www.primacosta.com/gu5d/
301 Moved Permanently 175 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 00b1749e7f34b8de5bde2b4abd5cefef
da5846fe6898511ed9dcf79f12d78042fb649e01
b5aa18241aa2adbec8f48b308a46a386e31040f6bb85ca381e427b399679b56e
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /gu5d/ HTTP/1.1
Host: www.primacosta.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: openresty/1.15.8.2
Date: Tue, 04 Oct 2022 10:10:03 GMT
Content-Type: text/html
Content-Length: 175
Connection: keep-alive
Referrer-Policy: no-referrer
Location: https://www.brandbucket.com/names/primacosta?source=ext
Expires: Fri, 14 Oct 2022 10:10:03 GMT
Pragma: public
Cache-Control: max-age=864000, public
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9955bda9c9ef64bc5700a14af0bae25e
8de7b7469e905af0374bdfcc3006bbb844f13e94
1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6791
Expires: Tue, 04 Oct 2022 12:03:14 GMT
Date: Tue, 04 Oct 2022 10:10:03 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 09:47:04 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2oN_-NPIQ2nkhDz-W1aPlLGK2xB4aqqLDCkR9dNTcIaWRtGTZsnVTw==
Age: 1379
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RGfp8WkZPDIMCeP82zfU_muJhK5qvlc3AEDtCm1T_YsfhpKMXOjlBw==
age: 16896
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 10:10:03 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 04 Oct 2022 09:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 04 Oct 2022 10:27:25 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: XAJqnkj1A_2MwEKz6cvMNRDNeaSU2oaW1VSpIWeX2OGaOXf933s_8w==
Age: 2430
www.brandbucket.com/images2/nice_bk1_thumb.jpg
200 OK 5.8 kB URL HTTP/2 www.brandbucket.com/images2/nice_bk1_thumb.jpg
IP
File type JPEG image data, progressive, precision 8, 150x98, components 3\012- data
Hash b4dad318d2eef70faeb94c1de940b8e9
fd7b8e6d33dfdb9514f59ba26b855ec61f2b21ce
d4f3a8ecf34eb859108c375c36cca14e484d752a87763c58a80e20220e866004
GET /images2/nice_bk1_thumb.jpg HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/jpeg
content-length: 5793
cf-bgj: imgq:100,h2pri
cf-polished: origSize=16185
etag: "5ee1f38e-3f39"
last-modified: Thu, 11 Jun 2020 09:04:14 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d2027b94cb50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images2/nice_bk2_thumb.jpg
200 OK 6.6 kB URL HTTP/2 www.brandbucket.com/images2/nice_bk2_thumb.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 150x96, components 3\012- data
Hash 87c01ad06c8f0f82f63762112b62c261
4c58266d4e8d2d205fbfe88af39d47e96e353733
96d5437cff72a446bada499ea347636473a33dc3f6a09a5bcce71e794bb7b8dd
GET /images2/nice_bk2_thumb.jpg HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/jpeg
content-length: 6565
cf-bgj: imgq:100,h2pri
cf-polished: origSize=16629
etag: "5ee1f391-40f5"
last-modified: Thu, 11 Jun 2020 09:04:17 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d2027b94fb50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images2/nice_bk3_thumb.jpg
200 OK 6.2 kB URL HTTP/2 www.brandbucket.com/images2/nice_bk3_thumb.jpg
IP
File type JPEG image data, progressive, precision 8, 150x96, components 3\012- data
Hash 7c72d58b1656eb337865be3d7945019a
70f88fa2fa40ec3b8e7c98b033f5f48e07dfcf07
81684900b1c4f2f5d1b3e6d9917a02e11cf87160152e784ccece4ee159f9ccbe
GET /images2/nice_bk3_thumb.jpg HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/jpeg
content-length: 6202
cf-bgj: imgq:100,h2pri
cf-polished: origSize=16805
etag: "5ee1f392-41a5"
last-modified: Thu, 11 Jun 2020 09:04:18 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d2027b950b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images7/icon_plus.png
200 OK 604 B URL HTTP/2 www.brandbucket.com/images7/icon_plus.png
IP
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced\012- data
Hash 94865622c5c9f42d952bbea159d15dd6
217ad71873550f450b555bdc83805a1969a2a4b7
70a3df33b31f08827510b14236a8c6320ea413b2b4210b4232416c20bcc751cc
GET /images7/icon_plus.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 604
cf-bgj: imgq:100,h2pri
cf-polished: origSize=743
etag: "5ede24b6-2e7"
last-modified: Mon, 08 Jun 2020 11:44:54 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d2027b958b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images2/nice_bk5_thumb.jpg
200 OK 5.6 kB URL HTTP/2 www.brandbucket.com/images2/nice_bk5_thumb.jpg
IP
File type JPEG image data, progressive, precision 8, 150x96, components 3\012- data
Hash bca3c9b14d1a37b805e41f8cbe61be7e
5a3849459df95c9ac261840c9efe5cd265cd755a
f730c29ffb9ba16b6e0bcb09ded50ef3076f7125fc133103ed7d26843f3e57b0
GET /images2/nice_bk5_thumb.jpg HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/jpeg
content-length: 5617
cf-bgj: imgq:100,h2pri
cf-polished: origSize=16068
etag: "5ee1f391-3ec4"
last-modified: Thu, 11 Jun 2020 09:04:17 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d2027b957b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images2/nice_bk4_thumb.jpg
200 OK 6.1 kB URL HTTP/2 www.brandbucket.com/images2/nice_bk4_thumb.jpg
IP
File type JPEG image data, progressive, precision 8, 150x96, components 3\012- data
Hash 57aee6ca35013ad9b91ae2583c1831f7
73616462427ff5288ac0e19e54eac477270a7b59
0514463b5d215bf6e91ed3a61d6189e34e89e5921249add1e0f9bbd2e9b41294
GET /images2/nice_bk4_thumb.jpg HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/jpeg
content-length: 6091
cf-bgj: imgq:100,h2pri
cf-polished: origSize=16406
etag: "5ee1f391-4016"
last-modified: Thu, 11 Jun 2020 09:04:17 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d2027b951b50b-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 16ebfb2aa621547ecf581e26fc828a7d
f78993331f6f5b8af6409a9ad2fc50b77070f68a
0f81fd1d6be9ccc04b74f0348aafe642c7b9ab7dffb7e8a679b5d67cc2e5fac3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3042
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:04 GMT
Last-Modified: Tue, 04 Oct 2022 09:19:22 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b0d53c2572a93a8db2df12363bee8216
674b8f55e58a53b2d91a092dc47bb6633071db0d
c261ee39febce4c1c60d1f8716b7471c97a602a5cd48f319fdea22052873b3b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b0d53c2572a93a8db2df12363bee8216
674b8f55e58a53b2d91a092dc47bb6633071db0d
c261ee39febce4c1c60d1f8716b7471c97a602a5cd48f319fdea22052873b3b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b0d53c2572a93a8db2df12363bee8216
674b8f55e58a53b2d91a092dc47bb6633071db0d
c261ee39febce4c1c60d1f8716b7471c97a602a5cd48f319fdea22052873b3b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
200 OK 11 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 11072, version 1.0\012- data
Hash e7df3d0942815909add8f9d0c40d00d9
cf5032eea3399a58870e8a05e629b006a8c7c3c7
bce2f309470952b7affa62ff4d91b454334c68cefa541429b502904d20696875
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.brandbucket.com
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11072
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 19:34:03 GMT
expires: Thu, 28 Sep 2023 19:34:03 GMT
cache-control: public, max-age=31536000
age: 484561
last-modified: Wed, 11 May 2022 19:24:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
200 OK 11 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 11028, version 1.0\012- data
Hash 1f6d3cf6d38f25d83d95f5a800b8cac3
279f300ca2cbbdf9f5036ef2f438607fbf377daa
796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.brandbucket.com
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Sep 2022 17:24:34 GMT
expires: Fri, 29 Sep 2023 17:24:34 GMT
cache-control: public, max-age=31536000
age: 405930
last-modified: Wed, 11 May 2022 19:24:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-list-0.1.js
200 OK 13 kB URL HTTP/2 cdn.ampproject.org/v0/amp-list-0.1.js
IP
File type Unicode text, UTF-8 text, with very long lines (42775)
Hash ea1262a7de183e2ac7915421cf6b2142
010772853ab22be7624aa0ccf8e98d4372f774b2
aafd09196046aa029bb1ae1c87e2ecfd0f7cdc223c58325e1a41b4884afa6868
GET /v0/amp-list-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 12916
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "8b5482649e87a1e1"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-accordion-0.1.js
200 OK 5.9 kB URL HTTP/2 cdn.ampproject.org/v0/amp-accordion-0.1.js
IP
File type ASCII text, with very long lines (17551)
Hash 73af6e224d1abd34e60678a28bce1547
52ef6c24d3ab62d7dcfffb011a31aca4d216799f
06a478c0bde49a937f54fed3ff5553a6a1ba660a787e7317180263198421d134
GET /v0/amp-accordion-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5859
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "69fb31f6d65e8437"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-iframe-0.1.js
200 OK 8.9 kB URL HTTP/2 cdn.ampproject.org/v0/amp-iframe-0.1.js
IP
File type ASCII text, with very long lines (25639)
Hash cf49937db8fb54ba35d1b54f1ae6576e
24ff5df067b508254fd8c49eb129c2f3d335db4a
fce4d0eda9cbb2e937e3779f2c2e814e1b340f37fb3ad89304a75df302d2ab56
GET /v0/amp-iframe-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 8933
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "54c74bdafa174c95"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-action-macro-0.1.js
200 OK 1.5 kB URL HTTP/2 cdn.ampproject.org/v0/amp-action-macro-0.1.js
IP
File type ASCII text, with very long lines (3580)
