ocsp.starfieldtech.com/
192.124.249.41 2.1 kB IP 192.124.249.41:0
Hash f1cdd63f5203ee89377433bbd174879b
d652223ebf0d4613299b2c3a033158a74ebd2ab3
be4d093e766e5e26f6d71aa40c086631487dd16dd441558a7526931b5a5be40d
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 07 Dec 2023 19:39:15 GMT
Content-Type: application/ocsp-response
Content-Length: 2148
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 07 Dec 2023 04:03:31 GMT
Expires: Fri, 08 Dec 2023 04:03:31 GMT
ETag: "d652223ebf0d4613299b2c3a033158a74ebd2ab3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
verifiedwebpage.com/go?ehash=8eb1c96ed86604e66d196e7abda5f3d0&product=33516&ar=48&cid=139350&lid=2b764dc5254d0ac5fac7798ac438cd42&slhash=63293&mtaid=[s7]&cid2=[s8]
188.114.97.1302 Found 124 B URL User Request GET HTTP/2 verifiedwebpage.com/go?ehash=8eb1c96ed86604e66d196e7abda5f3d0&product=33516&ar=48&cid=139350&lid=2b764dc5254d0ac5fac7798ac438cd42&slhash=63293&mtaid=[s7]&cid2=[s8]
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
Fingerprint0D:F8:EF:F4:23:CD:FB:7E:DE:C7:29:3C:B4:F7:A4:CE:6A:FB:89:AB
ValiditySat, 14 Oct 2023 13:52:56 GMT - Fri, 12 Jan 2024 13:52:55 GMT
File type HTML document, ASCII text
Hash a65e9af9732901288d62014bec1ec644
24f4e3fb7392bf56b52946593be1e431ca1f2ef5
755117d02c8694fdc4d736d694a168f3125e870079235dfc7694f00ac2902116
GET /go?ehash=8eb1c96ed86604e66d196e7abda5f3d0&product=33516&ar=48&cid=139350&lid=2b764dc5254d0ac5fac7798ac438cd42&slhash=63293&mtaid=[s7]&cid2=[s8] HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 07 Dec 2023 19:39:15 GMT
content-type: text/html; charset=UTF-8
location: https://www.ch2gtrk.com/DFBHL/55M6S/?sub1=3415259331988348462
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=d321fda63f13eedca7fc136dd3751560; path=/
pixel_session_hash_33516=3415259331988348462; expires=Sat, 06-Jan-2024 19:39:14 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_33516=cfa7203dcfebb6215ce510fc9d56b4e5f92036d8c86e94d79eabbb7d0faa9267; expires=Sat, 09-Dec-2023 19:39:14 GMT; Max-Age=172800
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SE8Tn3mdogEEZ3OHQO22Mt%2FIjKHHBzs1HTJIw1tzK2Mu%2F1Sko4ziUMQya6VPGfOOXiiMlgjfLu5oaFVG0W1rIKiP9BusyCrQMc0lTQEKgW3qIgDW3l%2FSHonOySSqclDkpsa3wZp1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831f3bc71dc2b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.24 2.1 kB IP 192.124.249.24:0
Hash f1cdd63f5203ee89377433bbd174879b
d652223ebf0d4613299b2c3a033158a74ebd2ab3
be4d093e766e5e26f6d71aa40c086631487dd16dd441558a7526931b5a5be40d
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 07 Dec 2023 19:39:15 GMT
Content-Type: application/ocsp-response
Content-Length: 2148
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 07 Dec 2023 04:03:31 GMT
Expires: Fri, 08 Dec 2023 04:03:31 GMT
ETag: "d652223ebf0d4613299b2c3a033158a74ebd2ab3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
fast.wistia.net/assets/external/E-v1.js
151.101.66.132200 OK 129 kB URL GET HTTP/2 fast.wistia.net/assets/external/E-v1.js
IP 151.101.66.132:443
Requested by https://go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.net
Fingerprint96:E0:52:AC:01:AA:2C:FA:54:AA:0C:53:4A:B0:FE:3A:B6:3B:CD:09
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (65474)
Size 129 kB (129063 bytes)
Hash 126858c9f3376ca1bc419aa2a2d0af28
51e06cde2e8cc415d06c63e144e6c36d2c95270d
78cf6679aa583fd97b9700d6dafa7e791d7861b72d173df807b5f8f27d246877
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.thecontrolplan.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "2dfa35fa3c2d63da5bfe8edd5f3cb8df"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 19:39:16 GMT
age: 2540
x-served-by: cache-iad-kjyo7100031-IAD, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 74, 4
x-timer: S1701977956.391214,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 129063
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
