www.wownicepop.com/ef154031-44a3-4b92-b57f-08535742d9a3
302 0 B URL HTTP/1.1 www.wownicepop.com/ef154031-44a3-4b92-b57f-08535742d9a3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /ef154031-44a3-4b92-b57f-08535742d9a3 HTTP/1.1
Host: www.wownicepop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Sun, 27 Nov 2022 14:48:16 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://track.go2aluna.co/click?pid=177&offer_id=1448&l=1660054194&sub1=wj7se287a5tnm6pk2p94pbco&sub2=s2
Pragma: no-cache
Set-Cookie: ef154031-44a3-4b92-b57f-08535742d9a3-v4=jQL4uz6yfzNwLVdq4MO6tULWEce6HY0w0qWJbp7XrG0; Max-Age=86400; Expires=Mon, 28-Nov-2022 14:48:16 GMT; Domain=www.wownicepop.com; Path=/; HttpOnly
cc-v4=%2Fr4jpVOZNNw%2BuuPi97ibqvCDDrc25vWqWqkBMVF9chEGBq%2BVuNpVe8kfqoW6yl0Ib9jkeOrhBn3UJLO1gLMw9wlNGu%2BoN1keSMOyauvjFxyRu7Mkfs6uESpsxtqmzblI2ip4atwW9hiGdgjECfdtvA%3D%3D; Max-Age=31536000; Expires=Mon, 27-Nov-2023 14:48:16 GMT; Domain=www.wownicepop.com; Path=/; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6782
Expires: Sun, 27 Nov 2022 16:41:18 GMT
Date: Sun, 27 Nov 2022 14:48:16 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1279
Cache-Control: max-age=158656
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:16 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 10:52:32 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6656
Expires: Sun, 27 Nov 2022 16:39:12 GMT
Date: Sun, 27 Nov 2022 14:48:16 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 14:17:40 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1836
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2NBzSIrGx++dsWiybQ4tD7eSgWcU8u4I2AMZNPX7pyH2pbA1YbYTX6Pk/LPJjStm25YZx7ULA30k2FGoOB744w==
x-amz-request-id: 3NTD38BW8Z6CMPAD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 14:44:40 GMT
age: 216
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 14:48:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 79292f86a74cf9d0156d3dc2c40f0948
130bbe855b2e5614647a468c7d9bf3d81bcc17ab
51c4517900f536df1071c8d08cae655c4a4a01564f90a0c098750a712db60215
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 14:48:17 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 08:07:54 GMT
Expires: Sat, 03 Dec 2022 08:07:53 GMT
Etag: "130bbe855b2e5614647a468c7d9bf3d81bcc17ab"
Cache-Control: max-age=493775,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770ba9f2cbf0b50b-OSL
track.go2aluna.co/click?pid=177&offer_id=1448&l=1660054194&sub1=wj7se287a5tnm6pk2p94pbco&sub2=s2
302 Found 0 B URL HTTP/2 track.go2aluna.co/click?pid=177&offer_id=1448&l=1660054194&sub1=wj7se287a5tnm6pk2p94pbco&sub2=s2
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=177&offer_id=1448&l=1660054194&sub1=wj7se287a5tnm6pk2p94pbco&sub2=s2 HTTP/1.1
Host: track.go2aluna.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Sun, 27 Nov 2022 14:48:17 GMT
content-length: 0
location: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs
x-adjust-use-original-forwarded-for: 1
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash db6e0d3e826b5e702930cf39fbf804e1
de2e18ac2b0da7fd0d4a51ce0e0d7a592f46fd79
e6a8dfba7490716376cb4256d44f0a207b0c6042cd91865fa9473e5c92d195c5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3731
Cache-Control: max-age=127999
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:17 GMT
Etag: "6382bb1d-1d7"
Expires: Tue, 29 Nov 2022 02:21:36 GMT
Last-Modified: Sun, 27 Nov 2022 01:19:25 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs
301 Moved Permanently 0 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /es-mx/negocios/empresarial/eapply/registro/sbs HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
location: /es-mx/negocios/empresarial/eapply/registro/sbs/
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
x-permitted-cross-domain-policies: master-only
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770ba9f4bc1f6396-ORD
content-length: 0
date: Sun, 27 Nov 2022 14:48:17 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:17 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 14:11:12 GMT
cache-control: public,max-age=3600
age: 2225
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2854
Cache-Control: max-age=155169
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:17 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 09:54:26 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
200 OK 8.0 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 9c887b7c0ef0f8b3aaa846b49140c799
464ee7b266808c02dca102c0fda8b330d856c8b2
7378a11e77b98820f4807141547ced0006ff903547238e2cd00830fa58b39bf9
GET /es-mx/negocios/empresarial/eapply/registro/sbs/ HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
x-permitted-cross-domain-policies: master-only
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 770ba9f63fc92191-ORD
content-encoding: gzip
content-length: 8009
vary: Cookie, Accept-Encoding
date: Sun, 27 Nov 2022 14:48:17 GMT
set-cookie: csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8; expires=Sun, 26 Nov 2023 14:46:24 GMT; Max-Age=31449600; Path=/; SameSite=Lax
agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:17 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/js/validator_forms.js
200 OK 266 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/js/validator_forms.js
IP
Hash ac6b90ff35a0a90bcf8b45c2dd8d9e12
926598ed864545f6c38623c37a258492bbca5ecd
f7db50e7abbf35c6eba7a2c9a626ea3b4de3aadd94cc3427c76fe5c79d27afde
GET /es-mx/negocios/empresarial/eapply/registro/static/form/js/validator_forms.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=640
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
etag: W/"635cb65e-280"
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7fecb9e29ad-ORD
content-encoding: gzip
content-length: 266
date: Sun, 27 Nov 2022 14:48:17 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:17 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/core/jquery.3.2.1.min.js
200 OK 30 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/core/jquery.3.2.1.min.js
IP
File type ASCII text, with very long lines (32058)
Hash 165a43244de5b28bfdb9422e0ad82b68
dd12888e259036e6c6986a0c65a3b3e38b697f54
200e3fccd025dffd3f7c6ad186f87ea51737db6c85e279b0d8b9626ad7ce1954
GET /es-mx/negocios/empresarial/eapply/registro/static/js/core/jquery.3.2.1.min.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-15283"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7fefed72a51-ORD
content-encoding: gzip
content-length: 30177
date: Sun, 27 Nov 2022 14:48:17 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:17 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/core/bootstrap.min.js
200 OK 15 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/core/bootstrap.min.js
IP
File type ASCII text, with very long lines (62284)
Hash f5a4629824a6ce8fc8e3581cc457f92e
6f203f05031323902d71cf743c056f742caf77d1
8572332e9ec66d7b73fafa2490c1ce6862d100a8967ffb22f9068112d3bf8f04
GET /es-mx/negocios/empresarial/eapply/registro/static/js/core/bootstrap.min.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-f463"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7feda902db6-ORD
content-encoding: gzip
content-length: 15230
date: Sun, 27 Nov 2022 14:48:17 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:17 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/plugins/fetchEapplyForms.js
