| www.p3lstrk.com/2MGNK7T/CXW7M6/?sub1=3415433504656317877 |  35.241.49.11 | 302 Found | 95 B |
URL User Request GET HTTP/2www.p3lstrk.com/2MGNK7T/CXW7M6/?sub1=3415433504656317877 IP35.241.49.11:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerStarfield Technologies, Inc. Subjectof59trk.com Fingerprint7C:22:67:15:07:7A:A8:A1:66:C3:A0:CD:C5:3A:BA:6B:FF:2A:61:81 ValidityFri, 23 Feb 2024 15:04:31 GMT - Tue, 11 Feb 2025 14:26:38 GMT
File typeHTML document, ASCII text Hasheae6eb3d24cd166f8212edfc133a794f 9bc8d16145711c01cf5c00c61e6e70ef4d709735 cb1742738d9c40cc4c7c5d39a7ac4853c5a9911b93ab965ade4ff1a5a86ece19
GET /2MGNK7T/CXW7M6/?sub1=3415433504656317877 HTTP/1.1
Host: www.p3lstrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 24 Apr 2024 22:55:32 GMT
content-type: text/html; charset=utf-8
content-length: 95
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://pro.oxfordclub.com/m/2314530?s1=ae7ef7a17e8e4ec9be7edd23366de21c
set-cookie: uniqueClick_CXW7M6=8e96a11d-91d2-4897-bdae-3e01ee04b44f:1713999332; Path=/; Expires=Wed, 22 May 2024 22:55:32 GMT; Secure; SameSite=None
transaction_id=ae7ef7a17e8e4ec9be7edd23366de21c; Path=/; Expires=Tue, 23 Jul 2024 22:55:32 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 341ca950-9fcd-42c3-a0af-c320094b9f58
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pro.oxfordclub.com/m/2314530?s1=ae7ef7a17e8e4ec9be7edd23366de21c | 192.135.136.168 | 301 Moved Permanently | 223 B |
URL User Request GET HTTP/1.1pro.oxfordclub.com/m/2314530?s1=ae7ef7a17e8e4ec9be7edd23366de21c IP192.135.136.168:443
CertificateIssuerLet's Encrypt Subjectordertracking2.pubsvs.com Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash2785240c419ddfc5ef23bce1cf2fa882 9a06e47ca6283f1afd00b956ae835cf06a8371f4 fbf67651e60e23cd4ae98ac55577ff38f8aee3317d3af0045c64335eb682b294
GET /m/2314530?s1=ae7ef7a17e8e4ec9be7edd23366de21c HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true
Date: Wed, 24 Apr 2024 22:55:32 GMT
Content-Length: 223
Set-Cookie: 2314530=2743372; expires=Tue, 14-May-2024 22:55:32 GMT; path=/; HttpOnly
BIGipServerIRIS_PROD_HTTPS_POOL=!L9QDF6Ub5IeGyrA0QCUGrw3uOK3bWRk+/9KuIaC6PiAG8boOLvwfaxirPWM8UHjHf3cZf9xDerFZxqU=; path=/; Httponly; Secure
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true | 192.135.136.168 | 200 OK | 7.2 kB |
URL User Request GET HTTP/1.1pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true IP192.135.136.168:443
CertificateIssuerLet's Encrypt Subjectordertracking2.pubsvs.com Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1213), with CRLF, LF line terminators Hash55e9b066d345ae35b81845fafb8bafb1 b3ddeebe098863044a553bde3a67129c84f126c5 da243c9b8433c99578ab1c11800bec23359f04057a348aeaa8e92b28c11f8f56
GET /p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!L9QDF6Ub5IeGyrA0QCUGrw3uOK3bWRk+/9KuIaC6PiAG8boOLvwfaxirPWM8UHjHf3cZf9xDerFZxqU=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Set-Cookie: NBRK4404=; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; HttpOnly
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 24 Apr 2024 22:55:32 GMT
Content-Length: 7171
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| cdnjs.cloudflare.com/ajax/libs/animate.css/4.0.0/animate.min.css |  104.17.25.14 | 200 OK | 4.2 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/animate.css/4.0.0/animate.min.css IP104.17.25.14:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (65346) Hash39aca93cfd689b19cc6241e859642a92 5022a36b3d077c80b0b4a550ddfb280aae28dafe eb2798553d86c6b1806d208320f645bd79eab0cebcf22176bddbc648e8f3ccd4
GET /ajax/libs/animate.css/4.0.0/animate.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:55:33 GMT
content-type: text/css; charset=utf-8
content-length: 4216
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb436a8-11848"
last-modified: Thu, 07 May 2020 16:26:16 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 8904
expires: Mon, 14 Apr 2025 22:55:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fxZErq4EJlWQ5tYZ3v2q5eIWmonIpSvBMnuUJr3SmhwlfK1pP1ADFnX9S0Gj64ojb7oeT2oW62pOw2bXNiSUf1jbyi5Etzsh874zOaKXE2huZ19fXinvctJZQNUTWjeFBXIDL4yg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8799ae79a99b56bb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pro.oxfordclub.com/p/Scripts/Common.js | 192.135.136.168 | 200 OK | 1.1 kB |
URL GET HTTP/1.1pro.oxfordclub.com/p/Scripts/Common.js IP192.135.136.168:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectordertracking2.pubsvs.com Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash2fa1e7a35bfa376eff7f1426fc4a8afa 008b48dbd95a158542969743c18d0bc33e0a9384 857d94bd23b6437baa66255e1d507ad4a23d75ef9a271fb3e1303dc7dd0aced9
GET /p/Scripts/Common.js HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!L9QDF6Ub5IeGyrA0QCUGrw3uOK3bWRk+/9KuIaC6PiAG8boOLvwfaxirPWM8UHjHf3cZf9xDerFZxqU=; NBRK4404=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "a37f814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 24 Apr 2024 22:55:32 GMT
Content-Length: 1140
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| fast.wistia.com/assets/external/E-v1.js | 151.101.66.132 | 200 OK | 137 kB |
URL GET HTTP/2fast.wistia.com/assets/external/E-v1.js IP151.101.66.132:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65474) Size137 kB (136866 bytes) Hash20fe967bcd5ac28ca99ac2438b0f970a b7550a74f89acbaa601247749d6365c0e953cdaf 1fd3853e40997fffe6b88365e074f065dd452a6dc1af13213172460043411aec
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2024 20:03:57 GMT
etag: "6ad6c78daadc4c58258c9d89dea74c96"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 24 Apr 2024 22:55:33 GMT
age: 3006
x-served-by: cache-iad-kcgs7200088-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 25, 436
x-timer: S1713999333.386963,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4c28c160e6e9b44cd0508d30268df2ca31ca7dc8
content-length: 136866
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.3.1.min.js | 151.101.2.137 | 200 OK | 30 kB |
URL GET HTTP/2code.jquery.com/jquery-3.3.1.min.js IP151.101.2.137:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /jquery-3.3.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1538f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 24 Apr 2024 22:55:33 GMT
age: 19198729
x-served-by: cache-lga13622-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 36, 301154
x-timer: S1713999333.470218,VS0,VE0
vary: Accept-Encoding
content-length: 30288
X-Firefox-Spdy: h2
|
|
| pro.oxfordclub.com/p/Scripts/exitsplash.js | 192.135.136.168 | 200 OK | 2.7 kB |
URL GET HTTP/1.1pro.oxfordclub.com/p/Scripts/exitsplash.js IP192.135.136.168:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectordertracking2.pubsvs.com Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash4be89f6e2195d99e7c63c983c053429f f0bb7ae25fa74b28c6cabaddb65e4ddb3be87423 02e1862c23b8216b6e54326209b9698c756058974ce647a52b98e10317f86be1
GET /p/Scripts/exitsplash.js HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!L9QDF6Ub5IeGyrA0QCUGrw3uOK3bWRk+/9KuIaC6PiAG8boOLvwfaxirPWM8UHjHf3cZf9xDerFZxqU=; NBRK4404=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "0d0fa4d34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 24 Apr 2024 22:55:32 GMT
Content-Length: 2737
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| use.typekit.net/myz0yns.css |  23.36.76.186 | 200 OK | 723 B |
URL GET HTTP/2use.typekit.net/myz0yns.css IP23.36.76.186:443 ASN#20940 Akamai International B.V.
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerDigiCert Inc Subjectuse.typekit.net Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56 ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (516) Hash2e7b43c19a9fef8e02459d18badd437a eeb7ce8dda91f0c7aa5bd3f16a0a737f827d5158 0ae53ddd770100cf31ea14d22ee92b85050e48deb00d76e02ea6384edf30ee10
GET /myz0yns.css HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 723
date: Wed, 24 Apr 2024 22:55:33 GMT
X-Firefox-Spdy: h2
|
|
| p.typekit.net/p.css?s=1&k=myz0yns&ht=tk&f=2007.2008.2011.2012&a=87036888&app=typekit&e=css | 23.36.76.96 | 200 OK | 5 B |
URL GET HTTP/2p.typekit.net/p.css?s=1&k=myz0yns&ht=tk&f=2007.2008.2011.2012&a=87036888&app=typekit&e=css IP23.36.76.96:443 ASN#20940 Akamai International B.V.
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerDigiCert Inc Subjectuse.typekit.net Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56 ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
Hash83d24d4b43cc7eef2b61e66c95f3d158 f0cafc285ee23bb6c28c5166f305493c4331c84d 1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
GET /p.css?s=1&k=myz0yns&ht=tk&f=2007.2008.2011.2012&a=87036888&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: text/css
content-length: 5
last-modified: Tue, 07 Mar 2023 19:56:00 GMT
etag: "640796d0-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Wed, 24 Apr 2024 22:55:33 GMT
X-Firefox-Spdy: h2
|
|
| pro.oxfordclub.com/p/Scripts/HideContent.js | 192.135.136.168 | 200 OK | 466 B |
URL GET HTTP/1.1pro.oxfordclub.com/p/Scripts/HideContent.js IP192.135.136.168:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectordertracking2.pubsvs.com Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashcc54a637e514fddfe0be2e7c2d062e5b a0f97813508d22d71f015b93cc8dfdcee65acdfd 580942b09dd77a53c0501f35a1d6c61cbcff1d504a6efb0dfa5d77cbdb1af741
GET /p/Scripts/HideContent.js HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!L9QDF6Ub5IeGyrA0QCUGrw3uOK3bWRk+/9KuIaC6PiAG8boOLvwfaxirPWM8UHjHf3cZf9xDerFZxqU=; NBRK4404=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 24 Jul 2023 13:39:44 GMT
Accept-Ranges: bytes
ETag: "bbcd814e34bed91:0"
Vary: Accept-Encoding
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 24 Apr 2024 22:55:33 GMT
Content-Length: 466
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| portrait-tracker.s3.amazonaws.com/all.js | 3.5.28.213 | 200 OK | 38 kB |
URL GET HTTP/1.1portrait-tracker.s3.amazonaws.com/all.js IP3.5.28.213:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.s3.amazonaws.com FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1 ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (38527), with no line terminators Hash7a4866af82b3d9c4147211938ab5004d b33f73f72aec3baf76b1a1b30e473e6b1e9ee3e1 0d442120d2b60deb30df02e017358ba9e8057e57af2a52aadaceb08200dc5118
GET /all.js HTTP/1.1
Host: portrait-tracker.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: w+K90xs84VAXAg7cVklrkASlOhBCzCZ3WlF7Zz1rTct8ygweP/zQViMfIilT6jBYS2BSeQpltyrU/3Ji/Zpg9dw0lOY398SoZ+9NfKB9ETE=
x-amz-request-id: ZGB8TP9BDK0K9316
Date: Wed, 24 Apr 2024 22:55:34 GMT
Last-Modified: Tue, 12 Mar 2024 18:03:33 GMT
ETag: "7a4866af82b3d9c4147211938ab5004d"
x-amz-server-side-encryption: AES256
x-amz-version-id: DJTsKKAXZAjX88yytY8IZ9oo.cyFutLW
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 38527
|
|
| portrait-tracker.s3.amazonaws.com/promo.js | 3.5.28.213 | 200 OK | 26 kB |
URL GET HTTP/1.1portrait-tracker.s3.amazonaws.com/promo.js IP3.5.28.213:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.s3.amazonaws.com FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1 ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hash968945799d89c26299a62dc0339bde67 5cce6ec9ed0e06a085ad9313a133c49b2dca0f3d 8b8045007a32445a83e59d46d1e8237fb3a7a4bd62d3cfdd943ca853ba86e2b2
GET /promo.js HTTP/1.1
Host: portrait-tracker.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: OFzH7tekvxnjExfOOkFMsmbb+NrnrXVK25GxYvm5eU8rOTbhf+irJkbdjaedrFa3ZaZrhh7qVgQ0/OT6JEERuSzjiKKZVDMuEdkQP4wB3Ew=
x-amz-request-id: ZGB6W2ZQAQKFD9VN
Date: Wed, 24 Apr 2024 22:55:34 GMT
Last-Modified: Mon, 18 Mar 2024 16:37:29 GMT
ETag: "968945799d89c26299a62dc0339bde67"
x-amz-server-side-encryption: AES256
x-amz-version-id: Ea8sPnxc0hvQZiplzrNDZ20cACmxzdAR
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 25710
|
|
| cdn.getblueshift.com/blueshift.js | 54.230.111.116 | 200 OK | 2.8 kB |
URL GET HTTP/1.1cdn.getblueshift.com/blueshift.js IP54.230.111.116:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.getblueshift.com Fingerprint29:49:01:4C:AB:3A:C5:E4:F6:F2:67:75:BE:5B:FF:4B:F3:5C:EC:47 ValidityMon, 10 Jul 2023 00:00:00 GMT - Tue, 06 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (6625), with no line terminators Hashe70a08bd9e7ef156c1673f55ed87aa85 9dfa4cf582654332eb4e1ada9843594ca64bb0d2 a97c4e09767a155128f03c8a72efccc7d8e38e2e8e78daf14c8e5beaf72ff1a5
GET /blueshift.js HTTP/1.1
Host: cdn.getblueshift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 2826
Connection: keep-alive
Last-Modified: Wed, 24 Jan 2024 03:44:50 GMT
x-amz-server-side-encryption: AES256
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 24 Apr 2024 22:22:04 GMT
Cache-Control: max-age=3600
ETag: "bd39fba69cd2745738daf44e0e350f6e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _eIN97cqBQU7Purhq_21gWBf4mx9Z01k0yZpNxb0QsgMjqduwcUZIA==
Age: 2014
|
|
| s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/styles.css | 54.231.233.0 | 200 OK | 26 kB |
URL GET HTTP/1.1s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/styles.css IP54.231.233.0:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
Hash233054f8e19ace7dccf7cb15564b65ba 65f0a2f3fef9efc749b552c853cb5bf6af0253c5 594f38f7cd48a5b64e8ff721cd29176147fbbac8c6ff0d6a0457380fd54735ed
GET /assets.oxfordclub.com/promo/brk/oil/styles.css HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: AgP0aQvAArHmgPMGO5LdWy7/jrHVZDQVDLcMyh5VbxTBHOchSWMyKKVqSCOvp0Bt2BsCUzHSZkg=
x-amz-request-id: ZGB2PA98J1WWZBM2
Date: Wed, 24 Apr 2024 22:55:34 GMT
Last-Modified: Wed, 22 Mar 2023 14:42:48 GMT
ETag: "233054f8e19ace7dccf7cb15564b65ba"
x-amz-server-side-encryption: AES256
x-amz-version-id: TZx_AJtMla9jyZeY7cUbaDZwFcBg2fLB
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 25525
|
|
| fast.wistia.com/assets/external/E-v1.js | 151.101.66.132 | 200 OK | 137 kB |
URL GET HTTP/2fast.wistia.com/assets/external/E-v1.js IP151.101.66.132:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65474) Size137 kB (136866 bytes) Hash20fe967bcd5ac28ca99ac2438b0f970a b7550a74f89acbaa601247749d6365c0e953cdaf 1fd3853e40997fffe6b88365e074f065dd452a6dc1af13213172460043411aec
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2024 20:03:57 GMT
etag: "6ad6c78daadc4c58258c9d89dea74c96"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 24 Apr 2024 22:55:33 GMT
age: 3006
x-served-by: cache-iad-kcgs7200088-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 25, 437
x-timer: S1713999334.989995,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4c28c160e6e9b44cd0508d30268df2ca31ca7dc8
content-length: 136866
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-KTM4C7C | 142.250.74.72 | 200 OK | 105 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-KTM4C7C IP142.250.74.72:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (40765) Size105 kB (105223 bytes) Hash46a616e91cc6738e0fca8fac619a57a8 64a64d7ac55cd1d2bcdd0206a6e24a1335888bb3 b9cef5d8484fa16bd402505a3525d79747013c2d75269cd6519a6019f2159842
GET /gtm.js?id=GTM-KTM4C7C HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:55:34 GMT
expires: Wed, 24 Apr 2024 22:55:34 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 22:17:05 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 105223
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| use.typekit.net/af/9cf49e/00000000000000000000e807/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3 | 23.36.76.186 | 200 OK | 17 kB |
URL GET HTTP/2use.typekit.net/af/9cf49e/00000000000000000000e807/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3 IP23.36.76.186:443 ASN#20940 Akamai International B.V.