192.124.249.41 2.1 kB IP 192.124.249.41:0
Hash f1cdd63f5203ee89377433bbd174879b
d652223ebf0d4613299b2c3a033158a74ebd2ab3
be4d093e766e5e26f6d71aa40c086631487dd16dd441558a7526931b5a5be40d
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 07 Dec 2023 19:39:16 GMT
Content-Type: application/ocsp-response
Content-Length: 2148
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 07 Dec 2023 04:03:31 GMT
Expires: Fri, 08 Dec 2023 04:03:31 GMT
ETag: "d652223ebf0d4613299b2c3a033158a74ebd2ab3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
52.85.242.38200 OK 64 kB URL User Request GET HTTP/2 go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
IP 52.85.242.38:443
Certificate IssuerAmazon
Subjectgo.thecontrolplan.com
Fingerprint73:02:70:FC:20:D0:86:B2:EA:5B:4E:12:07:0D:B4:0E:0E:0C:9E:30
ValidityThu, 02 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 905277de36544b0b7c705f12411f1565
6053391e4c8242218178b4fbeab956a06e82a4a0
dec10dad2f0f1dc999edd9a8b61916aca3d375923d5a83b1531315dee658c9fa
GET /p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7 HTTP/1.1
Host: go.thecontrolplan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
last-modified: Mon, 20 Nov 2023 17:28:37 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 06 Dec 2023 21:41:05 GMT
etag: W/"6e212ba4443279b1458587d94b7946cb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 21258ec71c1aa4499bcd08c6ad0eba38.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: fp8IFf9ggC8WCzOP7LTbBxA9YPKUyC05zjHK_J1f7qngnnAukTKgvA==
age: 79092
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-XNTVPW2YQC&l=dataLayer&cx=c
142.250.74.168200 OK 92 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-XNTVPW2YQC&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash a2f40853d05d0ca0e861c59ce0c1d7d6
426cd803a27c1328d2c5b9b458019c214d6f5cb2
85cf3a476252232557726445a7d693e7b54f1f9f653c391a65317f3f8d7cd587
GET /gtag/js?id=G-XNTVPW2YQC&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.thecontrolplan.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 19:39:16 GMT
expires: Thu, 07 Dec 2023 19:39:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91670
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
151.101.66.132200 OK 2.5 kB URL GET HTTP/2 fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
IP 151.101.66.132:443
Requested by https://go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.net
Fingerprint96:E0:52:AC:01:AA:2C:FA:54:AA:0C:53:4A:B0:FE:3A:B6:3B:CD:09
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6090)
Hash 04f7ccbd4f9c061767896a876e0a6cf0
a8467cffc9464a6ae3d61ff0c083fb86aff06525
abba869544dfbc5bfd454add5b5e8668fc1e02cc7ba1b2f778d38ad40ce01293
GET /embed/iframe/rdkysbra10?seo=false&videoFoam=false HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.thecontrolplan.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"abba869544dfbc5bfd454add5b5e8668"
x-request-id: 8944941f-cadd-4640-9d35-704030479826
x-runtime: 0.054191
content-encoding: br
x-envoy-upstream-service-time: 56
via: 1.1 aa68d5eaf078dffca4154e55039dbb84.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: PHL50-C1
x-amz-cf-id: 8hyynEa4O0Oh0e65OtFPNd6Ruyj7K53L7PVh1Upc5eNALVESOAAwQQ==
accept-ranges: bytes
date: Thu, 07 Dec 2023 19:39:16 GMT
age: 65228
x-served-by: cache-iad-kcgs7200127-IAD, cache-bma1670-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 64, 1
x-timer: S1701977957.702958,VS0,VE2
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 2501
X-Firefox-Spdy: h2
www.ch2gtrk.com/sdk/click?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7&oid=&affid=&__cc=&async=json
34.110.201.161200 OK 85 B URL GET HTTP/3 www.ch2gtrk.com/sdk/click?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7&oid=&affid=&__cc=&async=json
IP 34.110.201.161:443
Requested by https://go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
Certificate IssuerStarfield Technologies, Inc.