200 OK 888 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/plugins/fetchEapplyForms.js
IP
Hash 90e7213207869e63db5e13ec77d96aa6
14d9e3e42a44d31017c8a071aa28160d914e6d42
d9958d7a19c4081fb5cfc9379ba1e09d1b908454ad55372d116b260d3957a0fc
GET /es-mx/negocios/empresarial/eapply/registro/static/js/plugins/fetchEapplyForms.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-8ac"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7ff8c318105-ORD
content-encoding: gzip
content-length: 888
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/plugins/getUrlUtms.js
200 OK 364 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/plugins/getUrlUtms.js
IP
Hash 29f6579dbd89c2384d67fa2622d38b04
9085e2bc38f285584e3efc15b8f52ed99a1e41fe
890cc1a0928e9df3f0acb96dd67a73c3feeddae7185889e4e9ed3d57cd812083
GET /es-mx/negocios/empresarial/eapply/registro/static/js/plugins/getUrlUtms.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-36c"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7ff8c9ee1cb-ORD
content-encoding: gzip
content-length: 364
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/css/bootstrap.min.css
200 OK 24 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65326)
Hash 3dd21bbe6323c679d09f17cccc99e2b0
03c3cfd858b9530fedd2e031ff202e9f02d33efd
d7848a7a7cd3fab8a37a546e5c20f1a2a6a8d8b6bd3c4e22767206f69e7f455a
GET /es-mx/negocios/empresarial/eapply/registro/static/css/bootstrap.min.css HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-279d8"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab801f9722d2e-ORD
content-encoding: gzip
content-length: 24136
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0SOSQ1bIsv4eWfdHxscgvQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: EYFRsQa8wuLnflJv/fTeRfdP5wM=
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/loader.css
200 OK 423 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/loader.css
IP
Hash 891eef0831c04f4a86f5791c543f9bad
548187f3a615d0b9ec17a4b3c7800c60f6d84dca
bdd17a41436c8496d155f362a54bf3c78c7d62d5d971ca61ac9b461e89aa8899
GET /es-mx/negocios/empresarial/eapply/registro/static/form/css/loader.css HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-3ff"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7ff5d1b2d2e-ORD
content-encoding: gzip
content-length: 423
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NVBQ5RK
200 OK 82 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NVBQ5RK
IP
File type ASCII text, with very long lines (27437)
Hash 29c013884364bad4aae3b8c89558c8f0
3d89662ce27eef6e01012820f4f94ea798297bdf
4967c8920346aa02e6fd2ff6c0429a394f9b6077ff4559bad58803c712e7d213
GET /gtm.js?id=GTM-NVBQ5RK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 27 Nov 2022 14:48:18 GMT
expires: Sun, 27 Nov 2022 14:48:18 GMT
cache-control: private, max-age=900
last-modified: Sun, 27 Nov 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82183
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/js/calcula_rfc.js
200 OK 2.3 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/js/calcula_rfc.js
IP
Hash 6d518a52a1a685e3acfbe45429ac5e97
3974558ecb08a67950147fa394d5fbd01909bb78
64294e249021a07a30b605b1aa284011b13e7be7ca70c2095920557858faa871
GET /es-mx/negocios/empresarial/eapply/registro/static/form/js/calcula_rfc.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=17381
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
etag: W/"635cb65e-43e5"
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7ff9feee17c-ORD
content-encoding: gzip
content-length: 2250
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/core/popper.min.js
200 OK 7.4 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/js/core/popper.min.js
IP
File type ASCII text, with very long lines (20800)
Hash 28ca39afb5c7ee480ec72fe4c5abace6
626b6f58ed1ba1a270dd1a9f2f7b0e102db23ec6
2478d24c2caf36605f02d218ab045666d0ceab3faa5cf9c805931c9e840a2276
GET /es-mx/negocios/empresarial/eapply/registro/static/js/core/popper.min.js HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-51c6"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767dc0a9fe5a8c93-EWR
content-encoding: gzip
content-length: 7395
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/tarjetas-amex-01.png
200 OK 213 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/tarjetas-amex-01.png
IP
File type PNG image data, 646 x 236, 8-bit/color RGBA, non-interlaced\012- data
Size 213 kB (212751 bytes)
Hash db4433328c6488c5ec7fa6dace282a81
a8b4620fed27fe855b023ef5da151ba8f0184c8c
5f0d5dfa5230fe993cf1923d8016dcac4f92499c894d4ecde8ef98aaff3ee2f6
GET /es-mx/negocios/empresarial/eapply/registro/static/form/img/tarjetas-amex-01.png HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 212751
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: "635cb65e-33f0f"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 768063b0cf216174-ORD
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/sbs_gold.png
200 OK 295 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/sbs_gold.png
IP
File type PNG image data, 500 x 315, 8-bit/color RGBA, non-interlaced\012- data
Size 295 kB (294581 bytes)
Hash eac1e11480047f34d9f4079aff7be4cb
1615f5fa47edc4e934931089946dd0c76c3aefe4
72238f61ed7a328d6efef84cfd3a1c24fb3b5f05d23ae3e80c03be87593a43db
GET /es-mx/negocios/empresarial/eapply/registro/static/form/img/sbs_gold.png HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 294581
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: "635cb65e-47eb5"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7680650d9ecc8123-ORD
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/style_forms.css
200 OK 820 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/style_forms.css
IP
Hash 4cf2776a574795c94b96101686b47ca6
4708492c1835741905ab2b7f22bf152cbe060bd2
6cf88f1dc6a8b8f7ecfdc18551abd1d0dc5cecefa8f91a0e517ee2b71659fcb0
GET /es-mx/negocios/empresarial/eapply/registro/static/form/css/style_forms.css HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-955"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7acb9862a5d-ORD
content-encoding: gzip
content-length: 820
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/main_sbs_mobile.css
200 OK 26 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/main_sbs_mobile.css
IP
File type Unicode text, UTF-8 text, with very long lines (65386)
Hash 8be84c1b80ae7ceb2afeb070babc9677
820eb254e1294022166130551c07180dfc5cabd3
05fe5f900f3c504db2c8d850bbaebba961b968da148bd8be5ad48075ef275d74
GET /es-mx/negocios/empresarial/eapply/registro/static/form/css/main_sbs_mobile.css HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
cf-bgj: minify
cf-polished: origSize=209997
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
etag: W/"635cb65e-3344d"
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: REVALIDATED
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7ff3fcc2a5d-ORD
content-encoding: gzip
content-length: 26139
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9cff2c2ad4207e09e07c017987177850
833082ded91a1983a1367c48c8076949e079ce95
82b03e92d004f116875ba023a7e8782d3c124a1c499a6328f29cff70f397a6cc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3778356.fls.doubleclick.net/activityi;src=3778356;type=gcp220;cat=um_mx0;ord=6575194318586;gtm=2wgb90;auiddc=419013214.1669560498;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F?