Hash eb59200d88c7b7642f08e4f9bc271e64
47a581c9a194690341c50f424863102987bdf605
37657866636cd58441b6996972c72e2b84104ce8e879d7ed6311c067cfc786cc
GET /v0/amp-action-macro-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 1465
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "4e56ca6e246e19c3"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-recaptcha-input-0.1.js
200 OK 9.2 kB URL HTTP/2 cdn.ampproject.org/v0/amp-recaptcha-input-0.1.js
IP
File type ASCII text, with very long lines (25181)
Hash 2e06ef302e9c52dfac4e9d6aedcad2b6
9e8d64b16dcbd11b96e2d8ab9883dffe40f64dcd
d5ddb58c2f53cadbe23b6c421d156e96b067e8845841dfecb33a3d330152c60e
GET /v0/amp-recaptcha-input-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 9201
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "85c529c6628e0599"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-animation-0.1.js
200 OK 19 kB URL HTTP/2 cdn.ampproject.org/v0/amp-animation-0.1.js
IP
File type Unicode text, UTF-8 text, with very long lines (65532)
Hash 5302a46408ac363b717df6a6080d981f
43761df48733a61a8aad0f2256e4ffa01c0d88c8
d1e2ec6691f591ba03548e645eae8602ee805d5d3d0070a1632a3cbefc4a5709
GET /v0/amp-animation-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 18998
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "a7ca7ca780c0b602"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-lightbox-0.1.js
200 OK 8.5 kB URL HTTP/2 cdn.ampproject.org/v0/amp-lightbox-0.1.js
IP
File type ASCII text, with very long lines (26320)
Hash 66e9d5125eedf5a626cf989fac81dea7
902cae066626e85ff78e45113a970181a80e3a94
5b5eefc1dfb473ec19013a8c4155bfba63c1a045afb90c9117225718dc15d882
GET /v0/amp-lightbox-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 8467
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "9a554f914c0d1795"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-analytics-0.1.js
200 OK 32 kB URL HTTP/2 cdn.ampproject.org/v0/amp-analytics-0.1.js
IP
File type ASCII text, with very long lines (65534)
Hash 3c3c0b10ff8c4da1f62b3edcc57a28a9
f8c7a0ff5027f5f167bb46511ba8a244f0268c4b
f04c675f874371b02e59e7d05cb8a1d6badcf7288be90a13fbb1d4f5ea4e536b
GET /v0/amp-analytics-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 31967
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "dfda97fe2a1b5ffc"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-mustache-0.2.js
200 OK 14 kB URL HTTP/2 cdn.ampproject.org/v0/amp-mustache-0.2.js
IP
File type Unicode text, UTF-8 text, with very long lines (41887)
Hash 072e1e0ce30ed27c39cb4abc7b46729d
d00feed7e8f19e633e2769f94215a215c633ecb4
98d06b2f83c25622fc240e42b2bf2305980d71820e1945f77bcad04e5ee7beb5
GET /v0/amp-mustache-0.2.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 14319
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "4b35e2dbbcca67c0"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-form-0.1.js
200 OK 15 kB URL HTTP/2 cdn.ampproject.org/v0/amp-form-0.1.js
IP
File type Unicode text, UTF-8 text, with very long lines (50557)
Hash bf4c4fba5f9a2306a4c4d184c683d145
f3b5eff92ed45d70d6fced05ec7ada7659fab3ba
b5fba7c444e34f392c9de87463f3a2328b8375ecf3212ac7487d30cabb20c005
GET /v0/amp-form-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 14973
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "0c6fa01c90d735ce"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-sidebar-0.1.js
200 OK 9.7 kB URL HTTP/2 cdn.ampproject.org/v0/amp-sidebar-0.1.js
IP
File type ASCII text, with very long lines (31286)
Hash e6596c3b5fe63837c6e59b151a00a549
e7ca62e269709e6531f1e1b1b022d9370e117c8a
848836c5424a33425b09834e83d94cd12b4788f1b412c803e947467a1f17c4c3
GET /v0/amp-sidebar-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 9664
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "b2cba6000b3c8a65"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b0d53c2572a93a8db2df12363bee8216
674b8f55e58a53b2d91a092dc47bb6633071db0d
c261ee39febce4c1c60d1f8716b7471c97a602a5cd48f319fdea22052873b3b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +52Ooex2iMOOvJdzXwB0XA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MmnNnllpUaRRGnfIVtAha4ogSF4=
www.brandbucket.com/sites/default/files/logo_uploads/440366/large_primacosta.png
200 OK 6.1 kB URL HTTP/2 www.brandbucket.com/sites/default/files/logo_uploads/440366/large_primacosta.png
IP
File type PNG image data, 360 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 8147c1fe382dcd3ae0293051f09fb6dc
d1fb70e14e176515f0db34529831c6d36219c644
821aaf29aa7b6d025e55071567cf2a73702cab37fa61bc8b26cbb2a36a33f27b
GET /sites/default/files/logo_uploads/440366/large_primacosta.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 6143
last-modified: Mon, 27 Jun 2022 10:57:02 GMT
etag: "62b98cfe-17ff"
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d2027a949b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images7/menu_corner.png
200 OK 326 B URL HTTP/2 www.brandbucket.com/images7/menu_corner.png
IP
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 46030a6b4d338aa9be62f50203c4ff5b
c88766c7af725f4519b8d26b1001b549bef17a60
a2207a26b24c6f4d985ad4f6da0ee829f6b7c29880ee0f025bdd7f2406133e59
GET /images7/menu_corner.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 326
cf-bgj: imgq:100,h2pri
cf-polished: origSize=415
etag: "5fdf0f81-19f"
last-modified: Sun, 20 Dec 2020 08:46:57 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202c7fc1b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images6/icon_bc_search_bigblk.png
200 OK 2.3 kB URL HTTP/2 www.brandbucket.com/images6/icon_bc_search_bigblk.png
IP
File type PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced\012- data
Hash 5df8840f95ca2b57cb4c1a04a450bd18
7d97554537c3d55bcd2dc2525ebf8b6460b3aedf
30c2e6ee83ea286bef75e58172ea15e543b798ffa26154024f1a2a95d89971b9
GET /images6/icon_bc_search_bigblk.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 2332
cf-bgj: imgq:100,h2pri
cf-polished: origSize=2940
etag: "5a96c759-b7c"
last-modified: Wed, 28 Feb 2018 15:14:33 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202c8fc4b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images6/icon_bc_refine_blk.png
200 OK 1.1 kB URL HTTP/2 www.brandbucket.com/images6/icon_bc_refine_blk.png
IP
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced\012- data
Hash 21fed69f80de4815a845b554523f1f0b
1f8f3562f2581619b0b12be06996eb7d2efef926
eb56a89bd14ada5dc2498e27f8b074a3a889c47c07f06a73c04d212fb9f48016
GET /images6/icon_bc_refine_blk.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 1081
cf-bgj: imgq:100,h2pri
cf-polished: origSize=2074
etag: "5fe9acd4-81a"
last-modified: Mon, 28 Dec 2020 10:00:52 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202c8fc6b50b-OSL
X-Firefox-Spdy: h2
cdn.ampproject.org/v0/amp-bind-0.1.js
200 OK 5.9 kB URL HTTP/2 cdn.ampproject.org/v0/amp-bind-0.1.js
IP
Hash fb4bff13a9b6f0b181ca99f55e1851bf
2969bbee6ce6f471d131c52ea806070eeb2f75be
372a7875b90613c3706d7bac0792679818354119b0d656e5ef16875ba701a585
GET /v0/amp-bind-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 16261
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "9cf879b2a5f2c71c"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.brandbucket.com/images6/icon_cart_blk.png
200 OK 594 B URL HTTP/2 www.brandbucket.com/images6/icon_cart_blk.png
IP
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced\012- data
Hash 0f4bfd7ce7e3cd0031e75eafb5ae5ced
975cf52ea1a8c5a75b1bedbead36161629aba05f
2e924b33b08af08800be44199679ee7f7e46012070bcd2dbf5b916bb99e684dc
GET /images6/icon_cart_blk.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 594
cf-bgj: imgq:100,h2pri
cf-polished: origSize=693
etag: "5a12debd-2b5"
last-modified: Mon, 20 Nov 2017 13:55:09 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3058
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202c8fc9b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images6/icon_heart.png
200 OK 1.1 kB URL HTTP/2 www.brandbucket.com/images6/icon_heart.png
IP
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced\012- data
Hash 88e4464632078c7b6cbfbccffd95878a
68c907205dfcfaf600fb84c28c1363f029dc8e78
3051e31080b34dacf5378df68561065fb516b05594c5695b95905e32e8a551af
GET /images6/icon_heart.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 1095
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1405
etag: "5a12dec0-57d"
last-modified: Mon, 20 Nov 2017 13:55:12 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202c9fd9b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images7/icon_percent.png
200 OK 771 B URL HTTP/2 www.brandbucket.com/images7/icon_percent.png
IP
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 20b4980f9d03b45ec7ec243f3a898d97
b09250a824c84a5f90862ccb93d155128d30d753
25e04c953669e488a0f727d11b858f19a67c2165d8232586fff448e16290d446
GET /images7/icon_percent.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 771
cf-bgj: imgq:100,h2pri
cf-polished: origSize=875
etag: "6023e899-36b"
last-modified: Wed, 10 Feb 2021 14:07:21 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202cc805b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images7/icon_cart.png
200 OK 488 B URL HTTP/2 www.brandbucket.com/images7/icon_cart.png
IP
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash ecdbbc8258f81f5cc36944941eb381cd