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerDigiCert Inc Subjectuse.typekit.net Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56 ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16728, version 1.0 Hash994cc140824e4f41167b6a8f671c66b3 87410c73b2e269b136638b46eb888286ff93fdd2 c965b7e3bd43eceaf5c91309885ba7ee7bcb3b3d018a19c997faea37e30b3306
GET /af/9cf49e/00000000000000000000e807/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 16728
etag: "913296c9ffe9c1f97e163e531cc2022a12d91b5a"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Wed, 24 Apr 2024 22:55:34 GMT
X-Firefox-Spdy: h2
|
|
| use.typekit.net/af/a28b50/00000000000000000000e803/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 | 23.36.76.186 | 200 OK | 17 kB |
URL GET HTTP/2use.typekit.net/af/a28b50/00000000000000000000e803/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 IP23.36.76.186:443 ASN#20940 Akamai International B.V.
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerDigiCert Inc Subjectuse.typekit.net Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56 ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16808, version 1.0 Hashe0ba364087ced101e98cb22c66a3de71 8a6fc598bf108239d94fabea4eb0fe686618a55a 09244974d9decf20f9cd3402621e4844a454f3ae43cdf509538f43c0456ba6c4
GET /af/a28b50/00000000000000000000e803/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 16808
etag: "a6c1fa20004e862da7c922781204c8a0ef8794a4"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Wed, 24 Apr 2024 22:55:34 GMT
X-Firefox-Spdy: h2
|
|
| c.lytics.io/api/tag/9c32784e3cc4888a693a7988ad64c63d/latest.min.js | 104.26.3.22 | 200 OK | 123 kB |
URL GET HTTP/2c.lytics.io/api/tag/9c32784e3cc4888a693a7988ad64c63d/latest.min.js IP104.26.3.22:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectlytics.io FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79 ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size123 kB (123006 bytes) Hash7a823e3b7bdd1dc0ede14452bc124040 bf707ab1b9859f343cf614416f9c18e72a000ea7 63c5498e6b566cbdce24d58c797661ae67e8dfb2d75f3d5592017a881f9b1762
GET /api/tag/9c32784e3cc4888a693a7988ad64c63d/latest.min.js HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:55:33 GMT
content-type: application/javascript
access-control-allow-origin: *
strict-transport-security: max-age=63072000;
x-lytics-trace: 6a3cb0286e5dd2998a062d51b27875b6
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: HIT
age: 6709
last-modified: Wed, 24 Apr 2024 21:03:44 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mafVNTyhamyUuIWCIG77t2UobcQp48on4XSLfR%2F3UmBmGugc%2B%2FyT%2BErffAGyEhADlfLAu1bXH11c6rqQkgGt8VkRKgxo7iKnGk%2BH6JjNVBdXTK6mrjeKLYl2aaTq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8799ae7d59280b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| portrait-tracker.s3.amazonaws.com/index.html | 3.5.28.213 | 200 OK | 2.4 kB |
URL GET HTTP/1.1portrait-tracker.s3.amazonaws.com/index.html IP3.5.28.213:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.s3.amazonaws.com FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1 ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT
File typeHTML document, ASCII text Hashc029f674b13b082e9a03b16217c3f576 f8ac05a2a24d42c863275c8dfd7e94486a237d0b 9b6554e3dbe9e11702720eb95ef8808b4e1e307bbec908ab5e6d0e1da2294470
GET /index.html HTTP/1.1
Host: portrait-tracker.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: oQJc9p0X2WloLveojLP+3YUt+qztEE6ztN5NaEf0OEv1pcIM/+q/LN3Xmwvjs7Be04+rnk89+PEbm2GAWkZJdrWWu6h3BVWmt6fs0fjwHDU=
x-amz-request-id: JKB69SG0CXFJK30R
Date: Wed, 24 Apr 2024 22:55:35 GMT
Last-Modified: Wed, 03 Nov 2021 21:10:09 GMT
ETag: "c029f674b13b082e9a03b16217c3f576"
x-amz-version-id: X1zblgbOV1d.Qkc55AyQidmgNGbabuW5
Accept-Ranges: bytes
Content-Type: text/html
Server: AmazonS3
Content-Length: 2371
|
|
| fast.wistia.com/embed/medias/sr8r36952j.json | 151.101.66.132 | 200 OK | 1.7 kB |
URL GET HTTP/2fast.wistia.com/embed/medias/sr8r36952j.json IP151.101.66.132:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
Hashf1dd1dd0c380644bef711083506ff332 2494fc5e445f6ba774c2e6c2d2c475c172b47882 454aaf8ce47bfbf249ff068c57365598d50280211ee5a5205c1122f7bb6f67c5
GET /embed/medias/sr8r36952j.json HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"454aaf8ce47bfbf249ff068c57365598"
x-request-id: 175bdbfa-f2a6-413a-b2a7-4a33a8d41eb3
x-runtime: 0.051074
content-encoding: br
x-envoy-upstream-service-time: 52
via: 1.1 f588325f7617672d954c4267c8bee1ea.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD12-P1
x-amz-cf-id: Y8L7xG4UTctlpQ2H4mB3GYOulbOKRz0NjFbfoAbmsLxKzX_OCUsJcw==
accept-ranges: bytes
age: 30343
date: Wed, 24 Apr 2024 22:55:34 GMT
x-served-by: cache-iad-kiad7000042-IAD, cache-hel1410028-HEL
x-cache: Miss from cloudfront, HIT, MISS
x-cache-hits: 263, 0
x-timer: S1713999334.363615,VS0,VE119
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1683
X-Firefox-Spdy: h2
|
|
| c.lytics.io/c/9c32784e3cc4888a693a7988ad64c63d?_e=pv&_sesstart=1&_tz=0&_ul=en-US&_sz=1280x1024&_ts=1713999334369&_nmob=t&_device=desktop&url=pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&_v=3.0.35&_uid=6b3a75af-ed86-411f-9ced-9d61de3120a4&_getid=t | 104.26.3.22 | 200 OK | 35 B |
URL GET HTTP/2c.lytics.io/c/9c32784e3cc4888a693a7988ad64c63d?_e=pv&_sesstart=1&_tz=0&_ul=en-US&_sz=1280x1024&_ts=1713999334369&_nmob=t&_device=desktop&url=pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&_v=3.0.35&_uid=6b3a75af-ed86-411f-9ced-9d61de3120a4&_getid=t IP104.26.3.22:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectlytics.io FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79 ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File typeGIF image data, version 89a, 1 x 1 Hashc2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /c/9c32784e3cc4888a693a7988ad64c63d?_e=pv&_sesstart=1&_tz=0&_ul=en-US&_sz=1280x1024&_ts=1713999334369&_nmob=t&_device=desktop&url=pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&_v=3.0.35&_uid=6b3a75af-ed86-411f-9ced-9d61de3120a4&_getid=t HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:55:34 GMT
content-type: image/gif
content-length: 35
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cookie, *
access-control-allow-methods: GET, POST
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: seerid=6b3a75af-ed86-411f-9ced-9d61de3120a4; Path=/; Domain=lytics.io; Max-Age=77760000; Secure; SameSite=None
strict-transport-security: max-age=63072000;
x-lytics-trace: ba4745a4690732160754bd9dd26804ac
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZNNNYkmME1tq9SCGqTINiX7TfcPtMI%2B9l7VX9s%2FTrLDl4iL4ghb2Z9p%2BqLWmn00l2zrIZFMxebFHyOOpeg3TfkgEQn%2F6oV85noO%2BrnXr36cCa7uBjEkZXpjlA%2FDM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8799ae8009b80b65-OSL
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/assets/external/playPauseLoadingControl.js | 151.101.66.132 | 200 OK | 22 kB |
URL GET HTTP/2fast.wistia.com/assets/external/playPauseLoadingControl.js IP151.101.66.132:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65455) Hash7845f53703880c301c91e55dacfb2730 a91923e2fe5f5a139f65a41682cee83637c636bf 441f641db8dc0a94620a07d59cfdad03e6fd3630fe3af81f82ce80d9d8ac3942
GET /assets/external/playPauseLoadingControl.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Wed, 24 Apr 2024 20:03:57 GMT
etag: "054f6647c2b3166c5479ecec2e1cdb23"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 24 Apr 2024 22:55:34 GMT
age: 2999
x-served-by: cache-iad-kiad7000026-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 14, 40
x-timer: S1713999335.638257,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4c28c160e6e9b44cd0508d30268df2ca31ca7dc8
content-length: 21596
X-Firefox-Spdy: h2
|
|
| pro.oxfordclub.com/p/effortattributes/extractEffortattributes/NBRK4404 | 192.135.136.168 | 200 OK | 771 B |
URL GET HTTP/1.1pro.oxfordclub.com/p/effortattributes/extractEffortattributes/NBRK4404 IP192.135.136.168:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectordertracking2.pubsvs.com Fingerprint3A:B9:2F:4C:6D:99:BE:5E:94:3F:BD:D3:C0:34:93:33:6D:CA:DC:6E ValidityFri, 19 Apr 2024 17:28:36 GMT - Thu, 18 Jul 2024 17:28:35 GMT
Hash6ba0e609f7bf4c7ae77630ca1442f163 c83eea31ebb06712e3a422757a778c146e8bfbbd 87806a128e1cfb32c55c63ffd02ea9c8ed8243eb7726964600ff7f4859a5f3f6
GET /p/effortattributes/extractEffortattributes/NBRK4404 HTTP/1.1
Host: pro.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true
DNT: 1
Connection: keep-alive
Cookie: 2314530=2743372; BIGipServerIRIS_PROD_HTTPS_POOL=!L9QDF6Ub5IeGyrA0QCUGrw3uOK3bWRk+/9KuIaC6PiAG8boOLvwfaxirPWM8UHjHf3cZf9xDerFZxqU=; NBRK4404=; seerses=e; seerid=6b3a75af-ed86-411f-9ced-9d61de3120a4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: application/json; charset=utf-8
Access-Control-Allow-Origin: *
Referrer-Policy: no-referrer-when-downgrade
Date: Wed, 24 Apr 2024 22:55:33 GMT
Content-Length: 771
Strict-Transport-Security: max-age=63072000; includeSubDomains
|
|
| www.googletagmanager.com/gtag/js?id=G-BBMPM3EJHQ&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 103 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-BBMPM3EJHQ&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (7711) Size103 kB (102781 bytes) Hash1178de577f0942aa4d6a2041ca900311 7e2efa13823ee482671b08f01bea56c6715a386c 563acfd5381c3f911b6eb81f4489e77341ec37566e91830cf81e3ec6178ca42d
GET /gtag/js?id=G-BBMPM3EJHQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:55:34 GMT
expires: Wed, 24 Apr 2024 22:55:34 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 102781
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtm.js?id=GTM-WP5R8BX | 142.250.74.72 | 200 OK | 98 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-WP5R8BX IP142.250.74.72:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (30186) Hash8bb8e59c99303c6b088da6acd4c64436 e802f6a88d97bc0222918da60ed095e7a595d8b6 237e0f3ecdf9ee689446c207e4cb0d2e3afdf215e4e56131d0e77439bd523094
GET /gtm.js?id=GTM-WP5R8BX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:55:34 GMT
expires: Wed, 24 Apr 2024 22:55:34 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 22:11:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 98302
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fast.wistia.com/assets/external/engines/hls_video.js | 151.101.66.132 | 200 OK | 118 kB |
URL GET HTTP/2fast.wistia.com/assets/external/engines/hls_video.js IP151.101.66.132:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size118 kB (118197 bytes) Hash0d0944584a2e0b7299c788dfbcc6224b dbafb5834a1553d168e2e61633d9dfb37d29a438 c6c26035fb90773bae20e3accc00fe4bf7368ac9eb802ce0ee066ffb3f89b738
GET /assets/external/engines/hls_video.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Wed, 24 Apr 2024 20:03:57 GMT
etag: "eb7dd49fb6d9bc27920e7403bf0de676"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 24 Apr 2024 22:55:34 GMT
age: 3000
x-served-by: cache-iad-kcgs7200058-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 13, 31
x-timer: S1713999335.856853,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4c28c160e6e9b44cd0508d30268df2ca31ca7dc8
content-length: 118197
X-Firefox-Spdy: h2
|
|
| dnzkifeab6.execute-api.us-east-1.amazonaws.com/Prod/GetLyticsUserData | 143.204.55.112 | 200 OK | 3 B |
URL OPTIONS HTTP/2dnzkifeab6.execute-api.us-east-1.amazonaws.com/Prod/GetLyticsUserData IP143.204.55.112:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.execute-api.us-east-1.amazonaws.com Fingerprint85:1D:9B:37:86:17:AA:A6:C5:3C:48:6E:1F:0C:1C:74:E8:35:81:5E ValidityMon, 08 Jan 2024 00:00:00 GMT - Tue, 04 Feb 2025 23:59:59 GMT
Hash8a80554c91d9fca8acb82f023de02f11 5f36b2ea290645ee34d943220a14b54ee5ea5be5 ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
OPTIONS /Prod/GetLyticsUserData HTTP/1.1
Host: dnzkifeab6.execute-api.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pro.oxfordclub.com/
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
content-length: 3
date: Wed, 24 Apr 2024 22:55:34 GMT
x-amzn-requestid: e3d2e458-a9a5-4b58-9661-18fc01796a9c
access-control-allow-origin: *
access-control-allow-headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token
x-amz-apigw-id: WwMcIHx2IAMEmtQ=
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wrZrZ0mgslhW82TVMISFEoY9VvwyOo5yBtmXbWyi8RGmFW9Nu8wzsQ==
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/assets/external/E-v1.js | 151.101.66.132 | 200 OK | 137 kB |
URL GET HTTP/2fast.wistia.com/assets/external/E-v1.js IP151.101.66.132:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65474) Size137 kB (136866 bytes) Hash20fe967bcd5ac28ca99ac2438b0f970a b7550a74f89acbaa601247749d6365c0e953cdaf 1fd3853e40997fffe6b88365e074f065dd452a6dc1af13213172460043411aec
GET /assets/external/E-v1.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 24 Apr 2024 20:03:57 GMT
etag: "6ad6c78daadc4c58258c9d89dea74c96"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 24 Apr 2024 22:55:35 GMT
age: 3007
x-served-by: cache-iad-kcgs7200088-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 25, 438
x-timer: S1713999335.061367,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4c28c160e6e9b44cd0508d30268df2ca31ca7dc8
content-length: 136866
X-Firefox-Spdy: h2
|
|
| s3.amazonaws.com/assets.oxfordclub.com/css/global/lytics-styles.css | 54.231.233.0 | 200 OK | 407 kB |
URL GET HTTP/1.1s3.amazonaws.com/assets.oxfordclub.com/css/global/lytics-styles.css IP54.231.233.0:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
Size407 kB (407387 bytes) Hash8dc116deb672f172b28dec3c76d04a7b a6181133e18bc2517e0b3a437498ea48198518e1 f7c2d8d0999405ba2f2c1dd5e817e025fba95800f54d1ad7add1211cf718de70
