| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3bbb845b153026fc5332dd4506585b57 3cad200fac28fd00f34ce6ef79373e661e188743 6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2886
Expires: Thu, 01 Dec 2022 21:40:22 GMT
Date: Thu, 01 Dec 2022 20:52:16 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash55b4c61a1e99001307750e3647fe1102 7559f9f6770b7d3f45b723167062096312641e08 39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9410
Expires: Thu, 01 Dec 2022 23:29:06 GMT
Date: Thu, 01 Dec 2022 20:52:16 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash0c748388899e8a8d3680355da2ea5020 903c620cd137613daafb0da0508c37b2f4a67212 39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 623
Cache-Control: max-age=136159
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:16 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 10:41:35 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain |  34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: GtTj09pUFSLxljU0259Y5pre7pwMXo25rn22POrEkc9cqJ5/SLa5wPUcdQBsqJ8bscEM4R5NcwB6lnh9FSs0yA==
x-amz-request-id: 6GQWKNWYWBCSR620
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 20:46:26 GMT
age: 350
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/ | 34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 20:18:09 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2047
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 20:52:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash2b61198cfd02eb56a303e58e8f32b18b 852c294df6cade8ee6614a646182bfe6de2a1b1a 7fc2405df6cceebac4f3eba84c1d69425a5817445ba32884a0909f0719c573a9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=101700
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:16 GMT
Etag: "6387fe44-118"
Expires: Sat, 03 Dec 2022 01:07:16 GMT
Last-Modified: Thu, 01 Dec 2022 01:07:16 GMT
Server: nginx
Content-Length: 280
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 20:08:56 GMT
cache-control: public,max-age=3600
age: 2601
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash1f88399f3fdd89dbb9ca1229cb67143a 325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3 831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 612
Cache-Control: max-age=131084
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:17 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:17:01 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash27fcf2abd41881928978cee2cfcadec3 c9c8eec432a5138ec86263217373d3aaa90c0407 28ebff89411118dc8fbab9b4fdbd79f249a6b4946f9903b15682c345585a8fa7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=126141
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:17 GMT
Etag: "63885dbe-118"
Expires: Sat, 03 Dec 2022 07:54:38 GMT
Last-Modified: Thu, 01 Dec 2022 07:54:38 GMT
Server: nginx
Content-Length: 280
|
|
| push.services.mozilla.com/ | 52.37.79.227 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.37.79.227:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: H9KXFBoBe+hdRtWixrgAYw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DjUdDQHXyMK0Hc0sr5w+1/5cPsc=
|
|
| cdnjs.cloudflare.com/ajax/libs/animate.css/4.0.0/animate.min.css |  104.17.25.14 | 200 OK | 4.2 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/animate.css/4.0.0/animate.min.css IP104.17.25.14:0
File typeASCII text, with very long lines (65346) Hash4deedbb31211eaadf8619c3a2b8a3d5b cb5e296649083d6dee43dca5e14bd36054b031d8 727abfcfbae40e19a33bc29075110d14b1e9f8366c88ab7217b153d287659fd1
GET /ajax/libs/animate.css/4.0.0/animate.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: text/css; charset=utf-8
content-length: 4216
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb436a8-11848"
last-modified: Thu, 07 May 2020 16:26:16 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 661814
expires: Tue, 21 Nov 2023 20:52:18 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XMg6NSJDU6fTU%2Bwc4LZorfkfj4onakXlElfRk2dYLVH9L%2BJ57hz7I26VjjWUTfcOW6vePNnRDaVjxfndZHrImb8HFZtT6wHqczx8uYRtNWK0WSimDntAFRAkJ6aRei3asy3VJC6p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 772eb4ad0f80b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hashae01e9c9ce33c4ea869985f4fcfe506a a84241a9245bd6e1aec944a0cae885b23f1e9a89 673565e0b32ac1e9480c51249b0a09ff58146a6f3aaed0ae2da35414010719e5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 618
Cache-Control: max-age=161322
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Etag: "6388e4c2-118"
Expires: Sat, 03 Dec 2022 17:41:00 GMT
Last-Modified: Thu, 01 Dec 2022 17:30:42 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash2f1d1e0007d1ba038ac919cc334dca7d 4f3c8cf53099b4a2844ce33d927d2f637d568ff0 d34a6d2d4672091f991673b5cf5e89dd224ff90ff20360db8493241ad1e31fde
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 614
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Last-Modified: Thu, 01 Dec 2022 20:42:04 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash2f1d1e0007d1ba038ac919cc334dca7d 4f3c8cf53099b4a2844ce33d927d2f637d568ff0 d34a6d2d4672091f991673b5cf5e89dd224ff90ff20360db8493241ad1e31fde
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 609
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Last-Modified: Thu, 01 Dec 2022 20:42:09 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash2f1d1e0007d1ba038ac919cc334dca7d 4f3c8cf53099b4a2844ce33d927d2f637d568ff0 d34a6d2d4672091f991673b5cf5e89dd224ff90ff20360db8493241ad1e31fde
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 614
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Last-Modified: Thu, 01 Dec 2022 20:42:04 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hashae01e9c9ce33c4ea869985f4fcfe506a a84241a9245bd6e1aec944a0cae885b23f1e9a89 673565e0b32ac1e9480c51249b0a09ff58146a6f3aaed0ae2da35414010719e5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 618
Cache-Control: max-age=161322
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Etag: "6388e4c2-118"
Expires: Sat, 03 Dec 2022 17:41:00 GMT
Last-Modified: Thu, 01 Dec 2022 17:30:42 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash3519a58310eefa01756f0440e2acd7dd 50153382830684a6abb653dc7b4e41d7c7e386b5 5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash3519a58310eefa01756f0440e2acd7dd 50153382830684a6abb653dc7b4e41d7c7e386b5 5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| code.jquery.com/jquery-migrate-1.2.1.min.js | 69.16.175.42 | 200 OK | 3.1 kB |
URL HTTP/2code.jquery.com/jquery-migrate-1.2.1.min.js IP69.16.175.42:0
File typeASCII text, with very long lines (7085) Hashe1084a25976d8b8999acadc7350ffb48 99b723d38b78d8347e8dfa60193b12864a370227 b98359c65420aa3864d5b86ef94c4c9a5fb8c772a905884a5ba4ce55319a3d13
GET /jquery-migrate-1.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-encoding: gzip
content-length: 3063
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1c1f"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669927938.dop024.sk1.t,1669927938.cds252.sk1.hn,1669927938.cds242.sk1.c
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash2f1d1e0007d1ba038ac919cc334dca7d 4f3c8cf53099b4a2844ce33d927d2f637d568ff0 d34a6d2d4672091f991673b5cf5e89dd224ff90ff20360db8493241ad1e31fde
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 609
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Last-Modified: Thu, 01 Dec 2022 20:42:09 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
|
|
| munchkin.marketo.net//munchkin.js |  23.53.51.106 | 200 OK | 728 B |
URL HTTP/1.1munchkin.marketo.net//munchkin.js IP23.53.51.106:0 ASN#1299 Telia Company AB
File typeASCII text, with very long lines (521) Hash51a92d8c69733d719447dea0416ed039 69f4c1e0b7ebba812bc096708d57627927dff265 cb483c0ea4012ac512bcba6204b37622b388c1aefd4ae9028f60abb965f23d29
GET //munchkin.js HTTP/1.1
Host: munchkin.marketo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "92b41a298690c047b0c4602dd843cba4:1662686319.691662"
Last-Modified: Fri, 09 Sep 2022 01:18:39 GMT
Server: AkamaiNetStorage
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 01 Dec 2022 20:52:18 GMT
Content-Length: 728
Connection: keep-alive
|
|
| code.jquery.com/jquery-1.11.0.min.js | 69.16.175.42 | 200 OK | 33 kB |
URL HTTP/2code.jquery.com/jquery-1.11.0.min.js IP69.16.175.42:0
