=opportunistictrader.com&sn=FirefoxSyncframe&so=0&topUrl=secure.opportunistictrader.com&info=n-IIql80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFjMEtVb3hLRXpBYklTSlpndWxUOUMyZUF3T2FVOFlHdmFldlNnOWdUJTJGYg&idsd=1563447389,523235011&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?topUrl=secure.opportunistictrader.com&origin=onetag
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:57 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 599887
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.comodoca.com/
200 OK 472 B IP
Hash bdf76029224e6ff4a9fb6d171db79a27
2ee43de258d7bf507810d8374b3fccbcb6635933
abbdd02681ad17443642cf071392a0a9bbb2976d98bfa8805d5cabf6631464d8
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 18:35:57 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 13 Dec 2022 08:06:19 GMT
Expires: Tue, 20 Dec 2022 08:06:18 GMT
Etag: "2ee43de258d7bf507810d8374b3fccbcb6635933"
Cache-Control: max-age=586191,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77a148346941b4e8-OSL
bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/f1f7ed28-cc39-479d-9154-d4ee52c812f9/ec15dff9-5ffc-44f2-8776-1bac60264780/5x/segment0.ts?akamai_token=exp=1671154702~acl=/media/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/f1f7ed28-cc39-479d-9154-d4ee52c812f9/ec15dff9-5ffc-44f2-8776-1bac60264780/*~hmac=706b30c222cac13a87e7451688d111976787feaf52b4c9ba96731860c7cc0f48
200 OK 286 kB URL HTTP/1.1 bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/f1f7ed28-cc39-479d-9154-d4ee52c812f9/ec15dff9-5ffc-44f2-8776-1bac60264780/5x/segment0.ts?akamai_token=exp=1671154702~acl=/media/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/f1f7ed28-cc39-479d-9154-d4ee52c812f9/ec15dff9-5ffc-44f2-8776-1bac60264780/*~hmac=706b30c222cac13a87e7451688d111976787feaf52b4c9ba96731860c7cc0f48
IP
ASN #20940 Akamai International B.V.
Size 286 kB (286144 bytes)
Hash d103f1ea98ee3da875c41d79b9479732
4527aae9ce528fb3a6362aab3b4255a40737ffc0
ee4361a97b109506fefa25f3073409c0ff63caab0b0ea56dbd16b449234a3d34
GET /media/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/f1f7ed28-cc39-479d-9154-d4ee52c812f9/ec15dff9-5ffc-44f2-8776-1bac60264780/5x/segment0.ts?akamai_token=exp=1671154702~acl=/media/v1/hls/v4/aes128/5102072647001/c1a7f674-2136-4a75-b4e0-a128d3879e67/f1f7ed28-cc39-479d-9154-d4ee52c812f9/ec15dff9-5ffc-44f2-8776-1bac60264780/*~hmac=706b30c222cac13a87e7451688d111976787feaf52b4c9ba96731860c7cc0f48 HTTP/1.1
Host: bcbolt446c5271-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 286144
ETag: "51acd81b795347ec679ebb0f52561cb9"
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Amz-Cf-Pop: JFK50-P1
X-Amz-Cf-Id: 1iCYA9pLGo-IAGoRHFmHOVdk5tB0QRaRckVT_5HpRDy4G6Y8u0rP_Q==
Backend-IP: 108.139.46.174
Accept-Ranges: bytes
X-Served-By: cache-ewr18145-EWR
X-Cache-Hits: 1
X-Timer: S1669713055.499467,VS0,VE2
BC-MID: true
Cache-Control: public, max-age=30082616
Expires: Tue, 28 Nov 2023 22:52:53 GMT
Date: Thu, 15 Dec 2022 18:35:57 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 1315351
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/MP2T
Access-Control-Allow-Methods: GET,HEAD,OPTIONS
Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC
Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
js.trackinggrid.com/lr/
200 OK 435 B IP
File type ASCII text, with very long lines (773), with no line terminators
Hash bc7e3ecef41f79af8529f97abedc0f85
131ef991d966df583585ed8f13d541e058250307
c5fc54e4bc32f76480f86ab30bad0bc5153a7d46dccf79b65e4bf2cda74b129d
GET /lr/ HTTP/1.1
Host: js.trackinggrid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Dec 2022 18:35:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
X-Original-Content-Length: 1086
Vary: Accept-Encoding, Accept-Encoding
Etag: W/"PSA-aj-dKcjschi_Z"
Expires: Sat, 14 Jan 2023 17:56:25 GMT
Cache-Control: max-age=2591998
X-Content-Type-Options: nosniff
Content-Encoding: gzip
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=feb4f41b-aaea-4727-94bf-254d4d82d7e0&batch_time=1671129355026
403 Forbidden 155 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=feb4f41b-aaea-4727-94bf-254d4d82d7e0&batch_time=1671129355026
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash aef31b79ce28daf6b2286e52af686ce0
7060d3f9df832ec9ffbe927a7ca2ebe1035f7eab
e99bdb74161436e9efaef1be78265f756ab0fad0ff4e2264cea96c0849e47050
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=feb4f41b-aaea-4727-94bf-254d4d82d7e0&batch_time=1671129355026 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16363
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Thu, 15 Dec 2022 18:35:57 GMT
content-type: application/json
content-length: 155
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
d3bjnmbj12697.cloudfront.net/_/js/ouibounce/ouibounce.min.js
200 OK 1.6 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/_/js/ouibounce/ouibounce.min.js
IP
File type ASCII text, with very long lines (1624)
Hash aa63b6f263c50e0cd2636cce8c794214
93662db32d1df22d30a765444feaf3c28a70d377
08cb0f46ed2415058019966967713095ef16ce83d54c74a5f52a61846dbe2399
GET /_/js/ouibounce/ouibounce.min.js HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1626
Connection: keep-alive
Last-Modified: Wed, 15 Apr 2020 20:03:18 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 15 Dec 2022 10:31:35 GMT
ETag: "aa63b6f263c50e0cd2636cce8c794214"
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tgJ2uEUNe2MZzQoFhnwFNAqbOKbXum-UzWmfkVOwUQomopcF5Z1kmw==
Age: 29063
ag.gbc.criteo.com/newidsd
200 OK 135 kB URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
Size 135 kB (135192 bytes)
Hash 7b4460e53e5a18d978f5b79950fe18bd
2cc67b84c3a7def2d8db9629c0a5dce291337eb4
c6edf10eef0cefa1da95787f50d8e7317022b79fc1687bc216b68df95f44a5cd
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 82726
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
d3bjnmbj12697.cloudfront.net/_/js/lr-data/1.1.5/lr-data-lb.js
200 OK 13 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/_/js/lr-data/1.1.5/lr-data-lb.js
IP
Hash a88f83745c3a0be9069d1b962d49f761
a08c66904b1455451e95d2110809f137136c67de
74bc6f437146afbc319ce0fcaf2010f6cc14674197f9fbe5bf2610980038f0f8
GET /_/js/lr-data/1.1.5/lr-data-lb.js HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 13050
Connection: keep-alive
Last-Modified: Wed, 17 Aug 2022 18:26:49 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 14 Dec 2022 21:19:13 GMT
ETag: "a88f83745c3a0be9069d1b962d49f761"
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EeULcPeq0TCvh6_VQ-XFHNeACOr4mHGoEUTz8ebbh6Mpa7h1hebC7w==
Age: 76606
d3bjnmbj12697.cloudfront.net/lb/22/ott/img/bg-pattern-tile.png
200 OK 8.8 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/lb/22/ott/img/bg-pattern-tile.png
IP
File type PNG image data, 600 x 600, 8-bit/color RGB, non-interlaced\012- data
Hash a1991f72aca0d2ed9c2b42f617d5ee6d
259ab4e154c9a9be871d48d13b163f827a392b32
b47655a6412e86d4fe133a1ccde7c0987dc457372d036e7fd198c4df4dfee35e
GET /lb/22/ott/img/bg-pattern-tile.png HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s3.amazonaws.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 8816
Connection: keep-alive
Last-Modified: Thu, 28 Jul 2022 16:57:01 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 15 Dec 2022 07:55:55 GMT
ETag: "a1991f72aca0d2ed9c2b42f617d5ee6d"
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 78urZxW87qthoKuTZkGQJ_5Gr5wIJB3RvfME5rdxkwKwm06x31EP6g==
Age: 38404
d3bjnmbj12697.cloudfront.net/_/js/video/1.0.5/v.js
200 OK 12 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/_/js/video/1.0.5/v.js
IP
Hash 7b2ad4b58dc302829272c78d00d6e164
fa01cf6010622b754e22e1a8a0db0f27fb35349b
3e2ee1d763ba543f1845778e66fbb1edf4667009b60d98f116da48ef134de20c
GET /_/js/video/1.0.5/v.js HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 11479
Connection: keep-alive
Last-Modified: Wed, 04 May 2022 17:34:26 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 14 Dec 2022 22:27:19 GMT
ETag: "7b2ad4b58dc302829272c78d00d6e164"
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8Cg1QGqf4C41QcxGiyhWOtmZ1kYqFOHPtGv1V84DaT1mKbZ8565TmA==
Age: 72520
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 15 Dec 2022 17:34:02 GMT
expires: Thu, 15 Dec 2022 19:34:02 GMT
cache-control: public, max-age=7200
age: 3716
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/T3YIWS_d9Is
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/T3YIWS_d9Is
IP
Hash 3d68d58ec187ba5b54a6d11ee3943ae1
ed04c6db081ee33cc961db8429419976c0b04f61
ead1d01879f28ebd5604d13a19ac12ca02e847adcd4696223c317e62ccf58738
POST /s/gts1d4/T3YIWS_d9Is HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.taboola.com/libtrc/unip/1026722/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1026722/tfa.js
IP
File type ASCII text, with very long lines (58964)
Hash f4c2965f159462c0bb08de80b16a0860
de636310357a817ad245ab084d159f555b6295e4
3d7f04e832db847d5629d095b9397bd07edaca808a3b4fd994b920695e443a1d
GET /libtrc/unip/1026722/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: p4Ic4KkELP948/w3oKhk1cAzjG/bOlbI+ETQsBvfxHN9/27TAVrStVRuDcNQ1jCrTZxspkiFmcY=
x-amz-request-id: FQASCKFM7D2T730V
x-amz-replication-status: COMPLETED
last-modified: Sun, 11 Dec 2022 11:43:53 GMT
etag: "2fb80dde9803a3ccf06447f603dcc914"
x-amz-version-id: 1QOgBA7isbuVGSoxocql4GqB21awooeP
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 15 Dec 2022 18:35:58 GMT
via: 1.1 varnish
age: 2506
x-served-by: cache-bma1637-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1671129358.098354,VS0,VE1
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 80
content-length: 18120
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39124), with no line terminators
Hash d925a898de26295fdebfc90203ef46fa
77dd3f5893b76530e08058d50e8f9aef017e80c7
8f4a413fec7e48f5ac290f4596fef33b6396e7fb31080ec0203a5ec817d140c8
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11460
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 05 Dec 2022 17:15:50 GMT
accept-ranges: bytes
etag: "027e538cd8d91:0"
vary: Accept-Encoding
set-cookie: MUID=0CB52D005128695628C63F7B507F68F5; domain=.bing.com; expires=Tue, 09-Jan-2024 18:35:58 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FD3AE4CC503742EEBDC4D991D8161BBE Ref B: OSL30EDGE0421 Ref C: 2022-12-15T18:35:58Z
date: Thu, 15 Dec 2022 18:35:57 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/T3YIWS_d9Is
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/T3YIWS_d9Is
IP
Hash 3d68d58ec187ba5b54a6d11ee3943ae1
ed04c6db081ee33cc961db8429419976c0b04f61
ead1d01879f28ebd5604d13a19ac12ca02e847adcd4696223c317e62ccf58738
POST /s/gts1d4/T3YIWS_d9Is HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 59d4744b8c38f1a993c7948e83df2f66
973cb780e4496e843d53ef60afc79043e6eb568c