6a7970f95e21da0a54211e49760bf2ac5738915a
e7501a24075314198d656bed11723ea4beceddd08864f53a31a6eecabc000946
GET /images7/icon_cart.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 488
cf-bgj: imgq:100,h2pri
cf-polished: origSize=851
etag: "5ebbcbcf-353"
last-modified: Wed, 13 May 2020 10:28:31 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202cc80ab50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images7/icon_chat.png
200 OK 374 B URL HTTP/2 www.brandbucket.com/images7/icon_chat.png
IP
File type PNG image data, 56 x 56, 8-bit gray+alpha, non-interlaced\012- data
Hash 8bd1e7f1a5f9e05fd61373b746e73baa
d8483c30258d4e33a96755dec31b65e892c5c3a8
867f0673ce919e3987de03d8ccb8d26f50721b64624e4ba2fdbd6772c1b5e9a8
GET /images7/icon_chat.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 374
cf-bgj: imgq:100,h2pri
cf-polished: origSize=691
etag: "5ebbcbd0-2b3"
last-modified: Wed, 13 May 2020 10:28:32 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202cc804b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images7/icon_heart.png
200 OK 1.1 kB URL HTTP/2 www.brandbucket.com/images7/icon_heart.png
IP
File type PNG image data, 64 x 56, 8-bit gray+alpha, non-interlaced\012- data
Hash 8c10244caab110d2455d3952b47304af
ea695914fb21e4227c6ed482e84d70c8d145009d
626e178145fb4293ef5ff59a67451883d3c35d6048fab45c1e2f365f8b3a134f
GET /images7/icon_heart.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 1069
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1597
etag: "5ebbcbd2-63d"
last-modified: Wed, 13 May 2020 10:28:34 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202cc810b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images2/nice_bk1_.jpg
200 OK 184 kB URL HTTP/2 www.brandbucket.com/images2/nice_bk1_.jpg
IP
File type JPEG image data, progressive, precision 8, 1600x1024, components 3\012- data
Size 184 kB (184078 bytes)
Hash a16d81686e7139d223f7abbe22f781e8
bc8d96b0698f2cb7fa9202e77d184eeb861ae9f7
3d4b4be3f8b7b79f2b5ba988c6e4ca6f993db5b87bb7a157f91c0d46276f9cff
GET /images2/nice_bk1_.jpg HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/jpeg
content-length: 184078
cf-bgj: imgq:100,h2pri
cf-polished: origSize=202326
etag: "5fdbcc77-31656"
last-modified: Thu, 17 Dec 2020 21:24:07 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202cd81ab50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images6/icon_paint.png
200 OK 2.0 kB URL HTTP/2 www.brandbucket.com/images6/icon_paint.png
IP
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced\012- data
Hash 738d11479c8f00bbf6becd4f1628484e
92a9972dc97422c334792e7ca593f1aa00d124bf
4f96956134964753a940fcafd693e72f9d153e7e0f02c4c9b29944ad40dfa3d4
GET /images6/icon_paint.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 1961
cf-bgj: imgq:100,h2pri
cf-polished: origSize=2539
etag: "5a12dec1-9eb"
last-modified: Mon, 20 Nov 2017 13:55:13 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202cd82ab50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images6/icon_info.png
200 OK 1.5 kB URL HTTP/2 www.brandbucket.com/images6/icon_info.png
IP
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced\012- data
Hash 1ccab99f59c5b67e39a46b1df9ff0e60
9bbef30e63d3a3682c90d3e26fa12fa2466db9cb
e4e75c45fadf08c54284e1ea641a494ff531b87757751653e66dcd99eb1a5212
GET /images6/icon_info.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 1462
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1853
etag: "5a12dec0-73d"
last-modified: Mon, 20 Nov 2017 13:55:12 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202cd82db50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images6/icon_gift.png
200 OK 2.0 kB URL HTTP/2 www.brandbucket.com/images6/icon_gift.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash aa034845cd6345549655fd9b8d156ba4
832f87b3f83f315dcd0a86943c63d41a283635a0
56ee437c47ad090ba5204c9583adbbbf933b3f11a9dd64e5aa856bb01ff30b6e
GET /images6/icon_gift.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 1956
cf-bgj: imgq:100,h2pri
cf-polished: origSize=3038
etag: "5a12debf-bde"
last-modified: Mon, 20 Nov 2017 13:55:11 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202cd81fb50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images6/icon_delivery.png
200 OK 2.0 kB URL HTTP/2 www.brandbucket.com/images6/icon_delivery.png
IP
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced\012- data
Hash a3ecd77d0fb534a6077b4d9640e225f6
622ab1f4b324e7e9a5afe55d75d7033a59fcd4d3
39ba61ecabf031e71e239e634d36bb31583fdd9b2d6c69f1e12a81498b860006
GET /images6/icon_delivery.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 1955
cf-bgj: imgq:100,h2pri
cf-polished: origSize=2491
etag: "5a12debe-9bb"
last-modified: Mon, 20 Nov 2017 13:55:10 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202ce838b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images2/nice_bk2.jpg
200 OK 153 kB URL HTTP/2 www.brandbucket.com/images2/nice_bk2.jpg
IP
File type JPEG image data, progressive, precision 8, 1600x1024, components 3\012- data
Size 153 kB (153149 bytes)
Hash 2b609e5c7b90f4aa31c19ad4dbb9888b
95d70cc4b3896f11079f94cf2851235551b17281
6730326e166c0ba1f3b8d128d62da81d7578c6beb946139e64d5833fa014de0e
GET /images2/nice_bk2.jpg HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/jpeg
content-length: 153149
cf-bgj: imgq:100,h2pri
cf-polished: origSize=158414
etag: "54d4c43d-26ace"
last-modified: Fri, 06 Feb 2015 13:40:13 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 1604
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202cd81eb50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/images6/icon_bills.png
200 OK 1.5 kB URL HTTP/2 www.brandbucket.com/images6/icon_bills.png
IP
File type PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced\012- data
Hash 63b9477a8d4f573114ef3a8385e421c1
af618a395be518ed856135aae176cafa600c3766
1791cdebe64eb084b289ade2587c236382055b8a45b9f610ddd0b0a0a5b56d46
GET /images6/icon_bills.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: image/png
content-length: 1464
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1809
etag: "5a12debb-711"
last-modified: Mon, 20 Nov 2017 13:55:07 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202ce834b50b-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1c88e822d54728556ba228be9af1e3f8
f34b6a02e1be963b5bfbb9b5dcf75a2072771312
15676ae928874247b119e80c3122b551365ab3aa27c441b404d97ec5885b59b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "15676AE928874247B119E80C3122B551365AB3AA27C441B404D97EC5885B59B3"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7021
Expires: Tue, 04 Oct 2022 12:07:06 GMT
Date: Tue, 04 Oct 2022 10:10:05 GMT
Connection: keep-alive
q.quora.com/_/ad/b81fc17866594cbbb3efebdd1241e062/pixel?tag=ViewContent
200 OK 43 B URL HTTP/1.1 q.quora.com/_/ad/b81fc17866594cbbb3efebdd1241e062/pixel?tag=ViewContent
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /_/ad/b81fc17866594cbbb3efebdd1241e062/pixel?tag=ViewContent HTTP/1.1
Host: q.quora.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Tue, 04 Oct 2022 10:10:05 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,86fdeabe1523950dbbfdde41c40098bd,10.0.0.129,37126,91.90.42.154,,66096451680,1,1664878205.266,0.002,,.,0,0,0.000,0.000,-,0,0,197,258,129,10,35796,,,,,,-,
Content-Length: 43
Connection: keep-alive
www.brandbucket.com/sites/default/files/logo_uploads/408738/large_medoka.png
200 OK 12 kB URL HTTP/2 www.brandbucket.com/sites/default/files/logo_uploads/408738/large_medoka.png
IP
File type PNG image data, 360 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash fbffdd92dbe7b3029e3893c0d42e5239
82a597f684a69f229149a785eb1a0e83f42ce178
5716f207b677325f83576ed74df4e342e59dc9341c16b4f52f7080998d147253
GET /sites/default/files/logo_uploads/408738/large_medoka.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:05 GMT
content-type: image/png
content-length: 12151
cf-bgj: imgq:100,h2pri
cf-polished: origSize=15476
etag: "61ef3f65-3c74"
last-modified: Tue, 25 Jan 2022 00:08:05 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202ce83ab50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/sites/default/files/logo_uploads/189933/large_sopreso.png
200 OK 12 kB URL HTTP/2 www.brandbucket.com/sites/default/files/logo_uploads/189933/large_sopreso.png
IP
File type PNG image data, 360 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash bddfe7434a5871a715a0b4f8e895fa78
980255cc760bbf59690d47bff774c80a238e39ba
e5a384ed984e4e423add8e04ecaa699830bf64ace787a1e6244579c21a64c5eb
GET /sites/default/files/logo_uploads/189933/large_sopreso.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:05 GMT
content-type: image/png
content-length: 11636
last-modified: Sat, 18 Aug 2018 06:25:02 GMT
etag: "5b77bbbe-2d74"
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202ce84db50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/sites/default/files/logo_uploads/418022/large_ovelli.png
200 OK 10 kB URL HTTP/2 www.brandbucket.com/sites/default/files/logo_uploads/418022/large_ovelli.png
IP
File type PNG image data, 360 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 55e0827106ea223b3ebadc46330e59b1
9b68d500539cf394c43304f098e6c8c566cc8a3c
192dcce2c882cde158854e17bcd0dcbf27d4791c4c0a3a9000f08453ab442d46
