vardson-progenes.icu/fa84c8f1-6b6c-4d8c-be81-4626ce2c122f
200 948 B URL HTTP/1.1 vardson-progenes.icu/fa84c8f1-6b6c-4d8c-be81-4626ce2c122f
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (948), with no line terminators
Hash 6c83b957ca908a4d9a512eb4f216ce63
26d4bfcf8264d3a5e1d2a3195ce060bf3c273d64
c7ff2eebcfc92d956d713c581ba9dde4c04f01313a7af496f397c29bae085a8c
Analyzer Verdict Alert fortinet Phishing
GET /fa84c8f1-6b6c-4d8c-be81-4626ce2c122f HTTP/1.1
Host: vardson-progenes.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Server: nginx
Date: Sat, 17 Dec 2022 20:54:55 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 948
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Set-Cookie: fa84c8f1-6b6c-4d8c-be81-4626ce2c122f-v4=k-3XH4RqE3AUNf3JhQhVE1bn-qZjXyEaIfc-qLaMzPM; Max-Age=86400; Expires=Sun, 18-Dec-2022 20:54:55 GMT; Domain=vardson-progenes.icu; Path=/; HttpOnly
cc-v4=GLBIQrcu57yU2vbEHwHnzir%2FZv%2BOloqf%2Fqb557zpTI9EnYM7v9dFmIJAANumqtobLkYL4s6PiwthBqsD%2F2mLLx3fo1PJeCr7Mk6njipLg6KhvAApMc%2BGK1F0Q%2FjxvaG9XTtis%2Bz1SgYjtp9Q5vesAA%3D%3D; Max-Age=31536000; Expires=Sun, 17-Dec-2023 20:54:55 GMT; Domain=vardson-progenes.icu; Path=/; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9f3cf7e36f17a535e53e5213c02cf2b4
e65acbc03135ce135b9e91b4f74b3e1439faa6f6
a2317476862acd0a92fe523454c3991752b07ba14e7667f421dd9624e0233758
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2317476862ACD0A92FE523454C3991752B07BA14E7667F421DD9624E0233758"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8482
Expires: Sat, 17 Dec 2022 23:16:17 GMT
Date: Sat, 17 Dec 2022 20:54:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ae86164fd9297dfdc05d67d69284d70e
5e5f27e3fd492f715baa6820f05c0fafde4040b3
be20f6ae6a51d20611cb4d350b52a5d0a339af6722fe9b2482ef58826c1e9de0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE20F6AE6A51D20611CB4D350B52A5D0A339AF6722FE9B2482EF58826C1E9DE0"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7891
Expires: Sat, 17 Dec 2022 23:06:26 GMT
Date: Sat, 17 Dec 2022 20:54:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 555fc6e99ad3bf077d1c4b9b805e428d
4e800fc8e809a950288df0e94992084647762561
fac00cada519279717e2a13528cb202d292fc92ed5eb42782c41f8e7b9509eaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAC00CADA519279717E2A13528CB202D292FC92ED5EB42782C41F8E7B9509EAF"
Last-Modified: Fri, 16 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10242
Expires: Sat, 17 Dec 2022 23:45:37 GMT
Date: Sat, 17 Dec 2022 20:54:55 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 17 Dec 2022 20:34:13 GMT
content-type: application/json
age: 1242
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hGpK+zJT/zBvCDkA1vxAs1RgleF1i06TMvI+RbAQ8KuUY6BJuumQ/rw9H9Mx79Oy8iapV7P3H9o=
x-amz-request-id: TB2957SFKS7W7YGS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 17 Dec 2022 20:51:56 GMT
age: 179
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 20:54:55 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
conestenation.com/redirect?target=BASE64aHR0cHM6Ly90cmFjay5nbzJhbHVuYS5jby9jbGljaz9waWQ9NTAmb2ZmZXJfaWQ9MTQ0OCZsPTE2NDk0NDA3NDYmc3ViMT13NWk3cm5sbWUxZjAzYzhsaTI1cjJyYmsmc3ViMj1mYTg0YzhmMS02YjZjLTRkOGMtYmU4MS00NjI2Y2UyYzEyMmY&ts=1671310495326&hash=RgUtypivZBsuD3quhRKNvDXeyy3IOKE2tzUDcatRsTg&rm=DJ
200 612 B URL HTTP/1.1 conestenation.com/redirect?target=BASE64aHR0cHM6Ly90cmFjay5nbzJhbHVuYS5jby9jbGljaz9waWQ9NTAmb2ZmZXJfaWQ9MTQ0OCZsPTE2NDk0NDA3NDYmc3ViMT13NWk3cm5sbWUxZjAzYzhsaTI1cjJyYmsmc3ViMj1mYTg0YzhmMS02YjZjLTRkOGMtYmU4MS00NjI2Y2UyYzEyMmY&ts=1671310495326&hash=RgUtypivZBsuD3quhRKNvDXeyy3IOKE2tzUDcatRsTg&rm=DJ
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (612), with no line terminators
Hash 9ad3fd8a6ee89889b2e3db6d46fd0d9e
d36faa4e161cdcb9e7ec45bb86221a3827c949b2
0f852171541650ddf7da37f52a2cede3b03e903a70ac4c2c7435e0d44768c3a0
GET /redirect?target=BASE64aHR0cHM6Ly90cmFjay5nbzJhbHVuYS5jby9jbGljaz9waWQ9NTAmb2ZmZXJfaWQ9MTQ0OCZsPTE2NDk0NDA3NDYmc3ViMT13NWk3cm5sbWUxZjAzYzhsaTI1cjJyYmsmc3ViMj1mYTg0YzhmMS02YjZjLTRkOGMtYmU4MS00NjI2Y2UyYzEyMmY&ts=1671310495326&hash=RgUtypivZBsuD3quhRKNvDXeyy3IOKE2tzUDcatRsTg&rm=DJ HTTP/1.1
Host: conestenation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Server: nginx
Date: Sat, 17 Dec 2022 20:54:55 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 612
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 17 Dec 2022 20:08:00 GMT
age: 2815
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 21eacadca23a9a927063d0de48238772
fbf43743f82a8bd7e65e746a056c339fa86309e6
e35581c636eb6363f86e1d6e8f258a2e8fc177fce2f64acebb4e8006642cda21
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 17 Dec 2022 20:54:56 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 17 Dec 2022 08:07:58 GMT
Expires: Sat, 24 Dec 2022 08:07:57 GMT
Etag: "fbf43743f82a8bd7e65e746a056c339fa86309e6"
Cache-Control: max-age=558181,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77b28e86fd2ab4ee-OSL
track.go2aluna.co/click?pid=50&offer_id=1448&l=1649440746&sub1=w5i7rnlme1f03c8li25r2rbk&sub2=fa84c8f1-6b6c-4d8c-be81-4626ce2c122f
302 Found 0 B URL HTTP/2 track.go2aluna.co/click?pid=50&offer_id=1448&l=1649440746&sub1=w5i7rnlme1f03c8li25r2rbk&sub2=fa84c8f1-6b6c-4d8c-be81-4626ce2c122f
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=50&offer_id=1448&l=1649440746&sub1=w5i7rnlme1f03c8li25r2rbk&sub2=fa84c8f1-6b6c-4d8c-be81-4626ce2c122f HTTP/1.1
Host: track.go2aluna.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 17 Dec 2022 20:54:56 GMT
content-length: 0
location: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs
x-adjust-use-original-forwarded-for: 1
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2d1752cd6eb7f48e7494373911a5b996
43d9c23c4d03cccce0fc478f0e12c0874dc762fd
aded7fd1d638c001b0b462fdfeee0549d2ed61b51ced88eb83690e2e20ed36d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3720
Cache-Control: max-age=134035
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:56 GMT
Etag: "639d86ab-1d7"
Expires: Mon, 19 Dec 2022 10:08:51 GMT
Last-Modified: Sat, 17 Dec 2022 09:06:51 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 74b01564065c89b3095627e4a0481bac
c1b79a5e921cc4c2f01c40d78e6f6178bdfdb95d
ee803d60d62bfd80fe29a85521277f6f4d779663026f5ea3f0996ddf405ab426
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3951
Cache-Control: max-age=106233
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:56 GMT
Etag: "639d192a-1d7"
Expires: Mon, 19 Dec 2022 02:25:29 GMT
Last-Modified: Sat, 17 Dec 2022 01:19:38 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs
301 Moved Permanently 0 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /es-mx/negocios/empresarial/eapply/registro/sbs HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
location: /es-mx/negocios/empresarial/eapply/registro/sbs/
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
x-permitted-cross-domain-policies: master-only
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77b2558519b9629f-ORD
content-length: 0