File typeASCII text, with very long lines (32341) Hash665423f5df5f30d3e991653d594fd1cd ad2be638c57e37aa00adacc89d233d70d5c5c927 fce13e871876bba3561cf18484a8f4fcab2d1b954079b78c1d8ff7a727583b33
GET /jquery-1.11.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-encoding: gzip
content-length: 33357
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-1787d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669927938.dop024.sk1.t,1669927938.cds252.sk1.hn,1669927938.cds206.sk1.c
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/jquery-ui.min.js | 142.250.74.138 | 200 OK | 64 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jqueryui/1.11.2/jquery-ui.min.js IP142.250.74.138:0
File typeASCII text, with very long lines (32157) Hash7756e68f4eb51a103ca4470ef4bced27 acd37eeae2641edac458694a14c6e1a2985e87b6 1798a9b14876b546bb25c1dc964fa574c02538439b716433f1594aad03c3b2e1
GET /ajax/libs/jqueryui/1.11.2/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 64362
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 08:03:32 GMT
expires: Tue, 28 Nov 2023 08:03:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 305326
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js | 142.250.74.138 | 200 OK | 34 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js IP142.250.74.138:0
File typeASCII text, with very long lines (32038) Hash103708790db3586027df27ded660f8ef d3f58fbe6e02cb4b8b34c6fd510e011cb325bc70 fdba876856bb6c2783df94cacb0f17b53fe33f1907135539272c0127b4270ffe
GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33507
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 12:51:28 GMT
expires: Fri, 01 Dec 2023 12:51:28 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 28850
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| info.mimecast.com/rs/336-TAU-594/images/PANW_Parent_Brand_Primary_Logo_RGB_Red_White%20%281%29.png | 104.17.72.206 | 200 OK | 18 kB |
URL HTTP/2info.mimecast.com/rs/336-TAU-594/images/PANW_Parent_Brand_Primary_Logo_RGB_Red_White%20%281%29.png IP104.17.72.206:0
File typePNG image data, 1312 x 240, 8-bit/color RGBA, non-interlaced\012- data Hash8192664cb37d952a2880f33207dd2147 2a5815becfeb8b9577232e25bdb6fcd97022014d 2003684d0dca4a5838a3fa6c7f4a8bcb44f09e64e2758acc30e9b746263f6079
GET /rs/336-TAU-594/images/PANW_Parent_Brand_Primary_Logo_RGB_Red_White%20%281%29.png HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: image/png
content-length: 17455
last-modified: Tue, 08 Nov 2022 18:21:46 GMT
etag: "444083-442f-5ecf99cde8e46"
x-content-type-options: nosniff
cf-cache-status: MISS
expires: Thu, 01 Dec 2022 20:53:18 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772eb4acdaa40b3d-OSL
X-Firefox-Spdy: h2
|
|
| info.mimecast.com/rs/336-TAU-594/images/Mimecast-white-logo-2020.png | 104.17.72.206 | 200 OK | 8.0 kB |
URL HTTP/2info.mimecast.com/rs/336-TAU-594/images/Mimecast-white-logo-2020.png IP104.17.72.206:0
File typePNG image data, 600 x 111, 8-bit/color RGBA, non-interlaced\012- data Hasheedcbe797ac04a39c76d6d63d0b55ce8 7d84d7d1140f45b1eed1b5efb2c2a843786ee377 a0f3ed7654fc47ea0213c222a5cff4a44e6023cdf599a3bcfa203c79ecd69b68
GET /rs/336-TAU-594/images/Mimecast-white-logo-2020.png HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: image/png
content-length: 8033
last-modified: Wed, 12 Oct 2022 03:45:28 GMT
etag: "44266c-1f61-5eace393d5560"
x-content-type-options: nosniff
cf-cache-status: EXPIRED
expires: Thu, 01 Dec 2022 20:53:18 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772eb4acdaa30b3d-OSL
X-Firefox-Spdy: h2
|
|
| info.mimecast.com/rs/336-TAU-594/images/PhotoOps-300x300.jpg | 104.17.72.206 | 200 OK | 29 kB |
URL HTTP/2info.mimecast.com/rs/336-TAU-594/images/PhotoOps-300x300.jpg IP104.17.72.206:0
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.0 (Macintosh), datetime=2022:11:07 09:40:22], baseline, precision 8, 300x300, components 3\012- data Hashb95ba97bb7327a845653720cf7a0cf1f cf8755560247991ab3d2fbe7c1dfca5c3349e891 bc538b3097c139c51139b3572a9b5ae6c7848a5876d1b4b601fcbb7ce23b6365
GET /rs/336-TAU-594/images/PhotoOps-300x300.jpg HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: image/jpeg
content-length: 29265
last-modified: Tue, 08 Nov 2022 18:30:27 GMT
etag: "444084-7251-5ecf9bbee75b8"
x-content-type-options: nosniff
cf-cache-status: EXPIRED
expires: Thu, 01 Dec 2022 20:53:18 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772eb4aceab90b3d-OSL
X-Firefox-Spdy: h2
|
|
| info.mimecast.com/rs/336-TAU-594/images/Thom%20B%20Headshot%20Champagne%20Tasting%20.jpg | 104.17.72.206 | 200 OK | 36 kB |
URL HTTP/2info.mimecast.com/rs/336-TAU-594/images/Thom%20B%20Headshot%20Champagne%20Tasting%20.jpg IP104.17.72.206:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 556x552, components 3\012- data Hashfa5d7d011bd2dd528e90737767b0a70d fd0dcd11995394b57be37f015dfb9a0226810708 96137c4aba7c78b04a5483f6cd1fd28e7859d1a2d37565f1f8adfe917b744ea7
GET /rs/336-TAU-594/images/Thom%20B%20Headshot%20Champagne%20Tasting%20.jpg HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: image/jpeg
content-length: 36170
last-modified: Thu, 01 Dec 2022 18:51:42 GMT
etag: "442b52-8d4a-5eec8b647ef34"
x-content-type-options: nosniff
cf-cache-status: EXPIRED
expires: Thu, 01 Dec 2022 20:53:18 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772eb4aceab60b3d-OSL
X-Firefox-Spdy: h2
|
|
| info.mimecast.com/rs/336-TAU-594/images/Nasdaq-logo.png | 104.17.72.206 | 200 OK | 3.0 kB |
URL HTTP/2info.mimecast.com/rs/336-TAU-594/images/Nasdaq-logo.png IP104.17.72.206:0
File typePNG image data, 654 x 143, 8-bit/color RGBA, non-interlaced\012- data Hash1b23e7f0ccf4eacbf87b1b9ab4fbb333 4bf562763af05fd9f4dfe7ff77796fda93a929bd b114ad86691740285a76e7e3b3f44fb4972e0774236c1857e1d528993e20885a
GET /rs/336-TAU-594/images/Nasdaq-logo.png HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: image/png
content-length: 2959
last-modified: Wed, 12 Oct 2022 03:46:44 GMT
etag: "442688-b8f-5eace3dd0aea9"
x-content-type-options: nosniff
cf-cache-status: REVALIDATED
expires: Thu, 01 Dec 2022 20:53:18 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772eb4acfacc0b3d-OSL
X-Firefox-Spdy: h2
|
|
| info.mimecast.com/js/stripmkttok.js | 104.17.72.206 | 200 OK | 678 B |
URL HTTP/2info.mimecast.com/js/stripmkttok.js IP104.17.72.206:0
Hash3fdef86d42eeb7dfcfb73a530ee91fc5 2607ea641352760e576457f45118a7669410f985 8a52a2135e190805e486c15721ae5af8a353d2882d515a316aa106e8c0a38099
GET /js/stripmkttok.js HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: application/x-javascript
content-length: 678
last-modified: Tue, 04 Oct 2022 18:03:50 GMT
etag: "423e16-602-5ea394843ed80"
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Fri, 02 Dec 2022 00:52:18 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 772eb4ad2afc0b3d-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash3519a58310eefa01756f0440e2acd7dd 50153382830684a6abb653dc7b4e41d7c7e386b5 5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash3519a58310eefa01756f0440e2acd7dd 50153382830684a6abb653dc7b4e41d7c7e386b5 5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| info.mimecast.com/rs/336-TAU-594/images/Brian%20%281%29.png | 104.17.72.206 | 200 OK | 422 kB |
URL HTTP/2info.mimecast.com/rs/336-TAU-594/images/Brian%20%281%29.png IP104.17.72.206:0
File typePNG image data, 800 x 600, 8-bit/color RGBA, non-interlaced\012- data Size422 kB (421930 bytes) Hash77dd430cadea1273a8efbce36de60104 fed0fc5ef4c8004ed2d03789035182745d8168c2 1ab67188c66acb2628893621019713d800f1efc5d2902ad65fe36a98aa29e47b
GET /rs/336-TAU-594/images/Brian%20%281%29.png HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: image/png
content-length: 421930
last-modified: Tue, 15 Nov 2022 21:02:45 GMT
etag: "444355-6702a-5ed88ad8331dc"
x-content-type-options: nosniff
cf-cache-status: MISS
expires: Thu, 01 Dec 2022 20:53:18 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772eb4aceab80b3d-OSL
X-Firefox-Spdy: h2
|
|
| p.typekit.net/p.css?s=1&k=efx1znb&ht=tk&f=39473.39474.39475.39476.39477.39478.39479.39480.39481.39482.39483.39484&a=17724356&app=typekit&e=css | 95.101.11.112 | 200 OK | 5 B |
URL HTTP/2p.typekit.net/p.css?s=1&k=efx1znb&ht=tk&f=39473.39474.39475.39476.39477.39478.39479.39480.39481.39482.39483.39484&a=17724356&app=typekit&e=css IP95.101.11.112:0 ASN#20940 Akamai International B.V.