GET /assets.oxfordclub.com/css/global/lytics-styles.css HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: lLYsPNclxSKtMjjhqzOEFqP2Mz2g1EbRnSfhBSHag8CcHwtybG8jWxhfvU0bFVwT9fCgaZgNIug=
x-amz-request-id: JKB3NT5GMHZWSRND
Date: Wed, 24 Apr 2024 22:55:35 GMT
Last-Modified: Wed, 24 Apr 2024 19:20:58 GMT
ETag: "8dc116deb672f172b28dec3c76d04a7b"
x-amz-server-side-encryption: AES256
x-amz-version-id: qbvnqukmIQ62_Yvlb6PWg_LhoDV0dH3o
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 407387
|
|
| fast.wistia.com/assets/images/blank.gif | 151.101.66.132 | 200 OK | 1.2 kB |
URL GET HTTP/2fast.wistia.com/assets/images/blank.gif IP151.101.66.132:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeGIF image data, version 89a, 100 x 100 Hashfbdc4ed9a1e2ee4917a265306927bcf1 6d177725d8230df0457e72004080f712e26fe624 a78759ea185fd0fa42ca9be1fc5bca4d3167a2836dc6c85e479a19dbf57fe2c2
GET /assets/images/blank.gif HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Wed, 10 May 2023 19:48:54 GMT
etag: "fbdc4ed9a1e2ee4917a265306927bcf1"
x-amz-server-side-encryption: AES256
content-type: image/gif
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 24 Apr 2024 22:55:35 GMT
age: 313
x-served-by: cache-iad-kcgs7200077-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 25, 4
x-timer: S1713999335.224050,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 1214
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/embed/medias/sr8r36952j.m3u8 | 151.101.66.132 | 200 OK | 757 B |
URL GET HTTP/2fast.wistia.com/embed/medias/sr8r36952j.m3u8 IP151.101.66.132:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
Hash56f02a07f87baef2b88ce74a81bd955a 7046211269cb8f47bded7987cd89e720b47a695b c000771054153c7ee49a23043fd4bb666b8683e027d8b3ffdbd12f0eb4cff7f1
GET /embed/medias/sr8r36952j.m3u8 HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/x-mpegURL
server: envoy
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
access-control-allow-origin: *
timing-allow-origin: *
cache-control: public, no-cache
etag: W/"c000771054153c7ee49a23043fd4bb66"
x-request-id: 41870f8c-87e3-4d0b-be40-ce0d119e9951
x-runtime: 0.023375
x-envoy-upstream-service-time: 24
via: 1.1 38ecebcaa39c8742da2b6336935bb446.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: L8e9lVopFpa5NMhjqxmX12j0_PI1zoHH_HqHciW8IJ4UIKW7dVf5YQ==
accept-ranges: bytes
age: 124496
date: Wed, 24 Apr 2024 22:55:35 GMT
x-served-by: cache-iad-kiad7000030-IAD, cache-hel1410028-HEL
x-cache: Miss from cloudfront, HIT, HIT
x-cache-hits: 3357, 0
x-timer: S1713999335.223202,VS0,VE1
vary: Accept-Encoding,X-Forwarded-Proto,X-ECMA-Override
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
content-length: 757
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/destination?id=AW-780266039&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 78 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-780266039&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hash95982c8fce9b8a7988e42be60ead162e ae0b5dafe6fdab61e31b2564b05dd39432c15938 a0f03a1c4e7c07d44b6d0bccc172293c1f9ee46b1bc4ea8a13c6eabbd6c43831
GET /gtag/destination?id=AW-780266039&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:55:35 GMT
expires: Wed, 24 Apr 2024 22:55:35 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 22:11:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77812
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| siteimproveanalytics.com/js/siteanalyze_6255350.js |  188.114.96.1 | 200 OK | 68 B |
URL GET HTTP/2siteimproveanalytics.com/js/siteanalyze_6255350.js IP188.114.96.1:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subjectsiteimproveanalytics.com FingerprintAF:D6:9C:F7:A0:DC:1A:1D:90:B8:5F:FF:5B:F3:8A:31:24:E2:E3:2B ValidityTue, 23 Apr 2024 07:22:16 GMT - Mon, 22 Jul 2024 07:22:15 GMT
File typeASCII text, with no line terminators Hash8452ae713340916635198c94e9c13359 8f8bd309c51274fcbc6eb1b99805f947cdd50a69 8708150ed307463ea1670f6644f73ec82e3b6e8d6ff95be629b1ba4727f31ac7
GET /js/siteanalyze_6255350.js HTTP/1.1
Host: siteimproveanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:55:35 GMT
content-type: application/javascript; charset=utf-8
content-length: 68
x-amz-id-2: PGRzNOdbCzM4QrwN8R26+ZHYYUemvteQNSaL/8idk6iVn7XOljAFlvPBDepyFIg2q+Y/JWFQwRc=
x-amz-request-id: 4EQBNS61N65SDDRQ
cache-control: max-age=86400, no-transform
content-encoding: gzip
last-modified: Fri, 23 Aug 2019 22:14:39 GMT
etag: "6ef42917cbd55a82896411683d106194"
cf-cache-status: HIT
age: 6709
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=daavOoaL5ViPQhet8d3zAF7jaAJzDGUdV396b3BE%2FVOKJtVRNNckuTNXPUf0AxE8xLl5K%2FoFQgRpAbi0u4knAEOgQ1j6lpbwVcPUaE66dePqureEpyt5IjP3D40CzboV9dNwSYXbNZZWsi0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8799ae858ae2b529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/destination?id=AW-780296261&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 88 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-780296261&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hashcc47ff9a8da8e0c2ce4c7075ce2392c6 c6f2c91f4f192fdb4e35952439d6a3f9eee451c4 5187086d364cb5e173f368932da6e888226a56a6e8c5e848866792c8051c55a2
GET /gtag/destination?id=AW-780296261&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:55:35 GMT
expires: Wed, 24 Apr 2024 22:55:35 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 22:11:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 87542
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/destination?id=AW-665056240&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 81 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-665056240&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash642ab898063394e4204b92882143b9be 8408cb284e5672f5f276a97d34e6c3c9fc216cc3 d96f3e18329735eaa9d642d9a8f94073c966e61173521fcff93182ea9e48853f
GET /gtag/destination?id=AW-665056240&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:55:35 GMT
expires: Wed, 24 Apr 2024 22:55:35 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 22:11:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80806
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/destination?id=AW-757445324&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 81 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-757445324&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hashc1caf9958ad03a9de953cb088142fffd cd046c259a8746f99aabd15c013f73a22fd17aac 2974fe2d64ed099d4845ac55aa34f618b6c1d46a83809ffbe3f07fdb5a95aaa3
GET /gtag/destination?id=AW-757445324&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:55:35 GMT
expires: Wed, 24 Apr 2024 22:55:35 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 22:11:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81019
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| dnzkifeab6.execute-api.us-east-1.amazonaws.com/Prod/GetLyticsUserData | 143.204.55.112 | 200 OK | 76 B |
URL OPTIONS HTTP/2dnzkifeab6.execute-api.us-east-1.amazonaws.com/Prod/GetLyticsUserData IP143.204.55.112:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.execute-api.us-east-1.amazonaws.com Fingerprint85:1D:9B:37:86:17:AA:A6:C5:3C:48:6E:1F:0C:1C:74:E8:35:81:5E ValidityMon, 08 Jan 2024 00:00:00 GMT - Tue, 04 Feb 2025 23:59:59 GMT
Hash74cd2ce4def6577d2db4502c943c3289 c5ac742f41f7052834573a7f11ec085cc8506d55 674d1ff7419bdf7f1dafd4a41db01a4feb1d802122213ecc456dd43f72791984
POST /Prod/GetLyticsUserData HTTP/1.1
Host: dnzkifeab6.execute-api.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 22
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 76
date: Wed, 24 Apr 2024 22:55:35 GMT
x-amzn-requestid: 9350605c-1625-4667-aa9c-0230417e1565
access-control-allow-origin: *
access-control-allow-headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token
x-amz-apigw-id: WwMcMFvzoAMEgiw=
access-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT
x-amzn-trace-id: Root=1-66298de7-6d5f39b03fb4f4611f63a5ae;Parent=7b48ea32aef64654;Sampled=0;lineage=17be0e8a:0
x-cache: Miss from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: l-fz-S9RTDdWMInHEVqjfXVBrRezJEwG4gJuk1j4uNCUG_REBuo2Vw==
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/destination?id=AW-780277278&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 81 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-780277278&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash1288c19a904afc350505bf4db97a1ea1 caf7083eef5ee0695f1e45e2a65048ade4b67856 cd19190b5252f9c5f9479d4e0757185a4c3dd659b3bed8699a27ae0d38cccad9
GET /gtag/destination?id=AW-780277278&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:55:35 GMT
expires: Wed, 24 Apr 2024 22:55:35 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 22:17:05 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80936
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/destination?id=AW-707706541&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 78 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-707706541&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hashd25bbe67d0d274ec043c18271b12489f e1d629b75ad6dc90c13b215b54d53d2e0af939ce 703785091c40ae971329a5a0facff8a869d38d3dec03ab83395d24a1e83066f6
GET /gtag/destination?id=AW-707706541&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:55:35 GMT
expires: Wed, 24 Apr 2024 22:55:35 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 22:11:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77812
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdn.mediago.io/js/h/val.html?postM=1&trackingid= | 54.230.111.126 | 200 OK | 21 kB |
URL GET HTTP/2cdn.mediago.io/js/h/val.html?postM=1&trackingid= IP54.230.111.126:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.mediago.io FingerprintD4:6D:29:DE:0A:B4:82:54:F2:27:37:C3:E6:0A:2E:B9:B5:BC:A1:C5 ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 04 Sep 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (21187), with no line terminators Hash8b68d17f3da429ee620c7a63e2f5098b eaf0aae3d7a7b45db174058b5ba1fe9a289545c7 ed85daebc59103ac9b249bd3676ec425915eec9bdf24018d880c1178a571c9d6
GET /js/h/val.html?postM=1&trackingid= HTTP/1.1
Host: cdn.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 21187
last-modified: Mon, 08 Apr 2024 09:54:36 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 7MwpAgvznRx1dcq8IlUNovs5vfdi4Ypg
accept-ranges: bytes
server: AmazonS3
date: Wed, 24 Apr 2024 11:48:28 GMT
etag: "8b68d17f3da429ee620c7a63e2f5098b"
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: II0gcQSEcY4OiBWiWLxjee9D0hwK0gfP8Nb_uOUtA1lYPKH93VXxDg==
age: 40039
vary: Origin
X-Firefox-Spdy: h2
|
|
| embed-cloudfront.wistia.com/deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8 | 143.204.55.63 | 200 OK | 77 kB |
URL GET HTTP/2embed-cloudfront.wistia.com/deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8 IP143.204.55.63:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.wistia.com Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2 ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
Hash7f746bbd8437c11abda75462175cc003 b20652de0877480b02633a65586525b6847a4a38 a2914a76607431e4d17193f94f434524740bca6ca76ced7c9dfa2584b1a4cb20
GET /deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 77338
server: envoy
date: Sat, 20 Apr 2024 12:10:51 GMT
expires: Sun, 20 Apr 2025 12:10:51 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 72c73c76f447d30de486b20dfb9bb339e8f61c6c-hls-segment
surrogate-key: 72c73c76f447d30de486b20dfb9bb339e8f61c6c-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 95
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: klJetLv0YZ4ZOgiqXqw7nzOgVHCdG2U2ssbPKOynQ09PUufdKQY94A==
age: 384284
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je44o0v9106739609z8813057436za200&_p=1713999333916&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=300418630.1713999335&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713999334&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&dt=The%20Oxford%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&tfd=4566 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je44o0v9106739609z8813057436za200&_p=1713999333916&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=300418630.1713999335&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713999334&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&dt=The%20Oxford%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&tfd=4566 IP216.239.34.36:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je44o0v9106739609z8813057436za200&_p=1713999333916&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=300418630.1713999335&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713999334&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&dt=The%20Oxford%20Club&en=page_view&_fv=1&_nsi=1&_ss=1&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&tfd=4566 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://pro.oxfordclub.com
date: Wed, 24 Apr 2024 22:55:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| embed-cloudfront.wistia.com/deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8/seg-1-v1-a1.ts | 143.204.55.63 | 200 OK | 557 kB |
URL GET HTTP/2embed-cloudfront.wistia.com/deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8/seg-1-v1-a1.ts IP143.204.55.63:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.wistia.com Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2 ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
File typeMPEG transport stream data Size557 kB (556856 bytes) Hash702204fabf55d966f3384836d3a5491d 35a6899a732d867f92a1a664f76ea7c7df3fc467 d6169904e700805b4a88360cbc4e62aa7503a016d21e3e68a12620364b227a39
GET /deliveries/72c73c76f447d30de486b20dfb9bb339e8f61c6c.m3u8/seg-1-v1-a1.ts HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: video/MP2T