200 OK 310 B URL HTTP/2 3778356.fls.doubleclick.net/activityi;src=3778356;type=gcp220;cat=um_mx0;ord=6575194318586;gtm=2wgb90;auiddc=419013214.1669560498;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (582), with no line terminators
Hash 382e7ea8990a65720f215578dea7969c
228a383ab9c2d84d80f9ec4c68574f48edfa7b95
4ebb5b1cb43ebd461ee445a348874fc9700078ec5f8b9941a2f63b322c395d67
GET /activityi;src=3778356;type=gcp220;cat=um_mx0;ord=6575194318586;gtm=2wgb90;auiddc=419013214.1669560498;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F? HTTP/1.1
Host: 3778356.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 27 Nov 2022 14:48:18 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 310
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 27-Nov-2022 15:03:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9cff2c2ad4207e09e07c017987177850
833082ded91a1983a1367c48c8076949e079ce95
82b03e92d004f116875ba023a7e8782d3c124a1c499a6328f29cff70f397a6cc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 88e42375d2172305f819b892225cf877
674324641f82700172e72fe259ee2241361e2ea1
6dce3754a67df878b536c368657a492a1f908d408fe7fe5ba43c5d24c44434b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads-engagement.presage.io/pixel?site=americanexpress.com&e=session&id=session_duration&full_url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F>mcb=1916251371
200 OK 35 B URL HTTP/1.1 ads-engagement.presage.io/pixel?site=americanexpress.com&e=session&id=session_duration&full_url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F>mcb=1916251371
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /pixel?site=americanexpress.com&e=session&id=session_duration&full_url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F>mcb=1916251371 HTTP/1.1
Host: ads-engagement.presage.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cache-Control: no-store
Date: Sun, 27 Nov 2022 14:48:18 GMT
ETag: W/"23-1840f5b4ac0"
Last-Modified: Tue, 25 Oct 2022 13:35:52 GMT
X-Powered-By: Express
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: iifY21w3yZnqVtNHwStkyEg6nVm7CAtc6d-emYJtgQmhr-7kKnvxBQ==
adservice.google.com/ddm/fls/i/src=3778356;type=gcp220;cat=um_mx0;ord=6575194318586;gtm=2wgb90;auiddc=419013214.1669560498;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F
200 OK 312 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=3778356;type=gcp220;cat=um_mx0;ord=6575194318586;gtm=2wgb90;auiddc=419013214.1669560498;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (581), with no line terminators
Hash a5bb4467934e81e1cb7e43ca30aeae3d
6a8ce305a368257c4562cb61ce4c1c44d47f10ee
05e28b2c2ff93ce37461310549d48d0ed4e0a3eb8d1f6b3c6fd80f5f727f77e5
GET /ddm/fls/i/src=3778356;type=gcp220;cat=um_mx0;ord=6575194318586;gtm=2wgb90;auiddc=419013214.1669560498;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://3778356.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 27 Nov 2022 14:48:18 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 312
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/style_modal.css
200 OK 430 B URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/style_modal.css
IP
Hash 81e6b0bf3fb2a9a254a07687ab3ef518
7eb6b5ead1ca9547ee0490fde6c83e5942ce1c86
05c121db27bdf952ce9234e598823feb78b9985d820561ef1d35f3bd79b29c58
GET /es-mx/negocios/empresarial/eapply/registro/static/form/css/style_modal.css HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: W/"635cb65e-516"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: max-age=14400
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 767ab7ff6a382c5c-ORD
content-encoding: gzip
content-length: 430
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 88e42375d2172305f819b892225cf877
674324641f82700172e72fe259ee2241361e2ea1
6dce3754a67df878b536c368657a492a1f908d408fe7fe5ba43c5d24c44434b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d3c9b092aee5820bdab6595daad65d61
89e983faeedf25b3e15696f9bf6dbf76feb07868
58d24c4dde4a578c2c0191a19a5a42bdcb5be03b21a1907f60c8deaee78b7331
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/tarjetas-amex-02.png
200 OK 162 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/tarjetas-amex-02.png
IP
File type PNG image data, 529 x 237, 8-bit/color RGBA, non-interlaced\012- data
Size 162 kB (161756 bytes)
Hash 9a010e1f81d261fc769f0eea545a9c39
8503402b61a2bd1952c4ae40a0e24223fc6dbeac
246c726bd276730552d9be612ce9ba7bb29c86fc4a0d24e299f3d12b3bbc6426
GET /es-mx/negocios/empresarial/eapply/registro/static/form/img/tarjetas-amex-02.png HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 161756
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: "635cb65e-277dc"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 768063ba19fe6174-ORD
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=3778356;type=gcp220;cat=um_mx0;ord=6575194318586;gtm=2wgb90;auiddc=419013214.1669560498;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=3778356;type=gcp220;cat=um_mx0;ord=6575194318586;gtm=2wgb90;auiddc=419013214.1669560498;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=3778356;type=gcp220;cat=um_mx0;ord=6575194318586;gtm=2wgb90;auiddc=419013214.1669560498;u26=undefined;u28=undefined;u29=undefined;u30=undefined;u31=undefined;~oref=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 27 Nov 2022 14:48:18 GMT
expires: Sun, 27 Nov 2022 14:48:18 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/fonts/BentonSans.ttf
200 OK 21 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/fonts/BentonSans.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 24 names, Macintosh\012- data
Hash 4fb97718a145b1bc78c2dbc0a586c34b
d736eedcf6aa2465909f65ea246a287edf2c91ac
030382fc1b425c7d8a0d9c86d202b6da927d69dbab54128cf2f2dc162c85600a
GET /es-mx/negocios/empresarial/eapply/registro/static/form/fonts/BentonSans.ttf HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/main_sbs_mobile.css
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8; _gcl_au=1.1.419013214.1669560498
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 20580
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: "635cb65e-5064"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 768061f1a9891885-EWR
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d3c9b092aee5820bdab6595daad65d61
89e983faeedf25b3e15696f9bf6dbf76feb07868
58d24c4dde4a578c2c0191a19a5a42bdcb5be03b21a1907f60c8deaee78b7331
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.americanexpress.com/favicon.ico
200 OK 1.4 kB URL HTTP/2 www.americanexpress.com/favicon.ico
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 3b59e51534607dfefbcce3772b913031
77bb0792ab706ca3a687c5df968814f11fd96bfe
d3f8ea2f4b84bdc76bac4cd065481deb32efafb2b412906beeafc46b2f80217a
GET /favicon.ico HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8; _gcl_au=1.1.419013214.1669560498
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=15552000;
last-modified: Fri, 07 Jun 2019 04:05:21 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1381
x-cnection: close
content-type: image/x-icon
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/fondo.png
200 OK 397 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/img/fondo.png
IP
File type PNG image data, 3000 x 2859, 4-bit colormap, non-interlaced\012- data
Size 397 kB (396989 bytes)
Hash b50172e38659bb8134608e4333379b7d
9fcad94a0523c32d168699caccbf9307e4c70127
2fb4208dd39055d7ff2d9db7d54d172a05fe844d31b0a657d7b8a5871140e23e