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FB27d+f70JXpDQy1ywx31g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 065s06gOdTSAizzLA+kl28QR5z4=
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
200 OK 8.0 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 0f92d6afdd5782db8835dace9d822109
dd58843743b08cd3f104a53677c96e91d01c02d9
b79fa8b3a6416e264d4524eb91339f7c7cca15a2ff42a9ea731f94438818959a
GET /es-mx/negocios/empresarial/eapply/registro/sbs/ HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
x-permitted-cross-domain-policies: master-only
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77b28e8b18ef2339-ORD
content-encoding: gzip
content-length: 8045
vary: Cookie, Accept-Encoding
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr; expires=Sat, 16 Dec 2023 20:53:00 GMT; Max-Age=31449600; Path=/; SameSite=Lax
agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 10a3a852ef62dc4d4ccbbf6ff396688b
953e40775326102f6c3fc09a18a7039239df656f
30872c631302c914fc93b789892b200beb6284a3ba6753e1ee7f909a1231f2dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-NVBQ5RK
200 OK 82 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NVBQ5RK
IP
File type ASCII text, with very long lines (27437)
Hash 8335a4645fd9665b59cc7e5ef69fa98e
288064a7d35c6a6c3f485f6f4a9cbd1492eba30b
7de51a4eccf17c965b1500b7d4280ab76483b4a1a076ec823596a9e5461311d4
GET /gtm.js?id=GTM-NVBQ5RK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 17 Dec 2022 20:54:56 GMT
expires: Sat, 17 Dec 2022 20:54:56 GMT
cache-control: private, max-age=900
last-modified: Sat, 17 Dec 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82203
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 10a3a852ef62dc4d4ccbbf6ff396688b
953e40775326102f6c3fc09a18a7039239df656f
30872c631302c914fc93b789892b200beb6284a3ba6753e1ee7f909a1231f2dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/core/jquery.3.2.1.min.js
200 OK 30 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/core/jquery.3.2.1.min.js
IP
File type ASCII text, with very long lines (32058)
Hash 165a43244de5b28bfdb9422e0ad82b68
dd12888e259036e6c6986a0c65a3b3e38b697f54
200e3fccd025dffd3f7c6ad186f87ea51737db6c85e279b0d8b9626ad7ce1954
GET /es-mx/negocios/empresarial/eapply/registro/static/js/core/jquery.3.2.1.min.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-15283"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7fefed72a51-ORD
content-encoding: gzip
content-length: 30177
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/core/popper.min.js
200 OK 7.4 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/core/popper.min.js
IP
File type ASCII text, with very long lines (20800)
Hash 28ca39afb5c7ee480ec72fe4c5abace6
626b6f58ed1ba1a270dd1a9f2f7b0e102db23ec6
2478d24c2caf36605f02d218ab045666d0ceab3faa5cf9c805931c9e840a2276
GET /es-mx/negocios/empresarial/eapply/registro/static/js/core/popper.min.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-51c6"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767dc0a9fe5a8c93-EWR
content-encoding: gzip
content-length: 7395
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/core/bootstrap.min.js
200 OK 15 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/core/bootstrap.min.js
IP
File type ASCII text, with very long lines (62284)
Hash f5a4629824a6ce8fc8e3581cc457f92e
6f203f05031323902d71cf743c056f742caf77d1
8572332e9ec66d7b73fafa2490c1ce6862d100a8967ffb22f9068112d3bf8f04
GET /es-mx/negocios/empresarial/eapply/registro/static/js/core/bootstrap.min.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-f463"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7feda902db6-ORD
content-encoding: gzip
content-length: 15230
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/js/validator_forms.js
200 OK 266 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/js/validator_forms.js
IP
Hash ac6b90ff35a0a90bcf8b45c2dd8d9e12
926598ed864545f6c38623c37a258492bbca5ecd
f7db50e7abbf35c6eba7a2c9a626ea3b4de3aadd94cc3427c76fe5c79d27afde
GET /es-mx/negocios/empresarial/eapply/registro/static/form/js/validator_forms.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=640
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
etag: W/"638f4562-280"
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
last-modified: Tue, 06 Dec 2022 13:36:34 GMT
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 775ca0981bcc2d49-ORD
content-encoding: gzip
content-length: 266
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/plugins/fetchEapplyForms.js
200 OK 797 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/plugins/fetchEapplyForms.js
IP
Hash 1266525e696cec7fae7602c0fa761134
924a9918e979d005e7f9983e1ac0e922b4aaa678
330da5cf37bad0024f47428bffae2cdcb625cc11b8473d59cf7a40bac61cf641
GET /es-mx/negocios/empresarial/eapply/registro/static/js/plugins/fetchEapplyForms.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=2221
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
etag: W/"638f4562-8ad"
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
last-modified: Tue, 06 Dec 2022 13:36:34 GMT
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 775a496348042c24-ORD
content-encoding: gzip
content-length: 797
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/plugins/getUrlUtms.js
200 OK 364 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/plugins/getUrlUtms.js
IP
Hash 29f6579dbd89c2384d67fa2622d38b04
9085e2bc38f285584e3efc15b8f52ed99a1e41fe
890cc1a0928e9df3f0acb96dd67a73c3feeddae7185889e4e9ed3d57cd812083
GET /es-mx/negocios/empresarial/eapply/registro/static/js/plugins/getUrlUtms.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-36c"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7ff8c9ee1cb-ORD
content-encoding: gzip
content-length: 364
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/css/bootstrap.min.css
200 OK 24 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65326)
Hash 3dd21bbe6323c679d09f17cccc99e2b0
03c3cfd858b9530fedd2e031ff202e9f02d33efd
d7848a7a7cd3fab8a37a546e5c20f1a2a6a8d8b6bd3c4e22767206f69e7f455a
GET /es-mx/negocios/empresarial/eapply/registro/static/css/bootstrap.min.css HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-279d8"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab801f9722d2e-ORD
content-encoding: gzip
content-length: 24136
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/style_forms.css
200 OK 730 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/style_forms.css
IP
File type ASCII text, with very long lines (1761), with no line terminators
Hash cd52ada0f70f14d6a3a59065f0d91217
ddb1515631dc49a01c1007ca2d241901302ecd72
527ee584e6e8ccc697d1900085b766cd400a2ae6ff4a1e41329087bff1ff10f0
GET /es-mx/negocios/empresarial/eapply/registro/static/form/css/style_forms.css HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
cf-bgj: minify
cf-polished: origSize=2389
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
etag: W/"638f4562-955"
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
last-modified: Tue, 06 Dec 2022 13:36:34 GMT
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 775ca09859e92331-ORD