58929f8c9b924e272d783ac3c7b09217a4f764b210076efef1559e62f2f49efc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 59d4744b8c38f1a993c7948e83df2f66
973cb780e4496e843d53ef60afc79043e6eb568c
58929f8c9b924e272d783ac3c7b09217a4f764b210076efef1559e62f2f49efc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j98&aip=1&a=1291254992&t=pageview&_s=1&dl=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&ul=en-us&de=UTF-8&dt=Opportunistic%20Trader&sd=24-bit&sr=1280x1024&vp=1268x898&je=0&_u=YEBAAEABAAAAACAAI~&jid=1756843756&gjid=79139511&cid=62626799.1671129355&tid=UA-153154769-3&_gid=809743113.1671129355&_r=1>m=2wgbu0KLPP5K7&z=261094079
200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&aip=1&a=1291254992&t=pageview&_s=1&dl=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&ul=en-us&de=UTF-8&dt=Opportunistic%20Trader&sd=24-bit&sr=1280x1024&vp=1268x898&je=0&_u=YEBAAEABAAAAACAAI~&jid=1756843756&gjid=79139511&cid=62626799.1671129355&tid=UA-153154769-3&_gid=809743113.1671129355&_r=1>m=2wgbu0KLPP5K7&z=261094079
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j98&aip=1&a=1291254992&t=pageview&_s=1&dl=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&ul=en-us&de=UTF-8&dt=Opportunistic%20Trader&sd=24-bit&sr=1280x1024&vp=1268x898&je=0&_u=YEBAAEABAAAAACAAI~&jid=1756843756&gjid=79139511&cid=62626799.1671129355&tid=UA-153154769-3&_gid=809743113.1671129355&_r=1>m=2wgbu0KLPP5K7&z=261094079 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://secure.opportunistictrader.com
date: Thu, 15 Dec 2022 18:35:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&autoplay=false&ads_enabled=false&usage=thumbnails!1.2.3&usage=lrLoaded!&usage=inpage-embed&event=player_load&time=1671129354263&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=1671129352586&qos.performance.timing.loadEventStart=1671129352586&qos.performance.timing.domComplete=1671129352586&qos.performance.timing.domContentLoadedEventEnd=1671129352429&qos.performance.timing.domContentLoadedEventStart=1671129352427&qos.performance.timing.domInteractive=1671129351603&qos.performance.timing.domLoading=1671129351074&qos.performance.timing.responseEnd=1671129351063&qos.performance.timing.responseStart=1671129351063&qos.performance.timing.requestStart=1671129350571&qos.performance.timing.secureConnectionStart=1671129350467&qos.performance.timing.connectEnd=1671129350570&qos.performance.timing.connectStart=1671129350464&qos.performance.timing.domainLookupEnd=1671129350464&qos.performance.timing.domainLookupStart=1671129350458&qos.performance.timing.fetchStart=1671129350454&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1671129350129&qos.player.dimensions=%5B%5B1671129354263%2C%220x0%22%2C%22800x450%22%5D%5D&qos.player.pixelratio=%5B%5B1671129354263%2C1%5D%5D&qos.player.screendimensions=%5B%5B1671129354263%2C%221280x1024%22%5D%5D&seq=2
200 OK 35 B URL HTTP/2 metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&autoplay=false&ads_enabled=false&usage=thumbnails!1.2.3&usage=lrLoaded!&usage=inpage-embed&event=player_load&time=1671129354263&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=1671129352586&qos.performance.timing.loadEventStart=1671129352586&qos.performance.timing.domComplete=1671129352586&qos.performance.timing.domContentLoadedEventEnd=1671129352429&qos.performance.timing.domContentLoadedEventStart=1671129352427&qos.performance.timing.domInteractive=1671129351603&qos.performance.timing.domLoading=1671129351074&qos.performance.timing.responseEnd=1671129351063&qos.performance.timing.responseStart=1671129351063&qos.performance.timing.requestStart=1671129350571&qos.performance.timing.secureConnectionStart=1671129350467&qos.performance.timing.connectEnd=1671129350570&qos.performance.timing.connectStart=1671129350464&qos.performance.timing.domainLookupEnd=1671129350464&qos.performance.timing.domainLookupStart=1671129350458&qos.performance.timing.fetchStart=1671129350454&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1671129350129&qos.player.dimensions=%5B%5B1671129354263%2C%220x0%22%2C%22800x450%22%5D%5D&qos.player.pixelratio=%5B%5B1671129354263%2C1%5D%5D&qos.player.screendimensions=%5B%5B1671129354263%2C%221280x1024%22%5D%5D&seq=2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&autoplay=false&ads_enabled=false&usage=thumbnails!1.2.3&usage=lrLoaded!&usage=inpage-embed&event=player_load&time=1671129354263&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=1671129352586&qos.performance.timing.loadEventStart=1671129352586&qos.performance.timing.domComplete=1671129352586&qos.performance.timing.domContentLoadedEventEnd=1671129352429&qos.performance.timing.domContentLoadedEventStart=1671129352427&qos.performance.timing.domInteractive=1671129351603&qos.performance.timing.domLoading=1671129351074&qos.performance.timing.responseEnd=1671129351063&qos.performance.timing.responseStart=1671129351063&qos.performance.timing.requestStart=1671129350571&qos.performance.timing.secureConnectionStart=1671129350467&qos.performance.timing.connectEnd=1671129350570&qos.performance.timing.connectStart=1671129350464&qos.performance.timing.domainLookupEnd=1671129350464&qos.performance.timing.domainLookupStart=1671129350458&qos.performance.timing.fetchStart=1671129350454&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1671129350129&qos.player.dimensions=%5B%5B1671129354263%2C%220x0%22%2C%22800x450%22%5D%5D&qos.player.pixelratio=%5B%5B1671129354263%2C1%5D%5D&qos.player.screendimensions=%5B%5B1671129354263%2C%221280x1024%22%5D%5D&seq=2 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
date: Thu, 15 Dec 2022 18:35:58 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/10969811355/?random=1671129354300&cv=11&fst=1671129354300&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&auid=983736710.1671129354&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 926 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10969811355/?random=1671129354300&cv=11&fst=1671129354300&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&auid=983736710.1671129354&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2015), with no line terminators
Hash be24735e1bd25db226c4f601f49c64ed
9444e47d6e6ff5c3e114f2eedceb86d81f2cc7c7
fe285acc3001753db2eb94c3fa300a9df803de609162c33561493a081858ce17
GET /pagead/viewthroughconversion/10969811355/?random=1671129354300&cv=11&fst=1671129354300&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&auid=983736710.1671129354&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Dec 2022 18:35:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 926
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Dec-2022 18:50:58 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sslwidget.criteo.com/event?a=98755&v=5.12.3&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvp%26p%3D1&p2=e%3Ddis&adce=1&bundle=Y7mxb19iRSUyRnVza29IanFacUJMdjN0V2hhMmRaNEx5djhaSU1DZW9wTUpWajJkYUpPZTlNOVlEb0Fmb2JJSTZWRkdYYlBVdzRUWmJZcUhRWXlVcVc5SHdFQnNLalZNVjVVN09Iek5nYiUyRm0lMkY1TSUyRlglMkY3VWdQVkFIcFQwYW0wYUQwTWtxMTVBcWFXJTJGTXNBMDNNMTJoU0Q1dWZOcVElM0QlM0Q&tld=opportunistictrader.com&fu=https%253A%252F%252Fsecure.opportunistictrader.com%252F%253Fcid%253DMKT654530%2526eid%253DMKT703176%2526assetId%253DAST253490%2526page%253D1&dtycbr=69997
302 Found 0 B URL HTTP/2 sslwidget.criteo.com/event?a=98755&v=5.12.3&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvp%26p%3D1&p2=e%3Ddis&adce=1&bundle=Y7mxb19iRSUyRnVza29IanFacUJMdjN0V2hhMmRaNEx5djhaSU1DZW9wTUpWajJkYUpPZTlNOVlEb0Fmb2JJSTZWRkdYYlBVdzRUWmJZcUhRWXlVcVc5SHdFQnNLalZNVjVVN09Iek5nYiUyRm0lMkY1TSUyRlglMkY3VWdQVkFIcFQwYW0wYUQwTWtxMTVBcWFXJTJGTXNBMDNNMTJoU0Q1dWZOcVElM0QlM0Q&tld=opportunistictrader.com&fu=https%253A%252F%252Fsecure.opportunistictrader.com%252F%253Fcid%253DMKT654530%2526eid%253DMKT703176%2526assetId%253DAST253490%2526page%253D1&dtycbr=69997
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event?a=98755&v=5.12.3&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvp%26p%3D1&p2=e%3Ddis&adce=1&bundle=Y7mxb19iRSUyRnVza29IanFacUJMdjN0V2hhMmRaNEx5djhaSU1DZW9wTUpWajJkYUpPZTlNOVlEb0Fmb2JJSTZWRkdYYlBVdzRUWmJZcUhRWXlVcVc5SHdFQnNLalZNVjVVN09Iek5nYiUyRm0lMkY1TSUyRlglMkY3VWdQVkFIcFQwYW0wYUQwTWtxMTVBcWFXJTJGTXNBMDNNMTJoU0Q1dWZOcVElM0QlM0Q&tld=opportunistictrader.com&fu=https%253A%252F%252Fsecure.opportunistictrader.com%252F%253Fcid%253DMKT654530%2526eid%253DMKT703176%2526assetId%253DAST253490%2526page%253D1&dtycbr=69997 HTTP/1.1
Host: sslwidget.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 15 Dec 2022 18:35:57 GMT
server: Kestrel
content-length: 0
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: 0
location: https://widget.us.criteo.com/event?a=98755&v=5.12.3&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvp%26p%3D1&p2=e%3Ddis&adce=1&bundle=Y7mxb19iRSUyRnVza29IanFacUJMdjN0V2hhMmRaNEx5djhaSU1DZW9wTUpWajJkYUpPZTlNOVlEb0Fmb2JJSTZWRkdYYlBVdzRUWmJZcUhRWXlVcVc5SHdFQnNLalZNVjVVN09Iek5nYiUyRm0lMkY1TSUyRlglMkY3VWdQVkFIcFQwYW0wYUQwTWtxMTVBcWFXJTJGTXNBMDNNMTJoU0Q1dWZOcVElM0QlM0Q&tld=opportunistictrader.com&fu=https%253A%252F%252Fsecure.opportunistictrader.com%252F%253Fcid%253DMKT654530%2526eid%253DMKT703176%2526assetId%253DAST253490%2526page%253D1&dtycbr=69997
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
server-processing-duration-in-ticks: 7092743
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5102072647001%2Fvideos%2F6310329510112&time=1671129354156&autoplay=false&seq=1
200 OK 35 B URL HTTP/2 metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5102072647001%2Fvideos%2F6310329510112&time=1671129354156&autoplay=false&seq=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5102072647001%2Fvideos%2F6310329510112&time=1671129354156&autoplay=false&seq=1 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
date: Thu, 15 Dec 2022 18:35:58 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5102072647001%2Fvideos%2F6310329510112&time=1671129354344&response_time_ms=189&seq=3
200 OK 35 B URL HTTP/2 metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5102072647001%2Fvideos%2F6310329510112&time=1671129354344&response_time_ms=189&seq=3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5102072647001%2Fvideos%2F6310329510112&time=1671129354344&response_time_ms=189&seq=3 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
date: Thu, 15 Dec 2022 18:35:58 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&autoplay=false&ads_enabled=false&time=1671129354450&event=video_impression&video=6310329510112&video_name=2208_OTT_VSL_Offer-3(29)_no-Sizzle&custom_fields=&video_data=&video_ads_supported=true&&video_duration=2438&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F5102072647001%2Fc1a7f674-2136-4a75-b4e0-a128d3879e67%2F10s%2Fmaster.m3u8%3Ffastly_token%3DNjM5YmM3ZjZfOGI0YWFjMWNjZjRiOWNiNDExNjljOWFlNDg4MmZiMTU1ZDUzZDQ1NjU3NGU3MzBmYjVkZjNmMzA1YWQ1YzMwOA%253D%253D&preload=auto&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=4_0