GET /es-mx/negocios/empresarial/eapply/registro/static/form/img/fondo.png HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/main_sbs_mobile.css
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8; _gcl_au=1.1.419013214.1669560498
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 396989
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: "635cb65e-60ebd"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 768061f10ccc8c59-EWR
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f79de44e08c43da30a3c6c5291fdc427
1a07b622d844d4793fe4767199f5f33f0f3229e2
d536b31b46e283bf64ff0c3e3bf29c706f1d5c2b63d82bc41c76e15bf4a06fe2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1668
Cache-Control: max-age=130929
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:18 GMT
Etag: "6382ce9f-1d7"
Expires: Tue, 29 Nov 2022 03:10:27 GMT
Last-Modified: Sun, 27 Nov 2022 02:42:39 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.6 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (12961)
Hash c1a25b303b61b25e995516f5559bcdea
3c16a6fa3a2a6dc59d57a9ea1588c4f259884688
2063d2d1415ce9437e9331cb9a798714a5b2e106a65d6dc0ef0d426a5a4c30f2
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 17 Nov 2022 18:52:45 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=15222
date: Sun, 27 Nov 2022 14:48:18 GMT
content-length: 4581
x-cdn: AKAM
X-Firefox-Spdy: h2
www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/fonts/BentonSans-Bold.woff2
200 OK 11 kB URL HTTP/2 www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/fonts/BentonSans-Bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 10844, version 1.0\012- data
Hash ab4ac001875e7d8aee3f9b91c6c3c019
4e46d6b8edf98c7e8ba53d42cd1183591a612393
1aec4ee690e29124c2bda41476335915a78ca867eb2bfc7de299d6f2936fdd0c
GET /es-mx/negocios/empresarial/eapply/registro/static/form/fonts/BentonSans-Bold.woff2 HTTP/1.1
Host: www.americanexpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/static/form/css/main_sbs_mobile.css
Connection: keep-alive
Cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; csrftoken=i31u3X7Dh595uwUinLfbqZOSU8VnFFmOeDE5tEzetKY22LAxSkd7661e8IzZgdB8; _gcl_au=1.1.419013214.1669560498
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 10844
last-modified: Sat, 29 Oct 2022 05:13:02 GMT
etag: "635cb65e-2a5c"
x-xss-protection: 1; mode=block
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
x-frame-options: DENY
x-content-type-options: nosniff
feature-policy: geolocation none;midi none;notifications none;push none;sync-xhr none;microphone none;camera none;magnetometer none;gyroscope none;speaker self;vibrate none;fullscreen self;payment none;
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
accept-ranges: bytes
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 768061f1af5a197c-EWR
date: Sun, 27 Nov 2022 14:48:18 GMT
set-cookie: agent-id=b12beb55-2435-4a6e-b811-b302dc10c5f6; expires=Mon, 27-Nov-2023 14:48:18 GMT; path=/; domain=.americanexpress.com; secure; HttpOnly
X-Firefox-Spdy: h2
origin.acuityplatform.com/event/v2/pixel.js
200 OK 2.3 kB URL HTTP/1.1 origin.acuityplatform.com/event/v2/pixel.js
IP
File type HTML document, ASCII text, with very long lines (2331)
Hash b16e1dbd11614051243b74b039cba90d
f74e380ac3b747a48889c8a19c77839de4e36c1a
0a104bc2466725f7c114ba0a22d2dad7c84eafcde480dd76b1e05c4c73c7b2bb
GET /event/v2/pixel.js HTTP/1.1
Host: origin.acuityplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Content-Type: application/javascript
Content-Length: 2332
Last-Modified: Tue, 22 Nov 2022 18:12:19 GMT
ETag: "637d1103-91c"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Sun, 27 Nov 2022 14:48:18 GMT
Connection: keep-alive
connect.facebook.net/en_US/fbevents.js
200 OK 22 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (28921)
Hash 6d964e2596cf7e7d48a459f0aa4ca249
05ce70e11abcca3eb2f308bc835b789ba53b4210
ae5fd325ce55a3fd0f7517fe90542d2e1ace5904166ccdb7268cbd88230617d5
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: hvHGwp2Qo3eVurTvwq+fAckIQU/ZXn3039qdtKzl6PhGZ6Q6YI+Pr/cpe8aEUnwJEnxqDZm5CfiZ4PY19RlHcw==
priority: u=3,i
content-length: 22473
x-fb-trip-id: 2074150462
date: Sun, 27 Nov 2022 14:48:18 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 770555aa8a0a52c611bafb289ca8a650
62504cadc49747f328e3c31ad3aa7a740043072c
6317c8530220392b1339be640b8c1181c468ff8e3f3d1d5692b39cb32404216f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9f6cc8d3fe9092a6d3901e873a87fd87
2e0aac117a4cc57596efb3d6f6624c269f94b031
e73982e62b92abac3d15b161f4525448cc2bc8b9bacefdcbfc6f87b74ec372e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/805879087/?random=1669560497974&cv=11&fst=1669560497974&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=419013214.1669560498&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/805879087/?random=1669560497974&cv=11&fst=1669560497974&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=419013214.1669560498&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/805879087/?random=1669560497974&cv=11&fst=1669560497974&fmt=3&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=419013214.1669560498&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 27 Nov 2022 14:48:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 27-Nov-2022 15:03:19 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f79de44e08c43da30a3c6c5291fdc427
1a07b622d844d4793fe4767199f5f33f0f3229e2
d536b31b46e283bf64ff0c3e3bf29c706f1d5c2b63d82bc41c76e15bf4a06fe2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1669
Cache-Control: max-age=130929
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:19 GMT
Etag: "6382ce9f-1d7"
Expires: Tue, 29 Nov 2022 03:10:28 GMT
Last-Modified: Sun, 27 Nov 2022 02:42:39 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
www.google.com/pagead/1p-conversion/805879087/?random=1669560497974&cv=11&fst=1669560497974&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=419013214.1669560498&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL HTTP/2 www.google.com/pagead/1p-conversion/805879087/?random=1669560497974&cv=11&fst=1669560497974&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=419013214.1669560498&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/805879087/?random=1669560497974&cv=11&fst=1669560497974&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=419013214.1669560498&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 27 Nov 2022 14:48:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/805879087/?random=1669560497974&cv=11&fst=1669560497974&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=419013214.1669560498&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/2850820/domain/americanexpress.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/2850820/domain/americanexpress.com/token
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /partner/2850820/domain/americanexpress.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Origin: https://www.americanexpress.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
date: Sat, 26 Nov 2022 21:05:36 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RJSNUzXyUNrfCx9Ej9CVtlSBJlra6ZAtyLYV5TBAUPiht9i19fHwCw==
age: 63763
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 770555aa8a0a52c611bafb289ca8a650
62504cadc49747f328e3c31ad3aa7a740043072c