Hash83d24d4b43cc7eef2b61e66c95f3d158 f0cafc285ee23bb6c28c5166f305493c4331c84d 1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
GET /p.css?s=1&k=efx1znb&ht=tk&f=39473.39474.39475.39476.39477.39478.39479.39480.39481.39482.39483.39484&a=17724356&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
content-type: text/css
cross-origin-resource-policy: cross-origin
etag: "613bee4d-5"
last-modified: Fri, 10 Sep 2021 23:46:21 GMT
server: nginx
content-length: 5
date: Thu, 01 Dec 2022 20:52:18 GMT
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash188c50963e7939b1f26a31dbcb8c8200 859416e6148ea6618584e53604efcf072bb989cc 3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| use.typekit.net/af/e8ba57/00000000000000003b9b2038/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 | 95.101.11.120 | 200 OK | 26 kB |
URL HTTP/2use.typekit.net/af/e8ba57/00000000000000003b9b2038/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 IP95.101.11.120:0 ASN#20940 Akamai International B.V.
File typeWeb Open Font Format (Version 2), CFF, length 25900, version 1.0\012- data Hash8c2d773af6bbe3d92ea240122ddcd194 64e1acb13f4714f71b315f0bab556d093107c5d1 99c3be2a0eb1736419e732e5674274384595e0ff9ce517cceddf5425c7dadaa2
GET /af/e8ba57/00000000000000003b9b2038/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://info.mimecast.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 25900
etag: "ae2ad11fd88cb05ce0e1bbe3f931997acde0a89d"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 01 Dec 2022 20:52:18 GMT
X-Firefox-Spdy: h2
|
|
| use.typekit.net/af/00ac0a/00000000000000003b9b2033/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 | 95.101.11.120 | 200 OK | 26 kB |
URL HTTP/2use.typekit.net/af/00ac0a/00000000000000003b9b2033/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 IP95.101.11.120:0 ASN#20940 Akamai International B.V.
File typeWeb Open Font Format (Version 2), CFF, length 26112, version 1.0\012- data Hash64fed881d2eba6124e402e35860e4493 302462d0df24e53b33a5bcda9161bb52456fc63f b9d23563f9395f087cc5fc0befd459b44d6cdb01c53c59542cd0da4d5392faec
GET /af/00ac0a/00000000000000003b9b2033/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://info.mimecast.com
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 26112
etag: "37ae8993819fccb76a66d47cb935e18af5893b04"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Thu, 01 Dec 2022 20:52:18 GMT
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash980f31229421fd11df958496bea34502 648e03f048e6741beb1d4e10099b1429b79e4f00 887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash980f31229421fd11df958496bea34502 648e03f048e6741beb1d4e10099b1429b79e4f00 887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 45 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data Hash565ce506190ad3af920b40baf1794cec ad3cba5d06100e09449a864d3b5e58403b478b3d 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://info.mimecast.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:41 GMT
expires: Tue, 28 Nov 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 266377
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-M2787TN | 142.250.74.168 | 200 OK | 111 kB |
URL HTTP/2www.googletagmanager.com/gtm.js?id=GTM-M2787TN IP142.250.74.168:0
File typeASCII text, with very long lines (57043) Size111 kB (110764 bytes) Hash47f94644f473e77d55e53b4a386dfd02 0c6c44d47e1a903f55813b108fddebd61ec47a85 5167a108454fca3bf32708eed7bf01ae3bba097354e2a0e76fff32853742173a
GET /gtm.js?id=GTM-M2787TN HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 01 Dec 2022 20:52:18 GMT
expires: Thu, 01 Dec 2022 20:52:18 GMT
cache-control: private, max-age=900
last-modified: Thu, 01 Dec 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 110764
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| info.mimecast.com/rs/336-TAU-594/images/Image_Placeholder.png | 104.17.72.206 | 200 OK | 254 kB |
URL HTTP/2info.mimecast.com/rs/336-TAU-594/images/Image_Placeholder.png IP104.17.72.206:0
File typePNG image data, 1276 x 1028, 8-bit/color RGBA, non-interlaced\012- data Size254 kB (253903 bytes) Hasheb7b4dfe1c4cd49b04b162d18bfb55bd e6f555ed47b7316da1c411b8ddd39ed849266968 aaa4b610aa673d66bd9df814083fa92821cb4d18f929944f3d437a506a5b8dec
GET /rs/336-TAU-594/images/Image_Placeholder.png HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: image/png
content-length: 253903
last-modified: Wed, 12 Oct 2022 04:03:51 GMT
etag: "4426f8-3dfcf-5eace7b069aa0"
x-content-type-options: nosniff
cf-cache-status: EXPIRED
expires: Thu, 01 Dec 2022 20:53:18 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772eb4aceab30b3d-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash188c50963e7939b1f26a31dbcb8c8200 859416e6148ea6618584e53604efcf072bb989cc 3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash980f31229421fd11df958496bea34502 648e03f048e6741beb1d4e10099b1429b79e4f00 887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashd106921c111f7d3128103128c55f9d35 4e057ff71b83c91062af7e3e24d627ae44badb69 cbb9b3e51319484ccfd372e24058ae863b6060fcfb50f98b908a679868bb843a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 572
Cache-Control: max-age=120997
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:18 GMT
Etag: "6388476b-117"
Expires: Sat, 03 Dec 2022 06:28:55 GMT
Last-Modified: Thu, 01 Dec 2022 06:19:23 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
|
|
| cdn.cookielaw.org/scripttemplates/otSDKStub.js | 104.16.149.64 | 200 OK | 7.2 kB |
URL HTTP/2cdn.cookielaw.org/scripttemplates/otSDKStub.js IP104.16.149.64:0
File typeASCII text, with very long lines (21747) Hash1cdc786dd1264609f9834f4aba53e2ef fff15e833ab27c356e7723dce3441e194b6350bf 70768bac474def6b0ed3e517083dd9c2f1ae3f0fe714ea550c406ce89906adc9
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: application/javascript
content-length: 7151
content-encoding: gzip
content-md5: HNx4bdEmRgn5g09KulPi7w==
last-modified: Wed, 30 Nov 2022 07:37:12 GMT
etag: 0x8DAD2A5B1D42DFC
x-ms-request-id: d900466d-a01e-00f1-4719-050975000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 68566
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 772eb4b27f81b4eb-OSL
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashecab83d593cc540b02689be5be7abc8a 81cda579b7b9b22332b85266b0126585f3d3f73f d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13393
Expires: Fri, 02 Dec 2022 00:35:31 GMT
Date: Thu, 01 Dec 2022 20:52:18 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashecab83d593cc540b02689be5be7abc8a 81cda579b7b9b22332b85266b0126585f3d3f73f d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13392
Expires: Fri, 02 Dec 2022 00:35:31 GMT
Date: Thu, 01 Dec 2022 20:52:19 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashecab83d593cc540b02689be5be7abc8a 81cda579b7b9b22332b85266b0126585f3d3f73f d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13392
Expires: Fri, 02 Dec 2022 00:35:31 GMT