200 OK 35 B URL HTTP/2 metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&autoplay=false&ads_enabled=false&time=1671129354450&event=video_impression&video=6310329510112&video_name=2208_OTT_VSL_Offer-3(29)_no-Sizzle&custom_fields=&video_data=&video_ads_supported=true&&video_duration=2438&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F5102072647001%2Fc1a7f674-2136-4a75-b4e0-a128d3879e67%2F10s%2Fmaster.m3u8%3Ffastly_token%3DNjM5YmM3ZjZfOGI0YWFjMWNjZjRiOWNiNDExNjljOWFlNDg4MmZiMTU1ZDUzZDQ1NjU3NGU3MzBmYjVkZjNmMzA1YWQ1YzMwOA%253D%253D&preload=auto&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=4_0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&autoplay=false&ads_enabled=false&time=1671129354450&event=video_impression&video=6310329510112&video_name=2208_OTT_VSL_Offer-3(29)_no-Sizzle&custom_fields=&video_data=&video_ads_supported=true&&video_duration=2438&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F5102072647001%2Fc1a7f674-2136-4a75-b4e0-a128d3879e67%2F10s%2Fmaster.m3u8%3Ffastly_token%3DNjM5YmM3ZjZfOGI0YWFjMWNjZjRiOWNiNDExNjljOWFlNDg4MmZiMTU1ZDUzZDQ1NjU3NGU3MzBmYjVkZjNmMzA1YWQ1YzMwOA%253D%253D&preload=auto&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=4_0 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
date: Thu, 15 Dec 2022 18:35:58 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s3.amazonaws.com/marketingassets.cloudsna.com/prod/images/legacy/Opportunistic+Trader/2006Favicon.png
200 OK 8.3 kB URL HTTP/1.1 s3.amazonaws.com/marketingassets.cloudsna.com/prod/images/legacy/Opportunistic+Trader/2006Favicon.png
IP
File type PNG image data, 72 x 68, 8-bit/color RGBA, non-interlaced\012- data
Hash e3ef01f98a6bdc7b40720cc57796a696
f9f2bd8db00d32943bbc102d62ff360fef9e4e8a
a8f81af68aac76fdd07f58eae90952b2376059b36a3386897ccdace44e1f906d
GET /marketingassets.cloudsna.com/prod/images/legacy/Opportunistic+Trader/2006Favicon.png HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 9B/f1jRzKa3xUVx8SZ3SsnxVGfCcfuzMtKIPUwtgjQtCx8AxZYF2Yz8Ey//w/n6c/+i8Rx1W2J8=
x-amz-request-id: 52NDPP5E5S8DVBMH
Date: Thu, 15 Dec 2022 18:35:59 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Mon, 18 Nov 2019 19:48:59 GMT
ETag: "e3ef01f98a6bdc7b40720cc57796a696"
x-amz-version-id: DIIqERZWVAZ_f32oqsp5gQamd.0xoqMt
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 8320
googleads.g.doubleclick.net/pagead/viewthroughconversion/753664851/?random=1671129355252&cv=11&fst=1671129355252&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&auid=983736710.1671129354&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&rfmt=3&fmt=4
200 OK 941 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/753664851/?random=1671129355252&cv=11&fst=1671129355252&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&auid=983736710.1671129354&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2063), with no line terminators
Hash 13730dd7c920abe4132e7b7908db177b
b82a866b334a4b785f6a778de42ce94bf8b669b2
f111d012334486921eb3c5385a3c432b87cdbf84d77f9b8ea8b0f0cd3c63d927
GET /pagead/viewthroughconversion/753664851/?random=1671129355252&cv=11&fst=1671129355252&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&auid=983736710.1671129354&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Dec 2022 18:35:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 941
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Dec-2022 18:50:58 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&event=player_init&time=1671129354149&autoplay=false&seq=0
200 OK 35 B URL HTTP/2 metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&event=player_init&time=1671129354149&autoplay=false&seq=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /v2/tracker?domain=videocloud&platform=video-js&session=304c4e09912a056078ec7521&account=5102072647001&destination=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&platform_version=6.64.2&player=players.brightcove.com%2F5102072647001%2FPYvSECOe2_default&player_name=NEW%20-%20Marketing%20Player%20-%20No%20autoplay&source=&event=player_init&time=1671129354149&autoplay=false&seq=0 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
date: Thu, 15 Dec 2022 18:35:58 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 59d4744b8c38f1a993c7948e83df2f66
973cb780e4496e843d53ef60afc79043e6eb568c
58929f8c9b924e272d783ac3c7b09217a4f764b210076efef1559e62f2f49efc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/T3YIWS_d9Is
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/T3YIWS_d9Is
IP
Hash 3d68d58ec187ba5b54a6d11ee3943ae1
ed04c6db081ee33cc961db8429419976c0b04f61
ead1d01879f28ebd5604d13a19ac12ca02e847adcd4696223c317e62ccf58738
POST /s/gts1d4/T3YIWS_d9Is HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=e354cdd9-99b1-424e-a233-268b9fa277ba&batch_time=1671129355463
403 Forbidden 155 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=e354cdd9-99b1-424e-a233-268b9fa277ba&batch_time=1671129355463
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8bcd4e0e786b1833c08e0b562868d187
fbf821cb08747f31196812c9d7f1e7d521a1a00d
e43997f2c13e3838931051576eddd385b168f295ce13d5da2f30238bd7f452b4
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=e354cdd9-99b1-424e-a233-268b9fa277ba&batch_time=1671129355463 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16115
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Thu, 15 Dec 2022 18:35:58 GMT
content-type: application/json
content-length: 155
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=148026289&Ver=2&mid=b713c019-4d41-449a-b938-b60491f8c45b&sid=4f9c1c107ca711ed9875af34f8a581da&vid=4f9c44407ca711ed9d581939723d6cd7&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Opportunistic%20Trader&p=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&r=<=2457&evt=pageLoad&sv=1&rn=457355
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=148026289&Ver=2&mid=b713c019-4d41-449a-b938-b60491f8c45b&sid=4f9c1c107ca711ed9875af34f8a581da&vid=4f9c44407ca711ed9d581939723d6cd7&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Opportunistic%20Trader&p=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&r=<=2457&evt=pageLoad&sv=1&rn=457355
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=148026289&Ver=2&mid=b713c019-4d41-449a-b938-b60491f8c45b&sid=4f9c1c107ca711ed9875af34f8a581da&vid=4f9c44407ca711ed9d581939723d6cd7&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Opportunistic%20Trader&p=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&r=<=2457&evt=pageLoad&sv=1&rn=457355 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0FE6DD30B37867822130CF4BB22F6682; domain=.bing.com; expires=Tue, 09-Jan-2024 18:35:58 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5843B3F885E140DFBF878F2018142E6A Ref B: OSL30EDGE0421 Ref C: 2022-12-15T18:35:58Z
date: Thu, 15 Dec 2022 18:35:57 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9ec381d07d75f411d93d31b527e071bd
ef490b856d13950f9f6b7a0d3415f102a35835ec
ba0d985e47388f66167391436cd452ae5149448301a42d5a6a1a2f90ed8914a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d8728b37979eb7ff6c3ad5a96091d4ce
988859950d480caa2fe23e14d5f29df17827dc6d
a33db1e064a2e10cb01ecc3184b4f65f134f93a10647c67602bfcea6d0c56740
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9ec381d07d75f411d93d31b527e071bd
ef490b856d13950f9f6b7a0d3415f102a35835ec
ba0d985e47388f66167391436cd452ae5149448301a42d5a6a1a2f90ed8914a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a29a4c6b4ba43b8d4b85a33b27279a06
a9177ccbe185ee26f4e92115a4bc5831b64d050b
c2409b47733ef77aeaf73719b0c5fd6294c50c5e579f6ab79f71503efad63e6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-user-list/10969811355/?random=1671129354300&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3580565010&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10969811355/?random=1671129354300&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3580565010&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10969811355/?random=1671129354300&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3580565010&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Dec 2022 18:35:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/10969811355/?random=1671129354300&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3580565010&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/10969811355/?random=1671129354300&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3580565010&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10969811355/?random=1671129354300&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3580565010&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Dec 2022 18:35:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/753664851/?random=1671129355252&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&fmt=3&is_vtc=1&random=3838970865&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/753664851/?random=1671129355252&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&fmt=3&is_vtc=1&random=3838970865&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/753664851/?random=1671129355252&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&fmt=3&is_vtc=1&random=3838970865&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Dec 2022 18:35:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/10828766220/?random=1671129355518&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4082879818&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/10828766220/?random=1671129355518&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4082879818&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10828766220/?random=1671129355518&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4082879818&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Dec 2022 18:35:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/753664851/?random=1671129355252&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&fmt=3&is_vtc=1&random=3838970865&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/753664851/?random=1671129355252&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&fmt=3&is_vtc=1&random=3838970865&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/753664851/?random=1671129355252&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&fmt=3&is_vtc=1&random=3838970865&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Dec 2022 18:35:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/10828766220/?random=1671129355518&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4082879818&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/10828766220/?random=1671129355518&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4082879818&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10828766220/?random=1671129355518&cv=11&fst=1671127200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1&tiba=Opportunistic%20Trader&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4082879818&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 15 Dec 2022 18:35:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/p/action/148026289.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/148026289.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/148026289.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=331FD9EBBF0D68BC0A9BCB90BE5A6915; domain=.bing.com; expires=Tue, 09-Jan-2024 18:35:58 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 67909DFEE7424FE7AF2FD8FAD3C9BF6D Ref B: OSL30EDGE0421 Ref C: 2022-12-15T18:35:58Z