6317c8530220392b1339be640b8c1181c468ff8e3f3d1d5692b39cb32404216f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/pagead/1p-conversion/805879087/?random=1669560497974&cv=11&fst=1669560497974&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=419013214.1669560498&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/805879087/?random=1669560497974&cv=11&fst=1669560497974&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=419013214.1669560498&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/805879087/?random=1669560497974&cv=11&fst=1669560497974&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&label=BT3WCK2YldkDEK_6ooAD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&tiba=American%20Express%20%7C%20Inicio&value=1¤cy_code=MXN&bttype=purchase&auid=419013214.1669560498&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 27 Nov 2022 14:48:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-38030962-11&cid=2024215401.1669560499&jid=1062626945&gjid=493984901&_gid=161510881.1669560499&_u=YEBAAEAAAAAAACAAI~&z=500056835
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-38030962-11&cid=2024215401.1669560499&jid=1062626945&gjid=493984901&_gid=161510881.1669560499&_u=YEBAAEAAAAAAACAAI~&z=500056835
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-38030962-11&cid=2024215401.1669560499&jid=1062626945&gjid=493984901&_gid=161510881.1669560499&_u=YEBAAEAAAAAAACAAI~&z=500056835 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.americanexpress.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.americanexpress.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 27 Nov 2022 14:48:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-38030962-10&cid=2024215401.1669560499&jid=586130791&gjid=1076474426&_gid=161510881.1669560499&_u=YEDAAEABAAAAACAAI~&z=1750642361
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-38030962-10&cid=2024215401.1669560499&jid=586130791&gjid=1076474426&_gid=161510881.1669560499&_u=YEDAAEABAAAAACAAI~&z=1750642361
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-38030962-10&cid=2024215401.1669560499&jid=586130791&gjid=1076474426&_gid=161510881.1669560499&_u=YEDAAEABAAAAACAAI~&z=1750642361 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.americanexpress.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.americanexpress.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 27 Nov 2022 14:48:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 82bb170134d3b3aa08a85bb7c5e72b67
75592124dfe1fa53eea8fa6ebe94ede104c4f898
e07d6ee95125a9719792f16137d9b5241919b2a9c85a47a933efbc9ef664470a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 27 Nov 2022 14:48:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 26 Nov 2022 21:18:56 GMT
Expires: Sun, 27 Nov 2022 21:18:56 GMT
ETag: "75592124dfe1fa53eea8fa6ebe94ede104c4f898"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.facebook.com/tr/?id=627144114087933&ev=PageView&dl=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&rl=&if=false&ts=1669560498861&sw=1280&sh=1024&v=2.9.5&r=c2&ec=0&o=28&fbp=fb.1.1669560498860.1773543018&it=1669560498731&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=627144114087933&ev=PageView&dl=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&rl=&if=false&ts=1669560498861&sw=1280&sh=1024&v=2.9.5&r=c2&ec=0&o=28&fbp=fb.1.1669560498860.1773543018&it=1669560498731&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=627144114087933&ev=PageView&dl=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&rl=&if=false&ts=1669560498861&sw=1280&sh=1024&v=2.9.5&r=c2&ec=0&o=28&fbp=fb.1.1669560498860.1773543018&it=1669560498731&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 27 Nov 2022 14:48:19 GMT
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=2850820&time=1669560498675&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=2850820&time=1669560498675&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=2850820&time=1669560498675&url=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; Domain=ads.linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&fe7bdcdd-c4dd-45e7-8a93-21a0cafd958a"; Domain=.linkedin.com; Expires=Mon, 27-Nov-2023 14:48:19 GMT; Path=/; Secure; SameSite=None
li_gc=MTswOzE2Njk1NjA0OTk7MjswMjFZjlTDtfeURWaeK8fN3j1qmdwopHNbh7h60bwvPy6TLQ==; Domain=.linkedin.com; Expires=Fri, 26 May 2023 14:48:19 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2378:u=1:x=1:i=1669560499:t=1669646899:v=2:sig=AQG7JNcOW6VJq2kWWivF3BRPUYdJEWbU"; Expires=Mon, 28 Nov 2022 14:48:19 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXudNh7gezKQf3ZfkfKgQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B9195F9931D341318E0366734BB570F2 Ref B: OSL30EDGE0213 Ref C: 2022-11-27T14:48:19Z
date: Sun, 27 Nov 2022 14:48:19 GMT
content-length: 0
X-Firefox-Spdy: h2
e.acuityplatform.com/pj?pk=7077298933690398993&pu=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&pixelKey=7077298933690398993
200 OK 1.2 kB URL HTTP/1.1 e.acuityplatform.com/pj?pk=7077298933690398993&pu=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&pixelKey=7077298933690398993
IP
File type ASCII text, with very long lines (1235), with no line terminators
Hash 91258cd249f8f4dea1f197ecf6000262
2dd94afa291729511130a3a437700988ced9432f
42a406ebb0b0ccb34db6d79885da032d08595a6c529ccf72514064148b804f63
GET /pj?pk=7077298933690398993&pu=https%3A%2F%2Fwww.americanexpress.com%2Fes-mx%2Fnegocios%2Fempresarial%2Feapply%2Fregistro%2Fsbs%2F&pixelKey=7077298933690398993 HTTP/1.1
Host: e.acuityplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 1235
Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBNjT6jXVzZXJNYXRjaGluZ0lkJAKAkWxhc3REcm9wVGltZU1pbGxpcyUBQi4xd2GemGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMhj3RoaXJkUGFydHlVc2VySWQh+4E0OfpCJAGiQyUBQi4xd2GeRCFFIfuBMTf6QiSiQyUBQi4xd2GeRCFFIfuBMjL6QiSsQyUBQi4xd2GeRCFFIfuCMTM1+kIkBI5DJQFCLjF3YZ5EIUUh+4E3MvpCJAKQQyUBQi4xd2GeRCFFIfuAOPpC0EMlAUIuMXdhnkQhRSH7gTEw+kLUQyUBQi4xd2GeRCFFIfuBMjn6QiS6QyUBQi4xd2GeRCFFIfuBNjL6QiQBvEMlAUIuMXdhnkQhRSH7+4Z2ZXJzaW9uwvs="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Mon, 27-Nov-2023 14:48:19 GMT; Path=/; SameSite=None; Secure
auid=713812728078; Domain=acuityplatform.com; Expires=Mon, 27-Nov-2023 14:48:19 GMT; Path=/; SameSite=None; Secure
Access-Control-Allow-Origin: *
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2612
Expires: Sun, 27 Nov 2022 15:31:51 GMT
Date: Sun, 27 Nov 2022 14:48:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2612
Expires: Sun, 27 Nov 2022 15:31:51 GMT
Date: Sun, 27 Nov 2022 14:48:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2612
Expires: Sun, 27 Nov 2022 15:31:51 GMT
Date: Sun, 27 Nov 2022 14:48:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2612
Expires: Sun, 27 Nov 2022 15:31:51 GMT
Date: Sun, 27 Nov 2022 14:48:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2612
Expires: Sun, 27 Nov 2022 15:31:51 GMT
Date: Sun, 27 Nov 2022 14:48:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e97baa4851785eac92c719abf481c64
c32a57038d3cdbc514c9081c9938eca6a04fb481
adb59e982648082e5421f58899a5331b2747e9d45be33c495fbe3ab8cc872b22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8387
x-amzn-requestid: e4ce369f-7654-4c1a-94c2-70c913eb1a01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFL0tEcqIAMFXHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec01d-37bd969f4cdfe220096b8c1f;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 00:51:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: __2hrJIdzCKzhuJ_YfbSSfz-WwyIqnPugk7P6SuYSjn6b2wwm0otCw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 20:58:18 GMT
age: 64201