Subjectch2gtrk.com
FingerprintDE:1E:F6:8F:7F:A5:96:5D:5F:15:EE:2F:B4:7C:E7:53:9A:EC:F7:2F
ValidityMon, 24 Jul 2023 21:19:26 GMT - Sat, 24 Aug 2024 21:19:26 GMT
File type JSON data\012- , ASCII text
Hash e197fdc97768197129dae91749a3d987
a5dde8f325df5b3bf19ca9ab621a6af62c8c971d
1b04a9bc370a353826332f17ce8c3e7734a45daf078cb4d709949b5e6df89abf
GET /sdk/click?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7&oid=&affid=&__cc=&async=json HTTP/1.1
Host: www.ch2gtrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go.thecontrolplan.com/
Origin: https://go.thecontrolplan.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx
date: Thu, 07 Dec 2023 19:39:16 GMT
content-type: application/json; charset=utf-8
content-length: 85
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
access-control-allow-credentials: true
access-control-allow-origin: https://go.thecontrolplan.com
set-cookie: uniqueClick=fff2938b-6c0c-43c9-8245-bb51d32de7c7:1701977956; Path=/; Expires=Fri, 08 Dec 2023 19:39:16 GMT; Secure; SameSite=None
transaction_id=bfbfcea610654eb4aac77b4985d7cbe7; Path=/; Expires=Wed, 06 Mar 2024 19:39:16 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 6d7d8b70-d7f6-4e08-bd36-8ee5340d7612
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fast.wistia.net/assets/external/E-v1.js
151.101.66.132200 OK 129 kB URL GET HTTP/2 fast.wistia.net/assets/external/E-v1.js
IP 151.101.66.132:443
Requested by https://go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.net
Fingerprint96:E0:52:AC:01:AA:2C:FA:54:AA:0C:53:4A:B0:FE:3A:B6:3B:CD:09
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (65474)
Size 129 kB (129063 bytes)
Hash 126858c9f3376ca1bc419aa2a2d0af28
51e06cde2e8cc415d06c63e144e6c36d2c95270d
78cf6679aa583fd97b9700d6dafa7e791d7861b72d173df807b5f8f27d246877
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "2dfa35fa3c2d63da5bfe8edd5f3cb8df"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 19:39:16 GMT
age: 2540
x-served-by: cache-iad-kjyo7100031-IAD, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 74, 5
x-timer: S1701977957.840741,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 129063
X-Firefox-Spdy: h2
fast.wistia.net/embed/medias/rdkysbra10/swatch
151.101.66.132200 OK 4.5 kB URL GET HTTP/2 fast.wistia.net/embed/medias/rdkysbra10/swatch
IP 151.101.66.132:443
Requested by https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.net
Fingerprint96:E0:52:AC:01:AA:2C:FA:54:AA:0C:53:4A:B0:FE:3A:B6:3B:CD:09
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x56, components 3\012- data
Hash f607e78cd8b65700e17e15433c38ff2a
a5681b4757c01ca1b9ee7b88ae28d9468b0eb443
de6988f8b4b44739f7acf965a20266ea94abb64a946a97473a28230773c2faae
GET /embed/medias/rdkysbra10/swatch HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
server: envoy
cache-control: public, no-cache,max-age=31536000
access-control-request-method: *
content-disposition: inline
edge-cache-tag: ba1787109cd55b88ab4e76bf6f32340c
etag: MqEQW8xpnrRQinGXPT11Idx2eKE=
last-modified: Mon, 20 Nov 2023 17:16:11 UTC
x-envoy-upstream-service-time: 27
via: 1.1 ec18462cf9d88c8bdb0cd5e50dbe442a.cloudfront.net (CloudFront), 1.1 51391527dd8c879c45b44b119905c872.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-cdn: cloudfront
timing-allow-origin: *
access-control-allow-origin: *
x-amz-cf-pop: IAD89-P2, IAD89-C3
x-amz-cf-id: MYynvoMEh6fuPE1tZwC9w-QcZRjzFdBEzVHD6-Hofx6vICtjm0XZ3Q==
accept-ranges: bytes
date: Thu, 07 Dec 2023 19:39:16 GMT
age: 392244
x-served-by: cache-iad-kiad7000095-IAD, cache-bma1670-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 1455, 2
x-timer: S1701977957.857512,VS0,VE1
vary: Origin
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 4509
X-Firefox-Spdy: h2
fast.wistia.net/assets/external/insideIframe.js
151.101.66.132200 OK 12 kB URL GET HTTP/2 fast.wistia.net/assets/external/insideIframe.js
IP 151.101.66.132:443
Requested by https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.net
Fingerprint96:E0:52:AC:01:AA:2C:FA:54:AA:0C:53:4A:B0:FE:3A:B6:3B:CD:09
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (46237)