date: Thu, 15 Dec 2022 18:35:58 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9ec381d07d75f411d93d31b527e071bd
ef490b856d13950f9f6b7a0d3415f102a35835ec
ba0d985e47388f66167391436cd452ae5149448301a42d5a6a1a2f90ed8914a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 500d7838b7582b456b8025ffe03ac9a8
ba64ec0d9ae36361848bc1be73a99e7c38575271
0da1844c4988d6497821f944b47dd19158be73f10deac19945ebdd9c18927485
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=3d7ff43e-c0c2-42ac-b4d7-3e463a333fd9&batch_time=1671129355708
403 Forbidden 155 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=3d7ff43e-c0c2-42ac-b4d7-3e463a333fd9&batch_time=1671129355708
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 57a67b16e29232b084790f89512051e2
fd9016d3d6a8d6566d9997d73ec97c7ccdde0030
2cb6add5bf3993e8c24e6d3caf4527f5e56d15a7e6fa6a039cffe64bfb63c26c
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=3d7ff43e-c0c2-42ac-b4d7-3e463a333fd9&batch_time=1671129355708 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15671
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Thu, 15 Dec 2022 18:35:58 GMT
content-type: application/json
content-length: 155
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=f4516c17-33e5-493a-93ec-f9ad233b4027&batch_time=1671129355861
403 Forbidden 155 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=f4516c17-33e5-493a-93ec-f9ad233b4027&batch_time=1671129355861
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 11b6dd5dc80547adf042f91cf55b74aa
864fec3c84ddad2c413303aad31f2b3ee8eec249
15309c64b752c8f6fd13de68e6a8dd56b0b6b9b683ceb3d667204061e2c37287
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.23.3%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.23.3&dd-evp-origin=browser&dd-request-id=f4516c17-33e5-493a-93ec-f9ad233b4027&batch_time=1671129355861 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16335
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
date: Thu, 15 Dec 2022 18:35:58 GMT
content-type: application/json
content-length: 155
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 665c902e15cd72d05e51a55ac2c8d6ca
e0462b54a702595264c914fb3b3d894e6a85b113
18a199c27f8b24cc3c215415ebaab92dd066877a1b33984714620c3bd4512025
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4654
Cache-Control: max-age=115250
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Etag: "639a7612-139"
Expires: Sat, 17 Dec 2022 02:36:48 GMT
Last-Modified: Thu, 15 Dec 2022 01:19:14 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 313
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9c67c66f222213b9531baed967bc7861
ef024760163f0f378a48ba309d850623bf7e0ccf
d4c8a473850138f6254bcb10710360e05307e4b212c7ea903449efdcd8ceaeba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D4C8A473850138F6254BCB10710360E05307E4B212C7EA903449EFDCD8CEAEBA"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2520
Expires: Thu, 15 Dec 2022 19:17:59 GMT
Date: Thu, 15 Dec 2022 18:35:59 GMT
Connection: keep-alive
widget.us.criteo.com/event?a=98755&v=5.12.3&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvp%26p%3D1&p2=e%3Ddis&adce=1&bundle=Y7mxb19iRSUyRnVza29IanFacUJMdjN0V2hhMmRaNEx5djhaSU1DZW9wTUpWajJkYUpPZTlNOVlEb0Fmb2JJSTZWRkdYYlBVdzRUWmJZcUhRWXlVcVc5SHdFQnNLalZNVjVVN09Iek5nYiUyRm0lMkY1TSUyRlglMkY3VWdQVkFIcFQwYW0wYUQwTWtxMTVBcWFXJTJGTXNBMDNNMTJoU0Q1dWZOcVElM0QlM0Q&tld=opportunistictrader.com&fu=https%253A%252F%252Fsecure.opportunistictrader.com%252F%253Fcid%253DMKT654530%2526eid%253DMKT703176%2526assetId%253DAST253490%2526page%253D1&dtycbr=69997
200 OK 3.8 kB URL HTTP/2 widget.us.criteo.com/event?a=98755&v=5.12.3&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvp%26p%3D1&p2=e%3Ddis&adce=1&bundle=Y7mxb19iRSUyRnVza29IanFacUJMdjN0V2hhMmRaNEx5djhaSU1DZW9wTUpWajJkYUpPZTlNOVlEb0Fmb2JJSTZWRkdYYlBVdzRUWmJZcUhRWXlVcVc5SHdFQnNLalZNVjVVN09Iek5nYiUyRm0lMkY1TSUyRlglMkY3VWdQVkFIcFQwYW0wYUQwTWtxMTVBcWFXJTJGTXNBMDNNMTJoU0Q1dWZOcVElM0QlM0Q&tld=opportunistictrader.com&fu=https%253A%252F%252Fsecure.opportunistictrader.com%252F%253Fcid%253DMKT654530%2526eid%253DMKT703176%2526assetId%253DAST253490%2526page%253D1&dtycbr=69997
IP
Hash 99a3d5ac12bda940a0473f74737852cb
1e09b71063deeb1328942c7de4a0ca3b58678af6
630cd5faa16c288d2d0ac4c8cff08496b379840ce45579b29b4e770a8d093c94
GET /event?a=98755&v=5.12.3&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvp%26p%3D1&p2=e%3Ddis&adce=1&bundle=Y7mxb19iRSUyRnVza29IanFacUJMdjN0V2hhMmRaNEx5djhaSU1DZW9wTUpWajJkYUpPZTlNOVlEb0Fmb2JJSTZWRkdYYlBVdzRUWmJZcUhRWXlVcVc5SHdFQnNLalZNVjVVN09Iek5nYiUyRm0lMkY1TSUyRlglMkY3VWdQVkFIcFQwYW0wYUQwTWtxMTVBcWFXJTJGTXNBMDNNMTJoU0Q1dWZOcVElM0QlM0Q&tld=opportunistictrader.com&fu=https%253A%252F%252Fsecure.opportunistictrader.com%252F%253Fcid%253DMKT654530%2526eid%253DMKT703176%2526assetId%253DAST253490%2526page%253D1&dtycbr=69997 HTTP/1.1
Host: widget.us.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.opportunistictrader.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:58 GMT
content-type: application/x-javascript
server: Kestrel
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
p3p: NON DSP COR CURa PSA PSD OUR BUS NAV STA
timing-allow-origin: *
server-processing-duration-in-ticks: 21389374
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9c67c66f222213b9531baed967bc7861
ef024760163f0f378a48ba309d850623bf7e0ccf
d4c8a473850138f6254bcb10710360e05307e4b212c7ea903449efdcd8ceaeba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D4C8A473850138F6254BCB10710360E05307E4B212C7EA903449EFDCD8CEAEBA"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2520
Expires: Thu, 15 Dec 2022 19:17:59 GMT
Date: Thu, 15 Dec 2022 18:35:59 GMT
Connection: keep-alive
c.lytics.io/api/personalize/6754fc8577b0e933befa552acea53d64/user/_uid/ce58b857-7d2b-45c3-8b4d-e1cc2bc33190?segments=true&mergestate=true&state=%7B%22_uid%22%3A%22ce58b857-7d2b-45c3-8b4d-e1cc2bc33190%22%2C%22_sesstart%22%3A%221%22%2C%22_tz%22%3A0%2C%22_ul%22%3A%22en-US%22%2C%22_sz%22%3A%221280x1024%22%2C%22_nmob%22%3A%22t%22%2C%22_device%22%3A%22desktop%22%2C%22url%22%3A%22secure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1%22%2C%22_v%22%3A%223.0.29%22%7D&ts=1671129353768&callback=u_627633838602195100
200 OK 33 kB URL HTTP/2 c.lytics.io/api/personalize/6754fc8577b0e933befa552acea53d64/user/_uid/ce58b857-7d2b-45c3-8b4d-e1cc2bc33190?segments=true&mergestate=true&state=%7B%22_uid%22%3A%22ce58b857-7d2b-45c3-8b4d-e1cc2bc33190%22%2C%22_sesstart%22%3A%221%22%2C%22_tz%22%3A0%2C%22_ul%22%3A%22en-US%22%2C%22_sz%22%3A%221280x1024%22%2C%22_nmob%22%3A%22t%22%2C%22_device%22%3A%22desktop%22%2C%22url%22%3A%22secure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1%22%2C%22_v%22%3A%223.0.29%22%7D&ts=1671129353768&callback=u_627633838602195100
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash eef4e0dfe03988e25cc84a4c27c7e9ab
af13fce61588682ae93496afae3a6c0263128304
1a6b3f751ff23f4632073a62e81219a7b4ad327ded3714d3081628aa1d43c4c3
GET /api/personalize/6754fc8577b0e933befa552acea53d64/user/_uid/ce58b857-7d2b-45c3-8b4d-e1cc2bc33190?segments=true&mergestate=true&state=%7B%22_uid%22%3A%22ce58b857-7d2b-45c3-8b4d-e1cc2bc33190%22%2C%22_sesstart%22%3A%221%22%2C%22_tz%22%3A0%2C%22_ul%22%3A%22en-US%22%2C%22_sz%22%3A%221280x1024%22%2C%22_nmob%22%3A%22t%22%2C%22_device%22%3A%22desktop%22%2C%22url%22%3A%22secure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1%22%2C%22_v%22%3A%223.0.29%22%7D&ts=1671129353768&callback=u_627633838602195100 HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/json
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Cookie, *
access-control-allow-methods: GET
access-control-allow-origin:
strict-transport-security: max-age=63072000;
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PilLl1nxRXASas%2FM6ouCmTDi58fshVZ%2FGmFqCsmXtLfG2GJ2GbKfv711KEbKK0qYCtsul8iq%2BJ%2Fp8pIxERwIRFnWCjhwDG1ykt3PYHM7baDOo4JMGRONeDvWMlus"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77a1482e5eb0b4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40
302 Found 0 B URL HTTP/2 gum.criteo.com/sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 15 Dec 2022 18:35:58 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://dpm.demdex.net/ibs:dpid=28645&dpuuid=
server-processing-duration-in-ticks: 411603
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
contextual.media.net/cksync.php?cs=3&type=crt&ovsid=k-VcbG7voZV7PY1XnKl0Nwv1mPWxUYRyrGzi07hA
200 OK 45 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=crt&ovsid=k-VcbG7voZV7PY1XnKl0Nwv1mPWxUYRyrGzi07hA
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash 99cceceaed4d575484b69ddaf9ed66a7
1e3a3b15296b585833a22d987a387aa58aa1642d
832f63f4187160c195b04f1911c2e623a75e805f4b23abb9b0bea214b4283a43
GET /cksync.php?cs=3&type=crt&ovsid=k-VcbG7voZV7PY1XnKl0Nwv1mPWxUYRyrGzi07hA HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
content-length: 45
content-type: image/gif
set-cookie: visitor-id=3141309593580268000V10; Expires=Fri, 15 Dec 2023 18:35:59 GMT; domain=.media.net; Path=/;
data-c-ts=1671129359;Expires=Sat, 14 Jan 2023 18:35:59 GMT;path=/;domain=.media.net;
data-c=k-VcbG7voZV7PY1XnKl0Nwv1mPWxUYRyrGzi07hA~~3;Expires=Sat, 14 Jan 2023 18:35:59 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Thu, 15 Dec 2022 18:35:59 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 15 Dec 2022 18:35:59 GMT
X-Firefox-Spdy: h2
r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-E0tG5voZV7PY1XnKl0Nwv1mPWxVCLTb99B-rfQ
302 Found 0 B URL HTTP/2 r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-E0tG5voZV7PY1XnKl0Nwv1mPWxVCLTb99B-rfQ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=20&external_user_id=k-E0tG5voZV7PY1XnKl0Nwv1mPWxVCLTb99B-rfQ HTTP/1.1
Host: r.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 15 Dec 2022 18:35:59 GMT
content-length: 0
location: /rum?cm_dsp_id=20&external_user_id=k-E0tG5voZV7PY1XnKl0Nwv1mPWxVCLTb99B-rfQ&C=1