etag: "c32a57038d3cdbc514c9081c9938eca6a04fb481"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:37 GMT
age: 61002
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
200 OK 21 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
File type gzip compressed data, from Unix\012- data
Hash aacc880011408f549197cd6f65ab5284
37cbc471c3a93f6c15e46213a2fa3c3d13f69f80
ccdcb977741394fca18f0e800cc4f89b286d5ecad6d94292c63710df6b7c298f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:41 GMT
age: 60998
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/2850820/domain/americanexpress.com/token
200 OK 10 kB URL HTTP/2 cdn.linkedin.oribi.io/partner/2850820/domain/americanexpress.com/token
IP
Hash 85eacae66693bddebc03581adf711d92
0019db97e5f42805da052c1ec5c8ca1aba48cedf
60af7f6715829aa3d0200e232401cc0ca618ba80a731d1ecad76b8f231734cb9
GET /partner/2850820/domain/americanexpress.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.americanexpress.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Sun, 27 Nov 2022 14:48:19 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Miss from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cYSSqL0CtUzeUVy6tZSWFT004bZZf0WkgpGT5Oz86Wc8xw9j73uX2g==
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:50:08 GMT
age: 61091
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15290721-a62e-49b8-80c6-967680cff24f.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15290721-a62e-49b8-80c6-967680cff24f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f7f16c0f8a8e710210ce77c0e4c1c2a2
590c34be54c9889eec4ff7993e070fda836f711f
4224287ba765da59c877ac4f1dec65accc5bec934b7598d9cbbee669ba4ab12e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15290721-a62e-49b8-80c6-967680cff24f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6883
x-amzn-requestid: 9e3878c9-1817-427e-b121-969a8cbc7ad8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cL1ySF0tIAMFY4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638169a8-5143ffea77b70cf67ef60ad7;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 01:19:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GT3Futv4Ztnl2Og2TQFk5311m92Mv_jfvkIZYJXpjJMdkxSB6MI06g==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 06:42:16 GMT
age: 29163
etag: "590c34be54c9889eec4ff7993e070fda836f711f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash deea1bc5026bcd8bd4a914c965b2b2e5
60d442e7b2fed856774fb1b03f61dd976870591c
31248c34500452b10681ace5bbd87a4deb65c4b4431f061a031b1fad3f127f51
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3795
Cache-Control: max-age=90583
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:19 GMT
Etag: "638228b7-1d7"
Expires: Mon, 28 Nov 2022 15:58:02 GMT
Last-Modified: Sat, 26 Nov 2022 14:54:47 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash edb56005298645f73e2f277aaf246dfa
a1f94910fb201ba2b02558b65e70c82b942b1e0c
537b0984a081827db03f86ea0999643c681f9b88a632d809602c80b2bff981b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 965
Cache-Control: max-age=88811
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:19 GMT
Etag: "63822cd9-1d7"
Expires: Mon, 28 Nov 2022 15:28:30 GMT
Last-Modified: Sat, 26 Nov 2022 15:12:25 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 055db9811326f077549a7c94734d225c
359ebe442829bba7ad2d3e6418ef8be86fbcfc0c
7509bdab83143f45e1000ca03436abb168a0162ee99656afdf7db0a0e6e0f2d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4148
Cache-Control: max-age=138440
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:19 GMT
Etag: "6382e247-1d7"
Expires: Tue, 29 Nov 2022 05:15:39 GMT
Last-Modified: Sun, 27 Nov 2022 04:06:31 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 412910c4887fdcea229fa5fba435056c
6969cbcfb7f4767d4f4551456327646087e0f77e
54b6c28e35e3534e6ca5f3b883094ab9c274a234e754f78dd5ac9190eab3edfb
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 14:48:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Thu, 01 Dec 2022 12:26:14 GMT
ETag: "6969cbcfb7f4767d4f4551456327646087e0f77e"
Last-Modified: Sun, 27 Nov 2022 12:26:15 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2413
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770baa015e951c0e-OSL
pixel.advertising.com/ups/55950/sync?uid=713812728078&_origin=1
301 Moved Permanently 355 B URL HTTP/2 pixel.advertising.com/ups/55950/sync?uid=713812728078&_origin=1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 988efb96bebf3811bbe81871482eb004
305dbe56d6b4eadbc788681eca12192614f61978
19cfdae40caff6dda9ff2136950a78f604ea8895328e6fe519bae4933bee8f6c
GET /ups/55950/sync?uid=713812728078&_origin=1 HTTP/1.1
Host: pixel.advertising.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 27 Nov 2022 14:48:19 GMT
server: ATS/9.1.10.25
cache-control: no-store
location: https://ups.analytics.yahoo.com/ups/55950/sync?uid=713812728078&_origin=1
content-type: text/html
content-language: en
set-cookie: A3=d=AQABBLN4g2MCEB-pMYrT8R3JPD-FTPu6SbwFEgEBAQHKhGONYwAAAAAA_eMAAA&S=AQAAAk_5Wb47EoRzsk4SSpboNd4; Expires=Mon, 27 Nov 2023 20:48:19 GMT; Max-Age=31557600; Domain=.advertising.com; Path=/; SameSite=None; Secure; HttpOnly
content-length: 355
X-Firefox-Spdy: h2
us-u.openx.net/w/1.0/cm?id=ce2efbde-bc0e-4748-9713-6161d24dfb50&r=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D22%26auid%3D713812728078%26uid%3D
200 OK 56 B URL HTTP/2 us-u.openx.net/w/1.0/cm?id=ce2efbde-bc0e-4748-9713-6161d24dfb50&r=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D22%26auid%3D713812728078%26uid%3D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 15669dda86db3cbff7835fa202dc0b16
ce788cab9c1aa7e458a3971a59702c410b37e64d
5cc3f958039a8885c4e9526e22d454da47d579b9a02861e7a60b41fa0ba910df
GET /w/1.0/cm?id=ce2efbde-bc0e-4748-9713-6161d24dfb50&r=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D22%26auid%3D713812728078%26uid%3D HTTP/1.1
Host: us-u.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sun, 27 Nov 2022 14:48:19 GMT
content-type: text/html
content-length: 56
content-encoding: gzip
cache-control: private, max-age=0, no-cache
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5c8551591e515d9029e8c9a29804eecb
1298f0c1b78880a93b57d06eeecddc8f668208b9
87bd2ac1ed0fcd041651ce64766499da60cc349352b42f5bf28ace8ef647a72a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 14:48:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 01:56:51 GMT
Expires: Sat, 03 Dec 2022 01:56:50 GMT
Etag: "1298f0c1b78880a93b57d06eeecddc8f668208b9"
Cache-Control: max-age=471510,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770baa015837b50b-OSL
secure.adnxs.com/getuid?https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D10%26auid%3D713812728078%26uid%3D%24UID
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/getuid?https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D10%26auid%3D713812728078%26uid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D10%26auid%3D713812728078%26uid%3D%24UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 14:48:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fums.acuityplatform.com%252Fsum%253Fumid%253D10%2526auid%253D713812728078%2526uid%253D%2524UID
AN-X-Request-Uuid: 89acd2c4-3d02-4a7b-9599-757572c985f8
Set-Cookie: uuid2=867770117375394612; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 14:48:19 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
pixel.tapad.com/idsync/ex/receive?partner_id=3150&partner_device_id=713812728078&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D713812728078%26uid%3D%24%7BTA_DEVICE_ID%7D