content-length: 556856
server: envoy
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 72c73c76f447d30de486b20dfb9bb339e8f61c6c-hls-segment
surrogate-key: 72c73c76f447d30de486b20dfb9bb339e8f61c6c-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 87
date: Fri, 19 Apr 2024 10:44:42 GMT
expires: Sat, 19 Apr 2025 10:44:42 GMT
cache-control: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FDGhMdXNMMwvjdQQEczaWWNjBKW0d04tAnGVVj15CBGVUL0VTiA5_A==
age: 475853
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
|
|
| distillery.wistia.com/x | 54.230.111.55 | 204 No Content | 0 B |
IP54.230.111.55:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subjectstats-tap-production-cloudfront-app-cname.wistia.com Fingerprint37:C6:AB:79:1C:DF:9B:5E:3A:B8:3E:F1:0C:1D:48:BF:89:2D:1F:40 ValidityWed, 13 Sep 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /x HTTP/1.1
Host: distillery.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1768
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 22:55:35 GMT
access-control-allow-origin: *
cache-control: max-age=0, private, must-revalidate
server: envoy
x-envoy-upstream-service-time: 0
x-cache: Miss from cloudfront
via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q8kMB5hty3VkONC4uggMDxq1ZndkbfazqugE__WkXjp35Nqsufuw-A==
X-Firefox-Spdy: h2
|
|
| fast.wistia.com/assets/external/allIntegrations.js | 151.101.66.132 | 200 OK | 5.8 kB |
URL GET HTTP/2fast.wistia.com/assets/external/allIntegrations.js IP151.101.66.132:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGlobalSign nv-sa Subjectfast.wistia.com Fingerprint75:69:0C:BF:54:26:59:0B:9A:83:E3:04:94:DE:EB:3F:E5:F6:6D:66 ValidityThu, 04 Apr 2024 00:50:10 GMT - Tue, 06 May 2025 00:50:09 GMT
File typeJavaScript source, ASCII text, with very long lines (23371) Hashd5dd13ae4e2cc9dbc4601c4d95143418 13405305698ad9cc7f44a86871fa1c0d057a9bf4 709f139528814cc9d5158ed469a578082a81607df49b40e41a6fb4b240567ecd
GET /assets/external/allIntegrations.js HTTP/1.1
Host: fast.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://fast.wistia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-methods: GET, HEAD
last-modified: Wed, 24 Apr 2024 20:03:57 GMT
etag: "4d5cbf7cb285a542334e7de7bc37ed93"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: text/javascript
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
cache-control: public, max-age=3600
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
date: Wed, 24 Apr 2024 22:55:35 GMT
age: 3002
x-served-by: cache-iad-kjyo7100122-IAD, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 78, 29
x-timer: S1713999336.712635,VS0,VE0
vary: Accept-Encoding
strict-transport-security: max-age=0
x-ecma-v: modern
x-browser: firefox
x-browser-version: 96
asset-version: 4c28c160e6e9b44cd0508d30268df2ca31ca7dc8
content-length: 5773
X-Firefox-Spdy: h2
|
|
| gtrace.mediago.io/ju/cs/eplist?acid=&gdpr_consent=&dm=https%253A%252F%252Fpro.oxfordclub.com&mcb=mmgg_1713999335592_277 | 35.214.168.80 | 200 OK | 44 B |
URL GET HTTP/2gtrace.mediago.io/ju/cs/eplist?acid=&gdpr_consent=&dm=https%253A%252F%252Fpro.oxfordclub.com&mcb=mmgg_1713999335592_277 IP35.214.168.80:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerDigiCert Inc Subject*.mediago.io Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4 ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hashbe90685ac58d13e01529e6d78b7a6c54 b81e3326dea0fc95502eaec7880e056c329bb65c 2e0ff12075e95c0d60a72e1d0c631821eb5797c0ce83b2ae4a721f4174c434b8
GET /ju/cs/eplist?acid=&gdpr_consent=&dm=https%253A%252F%252Fpro.oxfordclub.com&mcb=mmgg_1713999335592_277 HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https%3A%2F%2Fpro.oxfordclub.com
content-length: 44
content-type: application/javascript; charset=utf-8
set-cookie: __mguid_=9df76ce1ab1a2dad2b2s5k00lveey7n2; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None
date: Wed, 24 Apr 2024 22:55:35 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| c.lytics.io/static/pathfora.min.css | 104.26.3.22 | 200 OK | 81 kB |
URL GET HTTP/2c.lytics.io/static/pathfora.min.css IP104.26.3.22:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectlytics.io FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79 ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File typeASCII text, with very long lines (20939), with no line terminators Hasheecb9ff4af0757a947f791bc35393abc 2d23a8718b63c1cd96a10674bdc92ca61682e85b 464ad5d70f6d5fe4adef4d3057e1ae91e4983b02ef4ec9db0b067dcad4e53685
GET /static/pathfora.min.css HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: seerid=6b3a75af-ed86-411f-9ced-9d61de3120a4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:55:35 GMT
content-type: text/css; charset=utf-8
strict-transport-security: max-age=63072000;
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: HIT
age: 2244
last-modified: Wed, 24 Apr 2024 22:18:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eVPE%2BjFA8Uc9eGX52ki%2BBidMi6dpmt8KuMADH5qtmadf2yurEiJGPr32OrtR2ZrGGwhgvBUy3hOUVLbwsAi7WW6hPSiSy4pYFYVvhN01gU5A8sHdHgpzf5urOt3s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8799ae87ab920b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| pipedream.wistia.com/mput?topic=metrics | 143.204.55.100 | 200 OK | 2 B |
URL POST HTTP/2pipedream.wistia.com/mput?topic=metrics IP143.204.55.100:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subjectpipedream-production-cloudfront-app-cname.wistia.com Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 754
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Wed, 24 Apr 2024 22:55:35 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 0
server: envoy
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LBq3O0bmuS2S36luW_ZiaC65YpkB6uwPtpWwO0mDcF9pgak4iKCUIA==
X-Firefox-Spdy: h2
|
|
| pipedream.wistia.com/mput?topic=metrics | 143.204.55.100 | 200 OK | 2 B |
URL POST HTTP/2pipedream.wistia.com/mput?topic=metrics IP143.204.55.100:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subjectpipedream-production-cloudfront-app-cname.wistia.com Fingerprint82:F4:DC:86:7B:C0:65:B9:72:6A:8C:CA:03:C2:E2:91:00:FE:06:FF ValidityMon, 11 Sep 2023 00:00:00 GMT - Wed, 09 Oct 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /mput?topic=metrics HTTP/1.1
Host: pipedream.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2195
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 2
date: Wed, 24 Apr 2024 22:55:35 GMT
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
x-envoy-upstream-service-time: 0
server: envoy
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yscClx_cBk8ui-8bTCc_Q3sECqtAsNFGX88ssdF1hcHI9q3vsPJw5Q==
X-Firefox-Spdy: h2
|
|
| storage.googleapis.com/lioservices/2470-oxford-club/lytics_overrides.min.css | 142.250.74.155 | 200 OK | 602 B |
URL GET HTTP/2storage.googleapis.com/lioservices/2470-oxford-club/lytics_overrides.min.css IP142.250.74.155:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subjectstorage.googleapis.com Fingerprint42:33:73:56:74:C7:8E:ED:CD:00:0D:AE:0E:4F:AF:8D:9D:61:F9:1D ValidityMon, 18 Mar 2024 20:54:36 GMT - Mon, 10 Jun 2024 20:54:35 GMT
File typeASCII text, with very long lines (602), with no line terminators Hash9df2d5ae6031369aa6e0f3685608cd8c cdf5ad44e5e1e9bf2b0413e046189830a1921e17 0efd1a0f2f52ed3d1bbd90257616b1f3f057163e50e3ed7d36af06ffa10b7b06
GET /lioservices/2470-oxford-club/lytics_overrides.min.css HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPrK9h6r4My0IeZ503pUPuGkJXitLqLfUhH5LQB-bk795AGIU7-ybFDxEX8paMvKHbGgQp9TtRiO8w
x-goog-generation: 1538689646128559
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 602
x-goog-hash: crc32c=VZEimQ==, md5=nfLVrmAxNpqm4PNoVgjNjA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 602
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
date: Wed, 24 Apr 2024 22:55:35 GMT
expires: Wed, 24 Apr 2024 23:55:35 GMT
cache-control: public, max-age=3600
last-modified: Thu, 04 Oct 2018 21:47:26 GMT
etag: "9df2d5ae6031369aa6e0f3685608cd8c"
content-type: text/css
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| protect-us.mimecast.com/s/d4IGCAD74Js25qJyi9o4Az?domain=cdn1.decide.dev | 205.139.111.113 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1protect-us.mimecast.com/s/d4IGCAD74Js25qJyi9o4Az?domain=cdn1.decide.dev IP205.139.111.113:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerDigiCert Inc Subject*.mimecast.com FingerprintCD:B1:F9:53:BD:55:54:E8:D2:14:46:80:DE:6B:50:27:E1:24:DC:F8 ValidityTue, 30 Jan 2024 00:00:00 GMT - Tue, 25 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/d4IGCAD74Js25qJyi9o4Az?domain=cdn1.decide.dev HTTP/1.1
Host: protect-us.mimecast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Date: Wed, 24 Apr 2024 22:55:35 GMT
Content-Length: 0
Connection: keep-alive
Location: https://protect-us.mimecast.com/r/KrpwNc6Py8pASOytvMygnBE9MffFobwEWKmoANEc65SV1F38LTJjnCdYFBmPWP8j90cqTpy1BAczii4-QaSgFIXSsSSnGXWWKiJ6ONSh6heBI2XXaIyq5x26b-P3z6T4Z1IbQ13gJ69ah44qU7nxdBd6lQ3oOLcIq2cjiuRSmK3J9tV7qVANn3ogy1xIzzc6qaFzxwRRtIHZjXS9Dkpzme8v76NeeXL3hqBIYtxZ-6zNR19NNT_WJ_8K86H7QisS8vhaz5WnhFQzWb4eceZOuQ06hAW2W0po4ebrwcUz4qppPIp33YE1nRFPVFt1Wi5Yqi9BtwdwKOgBQhEwFqz9Vgr1o2hbYm0lg23z5-odbHiZCtcyPxr7r7bpHHSBUrD3SM3t66Oh753YGC_QD70WRTDCb3abwCKSknJVDObbn3nefJxXPuFnY3Ca0p5OQ72CCMOXBQFkWvwTT6lbR5zk7LxHM0Qnm1tzG3O7Lbo5MvbLuFQMVCCOXfgrGOqV2wYzOFtJ7od56MKGvLRvLNhh__OLbMimfImKR1yvsgTIDRUAd9_6S5RWqNaZmdJDSgwkyBKPZnp23rlNWnFpTpp8HWdjlcvqg773fZtt22bEk-YAjEGXIXgZy7X-4EamZXuyErPnHneFaaQ8eXNZCf86tKu3m8MdDju_SjZmQ38E3iX9f0Hy3dgDymy6yeP0Gw2M3drWQ97C5VEsWKgHpyWdZyUjrwjJkOq-UrO4awNvP1F6_cxuz9QiQG-qDRSaOQTG-QDI9KOcsXSMrfqRYNgR0laQJbqjh-TpQgIEoHz1TIGcsBraiKaK3jdGuUXM2RL5B5EuHr5bbwpHcQ0g3slG4Yc0bnnTgpWepOcX7F2Sl21KArnLXlRBJVyJe3FsuoVWqydtVLxc2WaN4ePVq_SSN2qpY2SZNYPAgMD3EDX0AOzah1Veglj-AgZIgANipmfirrAq5ShOXGNJflB9ap71yjBeuKWb68kvHRcPKR2qGUfBvo9qYOx5DZhUm89itEJZ3B9ujF0GkGoSrEUn6xolk6hzKh_4nRXEVtI34PApRxrehlV7qSyFVTvkUVkbLCVZ401z_8JhoZ9owPOcYXXQwB_UF_o6jZVn9aVhJa4A6fv2R-uelzLFVC_wUQ9ZTASVLGRuClAki4UjLVt-4tHDLcXlV74eG4sZAf3VOk9xP2ijhwBPfcIetMdZ9gdaHJbtXIrJX4nVE60djABgziRlocFKDhmID2SGFgdXQwXE8YOFIKVIvEk_w_S0ynIqoaso7AI-XErnf2sCzYPGL1jfUsr3pdwN980zIQ5GqNnZvTIQ2zAvYOvZIza567Q9JjGEimypPZvh8vNyZmHdiBReFtk3UClq-HPtFX7TJqnN4D2YKK1_iVXgJoBusm_Z7sfJ2_jBVKBXEOpn9vCgd20lxpOd2LiNtnGdCFbbxiLdPxjVPVKbOJPUbbt4tvyYV7DGczCbLY-4qrGKnWzjqW9C62RWmh0mm13035O4uuLhCCKlwrfwvg7AMsum15FAaCvu8FO-ty1aUJXprUP3thWitKfavTS53t-EeXOsB9SkpH1W2b5flguMEXMZM6G04brDpVwB84TShq5R9kLR2MYdL7x0oumx6X8KXPkZwP046Szy0m4ZBKKqWGZK-PH6AabiaqgSfyyGO9FPzy8cIuExzvXW5T3DCDy-jzV5UeFZuaNVsPDWTeIGuJfKMIHnKdY46HiizbNXnigZq7GJoLCpziCl6sZlDr4WJBLA5YfWU7oNWs2LkQHJTGNm9D6Nh_wNyI1moEXoZzRc7R0p9HNZ9GVgRP5h8jNUqlkzbeT0fkcOSBOGvMMj-TbN-o-ocKQDX5f-hqXxATdsC7OHEdnxOVdyWO0z5vtW2IDRUi-UuWuGFtFjL1bTx5RGdvvNklG1qNSZvM39AvF452r9TKX0XrBbEpkDqN1zxP9Wr1f6JwjLEDU_8nxsWfYX7-32sEqOvezJhlvbA6EOVM_j1CHUuGUjzNJ9lxMWAoKakU5tcnlzjC4OSA-DfLuwdFnM3u5f7MsQsfzuwovzyBGmPCCVDY9dIh_yooJ9GOehtma76hI
Cache-control: no-store
Pragma: no-cache
X-Robots-Tag: noindex, nofollow
|
|
| c.pmsrv.co/v2/acvr3?a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=page-land&weight=0&dnt=false&_ible=1&ej=%7B%22dnt%22%3Afalse%7D&ord=3140694119524432&sid=7e8267bd-ce81-477b-a022-1aa5fa402751&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&_ii=0&ppg=&_tk=%7B%7D | 143.204.55.85 | 204 No Content | 0 B |
URL GET HTTP/2c.pmsrv.co/v2/acvr3?a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=page-land&weight=0&dnt=false&_ible=1&ej=%7B%22dnt%22%3Afalse%7D&ord=3140694119524432&sid=7e8267bd-ce81-477b-a022-1aa5fa402751&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&_ii=0&ppg=&_tk=%7B%7D IP143.204.55.85:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subjectpmsrv.co Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47 ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/acvr3?a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=page-land&weight=0&dnt=false&_ible=1&ej=%7B%22dnt%22%3Afalse%7D&ord=3140694119524432&sid=7e8267bd-ce81-477b-a022-1aa5fa402751&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&_ii=0&ppg=&_tk=%7B%7D HTTP/1.1
Host: c.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: tpc=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 22:55:35 GMT
x-powered-by: Express
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
access-control-allow-origin: *
etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk"
x-cache: Miss from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7K24fHm80GzWHJC0sAegPnEp4vz-ngCb8hhnSLyOwp5RzPcM2dOWRw==
X-Firefox-Spdy: h2
|
|
| buildawealthyretirement.com/split-test-for-elementor/v1/tests/46/track-conversion/ | 18.233.27.104 | 200 OK | 43 B |
URL GET HTTP/1.1buildawealthyretirement.com/split-test-for-elementor/v1/tests/46/track-conversion/ IP18.233.27.104:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectleadgen.oxfordclub.com FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4 ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File typeGIF image data, version 89a, 1 x 1 Hash57f187c7a868faeac558007a8eb6cb2e 11ab10ab109fdb53d91d444ac781101f5a6360c6 aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/46/track-conversion/ HTTP/1.1
Host: buildawealthyretirement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 22:55:36 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-9d40b3c3-3810-4448-af78-4acceaba918c; expires=Thu, 24-Apr-2025 22:55:36 GMT; Max-Age=31536000; path=/; domain=buildawealthyretirement.com
Referrer-Policy: unsafe-url
|
|