Date: Thu, 01 Dec 2022 20:52:19 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg | 34.120.237.76 | 200 OK | 8.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash26d6dffbf400da4803a2e76e2a8ef2f8 2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8 04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8740
x-amzn-requestid: c6c3e3dc-c9a2-4fda-a83b-cdd6ae81166b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7uyE9CoAMF6Xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830cc4-2c8940405044071a082ee678;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qykE_oaoqqPTgqGnfUo74mH29IOS97b5sZb_3VmB9yW7KUiJ1a7dnA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 18:58:06 GMT
age: 6853
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93.json | 104.16.149.64 | 200 OK | 1.5 kB |
URL HTTP/2cdn.cookielaw.org/consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93.json IP104.16.149.64:0
File typeJSON data\012- , ASCII text, with very long lines (3609), with no line terminators Hash005c8a79ae0731c7e65023894842b995 47b7af1a1b2ff3bfe2ef9af719321b3b0d66e850 fd27fb25be47c52231d9e16987c5f9b986263bf9c0f149ecdcb54f2ba64a655e
GET /consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://info.mimecast.com
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:19 GMT
content-type: application/x-javascript
content-length: 1506
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: AFyKea4HMcfmUCOJSEK5lQ==
last-modified: Thu, 31 Mar 2022 21:19:13 GMT
etag: 0x8DA135C1B0CE254
x-ms-request-id: 0df1a82d-401e-0155-7246-4575c4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 32421
expires: Fri, 02 Dec 2022 20:52:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 772eb4b2ee27b4f3-OSL
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg | 34.120.237.76 | 200 OK | 9.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe1e6b6ba4f82221b41c3d9129008c76d 2f9532d698b4c28df23e18bbb66399ec776d5b9f 218c6f41a16e6087c611d4db5784a7cc1d027084d0bf2bd6dc3843ee5dfd560f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: c08f55b2-7ac6-4dec-b53c-fd3f4533f9c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpBiGoHIAMFR2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bba3-69c2c2d05e55fd745caf1dce;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:09:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w_Mb-0pBwp-pUyU2bdJ8MhrGHkk6VQgJmcGV9MfHwj_yGUMIYZkyrg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 17:08:13 GMT
age: 13446
etag: "2f9532d698b4c28df23e18bbb66399ec776d5b9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg | 34.120.237.76 | 200 OK | 16 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashffd12f9c423ffc627d9e3b3145944fe4 5cf9a7a784952e1bb0cbe499104f1774b1269d08 a25f1b752d9af599aefd73073c105853130f1759905269de3d582d2eb35fe167
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16038
x-amzn-requestid: 925134ee-dd35-45ed-8da7-d60c9c484993
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz80EHboAMFtmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd1e-48de287757e82632291365ee;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: I8qQQUMSVzFmXqjWM1n_F1XEE-ZQcpEF81OwJgf9i3Q5M8XiFAa8Zg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:52:00 GMT
age: 82819
etag: "5cf9a7a784952e1bb0cbe499104f1774b1269d08"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash328ce221bcf3442f88d09373193ff594 63bfa2ea925aa2c188c664a7bf7af7b0e5417e60 21d5b5ec267430dba91b17f89a557aca5cd2a21535da18eb02ec69ed0e1b7371
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13411
x-amzn-requestid: 71f8798f-93e9-4649-8822-7ad3fadeec34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cbz6vH05oAMF_qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387cd11-1849aa08463e5c1f3d9b15b9;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QVGFEOePBybOeNxG6eWBffm8Ha_fmBnT8vMIGcI8zv9C7yiBeSncDw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:52:00 GMT
etag: "63bfa2ea925aa2c188c664a7bf7af7b0e5417e60"
content-type: image/jpeg
age: 82819
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg | 34.120.237.76 | 200 OK | 4.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd2dd5a4bcfd47db8f38544bf39ce3031 fa2217bae05b7beca2e12597eaad835298276b82 3266004f5e73af5359b71622eea31f1e28abb4bbc443b5f9e481b5a8b2e9249e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4762
x-amzn-requestid: 52b09ca3-705b-4c86-9f56-172637553f87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP7TVG58oAMFQTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63830c15-4577a47243ad190672f8ac89;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Y0-NAp2LMMG5TjQQ9ENHwDyKXLObKTYqzPPOWvZhs7Y9WJIC6LoblQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 05:45:16 GMT
age: 54423
etag: "fa2217bae05b7beca2e12597eaad835298276b82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash820cf89fcab8380adff42982c9fb11ed 84241ddddbbfd7de30118307fb1a62800d0a4cb3 0d051495f06ac84de934283b40cbfee7a042d32153a73486dd7c017430e882d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12898
x-amzn-requestid: 9b594c3c-6b8c-4589-8fcb-b3d7518b46f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cQZBNFxToAMF_9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63833ba1-767f510d72eef86d0cc892df;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 10:27:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kZfRQsF_Fo2UtTqK0ByOPeQK-IzTQO9JtTmxIMlapmsd93SJk_4VYw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 21:47:30 GMT
age: 83089
etag: "84241ddddbbfd7de30118307fb1a62800d0a4cb3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.100 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.100:0
Hashc0badc896cf87eaa76be5ebf7059b187 0fe6e28d1b9a34cfc34ac3f85f1f5a24beb65b15 44f5428bcfe263a18680253ec9739f265f47ef7761e5879b9ab2a26b3c6afeb5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=163759
Date: Thu, 01 Dec 2022 20:52:19 GMT
Etag: "6388eead-1d7"
Expires: Sat, 03 Dec 2022 18:21:38 GMT
Last-Modified: Thu, 01 Dec 2022 18:13:01 GMT
Server: ECS (nyb/1D1A)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: z7kgCiHV4W-1Gk2CPBgVeeKNkS5LP891aG0lQwGAVLGsMPKxVpy3xg==
Age: 517
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.100 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.100:0
Hashc0badc896cf87eaa76be5ebf7059b187 0fe6e28d1b9a34cfc34ac3f85f1f5a24beb65b15 44f5428bcfe263a18680253ec9739f265f47ef7761e5879b9ab2a26b3c6afeb5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=163758
Date: Thu, 01 Dec 2022 20:52:19 GMT
Etag: "6388eead-1d7"
Expires: Sat, 03 Dec 2022 18:21:37 GMT
Last-Modified: Thu, 01 Dec 2022 18:13:01 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _BMopf4WuR9owEx59yg-nnxIlCGM0RNVZZy7e1ZZKASf_aAxsk324w==
Age: 516
|
|