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive?partner_id=3150&partner_device_id=713812728078&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D713812728078%26uid%3D%24%7BTA_DEVICE_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive?partner_id=3150&partner_device_id=713812728078&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D713812728078%26uid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 27 Nov 2022 14:48:19 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1669560499462;Expires=Thu, 26 Jan 2023 14:48:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=961b3ed9-cfed-4a69-b8a4-fa2ee37e53d9;Expires=Thu, 26 Jan 2023 14:48:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3150&partner_device_id=713812728078&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D713812728078%26uid%3D%24%7BTA_DEVICE_ID%7D
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
match.adsrvr.org/track/cmf/generic?ttd_pid=epmasz0&ttd_puid=713812728078&ttd_tpi=1&gpdr=0
200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=epmasz0&ttd_puid=713812728078&ttd_tpi=1&gpdr=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=epmasz0&ttd_puid=713812728078&ttd_tpi=1&gpdr=0 HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 14:48:19 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash deea1bc5026bcd8bd4a914c965b2b2e5
60d442e7b2fed856774fb1b03f61dd976870591c
31248c34500452b10681ace5bbd87a4deb65c4b4431f061a031b1fad3f127f51
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5562
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:19 GMT
Last-Modified: Sun, 27 Nov 2022 13:15:37 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
x.bidswitch.net/sync?dsp_id=236&user_id=713812728078&expires=30&user_group=1
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=236&user_id=713812728078&expires=30&user_group=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=236&user_id=713812728078&expires=30&user_group=1 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 27 Nov 2022 14:48:19 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=236&user_id=713812728078&expires=30&user_group=1
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=943f6a0c-ec78-41c2-98fc-b21b11477629; path=/; expires=Mon, 27-Nov-2023 14:48:19 GMT; domain=.bidswitch.net; samesite=none; secure
c=1669560499; path=/; expires=Mon, 27-Nov-2023 14:48:19 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1669560499; path=/; expires=Mon, 27-Nov-2023 14:48:19 GMT; domain=.bidswitch.net; samesite=none; secure
c=1669560499; path=/; expires=Mon, 27-Nov-2023 14:48:19 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash f649d5006acaa02f72c229dd9a291ee9
cb3642a6b24372b24702e7a090fba706e3ff6efb
bc20add7b82c6e18e2afdfce609ff0897edb874149244e80a177219f15ef2fa8
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 27 Nov 2022 14:48:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 26 Nov 2022 21:47:42 GMT
Expires: Sun, 27 Nov 2022 21:47:42 GMT
ETag: "cb3642a6b24372b24702e7a090fba706e3ff6efb"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
200 OK 471 B IP
Hash 055db9811326f077549a7c94734d225c
359ebe442829bba7ad2d3e6418ef8be86fbcfc0c
7509bdab83143f45e1000ca03436abb168a0162ee99656afdf7db0a0e6e0f2d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1119
Cache-Control: max-age=135411
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 14:48:19 GMT
Etag: "6382e247-1d7"
Expires: Tue, 29 Nov 2022 04:25:10 GMT
Last-Modified: Sun, 27 Nov 2022 04:06:31 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fums.acuityplatform.com%252Fsum%253Fumid%253D10%2526auid%253D713812728078%2526uid%253D%2524UID
302 Found 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fums.acuityplatform.com%252Fsum%253Fumid%253D10%2526auid%253D713812728078%2526uid%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fums.acuityplatform.com%252Fsum%253Fumid%253D10%2526auid%253D713812728078%2526uid%253D%2524UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 14:48:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ums.acuityplatform.com/sum?umid=10&auid=713812728078&uid=0
AN-X-Request-Uuid: ee93ca41-face-4573-8999-c7115d250e09
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 958.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ups.analytics.yahoo.com/ups/55950/sync?uid=713812728078&_origin=1
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/55950/sync?uid=713812728078&_origin=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/55950/sync?uid=713812728078&_origin=1 HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 27 Nov 2022 14:48:19 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/55950/sync?uid=713812728078&_origin=1&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBLN4g2MCEN-mNJ0dpwvxpGW2xBvfExIFEgEBAQHKhGONYwAAAAAA_eMAAA&S=AQAAAikdAjIt8ZMwbFCg05tkj0w; Expires=Mon, 27 Nov 2023 20:48:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
pixel.tapad.com/idsync/ex/receive/check?partner_id=3150&partner_device_id=713812728078&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D713812728078%26uid%3D%24%7BTA_DEVICE_ID%7D
302 Found 0 B URL HTTP/2 pixel.tapad.com/idsync/ex/receive/check?partner_id=3150&partner_device_id=713812728078&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D713812728078%26uid%3D%24%7BTA_DEVICE_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /idsync/ex/receive/check?partner_id=3150&partner_device_id=713812728078&partner_url=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D64%26auid%3D713812728078%26uid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1
Host: pixel.tapad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 27 Nov 2022 14:48:19 GMT
strict-transport-security: max-age=31536000
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
p3p: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: TapAd_TS=1669560499513;Expires=Thu, 26 Jan 2023 14:48:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_DID=26d061b9-5160-4bf0-ab59-4c9ae71a14cd;Expires=Thu, 26 Jan 2023 14:48:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
TapAd_3WAY_SYNCS=;Expires=Thu, 26 Jan 2023 14:48:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None
location: https://ums.acuityplatform.com/sum?umid=64&auid=713812728078&uid=26d061b9-5160-4bf0-ab59-4c9ae71a14cd
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dsum-sec.casalemedia.com/rum?cm_dsp_id=10&external_user_id=713812728078
302 Found 0 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=10&external_user_id=713812728078
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=10&external_user_id=713812728078 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sun, 27 Nov 2022 14:48:19 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /rum?cm_dsp_id=10&external_user_id=713812728078&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=Y4N4s69EcYojG-eneInDGAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 27 Nov 2023 14:48:19 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4507; Path=/; Domain=casalemedia.com; Expires=Sat, 25 Feb 2023 14:48:19 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4507; Path=/; Domain=casalemedia.com; Expires=Sat, 25 Feb 2023 14:48:19 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
x.bidswitch.net/ul_cb/sync?dsp_id=236&user_id=713812728078&expires=30&user_group=1