cf-ray: 77a1483ec8deb517-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y5tpD5uXFN5VSKbN-GrGiwAA; Path=/; Domain=casalemedia.com; Expires=Fri, 15 Dec 2023 18:35:59 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=707; Path=/; Domain=casalemedia.com; Expires=Wed, 15 Mar 2023 18:35:59 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=707; Path=/; Domain=casalemedia.com; Expires=Wed, 15 Mar 2023 18:35:59 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s9O%2FPwoR8DQjDfnWOJ%2FOVwMRJI0%2FOs4y8Fy98NJ0oo0Yl%2F7Hh038tqh5dR6MNKLtU1YkmNCqUsWRTctY75%2F%2FZ0IiSH%2BjcBUqjP0fdXL%2BIiW3xk4PHtmgTT3kGV1RbJFyek4Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-9ko6i_oZV7PY1XnKl0Nwv1mPWxUHue6UbXuEcg&google_cm&google_hm=ay05a282aV9vWlY3UFkxWG5LbDBOd3YxbVBXeFVIdWU2VWJYdUVjZw
302 Found 440 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-9ko6i_oZV7PY1XnKl0Nwv1mPWxUHue6UbXuEcg&google_cm&google_hm=ay05a282aV9vWlY3UFkxWG5LbDBOd3YxbVBXeFVIdWU2VWJYdUVjZw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 958163d675b3a9ddc1103eeb3fc09576
8fc251e42cd3a9e13dd392fcd3bce4dda70577fa
2d01e5577af8ad382d9e5f3da969dce5c9888549cae136da161ed5aca90668b1
GET /pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-9ko6i_oZV7PY1XnKl0Nwv1mPWxUHue6UbXuEcg&google_cm&google_hm=ay05a282aV9vWlY3UFkxWG5LbDBOd3YxbVBXeFVIdWU2VWJYdUVjZw HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-9ko6i_oZV7PY1XnKl0Nwv1mPWxUHue6UbXuEcg&google_cm=&google_hm=ay05a282aV9vWlY3UFkxWG5LbDBOd3YxbVBXeFVIdWU2VWJYdUVjZw&google_tc=
date: Thu, 15 Dec 2022 18:35:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 440
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Dec-2022 18:50:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
criteo-sync.teads.tv/um?eid=80&uid=k-Qzmq1voZV7PY1XnKl0Nwv1mPWxUikY9VrYV4rg
200 OK 23 B URL HTTP/2 criteo-sync.teads.tv/um?eid=80&uid=k-Qzmq1voZV7PY1XnKl0Nwv1mPWxUikY9VrYV4rg
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash da5b449fff36752a93779fa4067cd2eb
71a96eea77f21ab5f1819b96c4cedd5cd34476ca
328e90a318268aea96180cc31666ae6d6f79d90d078c123bc3d98ee08a192fb7
GET /um?eid=80&uid=k-Qzmq1voZV7PY1XnKl0Nwv1mPWxUikY9VrYV4rg HTTP/1.1
Host: criteo-sync.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
server: akka-http/10.2.9
content-length: 23
expires: Thu, 15 Dec 2022 18:35:59 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 15 Dec 2022 18:35:59 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash aee1c9b05eba6c9345ed82667797bc38
ead49b26dfcd9c115fbaf354699ed456119c2ab9
54f5e8449857c8a3836e3ba1162bf79591942c384878c71b8eceb81fd8d7c602
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 250
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:59 GMT
Last-Modified: Thu, 15 Dec 2022 18:31:49 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-9ko6i_oZV7PY1XnKl0Nwv1mPWxUHue6UbXuEcg&google_cm=&google_hm=ay05a282aV9vWlY3UFkxWG5LbDBOd3YxbVBXeFVIdWU2VWJYdUVjZw&google_tc=
302 Found 332 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-9ko6i_oZV7PY1XnKl0Nwv1mPWxUHue6UbXuEcg&google_cm=&google_hm=ay05a282aV9vWlY3UFkxWG5LbDBOd3YxbVBXeFVIdWU2VWJYdUVjZw&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 6da01091a5928e6db1afca58be8e22e0
63fdd7a82b761564e9424fe00c4be9aeaf942484
131d7620ba8a2d72ea28d8303a1a6144bdb7f804aa4338d48478921ca8766aa5
GET /pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-9ko6i_oZV7PY1XnKl0Nwv1mPWxUHue6UbXuEcg&google_cm=&google_hm=ay05a282aV9vWlY3UFkxWG5LbDBOd3YxbVBXeFVIdWU2VWJYdUVjZw&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-9ko6i_oZV7PY1XnKl0Nwv1mPWxUHue6UbXuEcg&google_error=3
date: Thu, 15 Dec 2022 18:35:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 332
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 15 Dec 2022 18:35:59 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID
AN-X-Request-Uuid: 32c59ec8-a4ba-4f15-9ba0-0655c68eb11a
Set-Cookie: uuid2=8876877625796439534; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 15-Mar-2023 18:35:59 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-E0tG5voZV7PY1XnKl0Nwv1mPWxVCLTb99B-rfQ&C=1
200 OK 43 B URL HTTP/2 r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-E0tG5voZV7PY1XnKl0Nwv1mPWxVCLTb99B-rfQ&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=20&external_user_id=k-E0tG5voZV7PY1XnKl0Nwv1mPWxVCLTb99B-rfQ&C=1 HTTP/1.1
Host: r.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:59 GMT
content-type: image/gif
content-length: 43
cf-ray: 77a1483f3961b517-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XXiPoj3siDlgoxNIP1qmCpJlrj9KfM4ksjwRS03%2Bkt7qfefyRMO4tjQsoFHCrThr6MJbJSf9ir4hjBvrkcLE2VeyoQoHQX5PcmYVJsw999zm3FhrAcpduGdw8YNUNMkbQ%2FBa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pixel.rubiconproject.com/tap.php?v=6434&nid=2149&put=k-A_M7HfoZV7PY1XnKl0Nwv1mPWxWi66IE6TPMlA&expires=30
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=6434&nid=2149&put=k-A_M7HfoZV7PY1XnKl0Nwv1mPWxWi66IE6TPMlA&expires=30
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=6434&nid=2149&put=k-A_M7HfoZV7PY1XnKl0Nwv1mPWxWi66IE6TPMlA&expires=30 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 693f17ec94b6fd0c82d03268b1ba23d6
Content-Type: image/gif
ocsp.sectigo.com/
200 OK 471 B IP
Hash 253d9da1f4d656a8cd734a11a1a6c8aa
572ca8fca3356c8c5f2c94ad4ae4dcc3e57f3f49
da7d8324505c3fca85da82e02830732efbb8ea3735252ab82e8a758913c9a634
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 18:35:59 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 13 Dec 2022 13:56:50 GMT
Expires: Tue, 20 Dec 2022 13:56:49 GMT
Etag: "572ca8fca3356c8c5f2c94ad4ae4dcc3e57f3f49"
Cache-Control: max-age=414649,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77a1483f5f4db505-OSL
x.bidswitch.net/sync?dsp_id=46&user_id=k-VCeI7_oZV7PY1XnKl0Nwv1mPWxVahGmS0btemw&expires=30
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=46&user_id=k-VCeI7_oZV7PY1XnKl0Nwv1mPWxVahGmS0btemw&expires=30
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=46&user_id=k-VCeI7_oZV7PY1XnKl0Nwv1mPWxVahGmS0btemw&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 15 Dec 2022 18:35:59 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=46&user_id=k-VCeI7_oZV7PY1XnKl0Nwv1mPWxVahGmS0btemw&expires=30
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=de14aa2a-f7ac-4b14-aa7c-9841aa0dede4; path=/; expires=Fri, 15-Dec-2023 18:35:59 GMT; domain=.bidswitch.net; samesite=none; secure
c=1671129359; path=/; expires=Fri, 15-Dec-2023 18:35:59 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1671129359; path=/; expires=Fri, 15-Dec-2023 18:35:59 GMT; domain=.bidswitch.net; samesite=none; secure
c=1671129359; path=/; expires=Fri, 15-Dec-2023 18:35:59 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2872fdfc3240667f88e7d80dc55a989e
323fbc1665ccf3ad61634b08d6fa6b738a6fc568
5be97710526b8ceba0e3342a53be2c7a6b3088bb590ec39e9d55df755e8cfc69
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6200
Cache-Control: max-age=166788
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:59 GMT
Etag: "639b395b-1d7"
Expires: Sat, 17 Dec 2022 16:55:47 GMT
Last-Modified: Thu, 15 Dec 2022 15:12:27 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
x.bidswitch.net/ul_cb/sync?dsp_id=46&user_id=k-VCeI7_oZV7PY1XnKl0Nwv1mPWxVahGmS0btemw&expires=30
200 OK 43 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=46&user_id=k-VCeI7_oZV7PY1XnKl0Nwv1mPWxVahGmS0btemw&expires=30
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=46&user_id=k-VCeI7_oZV7PY1XnKl0Nwv1mPWxVahGmS0btemw&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:59 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-kvBsRPoZV7PY1XnKl0Nwv1mPWxWCa9_zAXpcpg
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-kvBsRPoZV7PY1XnKl0Nwv1mPWxWCa9_zAXpcpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58301/sync?_origin=1&uid=k-kvBsRPoZV7PY1XnKl0Nwv1mPWxWCa9_zAXpcpg HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 15 Dec 2022 18:35:59 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-kvBsRPoZV7PY1XnKl0Nwv1mPWxWCa9_zAXpcpg&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBA9pm2MCEPruQTSF0i37q40EmPyTwJQFEgEBAQG6nGOlYwAAAAAA_eMAAA&S=AQAAAioLGwegIaYCc_h57OpP914; Expires=Sat, 16 Dec 2023 00:35:59 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 3c1d2799615be75f2cfbe50d02e86fdb
df033ae06394df25faaaa03ff33f0c4fe4a28bd3
2a3accc1c2880b37a9f525af5e0d4ab334911ea6c48d731e582f3084ea2f5f23
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 16
Cache-Control: max-age=163140
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:59 GMT
Etag: "639b4343-138"
Expires: Sat, 17 Dec 2022 15:54:59 GMT
Last-Modified: Thu, 15 Dec 2022 15:54:43 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 312
ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-kvBsRPoZV7PY1XnKl0Nwv1mPWxWCa9_zAXpcpg&verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-kvBsRPoZV7PY1XnKl0Nwv1mPWxWCa9_zAXpcpg&verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58301/sync?_origin=1&uid=k-kvBsRPoZV7PY1XnKl0Nwv1mPWxWCa9_zAXpcpg&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 15 Dec 2022 18:35:59 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBA9pm2MCEPK0779wyLVCWJB0vEMgIzsFEgEBAQG6nGOlYwAAAAAA_eMAAA&S=AQAAAoPzIghwitbY-PZzf-wWyyU; Expires=Sat, 16 Dec 2023 00:35:59 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k-tY7XNvoZV7PY1XnKl0Nwv1mPWxVmZJw4asZFnA
200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k-tY7XNvoZV7PY1XnKl0Nwv1mPWxVmZJw4asZFnA
IP
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?partnerid=79&partneruserid=k-tY7XNvoZV7PY1XnKl0Nwv1mPWxVmZJw4asZFnA HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Thu, 15 Dec 2022 18:35:58 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: pid=9158668930464201672; expires=Sun, 14 Jan 2024 18:35:59 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Sun, 14 Jan 2024 18:35:59 GMT; domain=smartadserver.com; path=/
csync=79:k-tY7XNvoZV7PY1XnKl0Nwv1mPWxVmZJw4asZFnA; expires=Fri, 15 Dec 2023 18:35:59 GMT; domain=smartadserver.com; path=/
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Thu, 15 Dec 2022 18:35:59 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=0
AN-X-Request-Uuid: a46bfd0d-5d32-4892-93fc-346d419a50ef
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 471 B IP
Hash 1ef1a9e196d29adefe3c60414d143efa
5e7c75f67dfc4c56879ca773f87b581269144872
51d0138d12b3dd9d3dee1b5bbab7db5a54d08ad52f4a158aa853a148deaa63cf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4862
Cache-Control: max-age=164385
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:59 GMT
Etag: "639b3532-1d7"
Expires: Sat, 17 Dec 2022 16:15:44 GMT
Last-Modified: Thu, 15 Dec 2022 14:54:42 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2fda433006cda6b32cc5a4691cedb1ad
99aaaa8cc86e693c56f5beee6ac122966c81d60e