| l.sharethis.com/pview?event=pview&hostname=info.mimecast.com&location=%2Fransomware-risk-mimecast-paloalto-webinar-registration.html&product=inline-share-buttons&url=https%3A%2F%2Finfo.mimecast.com%2Fransomware-risk-mimecast-paloalto-webinar-registration.html%3Fmkt_tok%3DMzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Cloud%20Cybersecurity%20Services%20for%20Email%2C%20Data%20%26%20Web%20%7C%20Mimecast&refDomain=email.mimecast.com&cms=unknown&publisher=5be309d6afad5b00117c8c0b&sop=true&version=st_sop.js&lang=en&description=A%20comprehensive%2C%20integrated%20solution%20that%20solves%20the%20%231%20cybersecurity%20attack%20vector%20%E2%80%93%20email%2C%20and%20reduce%20the%20time%2C%20cost%20and%20complexity%20of%20achieving%20more%20complete%20cybersecurity%2C%20compliance%20and%20resilience%20through%20additional%20modules. |  52.57.52.39 | 204 No Content | 0 B |
URL HTTP/1.1l.sharethis.com/pview?event=pview&hostname=info.mimecast.com&location=%2Fransomware-risk-mimecast-paloalto-webinar-registration.html&product=inline-share-buttons&url=https%3A%2F%2Finfo.mimecast.com%2Fransomware-risk-mimecast-paloalto-webinar-registration.html%3Fmkt_tok%3DMzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Cloud%20Cybersecurity%20Services%20for%20Email%2C%20Data%20%26%20Web%20%7C%20Mimecast&refDomain=email.mimecast.com&cms=unknown&publisher=5be309d6afad5b00117c8c0b&sop=true&version=st_sop.js&lang=en&description=A%20comprehensive%2C%20integrated%20solution%20that%20solves%20the%20%231%20cybersecurity%20attack%20vector%20%E2%80%93%20email%2C%20and%20reduce%20the%20time%2C%20cost%20and%20complexity%20of%20achieving%20more%20complete%20cybersecurity%2C%20compliance%20and%20resilience%20through%20additional%20modules. IP52.57.52.39:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pview?event=pview&hostname=info.mimecast.com&location=%2Fransomware-risk-mimecast-paloalto-webinar-registration.html&product=inline-share-buttons&url=https%3A%2F%2Finfo.mimecast.com%2Fransomware-risk-mimecast-paloalto-webinar-registration.html%3Fmkt_tok%3DMzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0&source=sharethis.js&fcmp=false&fcmpv2=false&has_segmentio=false&title=Cloud%20Cybersecurity%20Services%20for%20Email%2C%20Data%20%26%20Web%20%7C%20Mimecast&refDomain=email.mimecast.com&cms=unknown&publisher=5be309d6afad5b00117c8c0b&sop=true&version=st_sop.js&lang=en&description=A%20comprehensive%2C%20integrated%20solution%20that%20solves%20the%20%231%20cybersecurity%20attack%20vector%20%E2%80%93%20email%2C%20and%20reduce%20the%20time%2C%20cost%20and%20complexity%20of%20achieving%20more%20complete%20cybersecurity%2C%20compliance%20and%20resilience%20through%20additional%20modules. HTTP/1.1
Host: l.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://info.mimecast.com
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: https://info.mimecast.com
Access-Control-Expose-Headers: stid
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Date: Thu, 01 Dec 2022 20:52:19 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains;
Connection: keep-alive
|
|
| l.sharethis.com/log?event=ibl&title=&url=https%3A%2F%2Femail.mimecast.com%2F&fcmp=false&fcmpv2=false&has_segmentio=false&product=inline-share-buttons&publisher=5be309d6afad5b00117c8c0b&refDomain=email.mimecast.com&refQuery=&source=sharethis.js&ts=1669927937064&sop=true&cms=unknown&description=A%20comprehensive%2C%20integrated%20solution%20that%20solves%20the%20%231%20cybersecurity%20attack%20vector%20%E2%80%93%20email%2C%20and%20reduce%20the%20time%2C%20cost%20and%20complexity%20of%20achieving%20more%20complete%20cybersecurity%2C%20compliance%20and%20resilience%20through%20additional%20modules. | 52.57.52.39 | 204 No Content | 0 B |
URL HTTP/1.1l.sharethis.com/log?event=ibl&title=&url=https%3A%2F%2Femail.mimecast.com%2F&fcmp=false&fcmpv2=false&has_segmentio=false&product=inline-share-buttons&publisher=5be309d6afad5b00117c8c0b&refDomain=email.mimecast.com&refQuery=&source=sharethis.js&ts=1669927937064&sop=true&cms=unknown&description=A%20comprehensive%2C%20integrated%20solution%20that%20solves%20the%20%231%20cybersecurity%20attack%20vector%20%E2%80%93%20email%2C%20and%20reduce%20the%20time%2C%20cost%20and%20complexity%20of%20achieving%20more%20complete%20cybersecurity%2C%20compliance%20and%20resilience%20through%20additional%20modules. IP52.57.52.39:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /log?event=ibl&title=&url=https%3A%2F%2Femail.mimecast.com%2F&fcmp=false&fcmpv2=false&has_segmentio=false&product=inline-share-buttons&publisher=5be309d6afad5b00117c8c0b&refDomain=email.mimecast.com&refQuery=&source=sharethis.js&ts=1669927937064&sop=true&cms=unknown&description=A%20comprehensive%2C%20integrated%20solution%20that%20solves%20the%20%231%20cybersecurity%20attack%20vector%20%E2%80%93%20email%2C%20and%20reduce%20the%20time%2C%20cost%20and%20complexity%20of%20achieving%20more%20complete%20cybersecurity%2C%20compliance%20and%20resilience%20through%20additional%20modules. HTTP/1.1
Host: l.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: stid
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Date: Thu, 01 Dec 2022 20:52:19 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains;
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hash9a997c8fe1adfee02ceba04ef94c3a3b 729573c81f4b9580fc66dac14df1e3f6b8db8b0c 16e5bbc724942844506ae6af63bd883f9f9eb39f9c28dbbe0c4e34982f70d419
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 494
Cache-Control: max-age=141428
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:19 GMT
Etag: "63889789-116"
Expires: Sat, 03 Dec 2022 12:09:27 GMT
Last-Modified: Thu, 01 Dec 2022 12:01:13 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
|
|
| info.mimecast.com/rs/336-TAU-594/images/favicon-16x16.png | 104.17.72.206 | 200 OK | 823 B |
URL HTTP/2info.mimecast.com/rs/336-TAU-594/images/favicon-16x16.png IP104.17.72.206:0
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data Hash9a0fa515dc14a0df6ae04ec33c90c3ac 59242918c4e38c84336ea7016236cd690a62c52d 05f69c9fe7d1ef15f5efd21a26faa07ec37299075bd3bcdf2056552e2982b627
GET /rs/336-TAU-594/images/favicon-16x16.png HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:19 GMT
content-type: image/png
content-length: 823
last-modified: Wed, 12 Oct 2022 04:07:41 GMT
etag: "44270c-337-5eace88b69824"
x-content-type-options: nosniff
cf-cache-status: EXPIRED
expires: Thu, 01 Dec 2022 20:53:19 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772eb4b228e60b3d-OSL
X-Firefox-Spdy: h2
|
|
| info.mimecast.com/rs/336-TAU-594/images/android-chrome-192x192.png | 104.17.72.206 | 200 OK | 4.1 kB |
URL HTTP/2info.mimecast.com/rs/336-TAU-594/images/android-chrome-192x192.png IP104.17.72.206:0
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hashce3f1eee30de98683028ddc0ebd53727 0db08a44a0df4dd06c9ef45b83091e25d1471a2e ffb8e347ffb0639604fb1d4b8fd015b6d1748e4f34aabc7b9d27f3da45e5b7ec
GET /rs/336-TAU-594/images/android-chrome-192x192.png HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:19 GMT
content-type: image/png
content-length: 4130