| www.googletagmanager.com/gtm.js?id=GTM-NKXCSCL | 142.250.74.72 | 200 OK | 43 B |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-NKXCSCL IP142.250.74.72:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeGIF image data, version 89a, 1 x 1 Hash57f187c7a868faeac558007a8eb6cb2e 11ab10ab109fdb53d91d444ac781101f5a6360c6 aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /gtm.js?id=GTM-NKXCSCL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 22:55:34 GMT
expires: Wed, 24 Apr 2024 22:55:34 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 22:17:05 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103028
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| leadgen.oxfordclub.com/split-test-for-elementor/v1/tests//track-conversion/ | 18.233.27.104 | 301 Moved Permanently | 0 B |
URL GET HTTP/1.1leadgen.oxfordclub.com/split-test-for-elementor/v1/tests//track-conversion/ IP18.233.27.104:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectleadgen.oxfordclub.com FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4 ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /split-test-for-elementor/v1/tests//track-conversion/ HTTP/1.1
Host: leadgen.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true
DNT: 1
Connection: keep-alive
Cookie: _ga_BBMPM3EJHQ=GS1.1.1713999334.1.0.1713999334.60.0.0; _ga=GA1.1.300418630.1713999335; _gcl_au=1.1.866479212.1713999335
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 24 Apr 2024 22:55:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Redirect-By: WordPress
Set-Cookie: elementor_split_test_client_id=320f0d96a-149316d8-fe1e-44a4-8489-46bfec98630d; expires=Thu, 24-Apr-2025 22:55:36 GMT; Max-Age=31536000; path=/; domain=leadgen.oxfordclub.com
Location: https://leadgen.oxfordclub.com/split-test-for-elementor/v1/tests/track-conversion/
Referrer-Policy: unsafe-url
|
|
| buildawealthyretirement.com/split-test-for-elementor/v1/tests/45/track-conversion/ | 18.233.27.104 | 200 OK | 43 B |
URL GET HTTP/1.1buildawealthyretirement.com/split-test-for-elementor/v1/tests/45/track-conversion/ IP18.233.27.104:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectleadgen.oxfordclub.com FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4 ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File typeGIF image data, version 89a, 1 x 1 Hash57f187c7a868faeac558007a8eb6cb2e 11ab10ab109fdb53d91d444ac781101f5a6360c6 aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/45/track-conversion/ HTTP/1.1
Host: buildawealthyretirement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 22:55:36 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-c7db1147-0dbb-407c-bc06-4c7b39661828; expires=Thu, 24-Apr-2025 22:55:36 GMT; Max-Age=31536000; path=/; domain=buildawealthyretirement.com
Referrer-Policy: unsafe-url
|
|
| buildawealthyretirement.com/split-test-for-elementor/v1/tests/47/track-conversion/ | 18.233.27.104 | 200 OK | 43 B |
URL GET HTTP/1.1buildawealthyretirement.com/split-test-for-elementor/v1/tests/47/track-conversion/ IP18.233.27.104:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectleadgen.oxfordclub.com FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4 ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File typeGIF image data, version 89a, 1 x 1 Hash57f187c7a868faeac558007a8eb6cb2e 11ab10ab109fdb53d91d444ac781101f5a6360c6 aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/47/track-conversion/ HTTP/1.1
Host: buildawealthyretirement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 22:55:36 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-5dc6857d-3c10-4e0f-9135-1f5a0b90d63c; expires=Thu, 24-Apr-2025 22:55:36 GMT; Max-Age=31536000; path=/; domain=buildawealthyretirement.com
Referrer-Policy: unsafe-url
|
|
| protect-us.mimecast.com/r/KrpwNc6Py8pASOytvMygnBE9MffFobwEWKmoANEc65SV1F38LTJjnCdYFBmPWP8j90cqTpy1BAczii4-QaSgFIXSsSSnGXWWKiJ6ONSh6heBI2XXaIyq5x26b-P3z6T4Z1IbQ13gJ69ah44qU7nxdBd6lQ3oOLcIq2cjiuRSmK3J9tV7qVANn3ogy1xIzzc6qaFzxwRRtIHZjXS9Dkpzme8v76NeeXL3hqBIYtxZ-6zNR19NNT_WJ_8K86H7QisS8vhaz5WnhFQzWb4eceZOuQ06hAW2W0po4ebrwcUz4qppPIp33YE1nRFPVFt1Wi5Yqi9BtwdwKOgBQhEwFqz9Vgr1o2hbYm0lg23z5-odbHiZCtcyPxr7r7bpHHSBUrD3SM3t66Oh753YGC_QD70WRTDCb3abwCKSknJVDObbn3nefJxXPuFnY3Ca0p5OQ72CCMOXBQFkWvwTT6lbR5zk7LxHM0Qnm1tzG3O7Lbo5MvbLuFQMVCCOXfgrGOqV2wYzOFtJ7od56MKGvLRvLNhh__OLbMimfImKR1yvsgTIDRUAd9_6S5RWqNaZmdJDSgwkyBKPZnp23rlNWnFpTpp8HWdjlcvqg773fZtt22bEk-YAjEGXIXgZy7X-4EamZXuyErPnHneFaaQ8eXNZCf86tKu3m8MdDju_SjZmQ38E3iX9f0Hy3dgDymy6yeP0Gw2M3drWQ97C5VEsWKgHpyWdZyUjrwjJkOq-UrO4awNvP1F6_cxuz9QiQG-qDRSaOQTG-QDI9KOcsXSMrfqRYNgR0laQJbqjh-TpQgIEoHz1TIGcsBraiKaK3jdGuUXM2RL5B5EuHr5bbwpHcQ0g3slG4Yc0bnnTgpWepOcX7F2Sl21KArnLXlRBJVyJe3FsuoVWqydtVLxc2WaN4ePVq_SSN2qpY2SZNYPAgMD3EDX0AOzah1Veglj-AgZIgANipmfirrAq5ShOXGNJflB9ap71yjBeuKWb68kvHRcPKR2qGUfBvo9qYOx5DZhUm89itEJZ3B9ujF0GkGoSrEUn6xolk6hzKh_4nRXEVtI34PApRxrehlV7qSyFVTvkUVkbLCVZ401z_8JhoZ9owPOcYXXQwB_UF_o6jZVn9aVhJa4A6fv2R-uelzLFVC_wUQ9ZTASVLGRuClAki4UjLVt-4tHDLcXlV74eG4sZAf3VOk9xP2ijhwBPfcIetMdZ9gdaHJbtXIrJX4nVE60djABgziRlocFKDhmID2SGFgdXQwXE8YOFIKVIvEk_w_S0ynIqoaso7AI-XErnf2sCzYPGL1jfUsr3pdwN980zIQ5GqNnZvTIQ2zAvYOvZIza567Q9JjGEimypPZvh8vNyZmHdiBReFtk3UClq-HPtFX7TJqnN4D2YKK1_iVXgJoBusm_Z7sfJ2_jBVKBXEOpn9vCgd20lxpOd2LiNtnGdCFbbxiLdPxjVPVKbOJPUbbt4tvyYV7DGczCbLY-4qrGKnWzjqW9C62RWmh0mm13035O4uuLhCCKlwrfwvg7AMsum15FAaCvu8FO-ty1aUJXprUP3thWitKfavTS53t-EeXOsB9SkpH1W2b5flguMEXMZM6G04brDpVwB84TShq5R9kLR2MYdL7x0oumx6X8KXPkZwP046Szy0m4ZBKKqWGZK-PH6AabiaqgSfyyGO9FPzy8cIuExzvXW5T3DCDy-jzV5UeFZuaNVsPDWTeIGuJfKMIHnKdY46HiizbNXnigZq7GJoLCpziCl6sZlDr4WJBLA5YfWU7oNWs2LkQHJTGNm9D6Nh_wNyI1moEXoZzRc7R0p9HNZ9GVgRP5h8jNUqlkzbeT0fkcOSBOGvMMj-TbN-o-ocKQDX5f-hqXxATdsC7OHEdnxOVdyWO0z5vtW2IDRUi-UuWuGFtFjL1bTx5RGdvvNklG1qNSZvM39AvF452r9TKX0XrBbEpkDqN1zxP9Wr1f6JwjLEDU_8nxsWfYX7-32sEqOvezJhlvbA6EOVM_j1CHUuGUjzNJ9lxMWAoKakU5tcnlzjC4OSA-DfLuwdFnM3u5f7MsQsfzuwovzyBGmPCCVDY9dIh_yooJ9GOehtma76hI | 205.139.111.113 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1protect-us.mimecast.com/r/KrpwNc6Py8pASOytvMygnBE9MffFobwEWKmoANEc65SV1F38LTJjnCdYFBmPWP8j90cqTpy1BAczii4-QaSgFIXSsSSnGXWWKiJ6ONSh6heBI2XXaIyq5x26b-P3z6T4Z1IbQ13gJ69ah44qU7nxdBd6lQ3oOLcIq2cjiuRSmK3J9tV7qVANn3ogy1xIzzc6qaFzxwRRtIHZjXS9Dkpzme8v76NeeXL3hqBIYtxZ-6zNR19NNT_WJ_8K86H7QisS8vhaz5WnhFQzWb4eceZOuQ06hAW2W0po4ebrwcUz4qppPIp33YE1nRFPVFt1Wi5Yqi9BtwdwKOgBQhEwFqz9Vgr1o2hbYm0lg23z5-odbHiZCtcyPxr7r7bpHHSBUrD3SM3t66Oh753YGC_QD70WRTDCb3abwCKSknJVDObbn3nefJxXPuFnY3Ca0p5OQ72CCMOXBQFkWvwTT6lbR5zk7LxHM0Qnm1tzG3O7Lbo5MvbLuFQMVCCOXfgrGOqV2wYzOFtJ7od56MKGvLRvLNhh__OLbMimfImKR1yvsgTIDRUAd9_6S5RWqNaZmdJDSgwkyBKPZnp23rlNWnFpTpp8HWdjlcvqg773fZtt22bEk-YAjEGXIXgZy7X-4EamZXuyErPnHneFaaQ8eXNZCf86tKu3m8MdDju_SjZmQ38E3iX9f0Hy3dgDymy6yeP0Gw2M3drWQ97C5VEsWKgHpyWdZyUjrwjJkOq-UrO4awNvP1F6_cxuz9QiQG-qDRSaOQTG-QDI9KOcsXSMrfqRYNgR0laQJbqjh-TpQgIEoHz1TIGcsBraiKaK3jdGuUXM2RL5B5EuHr5bbwpHcQ0g3slG4Yc0bnnTgpWepOcX7F2Sl21KArnLXlRBJVyJe3FsuoVWqydtVLxc2WaN4ePVq_SSN2qpY2SZNYPAgMD3EDX0AOzah1Veglj-AgZIgANipmfirrAq5ShOXGNJflB9ap71yjBeuKWb68kvHRcPKR2qGUfBvo9qYOx5DZhUm89itEJZ3B9ujF0GkGoSrEUn6xolk6hzKh_4nRXEVtI34PApRxrehlV7qSyFVTvkUVkbLCVZ401z_8JhoZ9owPOcYXXQwB_UF_o6jZVn9aVhJa4A6fv2R-uelzLFVC_wUQ9ZTASVLGRuClAki4UjLVt-4tHDLcXlV74eG4sZAf3VOk9xP2ijhwBPfcIetMdZ9gdaHJbtXIrJX4nVE60djABgziRlocFKDhmID2SGFgdXQwXE8YOFIKVIvEk_w_S0ynIqoaso7AI-XErnf2sCzYPGL1jfUsr3pdwN980zIQ5GqNnZvTIQ2zAvYOvZIza567Q9JjGEimypPZvh8vNyZmHdiBReFtk3UClq-HPtFX7TJqnN4D2YKK1_iVXgJoBusm_Z7sfJ2_jBVKBXEOpn9vCgd20lxpOd2LiNtnGdCFbbxiLdPxjVPVKbOJPUbbt4tvyYV7DGczCbLY-4qrGKnWzjqW9C62RWmh0mm13035O4uuLhCCKlwrfwvg7AMsum15FAaCvu8FO-ty1aUJXprUP3thWitKfavTS53t-EeXOsB9SkpH1W2b5flguMEXMZM6G04brDpVwB84TShq5R9kLR2MYdL7x0oumx6X8KXPkZwP046Szy0m4ZBKKqWGZK-PH6AabiaqgSfyyGO9FPzy8cIuExzvXW5T3DCDy-jzV5UeFZuaNVsPDWTeIGuJfKMIHnKdY46HiizbNXnigZq7GJoLCpziCl6sZlDr4WJBLA5YfWU7oNWs2LkQHJTGNm9D6Nh_wNyI1moEXoZzRc7R0p9HNZ9GVgRP5h8jNUqlkzbeT0fkcOSBOGvMMj-TbN-o-ocKQDX5f-hqXxATdsC7OHEdnxOVdyWO0z5vtW2IDRUi-UuWuGFtFjL1bTx5RGdvvNklG1qNSZvM39AvF452r9TKX0XrBbEpkDqN1zxP9Wr1f6JwjLEDU_8nxsWfYX7-32sEqOvezJhlvbA6EOVM_j1CHUuGUjzNJ9lxMWAoKakU5tcnlzjC4OSA-DfLuwdFnM3u5f7MsQsfzuwovzyBGmPCCVDY9dIh_yooJ9GOehtma76hI IP205.139.111.113:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerDigiCert Inc Subject*.mimecast.com FingerprintCD:B1:F9:53:BD:55:54:E8:D2:14:46:80:DE:6B:50:27:E1:24:DC:F8 ValidityTue, 30 Jan 2024 00:00:00 GMT - Tue, 25 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /r/KrpwNc6Py8pASOytvMygnBE9MffFobwEWKmoANEc65SV1F38LTJjnCdYFBmPWP8j90cqTpy1BAczii4-QaSgFIXSsSSnGXWWKiJ6ONSh6heBI2XXaIyq5x26b-P3z6T4Z1IbQ13gJ69ah44qU7nxdBd6lQ3oOLcIq2cjiuRSmK3J9tV7qVANn3ogy1xIzzc6qaFzxwRRtIHZjXS9Dkpzme8v76NeeXL3hqBIYtxZ-6zNR19NNT_WJ_8K86H7QisS8vhaz5WnhFQzWb4eceZOuQ06hAW2W0po4ebrwcUz4qppPIp33YE1nRFPVFt1Wi5Yqi9BtwdwKOgBQhEwFqz9Vgr1o2hbYm0lg23z5-odbHiZCtcyPxr7r7bpHHSBUrD3SM3t66Oh753YGC_QD70WRTDCb3abwCKSknJVDObbn3nefJxXPuFnY3Ca0p5OQ72CCMOXBQFkWvwTT6lbR5zk7LxHM0Qnm1tzG3O7Lbo5MvbLuFQMVCCOXfgrGOqV2wYzOFtJ7od56MKGvLRvLNhh__OLbMimfImKR1yvsgTIDRUAd9_6S5RWqNaZmdJDSgwkyBKPZnp23rlNWnFpTpp8HWdjlcvqg773fZtt22bEk-YAjEGXIXgZy7X-4EamZXuyErPnHneFaaQ8eXNZCf86tKu3m8MdDju_SjZmQ38E3iX9f0Hy3dgDymy6yeP0Gw2M3drWQ97C5VEsWKgHpyWdZyUjrwjJkOq-UrO4awNvP1F6_cxuz9QiQG-qDRSaOQTG-QDI9KOcsXSMrfqRYNgR0laQJbqjh-TpQgIEoHz1TIGcsBraiKaK3jdGuUXM2RL5B5EuHr5bbwpHcQ0g3slG4Yc0bnnTgpWepOcX7F2Sl21KArnLXlRBJVyJe3FsuoVWqydtVLxc2WaN4ePVq_SSN2qpY2SZNYPAgMD3EDX0AOzah1Veglj-AgZIgANipmfirrAq5ShOXGNJflB9ap71yjBeuKWb68kvHRcPKR2qGUfBvo9qYOx5DZhUm89itEJZ3B9ujF0GkGoSrEUn6xolk6hzKh_4nRXEVtI34PApRxrehlV7qSyFVTvkUVkbLCVZ401z_8JhoZ9owPOcYXXQwB_UF_o6jZVn9aVhJa4A6fv2R-uelzLFVC_wUQ9ZTASVLGRuClAki4UjLVt-4tHDLcXlV74eG4sZAf3VOk9xP2ijhwBPfcIetMdZ9gdaHJbtXIrJX4nVE60djABgziRlocFKDhmID2SGFgdXQwXE8YOFIKVIvEk_w_S0ynIqoaso7AI-XErnf2sCzYPGL1jfUsr3pdwN980zIQ5GqNnZvTIQ2zAvYOvZIza567Q9JjGEimypPZvh8vNyZmHdiBReFtk3UClq-HPtFX7TJqnN4D2YKK1_iVXgJoBusm_Z7sfJ2_jBVKBXEOpn9vCgd20lxpOd2LiNtnGdCFbbxiLdPxjVPVKbOJPUbbt4tvyYV7DGczCbLY-4qrGKnWzjqW9C62RWmh0mm13035O4uuLhCCKlwrfwvg7AMsum15FAaCvu8FO-ty1aUJXprUP3thWitKfavTS53t-EeXOsB9SkpH1W2b5flguMEXMZM6G04brDpVwB84TShq5R9kLR2MYdL7x0oumx6X8KXPkZwP046Szy0m4ZBKKqWGZK-PH6AabiaqgSfyyGO9FPzy8cIuExzvXW5T3DCDy-jzV5UeFZuaNVsPDWTeIGuJfKMIHnKdY46HiizbNXnigZq7GJoLCpziCl6sZlDr4WJBLA5YfWU7oNWs2LkQHJTGNm9D6Nh_wNyI1moEXoZzRc7R0p9HNZ9GVgRP5h8jNUqlkzbeT0fkcOSBOGvMMj-TbN-o-ocKQDX5f-hqXxATdsC7OHEdnxOVdyWO0z5vtW2IDRUi-UuWuGFtFjL1bTx5RGdvvNklG1qNSZvM39AvF452r9TKX0XrBbEpkDqN1zxP9Wr1f6JwjLEDU_8nxsWfYX7-32sEqOvezJhlvbA6EOVM_j1CHUuGUjzNJ9lxMWAoKakU5tcnlzjC4OSA-DfLuwdFnM3u5f7MsQsfzuwovzyBGmPCCVDY9dIh_yooJ9GOehtma76hI HTTP/1.1
Host: protect-us.mimecast.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Date: Wed, 24 Apr 2024 22:55:36 GMT
Content-Length: 0
Connection: keep-alive
Location: https://cdn1.decide.dev/tracking/theoxfordclub_lander.js
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Cache-control: no-store
Pragma: no-cache
X-Robots-Tag: noindex, nofollow
|
|
| a.mgid.com/1x1.gif?id=444673&type=c&tg=&r=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&nv=1&clid=&d=1713999336106 | 104.19.130.76 | 200 OK | 43 B |
URL GET HTTP/3a.mgid.com/1x1.gif?id=444673&type=c&tg=&r=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&nv=1&clid=&d=1713999336106 IP104.19.130.76:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectmgid.com Fingerprint9C:6C:5A:48:88:44:CB:C2:F4:76:D3:2E:DC:07:0D:D4:CA:6A:25:F5 ValiditySun, 10 Mar 2024 23:31:34 GMT - Sat, 08 Jun 2024 23:31:33 GMT
File typeGIF image data, version 89a, 1 x 1 Hash57f187c7a868faeac558007a8eb6cb2e 11ab10ab109fdb53d91d444ac781101f5a6360c6 aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /1x1.gif?id=444673&type=c&tg=&r=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&nv=1&clid=&d=1713999336106 HTTP/1.1
Host: a.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: __cf_bm=roI1mdiyWbPtqnFvEYXOlQgD4UWMhnPXo0gRtAdZr0A-1713999335-1.0.1.1-jhx4dTliOUzDzN7d3UAr3spudIPM7vJKoXB0dzn8Ddh7toCx7dQyHmYTePadYzKg0uvBLniFPI1Hsw0no62JtA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 22:55:36 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8799ae8abe5a569b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| libertythroughwealthnews.com/split-test-for-elementor/v1/tests//track-conversion/ | 18.233.27.104 | 301 Moved Permanently | 0 B |
URL GET HTTP/1.1libertythroughwealthnews.com/split-test-for-elementor/v1/tests//track-conversion/ IP18.233.27.104:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectleadgen.oxfordclub.com FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4 ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /split-test-for-elementor/v1/tests//track-conversion/ HTTP/1.1
Host: libertythroughwealthnews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 24 Apr 2024 22:55:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Redirect-By: WordPress
Set-Cookie: elementor_split_test_client_id=320f0d96a-d76e9418-c1e8-4341-bd6e-619f9942c3e3; expires=Thu, 24-Apr-2025 22:55:36 GMT; Max-Age=31536000; path=/; domain=libertythroughwealthnews.com
Location: https://libertythroughwealthnews.com/split-test-for-elementor/v1/tests/track-conversion/
Referrer-Policy: unsafe-url
|
|
| cdn1.decide.dev/tracking/theoxfordclub_lander.js | 54.230.111.48 | 200 OK | 834 B |
URL GET HTTP/2cdn1.decide.dev/tracking/theoxfordclub_lander.js IP54.230.111.48:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.decide.dev Fingerprint55:47:DD:D7:EE:11:C6:32:7C:43:A8:63:D1:78:CA:39:D6:A8:A1:34 ValiditySun, 26 Nov 2023 00:00:00 GMT - Wed, 25 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hashb1cbc790e84a45c80719c25350afbe93 791fad5f544492d979cf7043794afda21e99cca0 1ba64776e363ce48a44800790b7d1d35618e472a05c4d0d2e86ac8e81320af02
GET /tracking/theoxfordclub_lander.js HTTP/1.1
Host: cdn1.decide.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 834
last-modified: Wed, 05 Oct 2022 22:05:01 GMT
x-amz-version-id: .IqB6vnfPtu.ANgAywev0qNgFahOe7Ox
accept-ranges: bytes