Hash 75abf7a5ec9d6bd0a72dd01bd34d7265
b490767e185a8fe2d38a257012a65221b6a5f14a
663c7007cb2a5b1726ea8f7b6e144b4b0269c9184b6b2c66cd91f6cdd4711419
GET /assets/external/insideIframe.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.net/assets/external/E-v1.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "9037aabb4b0cd0cef458a289128eff70"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 19:39:17 GMT
age: 2540
x-served-by: cache-iad-kjyo7100069-IAD, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 64, 19
x-timer: S1701977957.048061,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 12085
X-Firefox-Spdy: h2
fast.wistia.net/assets/external/iframeApi.js
151.101.66.132200 OK 26 kB URL GET HTTP/2 fast.wistia.net/assets/external/iframeApi.js
IP 151.101.66.132:443
Requested by https://go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.net
Fingerprint96:E0:52:AC:01:AA:2C:FA:54:AA:0C:53:4A:B0:FE:3A:B6:3B:CD:09
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (65469)
Hash fda856fce26cdadc7aeea1bfdf4a9a85
878470c572da6bd3d32d9dccf6f1019111e8a96b
70b9733a8ef963c6e6075b7307d85c397e254e78b5f84bd31af2bb9565b0981a
GET /assets/external/iframeApi.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.thecontrolplan.com
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "1028fac9a1dbb64aa1eadb33673221f6"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 19:39:17 GMT
age: 2540
x-served-by: cache-iad-kcgs7200089-IAD, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 51, 8
x-timer: S1701977957.106887,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 26082
X-Firefox-Spdy: h2
fast.wistia.net/assets/external/playPauseLoadingControl.js
151.101.66.132200 OK 21 kB URL GET HTTP/2 fast.wistia.net/assets/external/playPauseLoadingControl.js
IP 151.101.66.132:443
Requested by https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.net
Fingerprint96:E0:52:AC:01:AA:2C:FA:54:AA:0C:53:4A:B0:FE:3A:B6:3B:CD:09
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (65455)
Hash 31f0b908fbd5fc16bf6737c637b83178
26f5effe6525ca16ceb9815cb26776a8ac36f81c
863614886d87b0fbc5b99b2c002a8e382ab9161cacc1290006ea02e428e09747
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.net/assets/external/E-v1.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "b09d2ef450c9011369afee5fc7a5a161"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 19:39:17 GMT
age: 2541
x-served-by: cache-iad-kcgs7200113-IAD, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 63, 19
x-timer: S1701977957.132759,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 21129
X-Firefox-Spdy: h2
fast.wistia.net/assets/external/engines/hls_video.js
151.101.66.132200 OK 118 kB URL GET HTTP/2 fast.wistia.net/assets/external/engines/hls_video.js
IP 151.101.66.132:443
Requested by https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.net
Fingerprint96:E0:52:AC:01:AA:2C:FA:54:AA:0C:53:4A:B0:FE:3A:B6:3B:CD:09
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 118 kB (117668 bytes)
Hash 6e1e307293f078c95c07db8660ce607a
2a08bcf1166c9707485e568102f7c96e1f933b36
f0150171f993137d09210b10e0629ea4d57a465046ba791adb4bf4a2da978357
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.net/assets/external/E-v1.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Thu, 07 Dec 2023 18:55:59 GMT
etag: "5258bd9b9f222d0dd6df0056cd2b7524"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 19:39:17 GMT
age: 2540
x-served-by: cache-iad-kiad7000173-IAD, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 71, 13
x-timer: S1701977957.422919,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
asset-version: cc9ded0077d16f0d56c3b38f358a76e310b0eefb
content-length: 117668
X-Firefox-Spdy: h2
fast.wistia.net/assets/images/blank.gif
151.101.66.132200 OK 1.2 kB URL GET HTTP/2 fast.wistia.net/assets/images/blank.gif
IP 151.101.66.132:443
Requested by https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.net
Fingerprint96:E0:52:AC:01:AA:2C:FA:54:AA:0C:53:4A:B0:FE:3A:B6:3B:CD:09
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