45eed857c9b8a2c8424853394ad86ec5c68d47487f749c300d5da3a1d9a95ad6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=114427
Date: Thu, 15 Dec 2022 18:35:59 GMT
Etag: "639a6c3b-1d7"
Expires: Sat, 17 Dec 2022 02:23:06 GMT
Last-Modified: Thu, 15 Dec 2022 00:37:15 GMT
Server: ECS (nyb/1D12)
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DlUkkU9Rd1OZII0zS3_jRasjbDXPDlMWrztINGQcb7TNAMXL4xfXiA==
Age: 6351
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5dc7f6bba824fa65878e261ac085a0ae
9eb8410770b4491c4435faa13430417516c07d0d
3614678a4abe3e98f02534f42b626df5b2e20df115536b8a51c58fcafa733813
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Dec 2022 18:35:59 GMT
Last-Modified: Thu, 15 Dec 2022 18:23:23 GMT
Server: ECS (nyb/1D24)
X-Cache: Miss from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ToJHq0Mih_a9bwnhqeaHvd0RytutFmOsUrGoX2EonmJL5hR9-tvEOA==
Age: 756
cm.adform.net/pixel?adform_pid=15&adform_pc=k-cE2zqfoZV7PY1XnKl0Nwv1mPWxX-ubQE858pQA
200 OK 43 B URL HTTP/2 cm.adform.net/pixel?adform_pid=15&adform_pc=k-cE2zqfoZV7PY1XnKl0Nwv1mPWxX-ubQE858pQA
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /pixel?adform_pid=15&adform_pc=k-cE2zqfoZV7PY1XnKl0Nwv1mPWxX-ubQE858pQA HTTP/1.1
Host: cm.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 18:35:59 GMT
content-type: image/gif
content-length: 43
last-modified: Fri, 18 Nov 2022 16:49:04 GMT
etag: "6377b780-2b"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 02a178e9da200b54466d2e8fee1f1d06
23ee9fbafc4389e3153745caec147825bbe858fa
44c89c92032c83b5a5bfb748122eebdcf2b35309baf54df1aa49c20cf5d0ac5b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6227
Cache-Control: max-age=134092
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:59 GMT
Etag: "639ab989-1d7"
Expires: Sat, 17 Dec 2022 07:50:51 GMT
Last-Modified: Thu, 15 Dec 2022 06:07:05 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2f33cdaa4881cda78d4e5ac3568fa0cb
3f60b0e94c915725f960711afe360ddf7db5c3e5
636ab442d265a64f52c9ef9f5ce91cc4873a6f638af7a5ab8906c951ea0835c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "636AB442D265A64F52C9EF9F5CE91CC4873A6F638AF7A5AB8906C951EA0835C6"
Last-Modified: Thu, 15 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17900
Expires: Thu, 15 Dec 2022 23:34:19 GMT
Date: Thu, 15 Dec 2022 18:35:59 GMT
Connection: keep-alive
ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-w315ffoZV7PY1XnKl0Nwv1mPWxXncgtVxesUfA
302 Found 0 B URL HTTP/2 ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-w315ffoZV7PY1XnKl0Nwv1mPWxXncgtVxesUfA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?publisher_dsp_id=38&external_user_id=k-w315ffoZV7PY1XnKl0Nwv1mPWxXncgtVxesUfA HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 15 Dec 2022 18:35:59 GMT
content-type: text/plain
content-length: 0
location: https://ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-w315ffoZV7PY1XnKl0Nwv1mPWxXncgtVxesUfA
set-cookie: tuuid=5109a500-74d7-4a2c-8015-ec51bc43b5fe; Expires=Wed, 15 Mar 2023 18:35:59 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1671129359; Expires=Wed, 15 Mar 2023 18:35:59 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
match.sharethrough.com/sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-3D1QvvoZV7PY1XnKl0Nwv1mPWxUcn4swYKTt-w
204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-3D1QvvoZV7PY1XnKl0Nwv1mPWxUcn4swYKTt-w
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-3D1QvvoZV7PY1XnKl0Nwv1mPWxUcn4swYKTt-w HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 15 Dec 2022 18:35:59 GMT
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash c9354e6007c44b0fe175c1bcae0be0d9
e6d794277ccc775c71ed5b77a9f60a81433af1af
336380016d7d7b51cb525496f76726c7ac733c07549e3927ba97f6f584555553
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 15 Dec 2022 18:35:59 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 14 Dec 2022 20:37:04 GMT
Expires: Thu, 15 Dec 2022 20:37:04 GMT
ETag: "e6d794277ccc775c71ed5b77a9f60a81433af1af"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3ec4604e542374d992d6476438685c00
33859f741e672e35163628e2721f7767837eb7da
6e97c0ab21a9fefefecc3409c879559b046ce61c0f4374a5ae109735263c84fd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=153493
Date: Thu, 15 Dec 2022 18:35:59 GMT
Etag: "639b1aa0-1d7"
Expires: Sat, 17 Dec 2022 13:14:12 GMT
Last-Modified: Thu, 15 Dec 2022 13:01:20 GMT
Server: ECS (bsa/EB22)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: X5Uze91-lZIvegSCbCfseC99SRgXrw0TaEg-sNZoAkDB5GCT-EWXfw==
Age: 772
ocsp.digicert.com/
200 OK 471 B IP
Hash 7662eca428c4dbde9ca1b99cfd42d5e7
a6b020662ba711c0cf8b5b4868bb883fcac0c21b
06eb216242a2e03592bf31465a033e69af941971da7ecc06c717e0d256cfc463
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 43
Cache-Control: max-age=140482
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:59 GMT
Etag: "639aeaa6-1d7"
Expires: Sat, 17 Dec 2022 09:37:21 GMT
Last-Modified: Thu, 15 Dec 2022 09:36:38 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
id5-sync.com/s/966/9.gif?puid=k-Lan1FfoZV7PY1XnKl0Nwv1mPWxUSbywss4bHtg
200 43 B URL HTTP/1.1 id5-sync.com/s/966/9.gif?puid=k-Lan1FfoZV7PY1XnKl0Nwv1mPWxUSbywss4bHtg
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /s/966/9.gif?puid=k-Lan1FfoZV7PY1XnKl0Nwv1mPWxUSbywss4bHtg HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: cf=; Max-Age=300; Expires=Thu, 15-Dec-2022 18:40:59 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
cip=; Max-Age=300; Expires=Thu, 15-Dec-2022 18:40:59 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
cnac=; Max-Age=300; Expires=Thu, 15-Dec-2022 18:40:59 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
car=; Max-Age=300; Expires=Thu, 15-Dec-2022 18:40:59 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
gdpr=; Max-Age=300; Expires=Thu, 15-Dec-2022 18:40:59 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
callback=; Max-Age=300; Expires=Thu, 15-Dec-2022 18:40:59 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
content-type: image/gif;charset=UTF-8
transfer-encoding: chunked
date: Thu, 15 Dec 2022 18:35:58 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ad.yieldlab.net/m?dt_id=8664&ext_id=k-w1fCjfoZV7PY1XnKl0Nwv1mPWxUHURAerUdWEw
204 No Content 0 B URL HTTP/1.1 ad.yieldlab.net/m?dt_id=8664&ext_id=k-w1fCjfoZV7PY1XnKl0Nwv1mPWxUHURAerUdWEw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /m?dt_id=8664&ext_id=k-w1fCjfoZV7PY1XnKl0Nwv1mPWxUHURAerUdWEw HTTP/1.1
Host: ad.yieldlab.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
x-application-context: application
Cache-Control: no-store,no-cache,max-age=-3600,must-revalidate,post-check=0,pre-check=0
Pragma: no-cache
Expires: Wed, 14 Dec 2022 18:35:59 GMT
Date: Thu, 15 Dec 2022 18:35:59 GMT
Connection: keep-alive
Set-Cookie: id=b63cafde-f9ce-497b-866c-4e713948950c; Path=/; Domain=prod.svc.y6b.de; Expires=Fri, 15-Dec-2023 18:35:59 GMT; Max-Age=31536000; Secure; SameSite=None
dpm.demdex.net/ibs:dpid=28645&dpuuid=
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=28645&dpuuid=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=28645&dpuuid= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v045-07e4ed132.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=33650356630145118901222280250723807577; Max-Age=15552000; Expires=Tue, 13 Jun 2023 18:35:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: K6yjwTovQxM=
Content-Length: 0
Connection: keep-alive
ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-w315ffoZV7PY1XnKl0Nwv1mPWxXncgtVxesUfA
200 OK 43 B URL HTTP/2 ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-w315ffoZV7PY1XnKl0Nwv1mPWxXncgtVxesUfA
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/match?publisher_dsp_id=38&external_user_id=k-w315ffoZV7PY1XnKl0Nwv1mPWxXncgtVxesUfA HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:59 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
e1.emxdgt.com/put?d=d53&uid=k-FydEp_oZV7PY1XnKl0Nwv1mPWxVtB7CWX4uBwOrBufkFW5aL
204 No Content 0 B URL HTTP/2 e1.emxdgt.com/put?d=d53&uid=k-FydEp_oZV7PY1XnKl0Nwv1mPWxVtB7CWX4uBwOrBufkFW5aL
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /put?d=d53&uid=k-FydEp_oZV7PY1XnKl0Nwv1mPWxVtB7CWX4uBwOrBufkFW5aL HTTP/1.1
Host: e1.emxdgt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html
date: Thu, 15 Dec 2022 18:35:58 GMT
content-length: 0
X-Firefox-Spdy: h2
trc.taboola.com/sg/lytics/1/cm?redirect=https%3A%2F%2Fc.lytics.io%2Fc%2Fprovider%2Ftaboola%3Ftaboola_id%3D%3CTUID%3E%26_uid%3Dce58b857-7d2b-45c3-8b4d-e1cc2bc33190%26account_id%3D6754fc8577b0e933befa552acea53d64
200 OK 80 B URL HTTP/2 trc.taboola.com/sg/lytics/1/cm?redirect=https%3A%2F%2Fc.lytics.io%2Fc%2Fprovider%2Ftaboola%3Ftaboola_id%3D%3CTUID%3E%26_uid%3Dce58b857-7d2b-45c3-8b4d-e1cc2bc33190%26account_id%3D6754fc8577b0e933befa552acea53d64
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 4ea17ba3ef67d2e6752f82f0a1dd963b
f8fe758f4e56dc3828a772c261501beed93dc24b
255baafc8ed06f65606d4b66f0e554ea3eb41b6000625ca29a8e5de50da0b2f6
GET /sg/lytics/1/cm?redirect=https%3A%2F%2Fc.lytics.io%2Fc%2Fprovider%2Ftaboola%3Ftaboola_id%3D%3CTUID%3E%26_uid%3Dce58b857-7d2b-45c3-8b4d-e1cc2bc33190%26account_id%3D6754fc8577b0e933befa552acea53d64 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
cache-control: no-cache, no-store
pragma: no-cache
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
date: Thu, 15 Dec 2022 18:35:58 GMT
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1671129358.171265,VS0,VE92
x-vcl-time-ms: 92
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 73874e9e2e12066bcdcf65006a65e88a
362ae3fde1176dbace6e0c7d81d03a92836a1ab2
77ffa0acc582e7198b77172afc6f3107cb61652a2a5f496c9f0c25b43cd68ec9
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 767
Cache-Control: max-age=96598
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:59 GMT
Etag: "639a3c66-1d7"
Expires: Fri, 16 Dec 2022 21:25:57 GMT
Last-Modified: Wed, 14 Dec 2022 21:13:10 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:k-TiVvjPoZV7PY1XnKl0Nwv1mPWxUtZApR7FnkGQ
200 OK 42 B URL HTTP/2 simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:k-TiVvjPoZV7PY1XnKl0Nwv1mPWxUtZApR7FnkGQ
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:k-TiVvjPoZV7PY1XnKl0Nwv1mPWxUtZApR7FnkGQ HTTP/1.1
Host: simage2.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 18:35:58 GMT
content-type: image/gif; charset=utf-8
content-length: 42
set-cookie: KRTBCOOKIE_97=3385-uid:k-TiVvjPoZV7PY1XnKl0Nwv1mPWxUtZApR7FnkGQ&KRTB&23144-uid:k-TiVvjPoZV7PY1XnKl0Nwv1mPWxUtZApR7FnkGQ&KRTB&23286-uid:k-TiVvjPoZV7PY1XnKl0Nwv1mPWxUtZApR7FnkGQ&KRTB&23287-uid:k-TiVvjPoZV7PY1XnKl0Nwv1mPWxUtZApR7FnkGQ; domain=pubmatic.com; secure; expires=Sat, 14-Jan-2023 18:35:58 GMT; path=/
PugT=1671129358; domain=pubmatic.com; secure; expires=Sat, 14-Jan-2023 18:35:58 GMT; path=/