last-modified: Wed, 12 Oct 2022 04:07:41 GMT
etag: "44270e-1022-5eace88b6d6a5"
x-content-type-options: nosniff
cf-cache-status: EXPIRED
expires: Thu, 01 Dec 2022 20:53:19 GMT
cache-control: public, max-age=60
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 772eb4b228e50b3d-OSL
X-Firefox-Spdy: h2
|
|
| munchkin.marketo.net/162/munchkin.js | 23.53.51.106 | 200 OK | 4.7 kB |
URL HTTP/1.1munchkin.marketo.net/162/munchkin.js IP23.53.51.106:0 ASN#1299 Telia Company AB
File typeASCII text, with very long lines (606) Hash3e9baed982956735f6e0a0e756d97ed9 9223be6a494a10959101a7942419df7b05b84d73 930a508ed0ea6b4861d19c0738360182514010913c4ebfe9352064ae5006f8a1
GET /162/munchkin.js HTTP/1.1
Host: munchkin.marketo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "75daf56f6191efe42577301908659c29:1656637152.894482"
Last-Modified: Fri, 01 Jul 2022 00:59:12 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=8640000
Expires: Sat, 11 Mar 2023 20:52:19 GMT
Date: Thu, 01 Dec 2022 20:52:19 GMT
Content-Length: 4677
Connection: keep-alive
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"
|
|
| cdn.cookielaw.org/scripttemplates/6.32.0/otBannerSdk.js | 104.16.149.64 | 200 OK | 81 kB |
URL HTTP/2cdn.cookielaw.org/scripttemplates/6.32.0/otBannerSdk.js IP104.16.149.64:0
File typeASCII text, with very long lines (65455) Hashaf27d9858b2a2e2b0912706c3aa815b1 10c1fa093e80cbcb3ba39b8e54e934b37cb3aa57 a736527d6f80163a1b0ec8f7f8a2902c7005b4ec61fce5295d9612df48a72d06
GET /scripttemplates/6.32.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:19 GMT
content-type: application/javascript
content-length: 81095
content-encoding: gzip
content-md5: ryfZhYsqLisJEnBsOqgVsQ==
last-modified: Fri, 18 Mar 2022 16:29:23 GMT
etag: 0x8DA08FC76466F7A
x-ms-request-id: 4e03c84a-e01e-0031-75f4-3a8331000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 68542
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 772eb4b419d9b4eb-OSL
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/de611c66-07b2-4a68-bdb8-1d339e269aef/en.json | 104.16.149.64 | 200 OK | 28 kB |
URL HTTP/2cdn.cookielaw.org/consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/de611c66-07b2-4a68-bdb8-1d339e269aef/en.json IP104.16.149.64:0
File typeJSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (65487), with no line terminators Hash9f52c3a3351864918587be189d8cdaf3 5c1826ab30ea4c4637f7f88a39f09fefe0185f86 c7e57ae04f3885944d7c1fd9f6863c606a9216f70d5577c52a654e3b6b7e9ea1
GET /consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/de611c66-07b2-4a68-bdb8-1d339e269aef/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://info.mimecast.com/
Origin: https://info.mimecast.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:19 GMT
content-type: application/x-javascript
content-length: 27506
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: n1LDozUYZJGFh74YnYza8w==
last-modified: Thu, 31 Mar 2022 21:19:19 GMT
etag: 0x8DA135C1E524B83
x-ms-request-id: cb244c9a-401e-00f0-6d4c-450888000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 32421
expires: Fri, 02 Dec 2022 20:52:19 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 772eb4b488e7b4f3-OSL
X-Firefox-Spdy: h2
|
|
| buttons-config.sharethis.com/js/5be309d6afad5b00117c8c0b.js | 54.230.111.11 | 200 OK | 415 B |
URL HTTP/2buttons-config.sharethis.com/js/5be309d6afad5b00117c8c0b.js IP54.230.111.11:0
File typeASCII text, with very long lines (415), with no line terminators Hash7a0830b7a5131f065c89e2e1d8b3cff4 7ea3355d3b780da476e4639435167c79c929416e d667f2a61bfff68f9763f89b299bd8324b9f0e15054a6a50da858d9aba50ad3d
GET /js/5be309d6afad5b00117c8c0b.js HTTP/1.1
Host: buttons-config.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
content-length: 415
last-modified: Wed, 07 Nov 2018 15:52:19 GMT
accept-ranges: bytes
server: AmazonS3
date: Thu, 01 Dec 2022 20:52:20 GMT
cache-control: max-age=60,public
etag: "7a0830b7a5131f065c89e2e1d8b3cff4"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GFsKQgCPlTHcOf3sQuiDrD44nxO0Lp1_NMwsSGMWxNLUWcfRWGcFIQ==
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/6.32.0/assets/otCenterRounded.json | 104.16.149.64 | 200 OK | 2.6 kB |
URL HTTP/2cdn.cookielaw.org/scripttemplates/6.32.0/assets/otCenterRounded.json IP104.16.149.64:0
File typeJSON data\012- , ASCII text, with very long lines (7547) Hashd7f8f2443dcd14f79ae7c35ebbec15c8 e2f1930b2188ae6009ce9db98aac969f2f5a0a80 81e3ae2d9d675ac5ef55dde077749bb894678bd430f658d10ba778e113d901c5
GET /scripttemplates/6.32.0/assets/otCenterRounded.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://info.mimecast.com/
Origin: https://info.mimecast.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:19 GMT
content-type: application/json
content-length: 2585
content-encoding: gzip
content-md5: 1/jyRD3NFPea58Neu+wVyA==
last-modified: Fri, 18 Mar 2022 16:29:15 GMT
etag: 0x8DA08FC7156585E
x-ms-request-id: a9aaa9b5-d01e-0136-794c-4533e1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 32420
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 772eb4b4d94eb4f3-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash290dadf5ced7c2fa40b860d9b2122621 da33510e51b118370d03e87797008bf647922ed6 412d484f9de1cdccf5eb04c03bd9098f90e71c31b329a9869c4ad07cdbf3392b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5782
Cache-Control: max-age=149933
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:19 GMT
Etag: "6388a41a-1d7"
Expires: Sat, 03 Dec 2022 14:31:12 GMT
Last-Modified: Thu, 01 Dec 2022 12:54:50 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
|
|
| info.mimecast.com/js/forms2/css/forms2-theme-simple.css | 104.17.72.206 | 200 OK | 242 B |
URL HTTP/2info.mimecast.com/js/forms2/css/forms2-theme-simple.css IP104.17.72.206:0
Hash4720e1ea424406eec04e5d4ede18e205 25109e2837aa426e95c520b559610c634c7ec5f5 2a8ee84e76124d7889489dc64bc710203023c652a6980f3cb17e341fdbc30907
GET /js/forms2/css/forms2-theme-simple.css HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!ta3f0TWIbxJmrblbO1+Oh92Pa3vcj3sMgCm3SKbzm5V8CNQMWUhniDxGPUHoZXpPPYkLYIcO1VMMqA==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=; _mkto_trk=id:336-TAU-594&token:_mch-mimecast.com-1669927937615-56545; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Dec+01+2022+20%3A52%3A17+GMT%2B0000+(Coordinated+Universal+Time)&version=6.32.0&isIABGlobal=false&hosts=&consentId=efc3c526-acf8-4c45-ae9d-ca3273a9fe1e&interactionCount=0&landingPath=https%3A%2F%2Finfo.mimecast.com%2Fransomware-risk-mimecast-paloalto-webinar-registration.html%3Fmkt_tok%3DMzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:19 GMT
content-type: text/css
content-length: 242
last-modified: Tue, 04 Oct 2022 18:03:49 GMT
etag: "423dff-33a-5ea394834ab40"
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
cf-cache-status: HIT
age: 837
expires: Fri, 02 Dec 2022 00:52:19 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 772eb4b53c000b3d-OSL