content-encoding: gzip
content-length: 730
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/loader.css
200 OK 423 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/loader.css
IP
Hash 891eef0831c04f4a86f5791c543f9bad
548187f3a615d0b9ec17a4b3c7800c60f6d84dca
bdd17a41436c8496d155f362a54bf3c78c7d62d5d971ca61ac9b461e89aa8899
GET /es-mx/negocios/empresarial/eapply/registro/static/form/css/loader.css HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-3ff"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7ff5d1b2d2e-ORD
content-encoding: gzip
content-length: 423
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/main_sbs_mobile.css
200 OK 28 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/main_sbs_mobile.css
IP
File type Unicode text, UTF-8 text, with very long lines (560)
Hash d6cdf40439361c28c87063eb7e06bbc8
bc10c59752646a3426fb8194b0f0603f194698f7
472ac14aa4aedb72b3ec09fcec6995efdeb564c9d8af5b81b2f851371c6fff91
GET /es-mx/negocios/empresarial/eapply/registro/static/form/css/main_sbs_mobile.css HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 06 Dec 2022 13:36:34 GMT
etag: W/"638f4562-3344d"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: EXPIRED
vary: Accept-Encoding
server: cloudflare
cf-ray: 775d22d16b76e261-ORD
content-encoding: gzip
content-length: 27625
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/js/calcula_rfc.js
200 OK 2.3 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/js/calcula_rfc.js
IP
Hash 6d518a52a1a685e3acfbe45429ac5e97
3974558ecb08a67950147fa394d5fbd01909bb78
64294e249021a07a30b605b1aa284011b13e7be7ca70c2095920557858faa871
GET /es-mx/negocios/empresarial/eapply/registro/static/form/js/calcula_rfc.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=17381
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
etag: W/"638f4562-43e5"
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
last-modified: Tue, 06 Dec 2022 13:36:34 GMT
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 775d22d23f80233e-ORD
content-encoding: gzip
content-length: 2250
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/tarjetas-amex-01.png
200 OK 213 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/tarjetas-amex-01.png
IP
File type PNG image data, 646 x 236, 8-bit/color RGBA, non-interlaced\012- data
Size 213 kB (212751 bytes)
Hash db4433328c6488c5ec7fa6dace282a81
a8b4620fed27fe855b023ef5da151ba8f0184c8c
5f0d5dfa5230fe993cf1923d8016dcac4f92499c894d4ecde8ef98aaff3ee2f6
GET /es-mx/negocios/empresarial/eapply/registro/static/form/img/tarjetas-amex-01.png HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 212751
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: "635cb65e-33f0f"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 768063b0cf216174-ORD
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/style_modal.css
200 OK 430 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/style_modal.css
IP
Hash 81e6b0bf3fb2a9a254a07687ab3ef518
7eb6b5ead1ca9547ee0490fde6c83e5942ce1c86
05c121db27bdf952ce9234e598823feb78b9985d820561ef1d35f3bd79b29c58
GET /es-mx/negocios/empresarial/eapply/registro/static/form/css/style_modal.css HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Tue, 06 Dec 2022 13:36:34 GMT
etag: W/"638f4562-516"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 775b4646199a1841-EWR
content-encoding: gzip
content-length: 430
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/sbs_gold.png
200 OK 295 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/sbs_gold.png
IP
File type PNG image data, 500 x 315, 8-bit/color RGBA, non-interlaced\012- data
Size 295 kB (294581 bytes)
Hash eac1e11480047f34d9f4079aff7be4cb
1615f5fa47edc4e934931089946dd0c76c3aefe4
72238f61ed7a328d6efef84cfd3a1c24fb3b5f05d23ae3e80c03be87593a43db
GET /es-mx/negocios/empresarial/eapply/registro/static/form/img/sbs_gold.png HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 294581
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: "635cb65e-47eb5"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7680650d9ecc8123-ORD
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 46edd66bca9004cdbe48ea37859bb466
fad5fc95272d80bbde70be2528da494cd3a48f41
4000ec7574a28a19d1696ff46481f9cff90b21c0854edd71e36123756f6865f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/js/validator.js
200 OK 1.7 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/js/validator.js
IP
File type Algol 68 source text\012- Pascal source, Unicode text, UTF-8 text
Hash 7c7b663f6b7d3e2a50640e7b55126593
6e57abdee2385d7c6f0f498a98622129939dde7e
cad05cb3a06356d33f7fd9eb28045cb5558c3c86020f2d30d310bccf64bcb293
GET /es-mx/negocios/empresarial/eapply/registro/static/form/js/validator.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-1e30"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab800587b638a-ORD
content-encoding: gzip
content-length: 1705
date: Sat, 17 Dec 2022 20:54:57 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:57 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/fonts/BentonSans.ttf
200 OK 21 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/fonts/BentonSans.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 24 names, Macintosh\012- data
Hash 4fb97718a145b1bc78c2dbc0a586c34b
d736eedcf6aa2465909f65ea246a287edf2c91ac
030382fc1b425c7d8a0d9c86d202b6da927d69dbab54128cf2f2dc162c85600a
GET /es-mx/negocios/empresarial/eapply/registro/static/form/fonts/BentonSans.ttf HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/main_sbs_mobile.css
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr; _gcl_au=1.1.567078071.1671310494
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 20580
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: "635cb65e-5064"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 768061f1a9891885-EWR
date: Sat, 17 Dec 2022 20:54:57 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:57 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/fondo.png
200 OK 397 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/fondo.png
IP
File type PNG image data, 3000 x 2859, 4-bit colormap, non-interlaced\012- data
Size 397 kB (396989 bytes)
Hash b50172e38659bb8134608e4333379b7d
9fcad94a0523c32d168699caccbf9307e4c70127
2fb4208dd39055d7ff2d9db7d54d172a05fe844d31b0a657d7b8a5871140e23e
GET /es-mx/negocios/empresarial/eapply/registro/static/form/img/fondo.png HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/main_sbs_mobile.css
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr; _gcl_au=1.1.567078071.1671310494
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 396989
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: "635cb65e-60ebd"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 768061f10ccc8c59-EWR
date: Sat, 17 Dec 2022 20:54:57 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:57 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
3778356.fls.doubleclick.net/activityi;src=3778356;type=gcp220;cat=um_mx0;ord=7362382070665;gtm=2wgbu0;auiddc=567078071.1671310494;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F?