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
X-Firefox-Spdy: h2
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid=
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v045-00c503e2b.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: fN5LeTrRRAk=
Content-Length: 59
Connection: keep-alive
gum.criteo.com/sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40
302 Found 0 B URL HTTP/2 gum.criteo.com/sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 15 Dec 2022 18:35:58 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://beacon.krxd.net/usermatch.gif?partner=criteo&partner_uid=
server-processing-duration-in-ticks: 445438
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash abb805fc8a5323d8a11eb68450d0b832
f7b6cea5de8b272aa450c58ca11defdbd3dd0d41
152ffe07eed207310215d8291cf4f4bb1a81869d6b0d4b37bce4d8ce10dc8d84
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Dec 2022 18:35:59 GMT
Last-Modified: Thu, 15 Dec 2022 16:50:08 GMT
Server: ECS (nyb/1D12)
X-Cache: Miss from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: irovHguWy_WLkYW7CisHE_FyXhI90zVVOAKO3OvbLmAiQZI-i2pyuA==
Age: 6351
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b32475ece11ef4a25e57b08ee29eafa2
78c663c063e9a78fb467130711088a37b2993f27
f9bc48d7b94e0880b377a330ee54db6ceb95e1873e2c40d7e89b52e7aa120c21
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Dec 2022 18:35:59 GMT
Etag: "639a0429-1d7"
Last-Modified: Thu, 15 Dec 2022 18:23:13 GMT
Server: ECS (nyb/1D24)
X-Cache: Miss from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4A5FkhNi2jdG2sMsrDC3l0qI29Ud0iOK2Vju7Q2ceb0_hcATSpYNxA==
Age: 766
sync-criteo.ads.yieldmo.com/sync?id=k-D3JTUfoZV7PY1XnKl0Nwv1mPWxXbxD2kB3_uaQ&pn_id=criteo&ext=1
200 OK 43 B URL HTTP/2 sync-criteo.ads.yieldmo.com/sync?id=k-D3JTUfoZV7PY1XnKl0Nwv1mPWxXbxD2kB3_uaQ&pn_id=criteo&ext=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?id=k-D3JTUfoZV7PY1XnKl0Nwv1mPWxXbxD2kB3_uaQ&pn_id=criteo&ext=1 HTTP/1.1
Host: sync-criteo.ads.yieldmo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:59 GMT
content-type: image/gif
content-length: 43
set-cookie: yieldmo_id=ge553f9f6611df35d1c3%7C1671129359631%7C0%7C; Domain=.yieldmo.com; Expires=Fri, 15-Dec-2023 18:35:59 GMT; Path=/; Secure; SameSite=None; Secure
ptrcriteo=k-D3JTUfoZV7PY1XnKl0Nwv1mPWxXbxD2kB3_uaQ; Domain=ads.yieldmo.com; Expires=Fri, 15-Dec-2023 18:35:59 GMT; Path=/; Secure; SameSite=None; Secure
access-control-allow-origin: *
access-control-request-headers: Cache-Control, Pragma
access-control-allow-methods: GET, OPTIONS
pragma: no-cache
X-Firefox-Spdy: h2
sync.outbrain.com/cookie-sync?p=criteo&uid=k-s2hnbfoZV7PY1XnKl0Nwv1mPWxULVpX34AsPag
200 OK 0 B URL HTTP/1.1 sync.outbrain.com/cookie-sync?p=criteo&uid=k-s2hnbfoZV7PY1XnKl0Nwv1mPWxULVpX34AsPag
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync?p=criteo&uid=k-s2hnbfoZV7PY1XnKl0Nwv1mPWxULVpX34AsPag HTTP/1.1
Host: sync.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 18:35:59 GMT
Content-Length: 0
Cache-Control: no-cache
X-TraceId: 63e43b9381ba585ee952a5414a6b1b04
ocsp.sectigo.com/
200 OK 471 B IP
Hash 35ffe68a13abb622f9159e58ad77ab44
4b0bafd4a1dff153b06e8d7260401728f28fc9d6
a6ce28be67d42b61e463a916155261c90062a37bcf248de84f04baad903c177f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 18:35:59 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 14 Dec 2022 03:11:53 GMT
Expires: Wed, 21 Dec 2022 03:11:52 GMT
Etag: "4b0bafd4a1dff153b06e8d7260401728f28fc9d6"
Cache-Control: max-age=462352,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77a14840b90cb505-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 9bd84243c93c66a2fae93e7c5a5ec9ea
b38cf1d5b3eee4416c3b1de8386b524aef7d55c1
2aac77a0a3c4fef7c881f215d43a0e46bfc9042496fbb025cc716c7a7fbf57b8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4160
Cache-Control: max-age=153271
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:59 GMT
Etag: "639b0c86-1d7"
Expires: Sat, 17 Dec 2022 13:10:30 GMT
Last-Modified: Thu, 15 Dec 2022 12:01:10 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
beacon.krxd.net/usermatch.gif?partner=criteo&partner_uid=
204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner=criteo&partner_uid=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner=criteo&partner_uid= HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 15 Dec 2022 18:35:59 GMT
set-cookie: _kuid_=PQnytXRk; Expires=Tue, 13-Jun-23 18:35:59 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n023-dub-prod.krxd.net
x-request-time: D=19 t=1671129359
X-Firefox-Spdy: h2
visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-Jj-QVfoZV7PY1XnKl0Nwv1mPWxVFV7dSk_tF7g
200 OK 49 B URL HTTP/2 visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-Jj-QVfoZV7PY1XnKl0Nwv1mPWxVFV7dSk_tF7g
IP
ASN #200271 Iguane Solutions SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 4408efc0174f07ad685c456f1de521ca
e3bc3250f8f32bd98dc7b05fd8940b74617eb8d1
d1371feb0512d700cf724b05a588ce79f8d8dfbb0991ae5f45ecd3ab08983a38
GET /visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-Jj-QVfoZV7PY1XnKl0Nwv1mPWxVFV7dSk_tF7g HTTP/1.1
Host: visitor.omnitagjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=b198db2d4b9b2ca5eeb8e7832a45fe06; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 18:35:59 GMT
content-length: 49
x-envoy-upstream-service-time: 95
server: ayl-lb-fra02
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40
302 Found 0 B URL HTTP/2 gum.criteo.com/sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Thu, 15 Dec 2022 18:35:59 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://s.thebrighttag.com/cs?btt=0&tp=cr&uid=
server-processing-duration-in-ticks: 449065
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
trc-events.taboola.com/1026722/log/3/unip?en=pre_d_eng_tb&tos=1589&scd=83&ssd=1&est=1671129355476&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1671129357065&vi=1671129355474&ri=090a93b5dc747d61789b6f8d01297c22&ref=null&cv=20221211-7-RELEASE&item-url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1
204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1026722/log/3/unip?en=pre_d_eng_tb&tos=1589&scd=83&ssd=1&est=1671129355476&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1671129357065&vi=1671129355474&ri=090a93b5dc747d61789b6f8d01297c22&ref=null&cv=20221211-7-RELEASE&item-url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1
IP
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1026722/log/3/unip?en=pre_d_eng_tb&tos=1589&scd=83&ssd=1&est=1671129355476&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1671129357065&vi=1671129355474&ri=090a93b5dc747d61789b6f8d01297c22&ref=null&cv=20221211-7-RELEASE&item-url=https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1 HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.opportunistictrader.com
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 15 Dec 2022 18:35:59 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://secure.opportunistictrader.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 751071e288c2367d96270fab93f762ab
bf851ff95e3bf2f8d8a3775990d0cace47c6945e
7643b5cfe1493d40545aeb7b0f5c633441ac60090bbbe8e1e22fe671902ed77f
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "7643B5CFE1493D40545AEB7B0F5C633441AC60090BBBE8E1E22FE671902ED77F"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3502
Expires: Thu, 15 Dec 2022 19:34:22 GMT
Date: Thu, 15 Dec 2022 18:36:00 GMT
Connection: keep-alive
s.thebrighttag.com/cs?btt=0&tp=cr&uid=
200 OK 35 B URL HTTP/2 s.thebrighttag.com/cs?btt=0&tp=cr&uid=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /cs?btt=0&tp=cr&uid= HTTP/1.1
Host: s.thebrighttag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:36:00 GMT
content-type: image/gif
content-length: 35
x-bt-requestid: 5273b210-7ca7-11ed-92a5-0000ac1703a4
cache-control: private, must-revalidate
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin:
server: nginx
p3p: CP=NOI DSP COR NID
X-Firefox-Spdy: h2
static.criteo.net/js/ld/ld.js
200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/ld.js
IP
GET /js/ld/ld.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 18:35:57 GMT
content-type: text/javascript
last-modified: Tue, 08 Nov 2022 15:05:46 GMT
etag: W/"636a704a-a8d9"
expires: Fri, 16 Dec 2022 18:35:57 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
criteo-partners.tremorhub.com/sync?UICR=k-trv5O_oZV7PY1XnKl0Nwv1mPWxXNUTECqyrwjA
200 OK 0 B URL HTTP/2 criteo-partners.tremorhub.com/sync?UICR=k-trv5O_oZV7PY1XnKl0Nwv1mPWxXNUTECqyrwjA
IP
GET /sync?UICR=k-trv5O_oZV7PY1XnKl0Nwv1mPWxXNUTECqyrwjA HTTP/1.1
Host: criteo-partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:59 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
secure.opportunistictrader.com/polyfills-es2015.d7d4203132376a806ea9.js
200 OK 0 B URL HTTP/2 secure.opportunistictrader.com/polyfills-es2015.d7d4203132376a806ea9.js
IP
GET /polyfills-es2015.d7d4203132376a806ea9.js HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:54 GMT
content-type: application/x-javascript
last-modified: Thu, 15 Dec 2022 16:35:54 GMT
etag: W/"5fc8f42570fbf7d3d6dffb90153d12e8"
x-amz-meta-codebuild-content-sha256: 62981018f2c2f3253a3d16afbd6f24ee97d496a3d10bd24da5d8b3c85cbaf6bb
x-amz-version-id: null
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-2:742663695247:build/BSS-DevOps-Codebuild-Custom-v1-static-builder:7d076e7f-d118-4a47-81d2-80deca46ce26
x-amz-meta-codebuild-content-md5: b7154e5f69d55a325e6492bff753ea7c
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QUgXodiyy5I2IRlzmmQEZftkqhLkyo8nmjw6ya4oV08nk1rQWmXSeQ==
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77a1481dffe70b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
secure.opportunistictrader.com/styles.7748d24d435279b5fe77.css
200 OK 0 B URL HTTP/2 secure.opportunistictrader.com/styles.7748d24d435279b5fe77.css
IP
GET /styles.7748d24d435279b5fe77.css HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:54 GMT
content-type: text/css
last-modified: Thu, 15 Dec 2022 16:35:54 GMT
etag: W/"2f35a3d2f42282a4b66d4237a5ea0a2f"
x-amz-meta-codebuild-content-sha256: 62981018f2c2f3253a3d16afbd6f24ee97d496a3d10bd24da5d8b3c85cbaf6bb
x-amz-version-id: null
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-2:742663695247:build/BSS-DevOps-Codebuild-Custom-v1-static-builder:7d076e7f-d118-4a47-81d2-80deca46ce26
x-amz-meta-codebuild-content-md5: b7154e5f69d55a325e6492bff753ea7c
x-cache: Miss from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qFrnxkZJkurZWa0EmUIVQFd9o1zRemo8USRXDwouApVHs_SnpcY-Hw==