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/6.32.0/assets/otCommonStyles.css | 104.16.149.64 | 200 OK | 6.9 kB |
URL HTTP/2cdn.cookielaw.org/scripttemplates/6.32.0/assets/otCommonStyles.css IP104.16.149.64:0
File typeASCII text, with very long lines (11123) Hash17093dc2a00810050efa8c7e49b84ac1 c24d228892b9e646e8d9ff79118465e28d026b18 7bc4da3f8307148b49690d8bda201a02837893bca298ab4456a21e1b3b28c37d
GET /scripttemplates/6.32.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://info.mimecast.com/
Origin: https://info.mimecast.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:19 GMT
content-type: text/css
content-md5: SHFDtZO2nDZuiPDW83p1IQ==
last-modified: Fri, 18 Mar 2022 16:29:27 GMT
x-ms-request-id: 5c2c2b2a-a01e-0072-634c-45a9d8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 32420
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 772eb4b4d957b4f3-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 336-tau-594.mktoresp.com/webevents/visitWebPage?_mchNc=1669927937615&_mchCn=ransomware-risk-mimecast-paloalto-webinar-registration&_mchId=336-TAU-594&_mchTk=_mch-mimecast.com-1669927937615-56545&mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0&_mchWs=j1RR&_mchHo=info.mimecast.com&_mchPo=&_mchRu=%2Fransomware-risk-mimecast-paloalto-webinar-registration.html&_mchPc=https%3A&_mchVr=162&_mchEcid=&_mchHa=&_mchRe=https%3A%2F%2Femail.mimecast.com%2F&_mchQp=mkt_tok%3DMzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0 | 134.213.193.62 | 200 OK | 28 B |
URL HTTP/1.1336-tau-594.mktoresp.com/webevents/visitWebPage?_mchNc=1669927937615&_mchCn=ransomware-risk-mimecast-paloalto-webinar-registration&_mchId=336-TAU-594&_mchTk=_mch-mimecast.com-1669927937615-56545&mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0&_mchWs=j1RR&_mchHo=info.mimecast.com&_mchPo=&_mchRu=%2Fransomware-risk-mimecast-paloalto-webinar-registration.html&_mchPc=https%3A&_mchVr=162&_mchEcid=&_mchHa=&_mchRe=https%3A%2F%2Femail.mimecast.com%2F&_mchQp=mkt_tok%3DMzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0 IP134.213.193.62:0
File typeASCII text, with no line terminators Hash9dafc521bd59955b4986f0fc3777f77a 5a572b4730d4a2bce2fa35597a0993c649f26c74 e4e90a7b8bacdfe395361149a9fd42f9192b68bdf1497e4454d0ab4c4917f746
POST /webevents/visitWebPage?_mchNc=1669927937615&_mchCn=ransomware-risk-mimecast-paloalto-webinar-registration&_mchId=336-TAU-594&_mchTk=_mch-mimecast.com-1669927937615-56545&mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0&_mchWs=j1RR&_mchHo=info.mimecast.com&_mchPo=&_mchRu=%2Fransomware-risk-mimecast-paloalto-webinar-registration.html&_mchPc=https%3A&_mchVr=162&_mchEcid=&_mchHa=&_mchRe=https%3A%2F%2Femail.mimecast.com%2F&_mchQp=mkt_tok%3DMzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0 HTTP/1.1
Host: 336-tau-594.mktoresp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://info.mimecast.com
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Thu, 01 Dec 2022 20:52:19 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Request-Id: c165a1b8-dc0b-4ce4-a459-41aa37a45f50
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Set-Cookie: BIGipServerPOOL-134.213.193.62-MUNCHKIN-80=!zPwnV+WPkrGTYyhbO1+Oh92Pa3vcj0H7zuo0Ru/akL7NZx/v5GCZ7brnLen6zKbmjT/edO/JGxJ/3Q==; path=/; Httponly; Secure
|
|
| info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0 | 104.17.72.206 | 200 OK | 17 kB |
URL HTTP/2info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0 IP104.17.72.206:0
Hash8425083078e89cc96ef790dcf34bb56d 41c3a938fba888416f8e9b781e41e34ee71873ca 4789b426bad6bfdf15af4f772a28c0c920fed8bdc7992a1d243d753309484e1a
GET /ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0 HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://email.mimecast.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:17 GMT
content-type: text/html; charset=utf-8
p3p: CP="CAO CURa ADMa DEVa TAIa OUR IND UNI COM NAV INT"
x-asset-type: LP
vary: *,Accept-Encoding
x-content-type-options: nosniff
x-cache-status: BYPASS
x-mkto-nginx-cache: false
cf-cache-status: DYNAMIC
set-cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==;Path=/;Version=1;Secure;Httponly
__cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=; path=/; expires=Thu, 01-Dec-22 21:22:17 GMT; domain=.info.mimecast.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 772eb4a8be220b3d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| google.com/pagead/form-data/806813429?em=tv.1>m=2wgbu0 | 216.58.207.206 | 200 OK | 0 B |
URL HTTP/2google.com/pagead/form-data/806813429?em=tv.1>m=2wgbu0 IP216.58.207.206:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pagead/form-data/806813429?em=tv.1>m=2wgbu0 HTTP/1.1
Host: google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://info.mimecast.com
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 01 Dec 2022 20:52:19 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash533f66ef53706466ce20dc9aebf11812 0c0d713d538eb224deeb9241917a117205f16cb2 8ce7b68022c847b59b9a132ada3a75eea73bb57bae4683901c8df08fa255ba79
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash98d08de8ffff442b716039ff413d7cd0 3cd294006c153be2d05a713c03a10670c79ddb9e 12153f53c473a09394effea3f860e2118e87699c7ed73376e3bb068966f25033
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6502
Cache-Control: max-age=101357
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 20:52:25 GMT
Etag: "6387e390-117"
Expires: Sat, 03 Dec 2022 01:01:42 GMT
Last-Modified: Wed, 30 Nov 2022 23:13:20 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
|
|
| info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0 | 104.17.72.206 | 200 OK | 0 B |
URL HTTP/2info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0 IP104.17.72.206:0
GET /ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0 HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: text/html; charset=utf-8
p3p: CP="CAO CURa ADMa DEVa TAIa OUR IND UNI COM NAV INT"
x-asset-type: LP
vary: *,Accept-Encoding
x-content-type-options: nosniff
x-cache-status: BYPASS
x-mkto-nginx-cache: false
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 772eb4aceab00b3d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| email.mimecast.com/MzM2LVRBVS01OTQAAAGIbPj3DMvQn6dOWH-yueoW9bzDRwMSqC_SuXPIhxetR92hnDUsYQYBqNamDSv68f9HZIBPLSQ= | 104.17.71.206 | 302 Found | 0 B |
URL HTTP/2email.mimecast.com/MzM2LVRBVS01OTQAAAGIbPj3DMvQn6dOWH-yueoW9bzDRwMSqC_SuXPIhxetR92hnDUsYQYBqNamDSv68f9HZIBPLSQ= IP104.17.71.206:0
GET /MzM2LVRBVS01OTQAAAGIbPj3DMvQn6dOWH-yueoW9bzDRwMSqC_SuXPIhxetR92hnDUsYQYBqNamDSv68f9HZIBPLSQ= HTTP/1.1
Host: email.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Thu, 01 Dec 2022 20:52:16 GMT
content-type: text/html;charset=UTF-8
x-request-id: cc040605916f72b5
cache-control: private, no-cache, no-store, max-age=0
referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'self'; img-src 'self';script-src 'self' 'sha256-CUdX3xhugI1QDTeu++iCuxrbGfMtp/4vULG8Fb8ztqg=';object-src 'none';form-action:'none';frame-src:'none'