server: AmazonS3
date: Wed, 24 Apr 2024 02:41:28 GMT
etag: "b1cbc790e84a45c80719c25350afbe93"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jYVIwFPI1A5HRgHQvf-JXXA0fK7pYQB87U7QUVvF8c-ERpfkY34KbA==
age: 72848
X-Firefox-Spdy: h2
|
|
| api.getblueshift.com/unity.gif?t=1713999336&e=pageload&r=&z=114416&x=5475fa15fca6698857e67e2705849cfa&k=7996df4b-78e0-e8ef-8278-77eff9414c58&u=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue | 44.237.165.229 | 200 OK | 42 B |
URL GET HTTP/2api.getblueshift.com/unity.gif?t=1713999336&e=pageload&r=&z=114416&x=5475fa15fca6698857e67e2705849cfa&k=7996df4b-78e0-e8ef-8278-77eff9414c58&u=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue IP44.237.165.229:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.getblueshift.com FingerprintD1:61:A7:FF:D0:FD:A2:46:9B:FE:0C:A8:F1:8A:A9:24:9B:70:04:65 ValidityWed, 07 Feb 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /unity.gif?t=1713999336&e=pageload&r=&z=114416&x=5475fa15fca6698857e67e2705849cfa&k=7996df4b-78e0-e8ef-8278-77eff9414c58&u=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue HTTP/1.1
Host: api.getblueshift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:55:36 GMT
content-type: image/gif
content-length: 42
access-control-expose-headers: etag
access-control-allow-origin: https://pro.oxfordclub.com
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BBMPM3EJHQ&cid=300418630.1713999335>m=45je44o0v9106739609z8813057436za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=2117174984 | 172.217.21.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BBMPM3EJHQ&cid=300418630.1713999335>m=45je44o0v9106739609z8813057436za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=2117174984 IP172.217.21.163:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint4E:BD:F9:72:97:67:A2:4B:EE:E4:B0:03:CD:C8:F3:30:53:27:53:1D ValidityMon, 18 Mar 2024 20:50:06 GMT - Mon, 10 Jun 2024 20:50:05 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-BBMPM3EJHQ&cid=300418630.1713999335>m=45je44o0v9106739609z8813057436za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=2117174984 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 22:55:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| bat.bing.com/bat.js | 204.79.197.237 | 200 OK | 13 kB |
IP204.79.197.237:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerMicrosoft Corporation Subjectwww.bing.com Fingerprint7C:28:A0:E5:94:14:8F:43:5F:DD:F8:5E:FD:79:61:FC:C8:33:3E:1A ValidityWed, 24 Apr 2024 02:02:41 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (46429), with no line terminators Hash72bca04fd669eb89fc65d59052d0fc00 27e60aef86f0cb1b2f6b6ed9df9a4e3ba88efd21 823804a7807864b44093a3843788f4cd076e89cf4a6fdeb8d153ae5c2c2df721
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13261
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 29 Feb 2024 19:58:06 GMT
accept-ranges: bytes
etag: "01b4e9c496bda1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6A919A7239164B89B77AC068911B06F7 Ref B: OSL30EDGE0314 Ref C: 2024-04-24T22:55:36Z
date: Wed, 24 Apr 2024 22:55:36 GMT
X-Firefox-Spdy: h2
|
|
| bat.bing.com/bat.js | 204.79.197.237 | 200 OK | 13 kB |
IP204.79.197.237:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerMicrosoft Corporation Subjectwww.bing.com Fingerprint7C:28:A0:E5:94:14:8F:43:5F:DD:F8:5E:FD:79:61:FC:C8:33:3E:1A ValidityWed, 24 Apr 2024 02:02:41 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (46429), with no line terminators Hash72bca04fd669eb89fc65d59052d0fc00 27e60aef86f0cb1b2f6b6ed9df9a4e3ba88efd21 823804a7807864b44093a3843788f4cd076e89cf4a6fdeb8d153ae5c2c2df721
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13261
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 29 Feb 2024 19:58:06 GMT
accept-ranges: bytes
etag: "01b4e9c496bda1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: DF6074C11C304A9E9097D50A257FFBED Ref B: OSL30EDGE0314 Ref C: 2024-04-24T22:55:36Z
date: Wed, 24 Apr 2024 22:55:36 GMT
X-Firefox-Spdy: h2
|
|
| s3.amazonaws.com/assets.oxfordclub.com/oxford-favicon.png | 54.231.233.0 | 200 OK | 1.5 kB |
URL GET HTTP/1.1s3.amazonaws.com/assets.oxfordclub.com/oxford-favicon.png IP54.231.233.0:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typePNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced Hash5ac49ec01d1cac718b2c4a4832d194c4 82a729b99d1363e89def3ece50ea7c0c07109a7a 77b961c58d38a7ae54fbd422c6388169b3f8b3932991f874326203fb1704f79a
GET /assets.oxfordclub.com/oxford-favicon.png HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: NU9OqzkZ93FbW/gCK7f1Adf01NoCXM7FPs1YFkOWkXFtZj68GfyGAM2r3IeL61W4yBTiSz7Rats=
x-amz-request-id: 7Y6N8FPGMHZ6WRYR
Date: Wed, 24 Apr 2024 22:55:37 GMT
Last-Modified: Wed, 22 Aug 2018 16:04:30 GMT
ETag: "5ac49ec01d1cac718b2c4a4832d194c4"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 1487
|
|
| s.yimg.com/wi/ytc.js |  87.248.119.251 | 200 OK | 6.3 kB |
IP87.248.119.251:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (18187), with no line terminators Hash5c6ed25dce803fd84288922b8928409e 3ccc10546ae12f160bacac1e9e422af091ea4a41 480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: d6HXaho857Gqwx0970FJFReVkskhLts2JHZWTiDWT/WhUsNx9aMHdc5N8SCqXpeB04IANdj7ptQ=
x-amz-request-id: N36THJB6RQXATQC2
date: Wed, 24 Apr 2024 22:40:03 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 934
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/ytc.js | 87.248.119.251 | 200 OK | 6.3 kB |
IP87.248.119.251:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (18187), with no line terminators Hash5c6ed25dce803fd84288922b8928409e 3ccc10546ae12f160bacac1e9e422af091ea4a41 480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: d6HXaho857Gqwx0970FJFReVkskhLts2JHZWTiDWT/WhUsNx9aMHdc5N8SCqXpeB04IANdj7ptQ=
x-amz-request-id: N36THJB6RQXATQC2
date: Wed, 24 Apr 2024 22:40:03 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 934
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
|
|
| leadgen.oxfordclub.com/split-test-for-elementor/v1/tests/track-conversion/ | 18.233.27.104 | 404 Not Found | 8.4 kB |
URL GET HTTP/1.1leadgen.oxfordclub.com/split-test-for-elementor/v1/tests/track-conversion/ IP18.233.27.104:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectleadgen.oxfordclub.com FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4 ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5490) Hashd76d22351c714b8e86a7685c6431606d 1996098e009fbcf34fd427da5a4f695ea1fcfd05 bb99cfe243114ec17472113b6bf58999383405cf7914ab91d1fbfa60a27156d0
GET /split-test-for-elementor/v1/tests/track-conversion/ HTTP/1.1
Host: leadgen.oxfordclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true
DNT: 1
Connection: keep-alive
Cookie: _ga_BBMPM3EJHQ=GS1.1.1713999334.1.0.1713999334.60.0.0; _ga=GA1.1.300418630.1713999335; _gcl_au=1.1.866479212.1713999335; _mg_ckp=eyJja1RrZERGIjoiIn0=; _pmedia_sid=7e8267bd-ce81-477b-a022-1aa5fa402751; elementor_split_test_client_id=320f0d96a-149316d8-fe1e-44a4-8489-46bfec98630d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 24 Apr 2024 22:55:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://leadgen.oxfordclub.com/wp-json/>; rel="https://api.w.org/"
Content-Encoding: br
|
|
| libertythroughwealthnews.com/split-test-for-elementor/v1/tests/track-conversion/ | 18.233.27.104 | 404 Not Found | 8.4 kB |
URL GET HTTP/1.1libertythroughwealthnews.com/split-test-for-elementor/v1/tests/track-conversion/ IP18.233.27.104:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectleadgen.oxfordclub.com FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4 ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5490) Hasha2c1766e2b140f957056ba6fe3d5ec5a 3ce1b5484098e93d8f4d048fa7a7ddc34efccef6 363c5b692c62983d74f2ff120e220494cc8f371058644e88a768e8c1208557cd
GET /split-test-for-elementor/v1/tests/track-conversion/ HTTP/1.1
Host: libertythroughwealthnews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 24 Apr 2024 22:55:37 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <https://libertythroughwealthnews.com/wp-json/>; rel="https://api.w.org/"
Set-Cookie: elementor_split_test_client_id=320f0d96a-02236e70-f05e-4c62-bc7e-ddba00c06dd3; expires=Thu, 24-Apr-2025 22:55:36 GMT; Max-Age=31536000; path=/; domain=libertythroughwealthnews.com
Content-Encoding: br
|
|
| s.yimg.com/wi/config/10090329.json | 87.248.119.251 | 200 OK | 2 B |
URL GET HTTP/2s.yimg.com/wi/config/10090329.json IP87.248.119.251:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10090329.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: CATRH102122VPEJD
x-amz-id-2: QeJfAgQY+qmlWhWwm5+5cIhhuOfluXXF877YvfJVaK9eP305epnZEgxhRsUTuQo81OUUs1k7SORxV111mjDPOw==
content-type: application/json
date: Wed, 24 Apr 2024 22:02:59 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 3158
ats-carp-promotion: 1
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| bat.bing.com/p/action/15322609.js | 204.79.197.237 | 204 No Content | 0 B |
URL GET HTTP/2bat.bing.com/p/action/15322609.js IP204.79.197.237:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerMicrosoft Corporation Subjectwww.bing.com Fingerprint7C:28:A0:E5:94:14:8F:43:5F:DD:F8:5E:FD:79:61:FC:C8:33:3E:1A ValidityWed, 24 Apr 2024 02:02:41 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/15322609.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4734C2DB3EE94BACA809C8EF9F556CE0 Ref B: OSL30EDGE0314 Ref C: 2024-04-24T22:55:37Z
date: Wed, 24 Apr 2024 22:55:36 GMT
X-Firefox-Spdy: h2
|
|
| bat.bing.com/action/0?ti=15322609&Ver=2&mid=51ad388b-53e9-40c8-a516-12a6d245ccb4&sid=c3e46ac0028d11ef88fe0b903586f8e5&vid=c3e45550028d11ef997f774f336fad31&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=The%20Oxford%20Club&p=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&r=<=4237&evt=pageLoad&sv=1&rn=934266 | 204.79.197.237 | 204 No Content | 0 B |
URL GET HTTP/2bat.bing.com/action/0?ti=15322609&Ver=2&mid=51ad388b-53e9-40c8-a516-12a6d245ccb4&sid=c3e46ac0028d11ef88fe0b903586f8e5&vid=c3e45550028d11ef997f774f336fad31&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=The%20Oxford%20Club&p=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&r=<=4237&evt=pageLoad&sv=1&rn=934266 IP204.79.197.237:443 ASN#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerMicrosoft Corporation Subjectwww.bing.com Fingerprint7C:28:A0:E5:94:14:8F:43:5F:DD:F8:5E:FD:79:61:FC:C8:33:3E:1A ValidityWed, 24 Apr 2024 02:02:41 GMT - Thu, 27 Jun 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=15322609&Ver=2&mid=51ad388b-53e9-40c8-a516-12a6d245ccb4&sid=c3e46ac0028d11ef88fe0b903586f8e5&vid=c3e45550028d11ef997f774f336fad31&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=The%20Oxford%20Club&p=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&r=<=4237&evt=pageLoad&sv=1&rn=934266 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0DD142E9C5B668FE275E5682C4E16985; domain=.bing.com; expires=Mon, 19-May-2025 22:55:37 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D8E17A569AEC454BAC5FFD9267E13F5B Ref B: OSL30EDGE0314 Ref C: 2024-04-24T22:55:37Z
date: Wed, 24 Apr 2024 22:55:36 GMT
X-Firefox-Spdy: h2
|
|
| s.yimg.com/wi/config/10150636.json | 87.248.119.251 | 200 OK | 46 B |
URL GET HTTP/2s.yimg.com/wi/config/10150636.json IP87.248.119.251:443 ASN#203220 Yahoo-UK Limited
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerDigiCert Inc Subject*.fantasysports.yahoo.com FingerprintF9:49:E1:CC:DE:98:74:FF:9B:DF:28:DC:D8:43:B9:82:99:B1:60:DB ValidityTue, 02 Apr 2024 00:00:00 GMT - Wed, 22 May 2024 23:59:59 GMT
Hash19b8572021b9e0a07b89bf86a82652ee 44c278b022175472711a5571a8e6ee825cf435a2 49ab5900241048e3f52a32cf9cf405ec5403001dceef55eba1f128b7809cef2b
GET /wi/config/10150636.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: wOybrQiL/56S1YW39tnct5epWcjDuRcIlGvvkjBeWqNY4XG3NT9TKNdfwPwhIBWbm+cfHBrnZx4=
x-amz-request-id: BYCCRVQABFGEYVTP
date: Wed, 24 Apr 2024 22:55:38 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 24 Apr 2024 20:36:46 GMT
x-amz-expiration: expiry-date="Fri, 30 May 2025 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
x-amz-version-id: _Sj0FBh_459LGB5lRaHzkS01M3WtDyGN
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
ats-carp-promotion: 1
etag: "19b8572021b9e0a07b89bf86a82652ee"
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| buildawealthyretirement.com/split-test-for-elementor/v1/tests/38/track-conversion/ | 18.233.27.104 | 200 OK | 43 B |
URL GET HTTP/1.1buildawealthyretirement.com/split-test-for-elementor/v1/tests/38/track-conversion/ IP18.233.27.104:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectleadgen.oxfordclub.com FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4 ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File typeGIF image data, version 89a, 1 x 1 Hash57f187c7a868faeac558007a8eb6cb2e 11ab10ab109fdb53d91d444ac781101f5a6360c6 aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/38/track-conversion/ HTTP/1.1
Host: buildawealthyretirement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 22:55:36 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-c8fdb5c5-6b4a-4022-8314-82b80c3cdcde; expires=Thu, 24-Apr-2025 22:55:36 GMT; Max-Age=31536000; path=/; domain=buildawealthyretirement.com
Referrer-Policy: unsafe-url