File type GIF image data, version 89a, 100 x 100\012- data
Hash fbdc4ed9a1e2ee4917a265306927bcf1
6d177725d8230df0457e72004080f712e26fe624
a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Wed, 10 May 2023 19:48:54 GMT
etag: "fbdc4ed9a1e2ee4917a265306927bcf1"
x-amz-server-side-encryption: AES256
content-type: image/gif
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Thu, 07 Dec 2023 19:39:17 GMT
age: 2498
x-served-by: cache-iad-kjyo7100102-IAD, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 9, 18
x-timer: S1701977958.551491,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 1214
X-Firefox-Spdy: h2
fast.wistia.com/embed/medias/rdkysbra10.m3u8
151.101.66.132200 OK 944 B URL GET HTTP/2 fast.wistia.com/embed/medias/rdkysbra10.m3u8
IP 151.101.66.132:443
Requested by https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Certificate IssuerGlobalSign nv-sa
Subjectfast.wistia.com
FingerprintA8:1E:D4:A3:D2:23:56:16:88:A6:18:10:44:86:85:87:5E:F3:78:46
ValiditySun, 02 Jul 2023 00:48:58 GMT - Fri, 02 Aug 2024 00:48:57 GMT
Hash 39c3f8c820fc993dba802eb1940359c0
6bc6ee7a70a6995a9481384e1b69da06926600e6
b93a7ac8792c04e4ac1349cfda769ea7b7b2e1cc378cab65a9d91e190ba1d05a
GET /embed/medias/rdkysbra10.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://fast.wistia.net
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-mpegURL
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"b93a7ac8792c04e4ac1349cfda769ea7"
x-request-id: b5ff9b3a-8173-45d7-aecc-8526913fd546
x-runtime: 0.034747
x-envoy-upstream-service-time: 36
via: 1.1 fb41e17254dfd781519e95cedd257826.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: _bajMJ26uJPXyXlqw05wgOvKBmS6B7nhxkFyGaq49dxB4nYHiDEsMw==
accept-ranges: bytes
date: Thu, 07 Dec 2023 19:39:17 GMT
age: 12728
x-served-by: cache-iad-kcgs7200045-IAD, cache-bma1630-BMA
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 17103, 1
x-timer: S1701977958.578543,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 105
content-length: 944
X-Firefox-Spdy: h2
pipedream.wistia.com/mput?topic=metrics
143.204.55.3200 OK 2 B URL POST HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP 143.204.55.3:443
Requested by https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Certificate IssuerAmazon
Subjectpipedream-production-cloudfront-app-cname.wistia.com
Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fast.wistia.net/
Content-Type: application/x-www-form-urlencoded
Content-Length: 868
Origin: https://fast.wistia.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Thu, 07 Dec 2023 19:39:17 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dW1OkLc8sBvn7mpuEolmmacsUlOBVeVJO6NXR_RQr--aHqccXAaCuQ==
X-Firefox-Spdy: h2
distillery.wistia.com/x
54.230.111.55204 No Content 0 B IP 54.230.111.55:443
Requested by https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Certificate IssuerAmazon
Subjectstats-tap-production-cloudfront-app-cname.wistia.com
Fingerprint37:C6:AB:79:1C:DF:9B:5E:3A:B8:3E:F1:0C:1D:48:BF:89:2D:1F:40
ValidityWed, 13 Sep 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fast.wistia.net/
Content-Type: text/plain
Content-Length: 1658
Origin: https://fast.wistia.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 07 Dec 2023 19:39:17 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
server: envoy
x-envoy-upstream-service-time: 1
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: T2tbkJkd4uiakJN7nsnkgjsMJquRPs26teryCg3wVaPGcgsv0tlKTw==
X-Firefox-Spdy: h2
pipedream.wistia.com/mput?topic=metrics
143.204.55.3200 OK 2 B URL POST HTTP/2 pipedream.wistia.com/mput?topic=metrics
IP 143.204.55.3:443
Requested by https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Certificate IssuerAmazon
Subjectpipedream-production-cloudfront-app-cname.wistia.com
Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF
ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fast.wistia.net/
Content-Type: application/x-www-form-urlencoded
Content-Length: 1506
Origin: https://fast.wistia.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Thu, 07 Dec 2023 19:39:18 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