302 Found 0 B URL HTTP/2 x.bidswitch.net/ul_cb/sync?dsp_id=236&user_id=713812728078&expires=30&user_group=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ul_cb/sync?dsp_id=236&user_id=713812728078&expires=30&user_group=1 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sun, 27 Nov 2022 14:48:19 GMT
content-length: 0
cache-control: no-cache, no-store, must-revalidate
location: //crb.kargo.com/api/v1/bswsync?bsw_uuid=&dsp_uuid=713812728078&dsp_id=236&krg_ids=&gdpr=&gdpr_consent=&us_privacy=
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/55950/sync?uid=713812728078&_origin=1&verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/55950/sync?uid=713812728078&_origin=1&verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/55950/sync?uid=713812728078&_origin=1&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 14:48:19 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBLN4g2MCEMnyviVA2_kCQIubiSlcreQFEgEBAQHKhGONYwAAAAAA_eMAAA&S=AQAAAqQoWCRilwxwFJ7Eo5oFZ6M; Expires=Mon, 27 Nov 2023 20:48:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
dsum-sec.casalemedia.com/rum?cm_dsp_id=10&external_user_id=713812728078&C=1
200 OK 43 B URL HTTP/1.1 dsum-sec.casalemedia.com/rum?cm_dsp_id=10&external_user_id=713812728078&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=10&external_user_id=713812728078&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 14:48:19 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
Pragma: no-cache
Content-Length: 43
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
tags.bluekai.com/site/37592?id=123456&limit=0&redir=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D49%26auid%3D713812728078%26uid%3D%24_BK_UUID
302 Found 0 B URL HTTP/2 tags.bluekai.com/site/37592?id=123456&limit=0&redir=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D49%26auid%3D713812728078%26uid%3D%24_BK_UUID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /site/37592?id=123456&limit=0&redir=https%3A%2F%2Fums.acuityplatform.com%2Fsum%3Fumid%3D49%26auid%3D713812728078%26uid%3D%24_BK_UUID HTTP/1.1
Host: tags.bluekai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-length: 0
location: https://ums.acuityplatform.com/sum?umid=49&auid=713812728078&uid=$_BK_UUID
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Sun, 27 Nov 2022 14:48:19 GMT
set-cookie: bku=tJ/99nBTQt1zFk9Q; Path=/; Domain=.bluekai.com; Expires=Sat, 27 May 2023 14:48:19 GMT; Secure; SameSite=None
bkpa=KJyA01r3Qp9x9BYFsjzIj+EWHqMz/Gcu+VLJh+/OO0VjnwglCUjlmWNZlHL0yTHdcatcN92M5qYyrgjvKIEAU3oUOFGc2/YIuvfePkM4Nhc6KuSo+N194uTY8/+yOJgfYU918VFEAKlxGstBOHhdY5iF+XKbnw481yYZ50Kp; Path=/; Domain=.bluekai.com; Expires=Sat, 27 May 2023 14:48:19 GMT; Secure; SameSite=None
X-Firefox-Spdy: h2
ums.acuityplatform.com/sum?umid=10&auid=713812728078&uid=0
204 No Content 0 B URL HTTP/1.1 ums.acuityplatform.com/sum?umid=10&auid=713812728078&uid=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sum?umid=10&auid=713812728078&uid=0 HTTP/1.1
Host: ums.acuityplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
ums.acuityplatform.com/sum?umid=64&auid=713812728078&uid=26d061b9-5160-4bf0-ab59-4c9ae71a14cd
204 No Content 0 B URL HTTP/1.1 ums.acuityplatform.com/sum?umid=64&auid=713812728078&uid=26d061b9-5160-4bf0-ab59-4c9ae71a14cd
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sum?umid=64&auid=713812728078&uid=26d061b9-5160-4bf0-ab59-4c9ae71a14cd HTTP/1.1
Host: ums.acuityplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
access-control-allow-origin: *
set-cookie: auid=713830820085; Domain=.acuityplatform.com; Expires=Mon, 27-Nov-2023 14:48:19 GMT; Path=/; SameSite=None; Secure
aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBNjT6jXVzZXJNYXRjaGluZ0lkJAKAkWxhc3REcm9wVGltZU1pbGxpcyUBQi4xd26GmGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMlAUIuMXduho90aGlyZFBhcnR5VXNlcklkYzI2ZDA2MWI5LTUxNjAtNGJmMC1hYjU5LTRjOWFlNzFhMTRjZPv7hnZlcnNpb27C+w=="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Mon, 27-Nov-2023 14:48:19 GMT; Path=/; SameSite=None; Secure
x-acuity-userid: 713830820085
access-control-expose-headers: X-Acuity-UserID
ums.acuityplatform.com/sum?umid=49&auid=713812728078&uid=$_BK_UUID
204 No Content 0 B URL HTTP/1.1 ums.acuityplatform.com/sum?umid=49&auid=713812728078&uid=$_BK_UUID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sum?umid=49&auid=713812728078&uid=$_BK_UUID HTTP/1.1
Host: ums.acuityplatform.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d4172631544d55769900f23f08519a50
9a7322da56e9e72a1acf1a68383906f30d94aa64
9d84646a6779f5f51b6f41a3b64e228abcf0ea8e5de133c8f27d2ce823fae6ef
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=89325
Date: Sun, 27 Nov 2022 14:48:19 GMT
Etag: "63821abb-1d7"
Expires: Mon, 28 Nov 2022 15:37:04 GMT
Last-Modified: Sat, 26 Nov 2022 13:55:07 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: BhP4R-odsL7bqdgbN3HPMfx_YzxaGyDGp2FFGS2rdfkv35KqWyQ9_w==
Age: 6117
crb.kargo.com/api/v1/bswsync?bsw_uuid=&dsp_uuid=713812728078&dsp_id=236&krg_ids=&gdpr=&gdpr_consent=&us_privacy=
200 OK 43 B URL HTTP/1.1 crb.kargo.com/api/v1/bswsync?bsw_uuid=&dsp_uuid=713812728078&dsp_id=236&krg_ids=&gdpr=&gdpr_consent=&us_privacy=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /api/v1/bswsync?bsw_uuid=&dsp_uuid=713812728078&dsp_id=236&krg_ids=&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1
Host: crb.kargo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0
Content-Type: image/gif
Date: Sun, 27 Nov 2022 14:48:19 GMT
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Krk-Reject-Reason: consent
Pragma: no-cache
Vary: Origin
X-Accel-Expires: 0
Content-Length: 43
Connection: keep-alive
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=645608586250028900
302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=645608586250028900
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=645608586250028900 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Sun, 27 Nov 2022 14:48:20 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: 1GDWRCQ2K1BP1E7C6Q49
Set-Cookie: ad-id=AwbOBX9KX03CtBIYBCP4UGw|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Jul-2023 14:48:20 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=645608586250028900&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=645608586250028900&dcc=t
200 OK 65 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=645608586250028900&dcc=t
IP
File type HTML document, ASCII text
Hash 22fdf49482d8200e8f305bbe262eff14
f254bd4053267c2cf46675613e689016d8b7f775
115d83ece49fd1c5769409aab9d78572eed86cd38a0556b4cdeeac82c83091d3
GET /iu3?d=generic&ex-fargs=%3Fid%3D28d50a31-d1fb-7162-848b-c0d1f18dbba3%26type%3D55%26m%3D771770&ex-fch=416613&ex-src=https://www.americanexpress.com/es-mx/negocios/empresarial/eapply/registro/sbs/&ex-hargs=v%3D1.0%3Bc%3D6079862440001%3Bp%3D28D50A31-D1FB-7162-848B-C0D1F18DBBA3&cb=645608586250028900&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Sun, 27 Nov 2022 14:48:20 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 65
Connection: keep-alive
x-amz-rid: VVYT8DEK38E966075XWZ
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
www.google-analytics.com/analytics.js
200 OK 0 B URL HTTP/2 www.google-analytics.com/analytics.js
IP
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 27 Nov 2022 14:41:08 GMT
expires: Sun, 27 Nov 2022 16:41:08 GMT
cache-control: public, max-age=7200
age: 430
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
18.196.84.70
23.36.76.210
23.32.99.71
154.59.122.94
34.91.226.152
185.80.36.245
93.184.220.29
104.18.20.226