GET /sites/default/files/logo_uploads/418022/large_ovelli.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:05 GMT
content-type: image/png
content-length: 10155
last-modified: Wed, 09 Mar 2022 10:39:03 GMT
etag: "622883c7-27ab"
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202ce842b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/sites/default/files/logo_uploads/263544/large_elastatic.png
200 OK 5.5 kB URL HTTP/2 www.brandbucket.com/sites/default/files/logo_uploads/263544/large_elastatic.png
IP
File type PNG image data, 360 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash c17cf92cd6d9a2990b0190bc4c9bf829
d466a8796562e5605a88513926fe6e531aa411e2
91813b5a25adfceee8416bbc1aba7fe78b2b6b130e61bd447ccf1850b6657250
GET /sites/default/files/logo_uploads/263544/large_elastatic.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:05 GMT
content-type: image/png
content-length: 5456
last-modified: Wed, 16 Oct 2019 06:52:55 GMT
etag: "5da6be47-1550"
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202cf85bb50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/sites/default/files/logo_uploads/284053/large_claravera.png
200 OK 3.4 kB URL HTTP/2 www.brandbucket.com/sites/default/files/logo_uploads/284053/large_claravera.png
IP
File type PNG image data, 360 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 1b3c02ea866c61622f09963c8ae44c76
e5e0c7829a5a08347f53951cf60b6f4d6e63185e
85c0a79ad655c6759e547810a6e691c5b8a8069dada2c27b07835ae6491e6742
GET /sites/default/files/logo_uploads/284053/large_claravera.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:05 GMT
content-type: image/png
content-length: 3446
last-modified: Sat, 21 Mar 2020 08:11:06 GMT
etag: "5e75cc1a-d76"
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202cf85db50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/sites/default/files/logo_uploads/360787/large_hypeism_0.png
200 OK 5.3 kB URL HTTP/2 www.brandbucket.com/sites/default/files/logo_uploads/360787/large_hypeism_0.png
IP
File type PNG image data, 360 x 200, 8-bit/color RGBA, interlaced\012- data
Hash 10ac8743f200feead3c7422af3ada97e
35bd8bd8e480dbf38271a2c7457f4debfc3d8516
6310ca3ba4e951ff7a99aab001acd2de7c68b839f2ba6e6c5a58073047fae268
GET /sites/default/files/logo_uploads/360787/large_hypeism_0.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:05 GMT
content-type: image/png
content-length: 5260
last-modified: Mon, 14 Jun 2021 01:40:02 GMT
etag: "60c6b372-148c"
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202ce858b50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/sites/default/files/logo_uploads/318551/large_quantixe.png
200 OK 17 kB URL HTTP/2 www.brandbucket.com/sites/default/files/logo_uploads/318551/large_quantixe.png
IP
File type PNG image data, 360 x 200, 8-bit/color RGBA, interlaced\012- data
Hash 2999d3169c1b0a39765f26b3ae418272
b0f5960d504f89bce6b3fd3683b8358e5f62f05a
2f9266adf136f1a6de09726af558190f84c189db29e19b561fc2b5d4ffe70971
GET /sites/default/files/logo_uploads/318551/large_quantixe.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:05 GMT
content-type: image/png
content-length: 17105
last-modified: Mon, 30 Nov 2020 23:09:03 GMT
etag: "5fc57b8f-42d1"
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202ce83cb50b-OSL
X-Firefox-Spdy: h2
www.brandbucket.com/sites/default/files/logo_uploads/263331/large_neurodoor.png
200 OK 25 kB URL HTTP/2 www.brandbucket.com/sites/default/files/logo_uploads/263331/large_neurodoor.png
IP
File type PNG image data, 359 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 8910867e8d873e63642c58d024556090
bdf9951a1e640caad6646d74441a4227e2b7abf8
2ca69e21a35896e2082b233521d34645a080ee9ebfe4259f8712df085032ce75
GET /sites/default/files/logo_uploads/263331/large_neurodoor.png HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:05 GMT
content-type: image/png
content-length: 25015
last-modified: Mon, 14 Oct 2019 15:25:02 GMT
etag: "5da4934e-61b7"
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d202ce854b50b-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5ba23234dfb31276cc3bf9a347508595
a225d0a9ecf5d7f0032816c6f3d4a5ae1f3b27a3
33558bed4856ac3f2a7267965521b316ccd3ccc669877994c6c590e2d2a1b559
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/amp.json?id=GTM-NMCQSSJ>m.url=https%3A%2F%2Fwww.brandbucket.com%2Fnames%2Fprimacosta%3Fsource%3Dext&__amp_source_origin=https%3A%2F%2Fwww.brandbucket.com
200 OK 1.2 kB URL HTTP/2 www.googletagmanager.com/amp.json?id=GTM-NMCQSSJ>m.url=https%3A%2F%2Fwww.brandbucket.com%2Fnames%2Fprimacosta%3Fsource%3Dext&__amp_source_origin=https%3A%2F%2Fwww.brandbucket.com
IP
File type JSON data\012- , ASCII text, with very long lines (10081)
Hash 61d56ab302b78f61b171d679fccb0de0
22f07788d4fd05cfba242cc693582dc35fedf178
c3a0f4c431ad42aeb023b74f47dd4f74d9dfa8dc385d609868996d5225a47fbc
GET /amp.json?id=GTM-NMCQSSJ>m.url=https%3A%2F%2Fwww.brandbucket.com%2Fnames%2Fprimacosta%3Fsource%3Dext&__amp_source_origin=https%3A%2F%2Fwww.brandbucket.com HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Origin: https://www.brandbucket.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.brandbucket.com
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
amp-access-control-allow-source-origin: https://www.brandbucket.com
access-control-allow-credentials: true
content-type: application/json; charset=UTF-8
content-disposition: attachment; filename="GTM-NMCQSSJ.json"
content-encoding: br
vary: *
date: Tue, 04 Oct 2022 10:10:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 1156
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/amp?__amp_source_origin=https%3A%2F%2Fwww.brandbucket.com
200 OK 262 B URL HTTP/2 www.googletagmanager.com/gtag/amp?__amp_source_origin=https%3A%2F%2Fwww.brandbucket.com
IP
File type JSON data\012- , ASCII text, with very long lines (497), with no line terminators
Hash e2d9a6191d8c718a71ced1d8865928aa
f6e0df35194027da97abe0a08f39411eaea2b679
0c907755f6f201383f6842b97e55c409c8b62676bc62321c291b6c4bc9677886
POST /gtag/amp?__amp_source_origin=https%3A%2F%2Fwww.brandbucket.com HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Content-Type: text/plain;charset=utf-8
Origin: https://www.brandbucket.com
Content-Length: 379
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.brandbucket.com
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
amp-access-control-allow-source-origin: https://www.brandbucket.com
access-control-allow-credentials: true
content-type: application/json; charset=UTF-8
content-disposition: attachment; filename="amp.json"
content-encoding: br
vary: *
date: Tue, 04 Oct 2022 10:10:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 262
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13160
Expires: Tue, 04 Oct 2022 13:49:26 GMT
Date: Tue, 04 Oct 2022 10:10:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13160
Expires: Tue, 04 Oct 2022 13:49:26 GMT
Date: Tue, 04 Oct 2022 10:10:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13160
Expires: Tue, 04 Oct 2022 13:49:26 GMT
Date: Tue, 04 Oct 2022 10:10:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13160
Expires: Tue, 04 Oct 2022 13:49:26 GMT
Date: Tue, 04 Oct 2022 10:10:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13160
Expires: Tue, 04 Oct 2022 13:49:26 GMT
Date: Tue, 04 Oct 2022 10:10:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg
200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 488ec5b4267ccb1cdc4e6e08556f7f3b
42dd7ec0c606dbd3ccc0074f61d3b4b12f2e3c88
d9b05fe92962a58b9a8e8dbd4757969aa361be12018107ae649ffcdb8a0f8d84
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3178d2f-9a52-4d0e-a26b-5a90ef8578f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3430
x-amzn-requestid: 22a0e400-1567-4c9c-aca9-782f3f81a8ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZKLCrEn4IAMFZWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333f210-11fa888c78719c44160accf8;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 07:04:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 69u2trVvquFefzPFeOg_AuyzqQ6EBpY_ok9d9RXv71NE3TB_qELdtg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 16:24:09 GMT
age: 63957
etag: "42dd7ec0c606dbd3ccc0074f61d3b4b12f2e3c88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bec66cf-b911-4eb8-95d6-27e5f2afb6c7.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bec66cf-b911-4eb8-95d6-27e5f2afb6c7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash de29d0d95d22e4e246a90feed644baf0
4ac6c5691df804078d5da54233cf4d8e7012f9ca
8e34ad07e098df14f7001d1ee538479de11afa4c255006cb6e8e2207c0e50a47
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bec66cf-b911-4eb8-95d6-27e5f2afb6c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8308
x-amzn-requestid: 3348b2e8-915a-492b-8241-89c13a21232c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqFlFyyoAMFz_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b56f0-2baf7ac2213c31fc384e8317;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Y1H21zphqs9mIGVYHojfc-nvW35BS3nq4hunM_JmyT9mC100bXlgWw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:55:46 GMT
age: 44060
etag: "4ac6c5691df804078d5da54233cf4d8e7012f9ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae824db4a95391149198a4b6b8556c70
db07d58d8feff4ea01866d095e5264ee5c8e1ca3