server: envoy
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: y1G4EIGrmdI7gppBi6vU0IXn-Kdq2FvJOwhFPLr8ayg1Ga5Rw70xFA==
X-Firefox-Spdy: h2
click.thedailymoneytips.com/aladdinvsl1123/8eb1c96ed86604e66d196e7abda5f3d0/48/1989814890/139350/2b764dc5254d0ac5fac7798ac438cd42/63293
188.114.97.1302 Found 7.0 kB URL User Request GET HTTP/2 click.thedailymoneytips.com/aladdinvsl1123/8eb1c96ed86604e66d196e7abda5f3d0/48/1989814890/139350/2b764dc5254d0ac5fac7798ac438cd42/63293
IP 188.114.97.1:443
Certificate IssuerLet's Encrypt
Subjectthedailymoneytips.com
Fingerprint79:EC:85:19:05:49:AD:6B:8A:A1:90:4E:B9:8D:91:79:4B:F6:6C:79
ValidityWed, 25 Oct 2023 16:41:13 GMT - Tue, 23 Jan 2024 16:41:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /aladdinvsl1123/8eb1c96ed86604e66d196e7abda5f3d0/48/1989814890/139350/2b764dc5254d0ac5fac7798ac438cd42/63293 HTTP/1.1
Host: click.thedailymoneytips.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 07 Dec 2023 19:39:14 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=8eb1c96ed86604e66d196e7abda5f3d0&product=33516&ar=48&cid=139350&lid=2b764dc5254d0ac5fac7798ac438cd42&slhash=63293&mtaid=[s7]&cid2=[s8]
cache-control: max-age=600
expires: Thu, 07 Dec 2023 19:49:14 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RqS%2F2yPrkfsISpvdP9fiq6zB1ONdROTNC8E6FJZi0%2BRLF0kUybhkW5NHYRZ7Vr%2FluLJPeIunUFeh5X8%2Bbn1O9GkfrOEKdD8pzGFSeIAKvWucOrq1bE5O6H44LDgazsgv%2Bm3fncGquS3vWl%2F9G%2Fw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831f3bc28c97b509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PQLT9HR
142.250.74.168200 OK 171 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PQLT9HR
IP 142.250.74.168:443
Requested by https://go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3026)
Size 171 kB (170817 bytes)
Hash 9a06e93f175bb5ab51dd6870ba1d1efc
99a35ca7cc7cc84db00e960fb6f7ce809cc17e6a
ee6f15ac1f3b59e8a72ba076d1e66180c97edccbdd5d2c21b0c97dbe8ab9b52b
GET /gtm.js?id=GTM-PQLT9HR HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.thecontrolplan.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 19:39:16 GMT
expires: Thu, 07 Dec 2023 19:39:16 GMT
cache-control: private, max-age=900
last-modified: Thu, 07 Dec 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 61552
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
embed-ssl.wistia.com/deliveries/ba1787109cd55b88ab4e76bf6f32340c.webp?image_crop_resized=1280x720
143.204.55.78200 OK 106 kB URL GET HTTP/2 embed-ssl.wistia.com/deliveries/ba1787109cd55b88ab4e76bf6f32340c.webp?image_crop_resized=1280x720
IP 143.204.55.78:443
Requested by https://fast.wistia.net/embed/iframe/rdkysbra10?seo=false&videoFoam=false
Certificate IssuerAmazon
Subject*.wistia.com
FingerprintD8:FE:AD:15:AC:4F:2E:60:82:4B:4E:8A:6C:51:6D:3D:60:A2:67:03
ValidityTue, 31 Jan 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 106 kB (106130 bytes)
Hash b0f427c6fc0cdc1b1eaf93ff2974da48
01927f0d12530b5e8134517f09b9c41cc37b313f
ffc1402aa5b633670c29bc10a3ab7b98430a7eb216b05c3e121b4a23ced78090
GET /deliveries/ba1787109cd55b88ab4e76bf6f32340c.webp?image_crop_resized=1280x720 HTTP/1.1
Host: embed-ssl.wistia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
accept-ranges: none
access-control-request-method: *
cache-control: max-age=31536000
content-disposition: inline
edge-cache-tag: ba1787109cd55b88ab4e76bf6f32340c
etag: lHXaW5j8QKfN9W2p9BGj38DzXVo=
last-modified: Mon, 20 Nov 2023 17:16:11 UTC
surrogate-key: ba1787109cd55b88ab4e76bf6f32340c thumbnail-delivery
date: Tue, 21 Nov 2023 10:13:32 GMT
x-envoy-upstream-service-time: 380
server: envoy
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PQsNUV06-IcW0XYCh8Q64pooMbwxjvKa-vbnaBlofYxTTMLDE2qC_w==
age: 1416345
x-cdn: cloudfront
vary: Origin
X-Firefox-Spdy: h2
www.ch2gtrk.com/scripts/sdk/everflow.js
34.110.201.161200 OK 32 kB URL GET HTTP/2 www.ch2gtrk.com/scripts/sdk/everflow.js
IP 34.110.201.161:443
Requested by https://go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
Certificate IssuerStarfield Technologies, Inc.