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je44o0v9106739609za200&_p=1713999333916&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=300418630.1713999335&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=2&sid=1713999334&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&dt=The%20Oxford%20Club&en=scroll&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&epn.percent_scrolled=90&tfd=9579 | 216.239.34.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je44o0v9106739609za200&_p=1713999333916&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=300418630.1713999335&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=2&sid=1713999334&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&dt=The%20Oxford%20Club&en=scroll&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&epn.percent_scrolled=90&tfd=9579 IP216.239.34.36:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-BBMPM3EJHQ>m=45je44o0v9106739609za200&_p=1713999333916&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=300418630.1713999335&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AEA&_s=2&sid=1713999334&sct=1&seg=0&dl=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&dt=The%20Oxford%20Club&en=scroll&ep.promocode=NBRK4404&ep.device_width=large&ep.iris_campaign_name=BRK%20Oil&ep.media_channel=N%20-%20Agora%20Swap%20Website&ep.placement_name=Dedicated&ep.acquisition_method=UX%20-%20Web%2FEmail%20Promo%20External&ep.list_name=8020%20Publishing&ep.item_type=Subscription&ep.page_type=promo%20page&ep.iris_tree_name=NLOilAltLeadNoBookTO99%20(Video)%20No%20Abandon&ep.iris_page_1=NLOilAltLeadNoBookTO49%20(Video)&ep.template_type=video&ep.effort_type=Dedicated&ep.item_code=BRK&ep.item_subscription_type=FrontEnd&epn.percent_scrolled=90&tfd=9579 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://pro.oxfordclub.com
date: Wed, 24 Apr 2024 22:55:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| analytics.pmsrv.co/v1/tracking.js?d=pro.oxfordclub.com&a=50bbcf39-5fab-4416-a13c-acc35b621b86 | 54.230.111.89 | 200 OK | 8.8 kB |
URL GET HTTP/2analytics.pmsrv.co/v1/tracking.js?d=pro.oxfordclub.com&a=50bbcf39-5fab-4416-a13c-acc35b621b86 IP54.230.111.89:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subjectpmsrv.co Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47 ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash2df207c124acbaff2837df6c079a77b9 4b78eee977e9c79f52509afba81b17771167de52 180fd31b3abb8afb2b7e060d3a32e590b8f5ee26b4a2bab743dadd5398aa90e3
GET /v1/tracking.js?d=pro.oxfordclub.com&a=50bbcf39-5fab-4416-a13c-acc35b621b86 HTTP/1.1
Host: analytics.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Wed, 24 Apr 2024 22:03:04 GMT
x-powered-by: Express
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
content-encoding: gzip
etag: W/"bc8-CwjlEyZMeJT2T4gdzys39D9fgms"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0TFZrccl6q3kcBaTpUnuY0JQ4M1UxSflGx_yxiS706ilkDDtgtARuA==
age: 3151
X-Firefox-Spdy: h2
|
|
| analytics.pmsrv.co/v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s004&weight=0&_ible=1&sid=7e8267bd-ce81-477b-a022-1aa5fa402751&ord=9642016267210244&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&ppg=&_tk=%7B%7D | 54.230.111.89 | 204 No Content | 0 B |
URL GET HTTP/2analytics.pmsrv.co/v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s004&weight=0&_ible=1&sid=7e8267bd-ce81-477b-a022-1aa5fa402751&ord=9642016267210244&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&ppg=&_tk=%7B%7D IP54.230.111.89:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subjectpmsrv.co Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47 ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s004&weight=0&_ible=1&sid=7e8267bd-ce81-477b-a022-1aa5fa402751&ord=9642016267210244&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&ppg=&_tk=%7B%7D HTTP/1.1
Host: analytics.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 10:15:42 GMT
x-powered-by: Express
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IVqyapuz9Vupc_aJ9qnBASHO2HV8zhMWqtENDdAGk3PCKwww-zZeLg==
age: 45603
X-Firefox-Spdy: h2
|
|
| at-api.tribeos.io/a/5e554fee6b742527f85286135595/setup.js | 188.114.97.1 | 522 No Reason Phrase | 7.1 kB |
URL GET HTTP/2at-api.tribeos.io/a/5e554fee6b742527f85286135595/setup.js IP188.114.97.1:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjecttribeos.io FingerprintD5:19:96:BF:9F:66:51:24:F9:3E:A8:F4:A8:91:7F:3F:3D:E3:91:F0 ValidityMon, 04 Mar 2024 02:22:54 GMT - Sun, 02 Jun 2024 02:22:53 GMT
File typeHTML document, ASCII text, with very long lines (460) Hashb754dd834902989ed39241e11c024148 c516c6139bfa69377b1b79c8ce617bce7bcbd3c1 3e9dfbb024e253a613d6e53379cf9be383c839e7e61f3ea4f30b64d7cc52a022
GET /a/5e554fee6b742527f85286135595/setup.js HTTP/1.1
Host: at-api.tribeos.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 522 No Reason Phrase
date: Wed, 24 Apr 2024 22:55:50 GMT
content-type: text/html; charset=UTF-8
content-length: 7090
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A20UCJ1xp6%2F9dWYE2BIxjfI5rOiDCy6AR72xcWz0nuU85uHcAQQ9lLSc2PGJfiMEa0YaJQosxjujD7q1KWdR1fEX1WmKCsy7ceKkw8thQWzsu6CVTJDXbRmyRFKbbqZCAnQXTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
server: cloudflare
cf-ray: 8799ae867ba57129-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| gtrace.mediago.io/ju/log/c?tn=f9f2b1ef23fe2759c2cad0953029a94b&trackingid=&mguid=&app=ERR-PIXEL&ext={%22type%22:%22PIXEL%22,%22msg%22:%22addIframe%20timeout%22,%22acid%22:%22%22,%22cpid%22:%22%22,%22jsversion%22:%22153586075%22} | 35.214.168.80 | | 0 B |
URL gtrace.mediago.io/ju/log/c?tn=f9f2b1ef23fe2759c2cad0953029a94b&trackingid=&mguid=&app=ERR-PIXEL&ext={%22type%22:%22PIXEL%22,%22msg%22:%22addIframe%20timeout%22,%22acid%22:%22%22,%22cpid%22:%22%22,%22jsversion%22:%22153586075%22} IP35.214.168.80:0
CertificateIssuerDigiCert Inc Subject*.mediago.io Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4 ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ju/log/c?tn=f9f2b1ef23fe2759c2cad0953029a94b&trackingid=&mguid=&app=ERR-PIXEL&ext={%22type%22:%22PIXEL%22,%22msg%22:%22addIframe%20timeout%22,%22acid%22:%22%22,%22cpid%22:%22%22,%22jsversion%22:%22153586075%22} HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: __mguid_=9df76ce1ab1a2dad2b2s5k00lveey7n2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 0
content-type: text/html; charset=utf-8
date: Wed, 24 Apr 2024 22:55:55 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=bdf77d09e91646f9885e0e3ee4260a50&ptd=&tkd=&acd=&cpid=&v=153586075 | 35.214.168.80 | | 0 B |
URL gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=bdf77d09e91646f9885e0e3ee4260a50&ptd=&tkd=&acd=&cpid=&v=153586075 IP35.214.168.80:0
CertificateIssuerDigiCert Inc Subject*.mediago.io Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4 ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=bdf77d09e91646f9885e0e3ee4260a50&ptd=&tkd=&acd=&cpid=&v=153586075 HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: __mguid_=9df76ce1ab1a2dad2b2s5k00lveey7n2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
date: Wed, 24 Apr 2024 22:55:55 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=ff274e98cb3446d3ab18236438636e14&ptd=&tkd=&acd=&cpid=&v=153586075 | 35.214.168.80 | | 0 B |
URL gtrace.mediago.io/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=ff274e98cb3446d3ab18236438636e14&ptd=&tkd=&acd=&cpid=&v=153586075 IP35.214.168.80:0
CertificateIssuerDigiCert Inc Subject*.mediago.io Fingerprint13:26:8E:87:3E:6B:7D:C0:F9:32:B1:3B:53:DC:E6:2C:DF:3A:5D:C4 ValidityThu, 11 Jan 2024 00:00:00 GMT - Fri, 10 Jan 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=ff274e98cb3446d3ab18236438636e14&ptd=&tkd=&acd=&cpid=&v=153586075 HTTP/1.1
Host: gtrace.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: __mguid_=9df76ce1ab1a2dad2b2s5k00lveey7n2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
date: Wed, 24 Apr 2024 22:55:55 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| analytics.pmsrv.co/v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s000&weight=0&_ible=1&sid=7e8267bd-ce81-477b-a022-1aa5fa402751&ord=3493608235222166.5&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&ppg=&_tk=%7B%7D | 54.230.111.89 | | 0 B |
URL analytics.pmsrv.co/v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s000&weight=0&_ible=1&sid=7e8267bd-ce81-477b-a022-1aa5fa402751&ord=3493608235222166.5&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&ppg=&_tk=%7B%7D IP54.230.111.89:0
CertificateIssuerAmazon Subjectpmsrv.co Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47 ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/track?&a=50bbcf39-5fab-4416-a13c-acc35b621b86&event=s000&weight=0&_ible=1&sid=7e8267bd-ce81-477b-a022-1aa5fa402751&ord=3493608235222166.5&_ii=0&pg=https%3A%2F%2Fpro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue&ppg=&_tk=%7B%7D HTTP/1.1
Host: analytics.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 24 Apr 2024 10:15:42 GMT
x-powered-by: Express
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gqz6Srmiw4PNVu7B__tNuQ0cPqQt4lz8oOnFwkwR7ddoR2RFANYN-g==
age: 45613
X-Firefox-Spdy: h2
|
|
| verifiedwebpage.com/go?ehash=abd563c36b0de3fa0d7fb158a301abb7&product=22875&ar=55&cid=2578&lid=1610&slhash=4a9834ecac99f8a72a7e3bb0819f9019&mtaid=mpmta&cid2=Offer_of_the_day | 104.18.21.187 | 302 Found | 17 kB |
URL User Request GET HTTP/2verifiedwebpage.com/go?ehash=abd563c36b0de3fa0d7fb158a301abb7&product=22875&ar=55&cid=2578&lid=1610&slhash=4a9834ecac99f8a72a7e3bb0819f9019&mtaid=mpmta&cid2=Offer_of_the_day IP104.18.21.187:443
CertificateIssuerGoogle Trust Services LLC Subjectverifiedwebpage.com FingerprintB6:7C:0D:93:CD:D6:56:A3:74:B9:46:38:F0:C7:A5:31:BC:5F:AF:56 ValidityWed, 10 Apr 2024 21:43:08 GMT - Tue, 09 Jul 2024 21:43:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?ehash=abd563c36b0de3fa0d7fb158a301abb7&product=22875&ar=55&cid=2578&lid=1610&slhash=4a9834ecac99f8a72a7e3bb0819f9019&mtaid=mpmta&cid2=Offer_of_the_day HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 24 Apr 2024 22:55:32 GMT
content-type: text/html; charset=UTF-8
location: https://www.p3lstrk.com/2MGNK7T/CXW7M6/?sub1=3415433504656317877
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=bccd415f7581b2f246ef609e584c42a9; path=/
pixel_session_hash_22875=3415433504656317877; expires=Fri, 24-May-2024 22:55:30 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_22875=7e7f4ed39877ed480030e66a67f37f7ce25216502ec1886ff4e9c0c771932aae; expires=Fri, 26-Apr-2024 22:55:30 GMT; Max-Age=172800
__cf_bm=g7M.4iTKUvf2UXVrlibnXVfTCzybtdkzAF_W8.BOTjM-1713999332-1.0.1.1-ZNmJJ0fIdLQ.r7.aO9KDs.Z5hO1yDoYPYT6Cp1uH7lG.Nnp1.fea4HMQfJX.OyUS.01j0uyUWn0z2YkGxUrXSg; path=/; expires=Wed, 24-Apr-24 23:25:32 GMT; domain=.verifiedwebpage.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8799ae6b9b607130-OSL
X-Firefox-Spdy: h2
|
|
| s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/bkgd.jpg | 54.231.233.0 | 200 OK | 100 kB |
URL GET HTTP/1.1s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/bkgd.jpg IP54.231.233.0:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subjects3.amazonaws.com Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 1276x1134, components 3 Size100 kB (100140 bytes) Hash9b7b924d709aa47fdcbd499da85125ff 6d43cb6f3c9588055fb731d1925d3b0e3a713ef8 32968cead2c39de5de18fdf6483cd1032dce114ae4b060947bd7824b4d1eb9f9
GET /assets.oxfordclub.com/promo/brk/oil/bkgd.jpg HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s3.amazonaws.com/assets.oxfordclub.com/promo/brk/oil/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: yL2cyp55M9sSJy7YDBBrx72ULvY3iS0YLaikDSYgsbMsLQxYmfJ0TfuAjewcNPRYoyeHfdrcZSg=
x-amz-request-id: JKBDEW0K6BF7AEY3
Date: Wed, 24 Apr 2024 22:55:35 GMT
Last-Modified: Mon, 27 Feb 2023 22:17:15 GMT
ETag: "9b7b924d709aa47fdcbd499da85125ff"
x-amz-server-side-encryption: AES256
x-amz-version-id: CMlw7Lt3Rmny.r9msJHmKS9CHFdIc7iV
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 100140
|
|
| c.pmsrv.co/v1/analytics.js?d=pro.oxfordclub.com | 143.204.55.85 | 200 OK | 9.7 kB |
URL GET HTTP/2c.pmsrv.co/v1/analytics.js?d=pro.oxfordclub.com IP143.204.55.85:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subjectpmsrv.co Fingerprint75:6B:BA:1B:09:1C:F0:09:3F:A7:0A:8D:BC:E2:85:28:5E:AF:4F:47 ValiditySat, 16 Sep 2023 00:00:00 GMT - Mon, 14 Oct 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (10015), with no line terminators Hash5770d811d5c7b150913493ade2195adb 7e37f2f2989092bab262e862c63dd042997f7d17 af3e9d36faf85e71bb9c9bdbf74d0205225f7f5dcc9c3427ca50ac4443f3a730
GET /v1/analytics.js?d=pro.oxfordclub.com HTTP/1.1
Host: c.pmsrv.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Wed, 24 Apr 2024 13:23:28 GMT
x-powered-by: Express
set-cookie: tpc=1; Domain=c.pmsrv.co; Path=/; Secure; SameSite=None
cache-control: private, no-cache, no-store, must-revalidate
expires: -1
pragma: no-cache
content-encoding: br
etag: W/"2608-ON79WHDBVOZGjekelYGZWI6GYLU"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BQ6gwPT5Vj2A0l4fwjPhrM5cKa0CV6QlM1ozcqaBysHvjRaIipUsDg==
age: 34327
X-Firefox-Spdy: h2
|
|
| cdn.mediago.io/js/pixel.js | 54.230.111.126 | 200 OK | 126 kB |
URL GET HTTP/2cdn.mediago.io/js/pixel.js IP54.230.111.126:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.mediago.io FingerprintD4:6D:29:DE:0A:B4:82:54:F2:27:37:C3:E6:0A:2E:B9:B5:BC:A1:C5 ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 04 Sep 2024 23:59:59 GMT
Size126 kB (125772 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/pixel.js HTTP/1.1
Host: cdn.mediago.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
content-length: 125772
last-modified: Tue, 16 Apr 2024 06:55:57 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: Na3q8yFqHcGliiXH1g41DyoLOWzeMSSA
accept-ranges: bytes
server: AmazonS3
date: Wed, 24 Apr 2024 10:45:27 GMT
etag: "14fd02d1e2fbdd0101a7155a2310c3e7"
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AtNnutb-nXYUyv1nNnNlVvuOeyQhJnv3a2vLRI6rU5Z5dlehqkgowQ==
age: 43809
vary: Origin
X-Firefox-Spdy: h2
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 160 kB |