200 OK 310 B URL HTTP/2 3778356.fls.doubleclick.net/activityi;src=3778356;type=gcp220;cat=um_mx0;ord=7362382070665;gtm=2wgbu0;auiddc=567078071.1671310494;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (582), with no line terminators
Hash bc4501897db34afcd742a022a83945a1
5407931c550123ef3706bae20fac7d04d22cc539
7301b221b78e95caa10aa457d668c03d8dde3dd562f7d57f5a9b6c7e6d0182f5
GET /activityi;src=3778356;type=gcp220;cat=um_mx0;ord=7362382070665;gtm=2wgbu0;auiddc=567078071.1671310494;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F? HTTP/1.1
Host: 3778356.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 17 Dec 2022 20:54:57 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 310
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 17-Dec-2022 21:09:57 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ads-engagement.presage.io/pixel?site=americanexpress.com&e=session&id=session_duration&full_url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F>mcb=1979781379
200 OK 35 B URL HTTP/1.1 ads-engagement.presage.io/pixel?site=americanexpress.com&e=session&id=session_duration&full_url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F>mcb=1979781379
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /pixel?site=americanexpress.com&e=session&id=session_duration&full_url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F>mcb=1979781379 HTTP/1.1
Host: ads-engagement.presage.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: no-store
Date: Sat, 17 Dec 2022 20:54:57 GMT
ETag: W/"23-1840f5b4ac0"
Last-Modified: Tue, 25 Oct 2022 13:35:52 GMT
X-Powered-By: Express
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Qia_3ThNXh4a1yEx-KVpzy-GBXNttme8f-ymBzTZBDtozPTF1zOscw==
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/fonts/BentonSans-Bold.woff2
200 OK 11 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/fonts/BentonSans-Bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 10844, version 1.0\012- data
Hash ab4ac001875e7d8aee3f9b91c6c3c019
4e46d6b8edf98c7e8ba53d42cd1183591a612393
1aec4ee690e29124c2bda41476335915a78ca867eb2bfc7de299d6f2936fdd0c
GET /es-mx/negocios/empresarial/eapply/registro/static/form/fonts/BentonSans-Bold.woff2 HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/main_sbs_mobile.css
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr; _gcl_au=1.1.567078071.1671310494
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 10844
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: "635cb65e-2a5c"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 768061f1af5a197c-EWR
date: Sat, 17 Dec 2022 20:54:57 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:57 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 46edd66bca9004cdbe48ea37859bb466
fad5fc95272d80bbde70be2528da494cd3a48f41
4000ec7574a28a19d1696ff46481f9cff90b21c0854edd71e36123756f6865f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/tarjetas-amex-02.png
200 OK 1.4 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/tarjetas-amex-02.png
IP
File type gzip compressed data, from Unix\012- data
Hash 3b59e51534607dfefbcce3772b913031
77bb0792ab706ca3a687c5df968814f11fd96bfe
d3f8ea2f4b84bdc76bac4cd065481deb32efafb2b412906beeafc46b2f80217a
GET /es-mx/negocios/empresarial/eapply/registro/static/form/img/tarjetas-amex-02.png HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; csrftoken=L0ZKM3Y5g4Pr1ASnsyTmEPygu9dScE48jtpoU3Fpql5CbSNfUqlCpBt1SRqETcYr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 161756
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: "635cb65e-277dc"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 768063ba19fe6174-ORD
date: Sat, 17 Dec 2022 20:54:56 GMT
set-cookie: agent-id=4f0ddbc9-05fc-45d7-9c92-453cdb7a470e; expires=Sun, 17-Dec-2023 20:54:56 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0973dd05c36d5b21a858d6a6bec71334
e5bc1af376e6cd71fe3be45b393ceb1f61434891
e46922306d68a94ce397d96c12c5ddfd0341e139369cab988a6c57b57a9bd0ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 17 Dec 2022 20:41:08 GMT
expires: Sat, 17 Dec 2022 22:41:08 GMT
cache-control: public, max-age=7200
age: 829
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 953635cff82596ecfcbd7ff83474031a
5ea2fa051d49d203df6582bc273639a90348f8d2
bb63f27f12c917fccddd13680972fc6e12a8e0e4dcb9b9340f7f911c8b1db9ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 157b62091fad279063f540564a4c72e6
9db33b844db31eed03695c97daf4c84a4d7d265f
92904432175c023613dea4d660d2c9098e00b7f3b628c8519bf5b404cad450a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/805879087/?random=1671310493576&cv=11&fst=1671310493576&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=567078071.1671310494&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/805879087/?random=1671310493576&cv=11&fst=1671310493576&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=567078071.1671310494&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/805879087/?random=1671310493576&cv=11&fst=1671310493576&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=567078071.1671310494&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 17 Dec 2022 20:54:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sat, 17-Dec-2022 21:09:57 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/805879087/?random=1671310493576&cv=11&fst=1671310493576&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=567078071.1671310494&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/805879087/?random=1671310493576&cv=11&fst=1671310493576&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=567078071.1671310494&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/805879087/?random=1671310493576&cv=11&fst=1671310493576&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=567078071.1671310494&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 17 Dec 2022 20:54:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/805879087/?random=1671310493576&cv=11&fst=1671310493576&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=567078071.1671310494&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=3778356;type=gcp220;cat=um_mx0;ord=7362382070665;gtm=2wgbu0;auiddc=567078071.1671310494;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F
200 OK 310 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=3778356;type=gcp220;cat=um_mx0;ord=7362382070665;gtm=2wgbu0;auiddc=567078071.1671310494;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (581), with no line terminators
Hash 1427f6d896c072423ef551581ea7c9e8
0425e2a41ab447716741bda30709742e979a875b
a36e2ee5977724004e843bb3a14446e443e98725a04996bd5b851e9f4786429b
GET /ddm/fls/i/src=3778356;type=gcp220;cat=um_mx0;ord=7362382070665;gtm=2wgbu0;auiddc=567078071.1671310494;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3778356.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 17 Dec 2022 20:54:57 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 310
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0973dd05c36d5b21a858d6a6bec71334
e5bc1af376e6cd71fe3be45b393ceb1f61434891
e46922306d68a94ce397d96c12c5ddfd0341e139369cab988a6c57b57a9bd0ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 157b62091fad279063f540564a4c72e6
9db33b844db31eed03695c97daf4c84a4d7d265f
92904432175c023613dea4d660d2c9098e00b7f3b628c8519bf5b404cad450a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8349
Expires: Sat, 17 Dec 2022 23:14:06 GMT
Date: Sat, 17 Dec 2022 20:54:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8349
Expires: Sat, 17 Dec 2022 23:14:06 GMT
Date: Sat, 17 Dec 2022 20:54:57 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 157b62091fad279063f540564a4c72e6
9db33b844db31eed03695c97daf4c84a4d7d265f
92904432175c023613dea4d660d2c9098e00b7f3b628c8519bf5b404cad450a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a0c4858-28d1-47b1-bfba-b4500f28eeae.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a0c4858-28d1-47b1-bfba-b4500f28eeae.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fdbd1e175352e7ec7dc2a25f04a5a9d
954bdd8d6b2f3d0ec086631ecf1bbd76c6507fe2
bdba0c3d4509764e87db688c1b8086c309f4a2cbe95d1f2130ce01d184f2fa17
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a0c4858-28d1-47b1-bfba-b4500f28eeae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9741
x-amzn-requestid: 5d9871d6-1512-4ffa-8b85-3c4c7595b723