19e96d204813247697e1858daf9e07d6c4cafd9ab1175a3bf39a7f07f6991521
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11101
x-amzn-requestid: f98e84d9-1e66-4436-b793-219a777f2ba0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqcvE8JoAMFQ2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5784-25bd2b234c1093de70074c92;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: becOxfqUowywFrxzDSeK7F1lFdDVTSHIF1TLC5k5aSlLPpsR6F8gjw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:08:47 GMT
age: 43279
etag: "db07d58d8feff4ea01866d095e5264ee5c8e1ca3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6779181f9c06975f2a662da743893939
585e7146fd24cdc2496b05baafea04091dc541e2
8e9a9f92fd89b7cdce77884ccd76b83ab82d28f125ebfc1cb0d371d4046b7985
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4858
x-amzn-requestid: fb21c414-2994-444a-a838-e643fd05b171
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTEfPoAMFfeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-593dd8043b0490e7301cac0d;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MiSh_FjAciKCaOakY2mM_EHBN1Z6GIDYIP8mwS4ikkrToQN3Ktsv2g==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:56:46 GMT
age: 44000
etag: "585e7146fd24cdc2496b05baafea04091dc541e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6c6882c60d7ca6f918c77104e3ad1d52
20ef861be49c652a938e0145e4ca3a60159367e2
861f5870990fbd2939d151ae18384cf311e87067ca9a50818efe0c2d51b83088
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5504
x-amzn-requestid: 37405eb0-5c75-46a9-84c0-e8ed726995d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHvHPvoAMF3mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-77fd550b58af612525e74761;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ovm2wuk28PygH4EZNEUoPchoHQggWCyXbYHOjMV1tZmfyDrL6PjPZA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:29:19 GMT
age: 42047
etag: "20ef861be49c652a938e0145e4ca3a60159367e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5ba23234dfb31276cc3bf9a347508595
a225d0a9ecf5d7f0032816c6f3d4a5ae1f3b27a3
33558bed4856ac3f2a7267965521b316ccd3ccc669877994c6c590e2d2a1b559
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c459c91-b5cc-492c-9573-3101e5df6b51.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c459c91-b5cc-492c-9573-3101e5df6b51.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 34f2dfb2faff276db1d4a57739db2450
f5ce815082043a4efce28fc790ae7d8b3a8531f8
e02ea92f0be524ccfe26eee61a77e39a13d852d1ba3696f729e0f61812028667
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c459c91-b5cc-492c-9573-3101e5df6b51.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5083
x-amzn-requestid: ed99df03-5d15-4e09-9aea-bbf77a705323
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpI0HT0IAMFxvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b556b-422197147d76caac6e910664;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:35 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pddStyEpwVdYKSAUVcpupnWVPw6ALoYCouHQzixF_vTgXdpVF60ElA==
via: 1.1 946b9edb2009c5508a0fbbd636f95014.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:10:59 GMT
age: 43147
etag: "f5ce815082043a4efce28fc790ae7d8b3a8531f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2613343416073&event=PageView&noscript=1&ed[product_id]=438673
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2613343416073&event=PageView&noscript=1&ed[product_id]=438673
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2613343416073&event=PageView&noscript=1&ed[product_id]=438673 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
access-control-allow-origin: *
set-cookie: _pinterest_ct_ua="TWc9PSZzVTJjWjRDUlZQdmJRM3dUdkh5YXZRaWdITTE3a3FQT2Z5VjJ2Z2lPa3oycjhnZnZsVmsyYk10cDJobmF0eDRtMXdHdXZncXNTWGNSbzhRb3k3MjA3cmJTOGVlRTlSblZUaXoyczhadG40Yz0mRDJoQTJ5WDNpODRWd3A5Z1F2RnBMM1VXU1J3PQ=="; Expires=Wed, 04 Oct 2023 10:10:06 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 7552425719754442
date: Tue, 04 Oct 2022 10:10:06 GMT
x-cdn: fastly
content-length: 35
X-Firefox-Spdy: h2
www.brandbucket.com/amp/ga?promo&p=438673&ext&dp=408285.318315.417360.189814.259917.357022.263528.283899.311234.89118.228443.273900.281877.448792.224307.259352.345010.353829.348045.254334&__amp_source_origin=https%3A%2F%2Fwww.brandbucket.com
200 OK 1.9 kB URL HTTP/2 www.brandbucket.com/amp/ga?promo&p=438673&ext&dp=408285.318315.417360.189814.259917.357022.263528.283899.311234.89118.228443.273900.281877.448792.224307.259352.345010.353829.348045.254334&__amp_source_origin=https%3A%2F%2Fwww.brandbucket.com
IP
File type JSON data\012- , ASCII text, with very long lines (14763), with no line terminators
Hash 6c527664698dafd4d07c1f3826c9089d
1593b5a5539d51bbc27b158cf95081d700c3fad1
3022c32d24593d222d9582ff41adbd361d5a04d3c5f3c5eaa91bbd3e8008b526
GET /amp/ga?promo&p=438673&ext&dp=408285.318315.417360.189814.259917.357022.263528.283899.311234.89118.228443.273900.281877.448792.224307.259352.345010.353829.348045.254334&__amp_source_origin=https%3A%2F%2Fwww.brandbucket.com HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/names/primacosta?source=ext
AMP-Same-Origin: true
Connection: keep-alive
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:06 GMT
content-type: application/json
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-credentials: true
amp_run_time: 0.016379s
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 754d203318c0b50b-OSL
X-Firefox-Spdy: h2
c.statcounter.com/12769037/0/56f9249f/1/
200 OK 49 B URL HTTP/2 c.statcounter.com/12769037/0/56f9249f/1/
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 56398e76be6355ad5999b262208a17c9
a1fdee122b95748d81cee426d717c05b5174fe96
2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef
GET /12769037/0/56f9249f/1/ HTTP/1.1
Host: c.statcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:06 GMT
content-type: image/gif
content-length: 49
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc12769037.1664878206.0; SameSite=None; Secure; Expires=Sunday, 03-Oct-2027 06:10:06 EDT; Path=/; Domain=.statcounter.com
is_visitor_unique=1664878206205703007; SameSite=None; Secure; Expires=Thursday, 03-Oct-2024 06:10:06 EDT; Path=/; Domain=.statcounter.com
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 754d2034c9a4b505-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash baab1215d3a99d85f7cb8009c876d670
cae827aa42b3869bac1590c08349ea4a3da5d7e2
cf5795681387ec925ea0a1c13ec71bd237691da06c4db239070b342a7f66fadd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 10:10:06 GMT
Last-Modified: Tue, 04 Oct 2022 09:18:13 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2kXaFdnwgI34q97GrN8SvKUmFAdMpOqLqbvxKX0cbBWkfgyjYX7YCw==
Age: 3113
d.adroll.com/ipixel/CX5WGUX2VJFQDM33UIXE3I/GJHNLHQNWFAQ7GKA4IB65N?name=c49e73cf
200 OK 42 B URL HTTP/2 d.adroll.com/ipixel/CX5WGUX2VJFQDM33UIXE3I/GJHNLHQNWFAQ7GKA4IB65N?name=c49e73cf
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ipixel/CX5WGUX2VJFQDM33UIXE3I/GJHNLHQNWFAQ7GKA4IB65N?name=c49e73cf HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:06 GMT
content-type: image/gif
content-length: 42
server: nginx/1.20.0
cache-control: no-transform,public,max-age=300,s-maxage=900
vary: Cookie
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 24f60d02c4184445b1dce904236c7dd7
93e5b2819da11e7750feb45f0910a5bdb97aa343
e89141bc83224d46d3296788342f66dabdf06f59098798d5e3a6edf9be4fb17f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4864
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:06 GMT
Last-Modified: Tue, 04 Oct 2022 08:49:02 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fpid%3D271730%26fmt%3Dgif%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fpid%3D271730%26fmt%3Dgif%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fpid%3D271730%26fmt%3Dgif%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?pid=271730&fmt=gif&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&af2408c9-4e30-4233-82a1-277b3fcb19ab"; Domain=.linkedin.com; Expires=Wed, 04-Oct-2023 10:10:06 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&202210041010061e4a46cf-f753-4504-8808-02beea87004bAQHqtEyYLO4LP2lAm-CRimHYOe1TmgKf"; Domain=.www.linkedin.com; Expires=Wed, 04-Oct-2023 10:10:06 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjQ4NzgyMDY7MjswMjHsL3huwsxn0NeJ+72ieAuGhpBlwPxIL+fHdGDVQU7O7Q==; Domain=.linkedin.com; Expires=Sun, 02 Apr 2023 10:10:06 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2401:u=1:x=1:i=1664878206:t=1664964606:v=2:sig=AQEzNK4SQ5dp3I--J2ML0j-8wtYrQNaG"; Expires=Wed, 05 Oct 2022 10:10:06 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXqMqoWRJV97Wx7t8ockQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 995C18B0B11147B7B9A27A180139B81E Ref B: OSL30EDGE0113 Ref C: 2022-10-04T10:10:06Z
date: Tue, 04 Oct 2022 10:10:05 GMT
content-length: 0
X-Firefox-Spdy: h2
www.bizographics.com/collect/?fmt=gif&pid=271730
301 Moved Permanently 0 B URL HTTP/1.1 www.bizographics.com/collect/?fmt=gif&pid=271730
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect/?fmt=gif&pid=271730 HTTP/1.1
Host: www.bizographics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: Play
Location: https://px.ads.linkedin.com/collect?fmt=gif&pid=271730
content-length: 0
Date: Tue, 04 Oct 2022 10:10:06 GMT
Connection: keep-alive
X-Li-Fabric: prod-ltx1