URL GET HTTP/2stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css IP104.18.10.207:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (65324) Size160 kB (160403 bytes) Hash3afe15e976734d9daac26310110c4594 4f14a09a606c99a11f8fda15564ef66f70402826 680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c
GET /bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:55:33 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"3afe15e976734d9daac26310110c4594"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 10/31/2023 18:50:52
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: e2bb8cf07114f645cceafcc4a12a95e5
cdn-cache: HIT
cf-cache-status: HIT
age: 5930261
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8799ae79ab3356af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| libertythroughwealthnews.com/split-test-for-elementor/v1/tests/39/track-conversion/ | 18.233.27.104 | 200 OK | 43 B |
URL GET HTTP/1.1libertythroughwealthnews.com/split-test-for-elementor/v1/tests/39/track-conversion/ IP18.233.27.104:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectleadgen.oxfordclub.com FingerprintE2:D4:E7:E5:AF:7E:F3:75:BD:8D:38:DA:BE:37:EA:DE:E2:5C:44:B4 ValidityTue, 12 Mar 2024 14:41:49 GMT - Mon, 10 Jun 2024 14:41:48 GMT
File typeGIF image data, version 89a, 1 x 1 Hash57f187c7a868faeac558007a8eb6cb2e 11ab10ab109fdb53d91d444ac781101f5a6360c6 aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /split-test-for-elementor/v1/tests/39/track-conversion/ HTTP/1.1
Host: libertythroughwealthnews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 22:55:36 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: elementor_split_test_client_id=320f0d96a-1218bdbe-967c-4309-8a12-d652c1dae399; expires=Thu, 24-Apr-2025 22:55:36 GMT; Max-Age=31536000; path=/; domain=libertythroughwealthnews.com
Referrer-Policy: unsafe-url
|
|
| c.lytics.io/c/9c32784e3cc4888a693a7988ad64c63d/portrait | 104.26.3.22 | 200 OK | 0 B |
URL POST HTTP/2c.lytics.io/c/9c32784e3cc4888a693a7988ad64c63d/portrait IP104.26.3.22:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectlytics.io FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79 ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /c/9c32784e3cc4888a693a7988ad64c63d/portrait HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2304
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Cookie: seerid=6b3a75af-ed86-411f-9ced-9d61de3120a4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:55:34 GMT
content-type: text/html
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cookie, *
access-control-allow-methods: GET, POST
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
strict-transport-security: max-age=63072000;
x-lytics-trace: 7f051bfef7f2b4c6ad0f908b2f431cb6
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YBGHigw0KWUep2CaJ23lUUV5zzl8tyDs3BbWuh1TMBvAqsdIYFD9Gi5PI0p4N5%2F4eTU0G%2B%2FSGu9lul1inj4XCZgNFqZw5CDZMjkYCzc%2FIHccJpGP5o76dASKdJy1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8799ae827a680b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| c.lytics.io/api/experience/candidate/9c32784e3cc4888a693a7988ad64c63d/config.js | 104.26.3.22 | 200 OK | 286 kB |
URL GET HTTP/2c.lytics.io/api/experience/candidate/9c32784e3cc4888a693a7988ad64c63d/config.js IP104.26.3.22:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectlytics.io FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79 ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
Size286 kB (286125 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/experience/candidate/9c32784e3cc4888a693a7988ad64c63d/config.js HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: seerid=6b3a75af-ed86-411f-9ced-9d61de3120a4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:55:36 GMT
content-type: application/javascript
access-control-allow-origin: *
strict-transport-security: max-age=63072000;
x-lytics-trace: 1fba1be6dbbe859118c919f7796d6d8d
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: HIT
age: 6709
last-modified: Wed, 24 Apr 2024 21:03:47 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pHU%2BLzPSI%2FI9l3h9wXY6mCu0v1ixJVTaTuG1%2FPL1rPD1Pl5eAQ4MN4I6OS0aLppDLtDW3pwvQhfGlEfaXbX9HiE9L6FwZb7z%2B1Y%2BcVPPFoCdvyC%2FXym3s9usYudC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8799ae8a2c440b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| a.mgid.com/mgsensor.js?d=1713999334993&source=gtm | 104.19.130.76 | 200 OK | 17 kB |
URL GET HTTP/2a.mgid.com/mgsensor.js?d=1713999334993&source=gtm IP104.19.130.76:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectmgid.com Fingerprint9C:6C:5A:48:88:44:CB:C2:F4:76:D3:2E:DC:07:0D:D4:CA:6A:25:F5 ValiditySun, 10 Mar 2024 23:31:34 GMT - Sat, 08 Jun 2024 23:31:33 GMT
File typeJavaScript source, ASCII text, with very long lines (16960), with no line terminators Hash55f2e03ea5c17124ec95ef6b177ffce2 07a2522117e2b756ae1eae210be12e7412083e48 45d2c055791d072ed388bb395f90aaebf2425189bbd03942b8f60855ba4f6988
GET /mgsensor.js?d=1713999334993&source=gtm HTTP/1.1
Host: a.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:55:35 GMT
content-type: application/javascript
vary: Accept-Encoding
x-mg-request-uuid: 180abfff-5094-4187-ae7e-c528065adb60
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=roI1mdiyWbPtqnFvEYXOlQgD4UWMhnPXo0gRtAdZr0A-1713999335-1.0.1.1-jhx4dTliOUzDzN7d3UAr3spudIPM7vJKoXB0dzn8Ddh7toCx7dQyHmYTePadYzKg0uvBLniFPI1Hsw0no62JtA; path=/; expires=Wed, 24-Apr-24 23:25:35 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8799ae857f7b56aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| go.goodlifestylenews.com/BRKOil0323/abd563c36b0de3fa0d7fb158a301abb7/55/leadsource/2578/1610/4a9834ecac99f8a72a7e3bb0819f9019/mpmta/Offer_of_the_day | 172.67.172.49 | 302 Found | 17 kB |
URL User Request GET HTTP/2go.goodlifestylenews.com/BRKOil0323/abd563c36b0de3fa0d7fb158a301abb7/55/leadsource/2578/1610/4a9834ecac99f8a72a7e3bb0819f9019/mpmta/Offer_of_the_day IP172.67.172.49:443
CertificateIssuerGoogle Trust Services LLC Subjectgoodlifestylenews.com FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40 ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /BRKOil0323/abd563c36b0de3fa0d7fb158a301abb7/55/leadsource/2578/1610/4a9834ecac99f8a72a7e3bb0819f9019/mpmta/Offer_of_the_day HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 24 Apr 2024 22:55:31 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=abd563c36b0de3fa0d7fb158a301abb7&product=22875&ar=55&cid=2578&lid=1610&slhash=4a9834ecac99f8a72a7e3bb0819f9019&mtaid=mpmta&cid2=Offer_of_the_day
cache-control: max-age=600
expires: Wed, 24 Apr 2024 23:05:30 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YN%2FOxUA8jHZuJ%2FxuACj1r1%2BeiKQjoPCEjC%2FI%2BhXDXc8s%2BqO5OC9k7SkpMHL0G4isyRps1SioW8GcBMyPATHadtxbmA7q7OwJ7Sc5gQ4Xu%2F7kzRXuw3fvlhpgiAnq01Zx2sHgUEtFjzd%2Fj3k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8799ae670d2e5688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| embed-cloudfront.wistia.com/deliveries/295bd86807b7c50fc99149048c79bb3fa085e56e.m3u8 | 143.204.55.63 | 200 OK | 77 kB |
URL GET HTTP/2embed-cloudfront.wistia.com/deliveries/295bd86807b7c50fc99149048c79bb3fa085e56e.m3u8 IP143.204.55.63:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.wistia.com Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2 ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
Hash13a7c8e5f3849add622c18cd60650714 6b03548c75227c8019fa266c0485eb45968ea171 5c5f9a6bd23a6d1c6d76b58c957936f8f3665be944a34bbda213823c70b91d41
GET /deliveries/295bd86807b7c50fc99149048c79bb3fa085e56e.m3u8 HTTP/1.1
Host: embed-cloudfront.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pro.oxfordclub.com
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/vnd.apple.mpegurl
content-length: 77338
server: envoy
date: Sat, 20 Apr 2024 12:10:42 GMT
expires: Sun, 20 Apr 2025 12:10:42 GMT
cache-control: max-age=31536000
last-modified: Mon, 05 Nov 2018 10:11:00 GMT
edge-cache-tag: 295bd86807b7c50fc99149048c79bb3fa085e56e-hls-segment
surrogate-key: 295bd86807b7c50fc99149048c79bb3fa085e56e-hls-segment
accept-ranges: bytes
x-envoy-upstream-service-time: 138
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8oySYxe7pll9IHNYD5fEM_1UqioZQpex10DIQCEPBkaUSebL8pHBzg==
age: 384293
x-cdn: cloudfront
access-control-allow-origin: *
access-control-expose-headers: Server,range,Content-Length,Content-Range,x-cdn
X-Firefox-Spdy: h2
|
|
| c.lytics.io/static/pathfora.min.js | 104.26.3.22 | 200 OK | 105 kB |
URL GET HTTP/2c.lytics.io/static/pathfora.min.js IP104.26.3.22:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectlytics.io FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79 ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size105 kB (105002 bytes) Hash1dda5c62f6d686fe449a9d217388da4b a2cfd95511bd1a0f8ae3275e44d309c7279c4a69 1f6e70fc4337b6769a4c498cf721491cb1f31a14e342cb9c584ccea00fee9d1b
GET /static/pathfora.min.js HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Cookie: seerid=6b3a75af-ed86-411f-9ced-9d61de3120a4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:55:35 GMT
content-type: text/javascript; charset=utf-8
strict-transport-security: max-age=63072000;
via: 1.1 google
cache-control: max-age=7200
cf-cache-status: HIT
age: 2244
last-modified: Wed, 24 Apr 2024 22:18:11 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UhhlI56xi%2BVZKMiXWZD3GzG40R4QpOhUb5gJ3ysdjfN5caAMsjEiSfWxNFjeY8OUXj3WZZJ5mH%2B5H5ETjpNEi4zSOGVJMwnV8QKbc51XoucTvGluDJ%2FCsTwn7Shl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8799ae867b530b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| c.lytics.io/api/personalize/9c32784e3cc4888a693a7988ad64c63d/user/_uid/6b3a75af-ed86-411f-9ced-9d61de3120a4?segments=true&mergestate=true&state=%7B%22_uid%22%3A%226b3a75af-ed86-411f-9ced-9d61de3120a4%22%2C%22_sesstart%22%3A%221%22%2C%22_tz%22%3A0%2C%22_ul%22%3A%22en-US%22%2C%22_sz%22%3A%221280x1024%22%2C%22_nmob%22%3A%22t%22%2C%22_device%22%3A%22desktop%22%2C%22url%22%3A%22pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue%22%2C%22_v%22%3A%223.0.35%22%7D&ts=1713999334407&callback=u_619860425370936400 | 0.0.0.0 | | 0 B |
URL GET c.lytics.io/api/personalize/9c32784e3cc4888a693a7988ad64c63d/user/_uid/6b3a75af-ed86-411f-9ced-9d61de3120a4?segments=true&mergestate=true&state=%7B%22_uid%22%3A%226b3a75af-ed86-411f-9ced-9d61de3120a4%22%2C%22_sesstart%22%3A%221%22%2C%22_tz%22%3A0%2C%22_ul%22%3A%22en-US%22%2C%22_sz%22%3A%221280x1024%22%2C%22_nmob%22%3A%22t%22%2C%22_device%22%3A%22desktop%22%2C%22url%22%3A%22pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue%22%2C%22_v%22%3A%223.0.35%22%7D&ts=1713999334407&callback=u_619860425370936400 IP0.0.0.0:0
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerLet's Encrypt Subjectlytics.io FingerprintB6:F8:34:ED:E4:C3:43:5C:FC:38:D0:CB:58:F7:80:C5:76:62:78:79 ValiditySat, 16 Mar 2024 02:39:35 GMT - Fri, 14 Jun 2024 02:39:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/personalize/9c32784e3cc4888a693a7988ad64c63d/user/_uid/6b3a75af-ed86-411f-9ced-9d61de3120a4?segments=true&mergestate=true&state=%7B%22_uid%22%3A%226b3a75af-ed86-411f-9ced-9d61de3120a4%22%2C%22_sesstart%22%3A%221%22%2C%22_tz%22%3A0%2C%22_ul%22%3A%22en-US%22%2C%22_sz%22%3A%221280x1024%22%2C%22_nmob%22%3A%22t%22%2C%22_device%22%3A%22desktop%22%2C%22url%22%3A%22pro.oxfordclub.com%2Fp%2FOILTO99BRKLT2YRDSTOT%2FNBRK4404%2F%3Fs1%3Dae7ef7a17e8e4ec9be7edd23366de21c%26h%3Dtrue%22%2C%22_v%22%3A%223.0.35%22%7D&ts=1713999334407&callback=u_619860425370936400 HTTP/1.1
Host: c.lytics.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 22:55:34 GMT
content-type: application/json
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Cookie, *
access-control-allow-methods: GET
access-control-allow-origin:
strict-transport-security: max-age=63072000;
x-lytics-trace: bd760370dfc41b715b68fc223da75c32
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2Ft%2BFIW5%2BW1%2FNNyvD2FOs7sWjXN5Lui7ok5tZN4tspkxehUdMsgD9LwfPf%2BRX3RmOH4%2BFCuFsjB1y0aYxL2rZAQaFhhN%2B31BHkzhTLDdUL76niWpsPiQkXt8KY7j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8799ae8019ba0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| embed-ssl.wistia.com/deliveries/ad4b9b62ceff289d06520fdb00b932cc.webp?image_crop_resized=1280x720 | 143.204.55.63 | 200 OK | 54 kB |
URL GET HTTP/2embed-ssl.wistia.com/deliveries/ad4b9b62ceff289d06520fdb00b932cc.webp?image_crop_resized=1280x720 IP143.204.55.63:443
Requested byhttps://pro.oxfordclub.com/p/OILTO99BRKLT2YRDSTOT/NBRK4404/?s1=ae7ef7a17e8e4ec9be7edd23366de21c&h=true CertificateIssuerAmazon Subject*.wistia.com Fingerprint44:FA:DB:AB:41:36:F5:96:F7:BF:3A:E7:D8:61:50:5C:26:80:3D:D2 ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 28 Jan 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp Hashb9a4c28a08292016647210b642b4b454 c3e26044d75539279b1e8fcdb22430758d753633 2156d9f017881cce64c07374c57e7984de81dc473afe49ac975949a4c13785b4
GET /deliveries/ad4b9b62ceff289d06520fdb00b932cc.webp?image_crop_resized=1280x720 HTTP/1.1
Host: embed-ssl.wistia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pro.oxfordclub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/webp
accept-ranges: none
access-control-request-method: *
cache-control: max-age=31536000
content-disposition: inline
edge-cache-tag: ad4b9b62ceff289d06520fdb00b932cc
etag: kGg1mbUfolTJdhz7jevqLB7fGbg=
last-modified: Tue, 28 Nov 2023 14:39:32 UTC
surrogate-key: ad4b9b62ceff289d06520fdb00b932cc thumbnail-delivery
date: Sat, 20 Apr 2024 20:06:34 GMT
x-envoy-upstream-service-time: 260
server: envoy
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7vYxmBbottBOaSecdzMqrCGHaa61l55SoszcQAyqVhb4pSx0HHtIzA==
age: 355740
x-cdn: cloudfront
vary: Origin
X-Firefox-Spdy: h2
|
|
0.0.0.0