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dEj3XGsxoAMFxIQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639819c8-7a65df352cc4e71e5aa518f8;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 06:20:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V2j4CWBbvNniyBK3vdt4Hg7ROB-xjuzsvdGBmh2U1BGYGWwkT6JJ_g==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:42:32 GMT
age: 83545
etag: "954bdd8d6b2f3d0ec086631ecf1bbd76c6507fe2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8349
Expires: Sat, 17 Dec 2022 23:14:06 GMT
Date: Sat, 17 Dec 2022 20:54:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2fae5a52ce167de2a060dc814a744e98
4b108a79a4ad796a34f4b2b8950df907137680e3
61e1fe4a8c074a031e0628ca393449e42d70dcf3411481936c26c1fad7a5451b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9837
x-amzn-requestid: 7c104466-a4d8-4e03-94e6-79a18bd3bf54
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjWiEMlIAMFaaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce5c3-4b0e776f4f0edd533795a6ee;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:40:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BoDm_UMgTvGhUoJOaM2x6-YXgFOFuLanBV4hjgsPNTFxn_9CQjELUQ==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:19 GMT
etag: "4b108a79a4ad796a34f4b2b8950df907137680e3"
content-type: image/jpeg
age: 83678
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30eabd90-57de-40c1-8f98-3a7df7e6c6db.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30eabd90-57de-40c1-8f98-3a7df7e6c6db.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 406a837a79921b55b79cbefe97f28baa
852e6b2fbc7cf50ed1824491293036092ca928e5
310c2d8f56b08dbcc4a6373ec8b7d4c33e531540eb8b5c446609398ee9f3448a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30eabd90-57de-40c1-8f98-3a7df7e6c6db.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9027
x-amzn-requestid: 810f640d-b3dd-42fd-8317-f701a2bdb551
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjEjHRfoAMFRfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce550-666de65c79de87b06a985a83;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y34VDlEkPoUgYchKTvPk-88ObNqiDdQWc-9Z3tmuI0TUbSmhliD0iw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:29 GMT
age: 83668
etag: "852e6b2fbc7cf50ed1824491293036092ca928e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0451e9f8-3fd9-47fc-b514-43008f53c76c.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0451e9f8-3fd9-47fc-b514-43008f53c76c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a3a7ef8028514bc1687afffd5ab8748
c1258c5dc821250f9d2b80915d1fb3145e4f9f25
4fa357165b12c8bf9dcb1787c656e116ddfb741ca49738f124b949d120c39b65
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0451e9f8-3fd9-47fc-b514-43008f53c76c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9084
x-amzn-requestid: eef7bc24-2e2d-420f-8d5e-3cd86add3639
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dKT24GhNIAMFjVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639a6692-01d090e602c3e6575ce2988d;Sampled=0
x-amzn-remapped-date: Thu, 15 Dec 2022 00:13:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3qa81WYkbh9LsK_ESDpc_M4XRGYJBdDlYLT0KJzLCjF-hEIxd0LjJQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 03:45:47 GMT
age: 61750
etag: "c1258c5dc821250f9d2b80915d1fb3145e4f9f25"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8349
Expires: Sat, 17 Dec 2022 23:14:06 GMT
Date: Sat, 17 Dec 2022 20:54:57 GMT
Connection: keep-alive
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.7 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13063)
Hash bf269a225d9de1d11c6e2747d12ffbfb
f3edd2899cced3e0ae6107c6837e954d8b4f1d86
38bcbdd59ce5cac7da632ad8788f5c520aa88d30a53af4cedeb9a989af4d0986
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 15 Dec 2022 18:31:06 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=60953
date: Sat, 17 Dec 2022 20:54:57 GMT
content-length: 4654
x-cdn: AKAM
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae934ee-7c6e-4784-90fd-ef6c864097ef.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae934ee-7c6e-4784-90fd-ef6c864097ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1c3454ef9b4c0d31eecf53e44471cecb
f1182e860380b637388fa7f90c36e0a8c9edd657
c474493452d48121f0050efdd197231909d3c9de0fccbe07bf5706162b848624
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae934ee-7c6e-4784-90fd-ef6c864097ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7048
x-amzn-requestid: d2665a61-0c5f-429e-bd9c-f4c6aec4fe14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjEvH6VIAMFd2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce551-65d1775b5f07d8bf10beae48;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zWO_LMG3fez0GBfCwXtYm9IPAN1LKsomAPVR8ApRb44i2UAf5tOHAw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:30 GMT
age: 83667
etag: "f1182e860380b637388fa7f90c36e0a8c9edd657"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f3dbc33499e42ecb967c87f0df23a85
96a87c596ae880eb482b0e8a5fdb6e09bb728895
aee03631139a47dfbb4dbbfd4257d10afc3b814b5f70366759bdff153e9e2bd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61dd0e23-c172-4f68-b254-9fd26e2782f6.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61dd0e23-c172-4f68-b254-9fd26e2782f6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d9d95001bfc942895a41fb4bbd50c56
67e1f40fbf45d7f32e4bd05f7c9e71f352483fa9
042c3809a802ef44ff6de8a270194cdf69cc3ba9d8f5192110dda7829d2d52d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61dd0e23-c172-4f68-b254-9fd26e2782f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5710
x-amzn-requestid: 9e587daa-7632-4765-a8c5-6cea13058bac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dNQQJEp6IAMF1Og=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639b9400-63c04fa4691c32f914301a3d;Sampled=0
x-amzn-remapped-date: Thu, 15 Dec 2022 21:39:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 02zJXkn7VAHHSaUAxTKCXgMFDX7THSeSZ2oeyblrRuOwBEgPVzSSgA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:53:20 GMT
age: 82897
etag: "67e1f40fbf45d7f32e4bd05f7c9e71f352483fa9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f3dbc33499e42ecb967c87f0df23a85
96a87c596ae880eb482b0e8a5fdb6e09bb728895
aee03631139a47dfbb4dbbfd4257d10afc3b814b5f70366759bdff153e9e2bd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 496d96f69203ab6ad46a661482df3c81
1e09de48fbd4df599eab45d9339ebf6cee9825d7
b43e2510e05b3ca9adfc47f8526c71c732b3f530bd1ecec189a21b777f131498
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4291
Cache-Control: max-age=154789
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Etag: "639dd583-1d7"
Expires: Mon, 19 Dec 2022 15:54:46 GMT
Last-Modified: Sat, 17 Dec 2022 14:43:15 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
www.google.no/pagead/1p-conversion/805879087/?random=1671310493576&cv=11&fst=1671310493576&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=567078071.1671310494&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/805879087/?random=1671310493576&cv=11&fst=1671310493576&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=567078071.1671310494&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/805879087/?random=1671310493576&cv=11&fst=1671310493576&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=567078071.1671310494&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 17 Dec 2022 20:54:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
origin.acuityplatform.com/event/v2/pixel.js
200 OK 2.3 kB URL HTTP/1.1 origin.acuityplatform.com/event/v2/pixel.js
IP
File type HTML document, ASCII text, with very long lines (2331)
Hash b16e1dbd11614051243b74b039cba90d
f74e380ac3b747a48889c8a19c77839de4e36c1a
0a104bc2466725f7c114ba0a22d2dad7c84eafcde480dd76b1e05c4c73c7b2bb
GET /event/v2/pixel.js HTTP/1.1
Host: origin.acuityplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Content-Type: application/javascript
Content-Length: 2332
Last-Modified: Tue, 22 Nov 2022 18:12:19 GMT
ETag: "637d1103-91c"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Sat, 17 Dec 2022 20:54:57 GMT
Connection: keep-alive
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 8b26cd4609e2025e51e90573a0fbd6f7
efc2006ae5297ad5ae5e064188b9fba73f6b868f
e288b6a1e220f5fb781cfbb0b739b36c6acfdceccff8f0278fc151c241b0b50b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 4GCtuQAqEs4KZPLskR7fGruOVTKbjJU9RJSz0DW0sThgLZRa5exsbmkUSXbVi6LJHnfygYU8Ub53bYwSjowJsQ==
content-length: 27298
x-fb-trip-id: 1904183273