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77a14820b98a0b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=_CelkF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFjMEtVb3hLRXpBYklTSlpndWxUOUElMkYxY1RUQmNTYiUyRjJ4RGVGelJKcDJ5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:57 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=n-IIql80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFjMEtVb3hLRXpBYklTSlpndWxUOUMyZUF3T2FVOFlHdmFldlNnOWdUJTJGYg; expires=Tue, 09 Jan 2024 18:35:57 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 279441
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
trc.taboola.com/1026722/trc/3/json?tim=1671129355479&data=%7B%22id%22%3A347%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1671129355474%2C%22cv%22%3A%2220221211-7-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dbonnerandpartners-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1671129355478%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A83%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1026722/trc/3/json?tim=1671129355479&data=%7B%22id%22%3A347%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1671129355474%2C%22cv%22%3A%2220221211-7-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dbonnerandpartners-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1671129355478%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A83%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1026722/trc/3/json?tim=1671129355479&data=%7B%22id%22%3A347%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1671129355474%2C%22cv%22%3A%2220221211-7-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dbonnerandpartners-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1671129355478%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fsecure.opportunistictrader.com%2F%3Fcid%3DMKT654530%26eid%3DMKT703176%26assetId%3DAST253490%26page%3D1%22%2C%22tos%22%3A2%2C%22ssd%22%3A1%2C%22scd%22%3A83%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 15 Dec 2022 18:35:58 GMT
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1671129358.432254,VS0,VE98
vary: Accept-Encoding
x-vcl-time-ms: 98
X-Firefox-Spdy: h2
sync-t1.taboola.com/sg/criteortb-network/1/rtb-h/?taboola_hm=k-fd6jBPoZV7PY1XnKl0Nwv1mPWxXS5AnifzvJPw
200 OK 0 B URL HTTP/2 sync-t1.taboola.com/sg/criteortb-network/1/rtb-h/?taboola_hm=k-fd6jBPoZV7PY1XnKl0Nwv1mPWxXS5AnifzvJPw
IP
ASN #200478 Taboola.com ltd
GET /sg/criteortb-network/1/rtb-h/?taboola_hm=k-fd6jBPoZV7PY1XnKl0Nwv1mPWxXS5AnifzvJPw HTTP/1.1
Host: sync-t1.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 18:35:59 GMT
x-fastly-to-nlb-rtt: 21918
access-control-allow-credentials: true
X-Firefox-Spdy: h2
dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-9ko6i_oZV7PY1XnKl0Nwv1mPWxUHue6UbXuEcg&google_error=3
200 OK 0 B URL HTTP/2 dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-9ko6i_oZV7PY1XnKl0Nwv1mPWxUHue6UbXuEcg&google_error=3
IP
GET /dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-9ko6i_oZV7PY1XnKl0Nwv1mPWxUHue6UbXuEcg&google_error=3 HTTP/1.1
Host: dis.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:59 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP='NON DSP COR CURa PSA PSD OUR BUS NAV STA'
timing-allow-origin: *
server-processing-duration-in-ticks: 204036
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=0
200 OK 0 B URL HTTP/2 dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=0
IP
GET /dis/rtb/appnexus/cookiematch.aspx?appnxsid=0 HTTP/1.1
Host: dis.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:59 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP='NON DSP COR CURa PSA PSD OUR BUS NAV STA'
timing-allow-origin: *
server-processing-duration-in-ticks: 476563
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
www.marketbeat.com/scripts/click.aspx?SponsorshipID=68508&UserID=8889391&interstitial=1
301 Moved Permanently 0 B URL HTTP/2 www.marketbeat.com/scripts/click.aspx?SponsorshipID=68508&UserID=8889391&interstitial=1
IP
GET /scripts/click.aspx?SponsorshipID=68508&UserID=8889391&interstitial=1 HTTP/1.1
Host: www.marketbeat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Thu, 15 Dec 2022 18:35:53 GMT
content-type: text/html; charset=utf-8
location: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
cache-control: private
x-xss-protection: 1; mode=block
set-cookie: ASP.NET_SessionId=qkktixozbs4pacnn5cruacsz; path=/; secure; HttpOnly; SameSite=Lax
x-powered-by: ASP.NET
access-control-allow-origin: *
cf-cache-status: DYNAMIC
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 77a148186ddc0b65-OSL
X-Firefox-Spdy: h2
secure.opportunistictrader.com/main-es2015.4fc36ab2bd6212f47647.js
200 OK 0 B URL HTTP/2 secure.opportunistictrader.com/main-es2015.4fc36ab2bd6212f47647.js
IP
GET /main-es2015.4fc36ab2bd6212f47647.js HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:54 GMT
content-type: application/x-javascript
last-modified: Thu, 15 Dec 2022 16:35:54 GMT
etag: W/"b0e8076c67592ef79971d4e3ce94f6ed"
x-amz-meta-codebuild-content-sha256: 62981018f2c2f3253a3d16afbd6f24ee97d496a3d10bd24da5d8b3c85cbaf6bb
x-amz-version-id: null
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-2:742663695247:build/BSS-DevOps-Codebuild-Custom-v1-static-builder:7d076e7f-d118-4a47-81d2-80deca46ce26
x-amz-meta-codebuild-content-md5: b7154e5f69d55a325e6492bff753ea7c
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DOZn_MJyqEsXX7NfoyYw9NTagRYxlCp41Mr64N4ua4JKyHg0ValbMQ==
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77a1481dffe80b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
c.lytics.io/api/tag/6754fc8577b0e933befa552acea53d64/latest.min.js
200 OK 0 B URL HTTP/2 c.lytics.io/api/tag/6754fc8577b0e933befa552acea53d64/latest.min.js
IP
GET /api/tag/6754fc8577b0e933befa552acea53d64/latest.min.js HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/javascript
access-control-allow-origin: *
strict-transport-security: max-age=63072000;
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: HIT
age: 4010
last-modified: Thu, 15 Dec 2022 17:29:06 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5PQuw7NeVSeIj%2Bd9fnny%2FJkQGjWCojolXheD2Z0N%2FJF1%2FP6w3PWd8wT699LriZa0EYtjNTn%2Be3kCqEO8kUZPgtKdGhiCGmOyGXvsul4hrcnqDCUPaxz27GNzNFSz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77a1482d2d09b4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
c.lytics.io/static/pathfora.min.js
200 OK 0 B URL HTTP/2 c.lytics.io/static/pathfora.min.js
IP
GET /static/pathfora.min.js HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/
Cookie: seerid=ce58b857-7d2b-45c3-8b4d-e1cc2bc33190
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:57 GMT
content-type: text/javascript; charset=utf-8
strict-transport-security: max-age=63072000;
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: HIT
age: 2907
last-modified: Thu, 15 Dec 2022 17:47:30 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LlJV50DsdR5Kqr4rpGXi0zuGVyLoLBb6%2BUXAawDThjBHIfTGdZMKJE6eB4u1WlDrfxgVBuHLHEM7cCj8HFETAUQMxaYBxwVRiNG7fE23L3fwDDT7%2FwTviyJ1YQy1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77a14834b824b4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/T3YIWS_d9Is
200 OK 0 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/T3YIWS_d9Is
IP
POST /s/gts1d4/T3YIWS_d9Is HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 18:35:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
secure.opportunistictrader.com/runtime-es2015.4b6045a328abc16331da.js
200 OK 0 B URL HTTP/2 secure.opportunistictrader.com/runtime-es2015.4b6045a328abc16331da.js
IP
GET /runtime-es2015.4b6045a328abc16331da.js HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:54 GMT
content-type: application/x-javascript
last-modified: Thu, 15 Dec 2022 16:35:54 GMT
etag: W/"193974daff264d8d7d9a789f91c41d40"
x-amz-meta-codebuild-content-sha256: 62981018f2c2f3253a3d16afbd6f24ee97d496a3d10bd24da5d8b3c85cbaf6bb
x-amz-version-id: null
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-2:742663695247:build/BSS-DevOps-Codebuild-Custom-v1-static-builder:7d076e7f-d118-4a47-81d2-80deca46ce26
x-amz-meta-codebuild-content-md5: b7154e5f69d55a325e6492bff753ea7c
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0L7yvMCPJCHVj7Dss6f-nNebId1sDX0eSdqZQ_nzGDFHi7NgLu-7IQ==
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77a1481dffe60b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:56 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 106720
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-anrA3PoZV7PY1XnKl0Nwv1mPWxWwlDGnrHiua8eMI7yXoQJn
200 OK 0 B URL HTTP/2 exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-anrA3PoZV7PY1XnKl0Nwv1mPWxWwlDGnrHiua8eMI7yXoQJn
IP
GET /usersync/push?partner=criteo&partnerId=k-anrA3PoZV7PY1XnKl0Nwv1mPWxWwlDGnrHiua8eMI7yXoQJn HTTP/1.1
Host: exchange.mediavine.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:59 GMT
content-type: text/html; charset=utf-8
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: private, no-cache
set-cookie: mv_tokens=%7B%22mv_uuid%22%3A%2251c2ffb0-7ca7-11ed-9571-a1b2c9a0dc74%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Thu, 29 Dec 2022 18:35:59 GMT; Secure; SameSite=None
mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%2251c2ffb0-7ca7-11ed-9571-a1b2c9a0dc74%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Thu, 29 Dec 2022 18:35:59 GMT; Secure; SameSite=None
am_tokens=%7B%22mv_uuid%22%3A%2251c2ffb0-7ca7-11ed-9571-a1b2c9a0dc74%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Thu, 29 Dec 2022 18:35:59 GMT; Secure; SameSite=None
am_tokens_eu-v1=%7B%22mv_uuid%22%3A%2251c2ffb0-7ca7-11ed-9571-a1b2c9a0dc74%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Thu, 29 Dec 2022 18:35:59 GMT; Secure; SameSite=None
criteo=%7B%22id%22%3A%22k-anrA3PoZV7PY1XnKl0Nwv1mPWxWwlDGnrHiua8eMI7yXoQJn%22%2C%22version%22%3A%22criteo%22%7D; Path=/; Expires=Thu, 29 Dec 2022 18:35:59 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
200 OK 0 B URL HTTP/2 secure.opportunistictrader.com/?cid=MKT654530&eid=MKT703176
IP
GET /?cid=MKT654530&eid=MKT703176 HTTP/1.1
Host: secure.opportunistictrader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 15 Dec 2022 18:35:53 GMT
content-type: text/html
last-modified: Thu, 15 Dec 2022 16:35:54 GMT
x-amz-meta-codebuild-content-sha256: 62981018f2c2f3253a3d16afbd6f24ee97d496a3d10bd24da5d8b3c85cbaf6bb
x-amz-version-id: null
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-2:742663695247:build/BSS-DevOps-Codebuild-Custom-v1-static-builder:7d076e7f-d118-4a47-81d2-80deca46ce26
x-amz-meta-codebuild-content-md5: b7154e5f69d55a325e6492bff753ea7c
x-cache: Miss from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FHiw72kZhlXf8yqsL_MoRDy6MKLH2AfbNrmku9ruJG38CDvlRJpL4Q==
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77a1481a4d590b31-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
172.66.40.242
104.17.24.14
185.255.84.152
3.69.18.107
23.38.201.31
34.251.236.239
37.157.5.141
23.43.133.70
213.19.162.80
141.226.228.48