Subjectch2gtrk.com
FingerprintDE:1E:F6:8F:7F:A5:96:5D:5F:15:EE:2F:B4:7C:E7:53:9A:EC:F7:2F
ValidityMon, 24 Jul 2023 21:19:26 GMT - Sat, 24 Aug 2024 21:19:26 GMT
File type ASCII text, with very long lines (31533)
Hash 1dca32a02972dc2b05d8249f89686bab
37a9b30d94baaa891298d5b0fd4b11cedc35912c
1131fd4696b6959cb4a6260a862a5af4a1f139846a360733c2356417296fbc64
GET /scripts/sdk/everflow.js HTTP/1.1
Host: www.ch2gtrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.thecontrolplan.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 19:39:16 GMT
content-type: text/javascript
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
cache-control: max-age=14400
vary: Origin
x-eflow-request-id: a608acd2-1d0f-422b-b951-b5af9118e0b2
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.ch2gtrk.com/DFBHL/55M6S/?sub1=3415259331988348462
34.110.201.161302 Found 7.0 kB URL User Request GET HTTP/2 www.ch2gtrk.com/DFBHL/55M6S/?sub1=3415259331988348462
IP 34.110.201.161:443
Certificate IssuerStarfield Technologies, Inc.
Subjectch2gtrk.com
FingerprintDE:1E:F6:8F:7F:A5:96:5D:5F:15:EE:2F:B4:7C:E7:53:9A:EC:F7:2F
ValidityMon, 24 Jul 2023 21:19:26 GMT - Sat, 24 Aug 2024 21:19:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /DFBHL/55M6S/?sub1=3415259331988348462 HTTP/1.1
Host: www.ch2gtrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 07 Dec 2023 19:39:15 GMT
content-type: text/html; charset=utf-8
content-length: 124
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
set-cookie: uniqueClick_55M6S=839dc63f-72c6-42c7-9d95-7ef5ee7d9c2c:1701977955; Path=/; Expires=Fri, 08 Dec 2023 19:39:15 GMT; Secure; SameSite=None
transaction_id=bfbfcea610654eb4aac77b4985d7cbe7; Path=/; Expires=Wed, 06 Mar 2024 19:39:15 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 32f29022-5de0-4c2e-ad64-35bdc9e33798
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
go.thecontrolplan.com/favicon.ico
52.85.242.38403 Forbidden 243 B URL GET HTTP/2 go.thecontrolplan.com/favicon.ico
IP 52.85.242.38:443
Requested by https://go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
Certificate IssuerAmazon
Subjectgo.thecontrolplan.com
Fingerprint73:02:70:FC:20:D0:86:B2:EA:5B:4E:12:07:0D:B4:0E:0E:0C:9E:30
ValidityThu, 02 Mar 2023 00:00:00 GMT - Sat, 30 Mar 2024 23:59:59 GMT
File type XML document, ASCII text, with no line terminators
Hash 18a07cb50011c2a59c5894030fa5f815
489b02441766a378633f156413ab949627165fcc
97d63b79754c4bf6c924bf7d150243f745ea871a0f9c8a132d61f5a1e4688448
GET /favicon.ico HTTP/1.1
Host: go.thecontrolplan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.thecontrolplan.com/p/tcr/tcralad1.html?_ef_transaction_id=bfbfcea610654eb4aac77b4985d7cbe7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: application/xml
date: Thu, 07 Dec 2023 19:39:16 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 21258ec71c1aa4499bcd08c6ad0eba38.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: ewTfsPi1qMZeYtyF44mtrryCNvcPavNKNRGl6brfccvdRPOe8XX9YA==
X-Firefox-Spdy: h2