date: Sat, 17 Dec 2022 20:54:57 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-38030962-10&cid=2055566706.1671310494&jid=1488748519&gjid=1899861510&_gid=1534386695.1671310494&_u=YEDAAEABAAAAACAAI~&z=217432845
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-38030962-10&cid=2055566706.1671310494&jid=1488748519&gjid=1899861510&_gid=1534386695.1671310494&_u=YEDAAEABAAAAACAAI~&z=217432845
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-38030962-10&cid=2055566706.1671310494&jid=1488748519&gjid=1899861510&_gid=1534386695.1671310494&_u=YEDAAEABAAAAACAAI~&z=217432845 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.americanexpress.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.americanexpress.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 17 Dec 2022 20:54:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=3778356;type=gcp220;cat=um_mx0;ord=7362382070665;gtm=2wgbu0;auiddc=567078071.1671310494;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=3778356;type=gcp220;cat=um_mx0;ord=7362382070665;gtm=2wgbu0;auiddc=567078071.1671310494;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=3778356;type=gcp220;cat=um_mx0;ord=7362382070665;gtm=2wgbu0;auiddc=567078071.1671310494;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 17 Dec 2022 20:54:57 GMT
expires: Sat, 17 Dec 2022 20:54:57 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-38030962-11&cid=2055566706.1671310494&jid=834383743&gjid=721778109&_gid=1534386695.1671310494&_u=YEBAAEAAAAAAACAAI~&z=940607262
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-38030962-11&cid=2055566706.1671310494&jid=834383743&gjid=721778109&_gid=1534386695.1671310494&_u=YEBAAEAAAAAAACAAI~&z=940607262
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-38030962-11&cid=2055566706.1671310494&jid=834383743&gjid=721778109&_gid=1534386695.1671310494&_u=YEBAAEAAAAAAACAAI~&z=940607262 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.americanexpress.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.americanexpress.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 17 Dec 2022 20:54:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 496d96f69203ab6ad46a661482df3c81
1e09de48fbd4df599eab45d9339ebf6cee9825d7
b43e2510e05b3ca9adfc47f8526c71c732b3f530bd1ecec189a21b777f131498
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4291
Cache-Control: max-age=154789
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Etag: "639dd583-1d7"
Expires: Mon, 19 Dec 2022 15:54:46 GMT
Last-Modified: Sat, 17 Dec 2022 14:43:15 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f3dbc33499e42ecb967c87f0df23a85
96a87c596ae880eb482b0e8a5fdb6e09bb728895
aee03631139a47dfbb4dbbfd4257d10afc3b814b5f70366759bdff153e9e2bd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f3dbc33499e42ecb967c87f0df23a85
96a87c596ae880eb482b0e8a5fdb6e09bb728895
aee03631139a47dfbb4dbbfd4257d10afc3b814b5f70366759bdff153e9e2bd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2850820&time=1671310494123&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2850820&time=1671310494123&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2850820&time=1671310494123&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; Domain=ads.linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&e65e0448-c46d-4eae-85f4-d6efdcbbf902"; Domain=.linkedin.com; Expires=Sun, 17-Dec-2023 20:54:57 GMT; Path=/; Secure; SameSite=None
li_gc=MTswOzE2NzEzMTA0OTc7MjswMjGly6+EDZvFFbJypW9PUwS0X+sKfDbvQMOjrD3sHXu4Dw==; Domain=.linkedin.com; Expires=Thu, 15 Jun 2023 20:54:57 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2438:u=1:x=1:i=1671310497:t=1671396897:v=2:sig=AQEALXHLL5jz2Xe-TIR-WwAJ3WznkHIt"; Expires=Sun, 18 Dec 2022 20:54:57 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXwDEyE/Pk/n53rWC6UdA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: D419EEA9A2A24AB694FBD72C4730EC25 Ref B: OSL30EDGE0306 Ref C: 2022-12-17T20:54:57Z
date: Sat, 17 Dec 2022 20:54:57 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash d8af2145dc94b359df02f2ccc259cb6e
1f573243c2bb8ae935c7ca117cfc7f31908a8080
40d2a841e150d941a1456d104970d25f3c34a186232840e6dcd579ed1f036090
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 17 Dec 2022 20:54:57 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 17 Dec 2022 19:39:07 GMT
Expires: Sun, 18 Dec 2022 19:39:07 GMT
ETag: "1f573243c2bb8ae935c7ca117cfc7f31908a8080"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cdn.linkedin.oribi.io/partner/2850820/domain/americanexpress.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2850820/domain/americanexpress.com/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/2850820/domain/americanexpress.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Origin: https://www.americanexpress.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Sat, 17 Dec 2022 20:54:57 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8qWFswLw26jKFQ8CajLtkfSerYL6SgxTsKAlpUV4LFpC_iRsSPd_Sw==
X-Firefox-Spdy: h2
e.acuityplatform.com/pj?pk=7077298933690398993&pu=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&pixelKey=7077298933690398993
200 OK 1.2 kB URL HTTP/1.1 e.acuityplatform.com/pj?pk=7077298933690398993&pu=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&pixelKey=7077298933690398993
IP
File type ASCII text, with very long lines (1248), with no line terminators
Hash bffda3b393a029a97004a747c45f57ed
c2081d3e7a9d21e3d14d30c8bd1d5d03be67979c
99d7208fe9732ed367f1983320eb6664889db33cf8e8bfbc2833418b670d6a40
GET /pj?pk=7077298933690398993&pu=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&pixelKey=7077298933690398993 HTTP/1.1
Host: e.acuityplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 1248
Set-Cookie: aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBNjT6jXVzZXJNYXRjaGluZ0lkJAKAkWxhc3REcm9wVGltZU1pbGxpcyUBQkg7ZT+YmGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMhj3RoaXJkUGFydHlVc2VySWQh+4E0OfpCJAGiQyUBQkg7ZT+YRCFFIfuCMTI5+kIkBIJDJQFCSDtlP5hEIUUh+4ExN/pCJKJDJQFCSDtlP5hEIUUh+4EzNPpCJAGEQyUBQkg7ZT+YRCFFIfuCMTE2+kIkA6hDJQFCSDtlP5hEIUUh+4IxMzX6QiQEjkMlAUJIO2U/mEQhRSH7gTIz+kIkrkMlAUJIO2U/mEQhRSH7gTEw+kLUQyUBQkg7ZT+YRCFFIfuCMTI3+kIkA75DJQFCSDtlP5hEIUUh+/uGdmVyc2lvbsL7; Domain=.acuityplatform.com; Expires=Sun, 17-Dec-2023 20:54:57 GMT; Path=/; SameSite=None; Secure
auid=721396414540; Domain=acuityplatform.com; Expires=Sun, 17-Dec-2023 20:54:57 GMT; Path=/; SameSite=None; Secure
Access-Control-Allow-Origin: *
www.facebook.com/tr/?id=627144114087933&ev=PageView&dl=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&rl=&if=false&ts=1671310494391&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1671310494389.1619297805&it=1671310494208&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=627144114087933&ev=PageView&dl=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&rl=&if=false&ts=1671310494391&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1671310494389.1619297805&it=1671310494208&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=627144114087933&ev=PageView&dl=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&rl=&if=false&ts=1671310494391&sw=1280&sh=1024&v=2.9.90&r=stable&ec=0&o=28&fbp=fb.1.1671310494389.1619297805&it=1671310494208&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 17 Dec 2022 20:54:57 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 222ae6cab334d7149f49b15d05f510ff
c6b978f63b22a7f47d61d6346b376e54e3167120
6a41863781a968891e704f4c837c6763c27ee4a4ccb7433e4fc07d06f7326d91
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2102
Cache-Control: max-age=114401
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Etag: "639d404c-1d7"
Expires: Mon, 19 Dec 2022 04:41:38 GMT
Last-Modified: Sat, 17 Dec 2022 04:06:36 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
pixel.tapad.com/idsync/ex/receive?partner_id=3150&partner_device_id=721396414540&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D721396414540%26uid%3D%24%7BTA_DEVICE_ID%7D
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive?partner_id=3150&partner_device_id=721396414540&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D721396414540%26uid%3D%24%7BTA_DEVICE_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive?partner_id=3150&partner_device_id=721396414540&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D721396414540%26uid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 17 Dec 2022 20:54:57 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1671310497863;Expires=Wed, 15 Feb 2023 20:54:57 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=10501749-212e-4055-98fe-3506b0aaec3f;Expires=Wed, 15 Feb 2023 20:54:57 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3150&partner_device_id=721396414540&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D721396414540%26uid%3D%24%7BTA_DEVICE_ID%7D