strict-transport-security: max-age=63072000; includeSubDomains
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=kKWGPhIqg6w8rAsbVGaQZBrJp7ofnzk3kO.EG1Wa4VA-1669927936-0-AURb7eG9RvrlnjyNvzOlYoP92eKA3nzW3KA1SoDhW9FacL22YOTbknH0Jhu1r2wECTd/7JHOEKqPfvcKQ3P0ucE=; path=/; expires=Thu, 01-Dec-22 21:22:16 GMT; domain=.email.mimecast.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 772eb4a56afdb4fd-OSL
X-Firefox-Spdy: h2
|
|
| info.mimecast.com/js/forms2/js/forms2.min.js | 104.17.72.206 | 200 OK | 0 B |
URL HTTP/2info.mimecast.com/js/forms2/js/forms2.min.js IP104.17.72.206:0
GET /js/forms2/js/forms2.min.js HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: application/x-javascript
last-modified: Tue, 04 Oct 2022 18:03:49 GMT
etag: "423dc1-33e51-5ea394834ab40"
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
cf-cache-status: HIT
age: 835
expires: Fri, 02 Dec 2022 00:52:18 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 772eb4acdaa60b3d-OSL
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js | 104.16.88.20 | 200 OK | 0 B |
URL HTTP/2cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js IP104.16.88.20:0
GET /npm/slick-carousel@1.8.1/slick/slick.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"a76f-O0GzvJVmhQFaNHoiOOcdsp36Dbs"
x-served-by: cache-fra19134-FRA, cache-bma1656-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: HIT
age: 15372134
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OP9wwdThYpItVkHB3XcgvMv2WqvsKnS4Af5bEo5DUcpKfH6WuZ4hwGt1Av6GuiQzuKnhX%2FAJadHvyJ3j0cYnRD2gZbvU2w0T%2FXzhLuEX9TSt8VCKcHJy3TRYSHIJ0v2zM7s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772eb4ad9ce31c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| info.mimecast.com/index.php/form/getForm?munchkinId=336-TAU-594&form=16112 | 104.17.72.206 | 200 OK | 0 B |
URL HTTP/2info.mimecast.com/index.php/form/getForm?munchkinId=336-TAU-594&form=16112 IP104.17.72.206:0
GET /index.php/form/getForm?munchkinId=336-TAU-594&form=16112 HTTP/1.1
Host: info.mimecast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://info.mimecast.com/ransomware-risk-mimecast-paloalto-webinar-registration.html?mkt_tok=MzM2LVRBVS01OTQAAAGIbPj3DMsOm5ga0A8WKZzM8P4JLoLyjM2dlkgWsXocY7G-n7oCNiCX_gzK2_dlMFrMzVcYWl9HH3bP4t0bPFrlutMFanKK-CEcAiBcc_xUdXKQBL0
Cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!6tMO8bTjoNOGjkC9jRdq5/AJjPbVze8Qxoe+A+baLKAsjFU1rmHQFmo7CaoDtcvE3FzS5kZ/8nvLRg==; __cf_bm=rmZlX.fubJOyNrblLVNgIuYWS2_At7v9ezLvFibGpS0-1669927937-0-AVLUFFLUtEwr6D0yqMZxdkE076sgo8ZBi+EkuF+5DaBIr0JkQOlCy92id+jXe1HEGNp2IJiVzovWDENBih3u8rM=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:19 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 772eb4b0eefe0b3d-OSL
set-cookie: BIGipServerPOOL-94.236.119.26-442-EU-E=!ta3f0TWIbxJmrblbO1+Oh92Pa3vcj3sMgCm3SKbzm5V8CNQMWUhniDxGPUHoZXpPPYkLYIcO1VMMqA==;Path=/;Version=1;Secure;Httponly
cf-cache-status: DYNAMIC
cached: false
x-form-service-request-id: 400f#184cf762b2a
x-marketo-source: Form Service
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css | 104.16.88.20 | 200 OK | 0 B |
URL HTTP/2cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css IP104.16.88.20:0
GET /npm/slick-carousel@1.8.1/slick/slick.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"6f0-qUoFmzF4tK3sCeMoGs4oGaMAlaQ"
x-served-by: cache-fra19169-FRA, cache-itm18837-ITM
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: HIT
age: 5549137
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MB2IpM1FLV5pJ2hlC8B7fbB0e7Phr4tAfzxwO9WTOjIJGdO%2BrcvWxCkYSm3c4FYssyAgXMDwqrbdGtlbe9pAGM2CbIORMK5oceEI3hbzuY%2F7ZntSvic2V0mszMo%2FqvrO4uE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 772eb4ad6c741c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&display=swap | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&display=swap IP142.250.74.106:0
GET /css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 01 Dec 2022 20:52:18 GMT
date: Thu, 01 Dec 2022 20:52:18 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| geolocation.onetrust.com/cookieconsentpub/v1/geo/location | 104.18.26.85 | 200 OK | 0 B |
URL HTTP/2geolocation.onetrust.com/cookieconsentpub/v1/geo/location IP104.18.26.85:0
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://info.mimecast.com
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:19 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 772eb4b39caffab8-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css | 104.18.11.207 | 200 OK | 0 B |
URL HTTP/2maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css IP104.18.11.207:0
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 722, 617
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 2021-03-10 20:26:20
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 121d365db7a9aba3915641185d93b963
cdn-cache: HIT
cf-cache-status: HIT
age: 19238745
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 772eb4ad98a8b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css | 104.18.11.207 | 200 OK | 0 B |
URL HTTP/2maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css IP104.18.11.207:0
GET /bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"2f624089c65f12185e79925bc5a7fc42"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 02/17/2022 20:27:53
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 860
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 441a5c346e6138207e493340368ec0b9
cdn-cache: HIT
cf-cache-status: HIT
age: 15374299
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 772eb4adb8ebb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 0 B |
URL HTTP/2maxcdn.bootstrapcdn.com/bootstrap/3.3.6/js/bootstrap.min.js IP104.18.11.207:0
GET /bootstrap/3.3.6/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 01 Dec 2022 20:52:18 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 11/05/2021 16:36:29
cdn-edgestorageid: 722
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-proxyver: 1.0
cdn-requestid: bfa40aed2fbee600eecd4f43bc8c0656
cdn-cache: HIT
cf-cache-status: HIT
age: 15372082
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 772eb4ad7881b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| platform-api.sharethis.com/js/sharethis.js | 143.204.55.106 | 200 OK | 0 B |
URL HTTP/2platform-api.sharethis.com/js/sharethis.js IP143.204.55.106:0
GET /js/sharethis.js HTTP/1.1
Host: platform-api.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://info.mimecast.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-encoding: gzip
edge-control: cache-maxage=60m,downstream-ttl=60m
x-frame-options: SAMEORIGIN
date: Thu, 01 Dec 2022 20:51:03 GMT
cache-control: max-age=600, public
etag: W/"30217-4R/x1mcbHYoN8J5L8eO1d9Nv/qY"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Usr3ZhZG7cUsitE8ZvVm_jUJqiMD6AwFWKE34Y_JTGTZrC_G4N-8BQ==
age: 118
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
104.17.71.206