Report-To: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
NEL: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
X-Li-Pop: prod-ltx1-x
X-LI-Proto: http/1.1
X-LI-UUID: AAXqMqoX4Td+qnYmZkTaxg==
Set-Cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=bizographics.com; Secure
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2397:u=1:x=1:i=1664878206:t=1664964606:v=2:sig=AQF359je6ok7YfNIyPYr4EJMo4YCaKCF"; Expires=Wed, 05 Oct 2022 10:10:06 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
px.ads.linkedin.com/collect?pid=271730&fmt=gif&liSync=true
200 OK 65 B URL HTTP/2 px.ads.linkedin.com/collect?pid=271730&fmt=gif&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 8b0d5b18476ae12e2476f3621d54c4a5
2ad669e9d207fbb37e84dda25766dbaeb66d792c
2d7244b6960d26ae56f048f162f02949ca7858be19d9349ec82906e56dfa3cfe
GET /collect?pid=271730&fmt=gif&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 65
content-type: image/gif
content-encoding: gzip
vary: Accept-Encoding
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&87409c25-9381-43ed-82e7-f0c27a0e182e"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 04-Oct-2023 10:10:06 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2401:u=1:x=1:i=1664878206:t=1664964606:v=2:sig=AQEzNK4SQ5dp3I--J2ML0j-8wtYrQNaG"; Expires=Wed, 05 Oct 2022 10:10:06 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXqMqoYapGMGdvdvChJpQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 95075F66E6CE44C2ABB85D5364FF1742 Ref B: OSL30EDGE0113 Ref C: 2022-10-04T10:10:06Z
date: Tue, 04 Oct 2022 10:10:06 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e89969841b429e3ca44b320d17ea98a
30486a886b793ad5431b73d983d091487e5709c6
2d08365a447343168153cf1178b3b847377c2923bce06d9f6485ad08d3a06d34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2293
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:06 GMT
Last-Modified: Tue, 04 Oct 2022 09:31:54 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
amp.brandbucket.com/amp/tracking/names/primacosta?source=ext&ext=438673&source=ext
302 Found 471 B URL HTTP/2 amp.brandbucket.com/amp/tracking/names/primacosta?source=ext&ext=438673&source=ext
IP
Hash 5e89969841b429e3ca44b320d17ea98a
30486a886b793ad5431b73d983d091487e5709c6
2d08365a447343168153cf1178b3b847377c2923bce06d9f6485ad08d3a06d34
GET /amp/tracking/names/primacosta?source=ext&ext=438673&source=ext HTTP/1.1
Host: amp.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 302 Found
date: Tue, 04 Oct 2022 10:10:06 GMT
content-type: text/html
location: https://www.brandbucket.com/amp/tracking/names/primacosta?source=ext&ext=438673&source=ext
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 754d2032d87db50b-OSL
X-Firefox-Spdy: h2
www.facebook.com/tr?noscript=1&ev=PageView&id=1690817644503013
200 OK 0 B URL HTTP/2 www.facebook.com/tr?noscript=1&ev=PageView&id=1690817644503013
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /tr?noscript=1&ev=PageView&id=1690817644503013 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.brandbucket.com
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin: https://www.brandbucket.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Tue, 04 Oct 2022 10:10:06 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr?noscript=1&ev=ViewContent&id=1690817644503013&cd[value]=6995&cd[currency]=USD&cd[content_name]=primacosta.com&cd[content_type]=product&cd[content_ids]=438673
200 OK 0 B URL HTTP/2 www.facebook.com/tr?noscript=1&ev=ViewContent&id=1690817644503013&cd[value]=6995&cd[currency]=USD&cd[content_name]=primacosta.com&cd[content_type]=product&cd[content_ids]=438673
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /tr?noscript=1&ev=ViewContent&id=1690817644503013&cd[value]=6995&cd[currency]=USD&cd[content_name]=primacosta.com&cd[content_type]=product&cd[content_ids]=438673 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.brandbucket.com
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin: https://www.brandbucket.com
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Tue, 04 Oct 2022 10:10:06 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5e89969841b429e3ca44b320d17ea98a
30486a886b793ad5431b73d983d091487e5709c6
2d08365a447343168153cf1178b3b847377c2923bce06d9f6485ad08d3a06d34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2293
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:06 GMT
Last-Modified: Tue, 04 Oct 2022 09:31:54 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
px.ads.linkedin.com/collect?fmt=gif&pid=271730
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?fmt=gif&pid=271730
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?fmt=gif&pid=271730 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Ffmt%3Dgif%26pid%3D271730%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQK2Q5bChw4GBQAAAYOieV7ePS4HGUoRFBu1SLlGD4xNpLlyFDYSNeisbsLnzZd3S30HkAisTAslHw; Max-Age=2592000; Expires=Thu, 03 Nov 2022 10:10:06 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQIuE2jJi_C5NAAAAYOieV7foIltdHUD7ei-ayMiYth9jeex1j9kmzdNu5IqDKthHszjzI3ycblxoaEmKqRFAg; Max-Age=2592000; Expires=Thu, 03 Nov 2022 10:10:06 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&0eced381-3e8b-4450-8cd8-34aa2c704ecd"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 04-Oct-2023 10:10:06 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2354:u=1:x=1:i=1664878206:t=1664964606:v=2:sig=AQFidgBgqJ4jl1THYddwrdpHP-uWmpEe"; Expires=Wed, 05 Oct 2022 10:10:06 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXqMqoadaCkQ2gZ90N+EA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: C048392DAFC54C209D7468ED186489A0 Ref B: OSL30EDGE0113 Ref C: 2022-10-04T10:10:06Z
date: Tue, 04 Oct 2022 10:10:06 GMT
content-length: 0
X-Firefox-Spdy: h2
www.google-analytics.com/r/collect?v=1&_v=a1&ds=AMP&aip&_s=1&dt=Primacosta.com%20is%20For%20Sale%20%7C%20BrandBucket&sr=1280x1024&_utmht=1664878205754&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&tid=UA-1625379-2&dl=https%3A%2F%2Fwww.brandbucket.com%2Fnames%2Fprimacosta%3Fsource%3Dext&dr=&sd=24&ul=en-us&de=UTF-8&t=pageview&jid=0.6694562813155205&_r=1&a=5326&z=0.7786074549788399>m=2oubu0
302 Found 388 B URL HTTP/2 www.google-analytics.com/r/collect?v=1&_v=a1&ds=AMP&aip&_s=1&dt=Primacosta.com%20is%20For%20Sale%20%7C%20BrandBucket&sr=1280x1024&_utmht=1664878205754&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&tid=UA-1625379-2&dl=https%3A%2F%2Fwww.brandbucket.com%2Fnames%2Fprimacosta%3Fsource%3Dext&dr=&sd=24&ul=en-us&de=UTF-8&t=pageview&jid=0.6694562813155205&_r=1&a=5326&z=0.7786074549788399>m=2oubu0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 67b860993a1657708b81c90cb2b7858f
83ba4ccbd9bea3c842772265a788ea6cb77b5b0d
225c6969d0c08cc3d6586d1ba191641a19529952785e10a7c8498a06a616c4d7
POST /r/collect?v=1&_v=a1&ds=AMP&aip&_s=1&dt=Primacosta.com%20is%20For%20Sale%20%7C%20BrandBucket&sr=1280x1024&_utmht=1664878205754&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&tid=UA-1625379-2&dl=https%3A%2F%2Fwww.brandbucket.com%2Fnames%2Fprimacosta%3Fsource%3Dext&dr=&sd=24&ul=en-us&de=UTF-8&t=pageview&jid=0.6694562813155205&_r=1&a=5326&z=0.7786074549788399>m=2oubu0 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.brandbucket.com
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-1625379-2&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&jid=0.6694562813155205&_v=a1&z=0.7786074549788399
access-control-allow-origin: https://www.brandbucket.com
date: Tue, 04 Oct 2022 10:10:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: Golfe2
content-length: 388
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=a1&ds=AMP&aip&_s=2&dt=Primacosta.com%20is%20For%20Sale%20%7C%20BrandBucket&sr=1280x1024&_utmht=1664878205765&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&tid=UA-1625379-2&dl=https%3A%2F%2Fwww.brandbucket.com%2Fnames%2Fprimacosta%3Fsource%3Dext&dr=&sd=24&ul=en-us&de=UTF-8&t=event&jid=&ec=&ea=&el=&ev=0&a=5326&z=0.4135437059033543>m=2oubu0&ec=engagement&ea=view_item&ni=1&pr1id=438673&pr1nm=primacosta.com&pr1pr=6995&pr1va=Com&pr1br=Invented&pr1qt=1&pr1ps=1
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=a1&ds=AMP&aip&_s=2&dt=Primacosta.com%20is%20For%20Sale%20%7C%20BrandBucket&sr=1280x1024&_utmht=1664878205765&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&tid=UA-1625379-2&dl=https%3A%2F%2Fwww.brandbucket.com%2Fnames%2Fprimacosta%3Fsource%3Dext&dr=&sd=24&ul=en-us&de=UTF-8&t=event&jid=&ec=&ea=&el=&ev=0&a=5326&z=0.4135437059033543>m=2oubu0&ec=engagement&ea=view_item&ni=1&pr1id=438673&pr1nm=primacosta.com&pr1pr=6995&pr1va=Com&pr1br=Invented&pr1qt=1&pr1ps=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
POST /collect?v=1&_v=a1&ds=AMP&aip&_s=2&dt=Primacosta.com%20is%20For%20Sale%20%7C%20BrandBucket&sr=1280x1024&_utmht=1664878205765&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&tid=UA-1625379-2&dl=https%3A%2F%2Fwww.brandbucket.com%2Fnames%2Fprimacosta%3Fsource%3Dext&dr=&sd=24&ul=en-us&de=UTF-8&t=event&jid=&ec=&ea=&el=&ev=0&a=5326&z=0.4135437059033543>m=2oubu0&ec=engagement&ea=view_item&ni=1&pr1id=438673&pr1nm=primacosta.com&pr1pr=6995&pr1va=Com&pr1br=Invented&pr1qt=1&pr1ps=1 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.brandbucket.com
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.brandbucket.com