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 222ae6cab334d7149f49b15d05f510ff
c6b978f63b22a7f47d61d6346b376e54e3167120
6a41863781a968891e704f4c837c6763c27ee4a4ccb7433e4fc07d06f7326d91
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2102
Cache-Control: max-age=114401
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Etag: "639d404c-1d7"
Expires: Mon, 19 Dec 2022 04:41:38 GMT
Last-Modified: Sat, 17 Dec 2022 04:06:36 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
secure.adnxs.com/getuid?https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D10%26auid%3D721396414540%26uid%3D%24UID
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/getuid?https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D10%26auid%3D721396414540%26uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D10%26auid%3D721396414540%26uid%3D%24UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 17 Dec 2022 20:54:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fums.acuityplatform.com%252Fsum%253Fumid%253D10%2526auid%253D721396414540%2526uid%253D%2524UID
AN-X-Request-Uuid: a17ba240-5055-44ea-9296-fde33c5bd84f
Set-Cookie: uuid2=7303286111461445944; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 17-Mar-2023 20:54:57 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
pixel.tapad.com/idsync/ex/receive/check?partner_id=3150&partner_device_id=721396414540&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D721396414540%26uid%3D%24%7BTA_DEVICE_ID%7D
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive/check?partner_id=3150&partner_device_id=721396414540&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D721396414540%26uid%3D%24%7BTA_DEVICE_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive/check?partner_id=3150&partner_device_id=721396414540&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D721396414540%26uid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sat, 17 Dec 2022 20:54:57 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1671310497910;Expires=Wed, 15 Feb 2023 20:54:57 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=5d7e1324-8c77-4be1-b14c-98501cedcff7;Expires=Wed, 15 Feb 2023 20:54:57 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_3WAY_SYNCS=;Expires=Wed, 15 Feb 2023 20:54:57 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://ums.acuityplatform.com/sum?umid=64&auid=721396414540&uid=5d7e1324-8c77-4be1-b14c-98501cedcff7
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 4b54a1bb7e351d5bad35a6f055c4fb46
a40243735a9c5fbab354d63babae9b2be77e2fe1
491434f4b0984422d1b36a462888311d241fd0c9777f097714847e9c5165aba7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2350
Cache-Control: max-age=154598
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 20:54:57 GMT
Etag: "639ddc59-1d7"
Expires: Mon, 19 Dec 2022 15:51:35 GMT
Last-Modified: Sat, 17 Dec 2022 15:12:25 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fums.acuityplatform.com%252Fsum%253Fumid%253D10%2526auid%253D721396414540%2526uid%253D%2524UID
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fums.acuityplatform.com%252Fsum%253Fumid%253D10%2526auid%253D721396414540%2526uid%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fums.acuityplatform.com%252Fsum%253Fumid%253D10%2526auid%253D721396414540%2526uid%253D%2524UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sat, 17 Dec 2022 20:54:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ums.acuityplatform.com/sum?umid=10&auid=721396414540&uid=0
AN-X-Request-Uuid: 124ba6a5-6f97-4db2-9e3a-bd4858eafde2
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
pixel.advertising.com/ups/55950/sync?uid=721396414540&_origin=1
301 Moved Permanently 355 B URL HTTP/2 pixel.advertising.com/ups/55950/sync?uid=721396414540&_origin=1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 205bf7fa6ab83c8242ae60e4206fee36
87d16cf6e46f707e63fa62f6954e75bc8ec3845d
8073b874200d6c41d46d69695f6ce03cbb55dc12d4e5d670cfcec8fa7539fb86
GET /ups/55950/sync?uid=721396414540&_origin=1 HTTP/1.1
Host: pixel.advertising.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 17 Dec 2022 20:54:57 GMT
server: ATS/9.1.10.25
cache-control: no-store
location: https://ups.analytics.yahoo.com/ups/55950/sync?uid=721396414540&_origin=1
content-type: text/html
content-language: en
set-cookie: A3=d=AQABBKEsnmMCEIVz0MH7GXGnece1IwTNKlwFEgEBAQF-n2OoYwAAAAAA_eMAAA&S=AQAAAlEGj3AlUzeXk7NoqN8LacI; Expires=Mon, 18 Dec 2023 02:54:57 GMT; Max-Age=31557600; Domain=.advertising.com; Path=/; SameSite=None; Secure; HttpOnly
content-length: 355
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 710b0deaa653fb6b6d1b8788a8ca922a
6cf2bceb02c7e8d00635e23336538f165393fefe
8af4d88988768cc85e4d902e3e9fa40d2c0f7607366154cf0a8c34fe0bbf70ed
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=148375
Date: Sat, 17 Dec 2022 20:54:57 GMT
Etag: "639dbda0-1d7"
Expires: Mon, 19 Dec 2022 14:07:52 GMT
Last-Modified: Sat, 17 Dec 2022 13:01:20 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LAMd4ZP8EZjc5r4DcesAC67gYeDgGxn5fuDwggZvGRf_VLPNkW-C8Q==
Age: 3992
eb2.3lift.com/getuid?redir=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D23%26auid%3D721396414540%26uid%3D%24UID
200 OK 37 B URL HTTP/2 eb2.3lift.com/getuid?redir=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D23%26auid%3D721396414540%26uid%3D%24UID
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /getuid?redir=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D23%26auid%3D721396414540%26uid%3D%24UID HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 17 Dec 2022 20:54:58 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/55950/sync?uid=721396414540&_origin=1
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/55950/sync?uid=721396414540&_origin=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/55950/sync?uid=721396414540&_origin=1 HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sat, 17 Dec 2022 20:54:58 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/55950/sync?uid=721396414540&_origin=1&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBKIsnmMCENVl2h9lhL9hyCodr3AHWmwFEgEBAQF-n2OoYwAAAAAA_eMAAA&S=AQAAAuHthLWd6rtK0j9BPe48fxU; Expires=Mon, 18 Dec 2023 02:54:58 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ums.acuityplatform.com/sum?umid=64&auid=721396414540&uid=5d7e1324-8c77-4be1-b14c-98501cedcff7
204 No Content 0 B URL HTTP/1.1 ums.acuityplatform.com/sum?umid=64&auid=721396414540&uid=5d7e1324-8c77-4be1-b14c-98501cedcff7
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sum?umid=64&auid=721396414540&uid=5d7e1324-8c77-4be1-b14c-98501cedcff7 HTTP/1.1
Host: ums.acuityplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
access-control-allow-origin: *
set-cookie: auid=721415555206; Domain=.acuityplatform.com; Expires=Sun, 17-Dec-2023 20:54:58 GMT; Path=/; SameSite=None; Secure
aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBNjT6jXVzZXJNYXRjaGluZ0lkJAKAkWxhc3REcm9wVGltZU1pbGxpcyUBQkg7ZUeImGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMlAUJIO2VHiI90aGlyZFBhcnR5VXNlcklkYzVkN2UxMzI0LThjNzctNGJlMS1iMTRjLTk4NTAxY2VkY2ZmN/v7hnZlcnNpb27C+w=="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Sun, 17-Dec-2023 20:54:58 GMT; Path=/; SameSite=None; Secure
x-acuity-userid: 721415555206
access-control-expose-headers: X-Acuity-UserID
tags.bluekai.com/site/37592?id=123456&limit=0&redir=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D49%26auid%3D721396414540%26uid%3D%24_BK_UUID
302 Found 0 B URL HTTP/2 tags.bluekai.com/site/37592?id=123456&limit=0&redir=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D49%26auid%3D721396414540%26uid%3D%24_BK_UUID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /site/37592?id=123456&limit=0&redir=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D49%26auid%3D721396414540%26uid%3D%24_BK_UUID HTTP/1.1
Host: tags.bluekai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-length: 0
location: https://ums.acuityplatform.com/sum?umid=49&auid=721396414540&uid=$_BK_UUID
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Sat, 17 Dec 2022 20:54:58 GMT
set-cookie: bku=tJ/99vWL7ZmAs6xj; Path=/; Domain=.bluekai.com; Expires=Sat, 17 Jun 2023 20:54:57 GMT; Secure; SameSite=None
bkpa=KJyA0WlnQp919mO4WT2IJncixPfK/RVhLtzoNgs9xV7Eydf2RnL2wW6VthLSICcdJWT5WFKrmAEaogjvK8x6Fz0rewxwb9a26P0cgRi2g0wRX6hSqbzYIkyD0OKPYeEpYmCYIUg9MAqcc44z9go49FJbKbpnzoXd9yYkN0Kg; Path=/; Domain=.bluekai.com; Expires=Sat, 17 Jun 2023 20:54:57 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2
ums.acuityplatform.com/sum?umid=10&auid=721396414540&uid=0
204 No Content 0 B URL HTTP/1.1 ums.acuityplatform.com/sum?umid=10&auid=721396414540&uid=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sum?umid=10&auid=721396414540&uid=0 HTTP/1.1
Host: ums.acuityplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
ups.analytics.yahoo.com/ups/55950/sync?uid=721396414540&_origin=1&verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/55950/sync?uid=721396414540&_origin=1&verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/55950/sync?uid=721396414540&_origin=1&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sat, 17 Dec 2022 20:54:58 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBKIsnmMCEIyshJJqmmy04gKoWqYFSooFEgEBAQF-n2OoYwAAAAAA_eMAAA&S=AQAAAq5gSdNLzuecvF57NV9u0ok; Expires=Mon, 18 Dec 2023 02:54:58 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ums.acuityplatform.com/sum?umid=49&auid=721396414540&uid=$_BK_UUID
204 No Content 0 B URL HTTP/1.1 ums.acuityplatform.com/sum?umid=49&auid=721396414540&uid=$_BK_UUID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sum?umid=49&auid=721396414540&uid=$_BK_UUID HTTP/1.1
Host: ums.acuityplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
ocsp.sectigo.com/
200 OK 472 B IP
Hash 94a3b5e7ac632fcb960904a960477d0d
399812a040820b9ae3bd4f5ad1a152282735814c
a5fa1a9668c1ad2ac317cae3843f9055f7bd3a97db50ad5417c6bdd3ed5117e7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 17 Dec 2022 20:54:58 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 17 Dec 2022 13:55:57 GMT
Expires: Sat, 24 Dec 2022 13:55:56 GMT
Etag: "399812a040820b9ae3bd4f5ad1a152282735814c"
Cache-Control: max-age=579057,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77b28e93cc14b4ee-OSL
sync.1rx.io/usersync/acuityads/721396414540
204 No Content 0 B URL HTTP/2 sync.1rx.io/usersync/acuityads/721396414540
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usersync/acuityads/721396414540 HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 17 Dec 2022 20:54:58 GMT
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 489bcce06333557aa2640067ff717358
d9d95da5900d177b82c935d34667d32704916cf1
81ca347fe11a2476c5b3bcb593b2da563e3c2353cd96a71acac8afd4d8464834
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 17 Dec 2022 20:54:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 17 Dec 2022 01:56:51 GMT
Expires: Sat, 24 Dec 2022 01:56:50 GMT
Etag: "d9d95da5900d177b82c935d34667d32704916cf1"
Cache-Control: max-age=535911,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77b28e948f2bb51e-OSL
x.bidswitch.net/sync?dsp_id=236&user_id=721396414540&expires=30&user_group=1
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=236&user_id=721396414540&expires=30&user_group=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=236&user_id=721396414540&expires=30&user_group=1 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 17 Dec 2022 20:54:58 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=236&user_id=721396414540&expires=30&user_group=1
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=a4dab618-5576-4254-b15e-053d380ff214; path=/; expires=Sun, 17-Dec-2023 20:54:58 GMT; domain=.bidswitch.net; samesite=none; secure
c=1671310498; path=/; expires=Sun, 17-Dec-2023 20:54:58 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1671310498; path=/; expires=Sun, 17-Dec-2023 20:54:58 GMT; domain=.bidswitch.net; samesite=none; secure
c=1671310498; path=/; expires=Sun, 17-Dec-2023 20:54:58 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?dsp_id=236&user_id=721396414540&expires=30&user_group=1
302 Found 0 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=236&user_id=721396414540&expires=30&user_group=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ul_cb/sync?dsp_id=236&user_id=721396414540&expires=30&user_group=1 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sat, 17 Dec 2022 20:54:58 GMT
content-length: 0
cache-control: no-cache, no-store, must-revalidate
location: //match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=721396414540&seat_key=236&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash cbf1cf5e00ee33c4000ad88825b4158b
9f3c3d17f210f433b6fa0cbd7856485099da4c98
96f39983b2b397bd89da08de8df2e826d880fccda5c69d7e89fc65269db82fdb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 17 Dec 2022 20:54:58 GMT
Last-Modified: Sat, 17 Dec 2022 19:52:55 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3Ojc09LVZfYtBv2_P_0F-G4YDIgg6sO_8RkKH3gkuMrnzddm5eef5g==
Age: 3723
match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=721396414540&seat_key=236&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=721396414540&seat_key=236&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=721396414540&seat_key=236&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy= HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 17 Dec 2022 20:54:58 GMT
X-Firefox-Spdy: h2
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=553508795957167000
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=553508795957167000
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=553508795957167000 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Sat, 17 Dec 2022 20:54:59 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: F931GBWFM37APEA7EK02
Set-Cookie: ad-id=AyrkcmsxBU72lhkqj6ccAyo|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 20:54:59 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=553508795957167000&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=553508795957167000&dcc=t
200 OK 65 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=553508795957167000&dcc=t
IP
File type HTML document, ASCII text
Hash 22fdf49482d8200e8f305bbe262eff14
f254bd4053267c2cf46675613e689016d8b7f775
115d83ece49fd1c5769409aab9d78572eed86cd38a0556b4cdeeac82c83091d3
GET /iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=553508795957167000&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Sat, 17 Dec 2022 20:54:59 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 65
Connection: keep-alive
x-amz-rid: NW2XVGXBY0WAK7853CXN
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 86be9c16e4a62785e7f3a0cc8a956143
6cac191c918ff47d3e66e327e8c8a9c0fec9a88b
81dfec15eb1dc19acae5071663b9deaa9fa11f00378e36871c5b31a548a0626b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8002
x-amzn-requestid: bcaeff23-947f-441a-8aea-1e0d54f2cc3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjD7GjdoAMFVIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce54c-5fb0d9d76945c4f63d210806;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iWxLKwjIxP-hiy4A3yvosYlQAzRu0STuwy4K9LuqK77WphLXQH9m6A==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:19 GMT
age: 83685
etag: "6cac191c918ff47d3e66e327e8c8a9c0fec9a88b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
connect.facebook.net/signals/config/627144114087933?v=2.9.90&r=stable
200 OK 0 B URL HTTP/2 connect.facebook.net/signals/config/627144114087933?v=2.9.90&r=stable
IP
GET /signals/config/627144114087933?v=2.9.90&r=stable HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: gGMCWSdqKMPOZpXMo+xoeC3UkocTKpcqOfnD7sReBawVP4HYdGHX5nWstvKjfJhX5LmzQdo5XlT/B1neRM9buA==
x-fb-trip-id: 1904183273
date: Sat, 17 Dec 2022 20:54:57 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/2850820/domain/americanexpress.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2850820/domain/americanexpress.com/token
IP
GET /partner/2850820/domain/americanexpress.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.americanexpress.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Sat, 17 Dec 2022 20:54:57 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Miss from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rb4WN7dskhkzWRI89P7Nd2eIpd7_YLmwudVoHKou3P2gHP2YobTZJg==
X-Firefox-Spdy: h2
18.192.108.151
34.91.226.152
142.250.74.131
23.38.201.22
93.184.220.29
31.13.72.36