date: Tue, 04 Oct 2022 10:10:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
x-content-type-options: nosniff
access-control-allow-credentials: true
content-type: image/gif
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Ffmt%3Dgif%26pid%3D271730%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Ffmt%3Dgif%26pid%3D271730%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Ffmt%3Dgif%26pid%3D271730%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?fmt=gif&pid=271730&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&fa9bd2de-3669-432c-8d75-f9745a299135"; Domain=.linkedin.com; Expires=Wed, 04-Oct-2023 10:10:06 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20221004101006b3e4048c-0744-4cf2-87ad-4423e113ca48AQFvg59k510Zy4Vvtr646FFOLg-H1yQX"; Domain=.www.linkedin.com; Expires=Wed, 04-Oct-2023 10:10:06 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjQ4NzgyMDY7MjswMjEyctakC68GNA4Ndp2yE+iO2Hh+zRE5ty7Dv5qB+zqc0w==; Domain=.linkedin.com; Expires=Sun, 02 Apr 2023 10:10:06 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2401:u=1:x=1:i=1664878206:t=1664964606:v=2:sig=AQEzNK4SQ5dp3I--J2ML0j-8wtYrQNaG"; Expires=Wed, 05 Oct 2022 10:10:06 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXqMqoc1VL/2gwjUTkR7g==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 4CE62DFC2C6C4549BC92DECE6BC59F83 Ref B: OSL30EDGE0113 Ref C: 2022-10-04T10:10:06Z
date: Tue, 04 Oct 2022 10:10:06 GMT
content-length: 0
X-Firefox-Spdy: h2
www.redditstatic.com/ads/pixel.js
200 OK 7.7 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP
File type ASCII text, with very long lines (25224)
Hash 95212d33cfff78ad59f5af5b20c48c53
9b99a4091a6eb716bc68f1428e3c86eca068b25b
bd69f250efa08cb2c0a06c35d91fda762779820d87779019c25211f4559ebb1d
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 19 Jul 2022 22:48:09 GMT
etag: "95212d33cfff78ad59f5af5b20c48c53"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Oct 2022 10:10:06 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53e0e5a2455fedae0d6308f91d41e445
237c2856f8a89ae3673ea909164557d65268c463
ddba9b3842f879168185b6607551069b312c44de4ec015ca4b43ad154d190bc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-1625379-2&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&jid=0.6694562813155205&_v=a1&z=0.7786074549788399
302 Found 386 B URL HTTP/2 stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-1625379-2&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&jid=0.6694562813155205&_v=a1&z=0.7786074549788399
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash df01bf4b1949b617ceaa72c39cb1acac
81a9b57c32bc8aa185638c7eaa2c531855bd9895
67d773f4057b390bba44122fe7dc7c4b15fb91cf38a72875b5835926d708a46b
GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-1625379-2&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&jid=0.6694562813155205&_v=a1&z=0.7786074549788399 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-1625379-2&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&jid=0.6694562813155205&_v=a1&z=0.7786074549788399
access-control-allow-origin: *
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 04 Oct 2022 10:10:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: Golfe2
content-length: 386
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53e0e5a2455fedae0d6308f91d41e445
237c2856f8a89ae3673ea909164557d65268c463
ddba9b3842f879168185b6607551069b312c44de4ec015ca4b43ad154d190bc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.hs-scripts.com/20882931.js
200 OK 970 B URL HTTP/2 js.hs-scripts.com/20882931.js
IP
File type ASCII text, with very long lines (495)
Hash c462e42ee56008bb5d6267914285a991
842ea6cf78297ff75af6d43b53a4c1f150954f54
ccb26e06b3a25d04a7a87898a63b5f9f716c6ead2b0f752a7e3a9fa635d61e55
GET /20882931.js HTTP/1.1
Host: js.hs-scripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:07 GMT
content-type: application/javascript;charset=utf-8
x-trace: 2BA11934BCB0A2EA5A2B65743B3053BBC5E75D74AC000000000000000000
cache-control: public, max-age=60
vary: origin, Accept-Encoding
x-hubspot-correlation-id: f9ef93a1-b255-44dd-881f-00aff80c8299
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-origin: https://www.brandbucket.com
last-modified: Tue, 04 Oct 2022 10:08:24 GMT
cf-cache-status: EXPIRED
expires: Tue, 04 Oct 2022 10:11:07 GMT
server: cloudflare
cf-ray: 754d203938980b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?fmt=gif&pid=271730&liSync=true
200 OK 65 B URL HTTP/2 px.ads.linkedin.com/collect?fmt=gif&pid=271730&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 8b0d5b18476ae12e2476f3621d54c4a5
2ad669e9d207fbb37e84dda25766dbaeb66d792c
2d7244b6960d26ae56f048f162f02949ca7858be19d9349ec82906e56dfa3cfe
GET /collect?fmt=gif&pid=271730&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 65
content-type: image/gif
content-encoding: gzip
vary: Accept-Encoding
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&160c6dad-d650-48b8-8609-cdf3f9570f8c"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 04-Oct-2023 10:10:07 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2354:u=1:x=1:i=1664878207:t=1664964607:v=2:sig=AQFpzRBKhglLih-PLEc7PgugIv_kAA5B"; Expires=Wed, 05 Oct 2022 10:10:07 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXqMqofkCKB1ZhSpMRF/A==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F0098CCB82074EC99DE36691E5729729 Ref B: OSL30EDGE0113 Ref C: 2022-10-04T10:10:06Z
date: Tue, 04 Oct 2022 10:10:06 GMT
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-1625379-2&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&jid=0.6694562813155205&_v=a1&z=0.7786074549788399
302 Found 0 B URL HTTP/2 www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-1625379-2&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&jid=0.6694562813155205&_v=a1&z=0.7786074549788399
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-1625379-2&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&jid=0.6694562813155205&_v=a1&z=0.7786074549788399 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 10:10:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-1625379-2&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&jid=0.6694562813155205&_v=a1&z=0.7786074549788399&slf_rd=1&random=1105033549
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=259AD92C412D66691EB4CB1F407A6761; domain=.bing.com; expires=Sun, 29-Oct-2023 10:10:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0D38651A558F4C7B8B637789ED9138C1 Ref B: OSL30EDGE0319 Ref C: 2022-10-04T10:10:07Z
date: Tue, 04 Oct 2022 10:10:06 GMT
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57443), with no line terminators
Hash 1e9c4d503a9e162d8b549dc3d9c040e2
1fa99d7d7e878cdd45567af4b0c3c65542036c1d
f936c0124c595fe5d0c7858277f3a5f3bd104de39d36ac92557501fa1dec8563
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 20:19:10 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "d4de8398858246712016031c834bb061+gzip+gzip"
accept-ranges: bytes
date: Tue, 04 Oct 2022 10:10:07 GMT
x-served-by: cache-iad-kcgs7200165-IAD, cache-bma1643-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15317
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 904a0d87402d9eecfec00481cdb28d62
6b37e41d4321718433996e4c1f4eed2f8f1727fc
e0884556a581a67e0e212887e97ca7f4438ef644fea7a0efd10175902f5e77e5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2276
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:07 GMT
Last-Modified: Tue, 04 Oct 2022 09:32:11 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 314
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 129fe858bf2aa7291fd2c6dd4cf9d226
e3e048b964b851ebbdcfb5bd80ebdbad13720cf6
addc7e4ddab73c8c7ee50f6d33fc1e4ff73b71cc014e481049a393c3b87b0924
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.brandbucket.com/favicon.ico
200 OK 5.5 kB URL HTTP/2 www.brandbucket.com/favicon.ico
IP
Hash c8eed65e997f5bc4301562f2bad75f43
f27fdf47f997a212bbb05a8999f7b8473800e931
43a6a591e760a3980d168999a590cabd30a7a0eb8cddec62438dbb380766f0dc
GET /favicon.ico HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/names/primacosta?source=ext
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:04 GMT
content-type: text/html
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cache-control: max-age=691200
cf-cache-status: HIT
age: 3058
last-modified: Tue, 04 Oct 2022 09:19:06 GMT
server: cloudflare
cf-ray: 754d202adda7b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
alb.reddit.com/rp.gif?ts=1664878206523&id=t2_hlvcbpjd&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=b187ad13-98e7-4036-aeb4-951082eeef39&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_02c59ad6
200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1664878206523&id=t2_hlvcbpjd&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=b187ad13-98e7-4036-aeb4-951082eeef39&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_02c59ad6
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1664878206523&id=t2_hlvcbpjd&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=b187ad13-98e7-4036-aeb4-951082eeef39&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_02c59ad6 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Tue, 04 Oct 2022 10:10:07 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-1625379-2&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&jid=0.6694562813155205&_v=a1&z=0.7786074549788399&slf_rd=1&random=1105033549
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-1625379-2&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&jid=0.6694562813155205&_v=a1&z=0.7786074549788399&slf_rd=1&random=1105033549
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-1625379-2&cid=amp-7tbZo5Aytjy_QZMlOmpIOQ&jid=0.6694562813155205&_v=a1&z=0.7786074549788399&slf_rd=1&random=1105033549 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 10:10:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
js.hs-banner.com/20882931.js
200 OK 15 kB URL HTTP/2 js.hs-banner.com/20882931.js
IP
File type ASCII text, with very long lines (60657)
Hash cf15f79d1f519dfa3cfe41e4dc4849e1
e2022ea3eda27f12066853d58278b4f09adbbd4d
0e4c8fff375416564dce39d0ac73e2d3d267a011f3bfaacbf2d52648a11b3a8d
GET /20882931.js HTTP/1.1
Host: js.hs-banner.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:07 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: LZQJEIUGZpimRU8u1RpHftmBzqWoKddSEimv1q4KRhb1GfuXfY0vgY9GfW6WrayKUY+ihlNMN4U=
x-amz-request-id: VFEXZ99DDVNKEYDB
last-modified: Tue, 30 Aug 2022 23:09:39 GMT
etag: W/"78ffb10a4b1a78e3dbb2fbc3833d979b"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: wVTF9d3ewW5rPbyGOXdwIXoxBD_CEo_I
access-control-allow-origin: https://www.brandbucket.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timing
access-control-allow-credentials: true
access-control-max-age: 604800
timing-allow-origin: *
expires: Tue, 04 Oct 2022 10:12:11 GMT
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 754d203abeb1b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash ea112afcbc5159581c7a2ab15f91d4b8
d4bc73c7ba1db71f58366b3f243b0c1fea9eac7b
56d1f4941f66992387fe5cd926e73414484810726724291a46e19441090933a9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 195
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:07 GMT
Last-Modified: Tue, 04 Oct 2022 10:06:52 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 312
api.hubspot.com/livechat-public/v1/message/public?portalId=20882931&conversations-embed=static-1.10873&mobile=false&messagesUtk=e301fd96b122496faee387de51a162a3&traceId=e301fd96b122496faee387de51a162a3&hubspotUtk=425fa7c621c8bf293e5e35bfc5e84976&__hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1&referrer=https%3A%2F%2Fwww.brandbucket.com%2F
200 OK 18 B URL HTTP/2 api.hubspot.com/livechat-public/v1/message/public?portalId=20882931&conversations-embed=static-1.10873&mobile=false&messagesUtk=e301fd96b122496faee387de51a162a3&traceId=e301fd96b122496faee387de51a162a3&hubspotUtk=425fa7c621c8bf293e5e35bfc5e84976&__hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1&referrer=https%3A%2F%2Fwww.brandbucket.com%2F
IP
File type ASCII text, with no line terminators
Hash cc7fd95a87ea3721ce1853bf3c4dd75e
7f687f7881adf0fc407378d375a61b8f198c0912
0f06a4c8d34690d4e42c81f232a5bdfe9fcbde8a54b5ccd0609a313e90da0879
OPTIONS /livechat-public/v1/message/public?portalId=20882931&conversations-embed=static-1.10873&mobile=false&messagesUtk=e301fd96b122496faee387de51a162a3&traceId=e301fd96b122496faee387de51a162a3&hubspotUtk=425fa7c621c8bf293e5e35bfc5e84976&__hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1&referrer=https%3A%2F%2Fwww.brandbucket.com%2F HTTP/1.1
Host: api.hubspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-hubspot-messages-uri
Referer: https://www.brandbucket.com/
Origin: https://www.brandbucket.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:07 GMT
content-type: text/plain; charset=utf-8
content-length: 18
cf-ray: 754d203b6ceefab8-OSL
access-control-allow-origin: https://www.brandbucket.com
allow: HEAD,GET,OPTIONS
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent, X-HubSpot-Messages-Uri
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
x-hubspot-correlation-id: 76039e6c-929e-44a1-9286-9f0d0754c283
x-trace: 2B48804AC417911F21FD42402387B488C2831FF48C000000000000000000
set-cookie: __cf_bm=CfluNKfH1Q2O01lt4HBp8ErEP0iv_QwCZS1rqcz8sos-1664878207-0-AZ0FdnauLkpbB1qGmqhS/IacTDxXHSKDEoIN3KlKJP5uW209XdwgICBJdN5fzC/SRXVDoSN+SqjCbt/Ogaola9E=; path=/; expires=Tue, 04-Oct-22 10:40:07 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3%2F0FsDPxfS8AxJp8tWBaZqJL1iQ2BeYjfzmmogVv8m%2Fpu3sg20wsUcPRywFaIHPR%2FUhUGhN6zzO%2FZGTQzrRsmEOSDVRvavqIw9lCqtw2MCfsxIP8jv%2FPbAr6erAclcq5nw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=6cad7613-f7f3-4cae-b7e2-9d08568b320a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=8dd8b352-16e1-4692-9016-90693e57767e&tw_document_href=https%3A%2F%2Fwww.brandbucket.com%2Famp%2Ftracking%2Fnames%2Fprimacosta%3Fsource%3Dext%26ext%3D438673%26source%3Dext%23amp%3D1&tw_document_referrer=https%3A%2F%2Fwww.brandbucket.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o7akj&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=6cad7613-f7f3-4cae-b7e2-9d08568b320a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=8dd8b352-16e1-4692-9016-90693e57767e&tw_document_href=https%3A%2F%2Fwww.brandbucket.com%2Famp%2Ftracking%2Fnames%2Fprimacosta%3Fsource%3Dext%26ext%3D438673%26source%3Dext%23amp%3D1&tw_document_referrer=https%3A%2F%2Fwww.brandbucket.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o7akj&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=6cad7613-f7f3-4cae-b7e2-9d08568b320a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=8dd8b352-16e1-4692-9016-90693e57767e&tw_document_href=https%3A%2F%2Fwww.brandbucket.com%2Famp%2Ftracking%2Fnames%2Fprimacosta%3Fsource%3Dext%26ext%3D438673%26source%3Dext%23amp%3D1&tw_document_referrer=https%3A%2F%2Fwww.brandbucket.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o7akj&type=javascript&version=2.3.27 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Cookie: muc_ads=155049c2-b949-404c-b33d-425afe910b2a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:06 GMT
perf: 7626143928
server: tsa_o
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 54c10bad239bf6e7
strict-transport-security: max-age=0
x-response-time: 107
x-connection-hash: 2a71fb82b85e5f85be413ee590e8d2240c8ea239458b930ccb5a49909307391c
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 4e5b1c18b41c244135794b09f34ef8c0
954b38d1eca6896a15c88cae2ebd5b791d32cc91
459d21039ffbad3ea5274c2d0df28e4b684bcbc6c306b0ae7d977aa782b8dffe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4698
Cache-Control: max-age=152099
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:07 GMT
Etag: "633ba348-13a"
Expires: Thu, 06 Oct 2022 04:25:06 GMT
Last-Modified: Tue, 04 Oct 2022 03:06:48 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 314
bat.bing.com/action/0?ti=138002826&Ver=2&mid=267be24b-f4c2-4575-9c43-eb74371ecd50&sid=b8904a8043cc11ed8c869508d29fba2a&vid=a70dab60e55711ecad10f9ba179de29e&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=All%20names&p=https%3A%2F%2Fwww.brandbucket.com%2F&r=<=1074&evt=pageLoad&ifm=1&sv=1&rn=878434
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=138002826&Ver=2&mid=267be24b-f4c2-4575-9c43-eb74371ecd50&sid=b8904a8043cc11ed8c869508d29fba2a&vid=a70dab60e55711ecad10f9ba179de29e&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=All%20names&p=https%3A%2F%2Fwww.brandbucket.com%2F&r=<=1074&evt=pageLoad&ifm=1&sv=1&rn=878434
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=138002826&Ver=2&mid=267be24b-f4c2-4575-9c43-eb74371ecd50&sid=b8904a8043cc11ed8c869508d29fba2a&vid=a70dab60e55711ecad10f9ba179de29e&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=All%20names&p=https%3A%2F%2Fwww.brandbucket.com%2F&r=<=1074&evt=pageLoad&ifm=1&sv=1&rn=878434 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=18044ABA2E8A61B5216A58892FDD6086; domain=.bing.com; expires=Sun, 29-Oct-2023 10:10:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 434383FB11B64F7B90906C74BB2C5313 Ref B: OSL30EDGE0319 Ref C: 2022-10-04T10:10:07Z
date: Tue, 04 Oct 2022 10:10:06 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 57571803fbcccf1d8d3f64d1d59ad3be
9309dbdac73523157341a8aacafa931a8c7306f7
2cfc4c813b7ac4d3e9ac437fdac58c0c1f86ee330accc220be070996bdfe5e2e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6437
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:07 GMT
Last-Modified: Tue, 04 Oct 2022 08:22:50 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
sslwidget.criteo.com/event?a=23078&v=5.12.1&p0=e%3Dexd%26ci%3Damp-7tbZo5Aytjy_QZMlOmpIOQ%26site_type%3Dd&p1=e%3Dvpg&p2=e%3Ddis&adce=1&bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA&tld=brandbucket.com&dy=1&fu=https%253A%252F%252Fwww.brandbucket.com%252Fnames%252Fprimacosta%253Fsource%253Dext&dtycbr=41098
302 Found 0 B URL HTTP/2 sslwidget.criteo.com/event?a=23078&v=5.12.1&p0=e%3Dexd%26ci%3Damp-7tbZo5Aytjy_QZMlOmpIOQ%26site_type%3Dd&p1=e%3Dvpg&p2=e%3Ddis&adce=1&bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA&tld=brandbucket.com&dy=1&fu=https%253A%252F%252Fwww.brandbucket.com%252Fnames%252Fprimacosta%253Fsource%253Dext&dtycbr=41098
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event?a=23078&v=5.12.1&p0=e%3Dexd%26ci%3Damp-7tbZo5Aytjy_QZMlOmpIOQ%26site_type%3Dd&p1=e%3Dvpg&p2=e%3Ddis&adce=1&bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA&tld=brandbucket.com&dy=1&fu=https%253A%252F%252Fwww.brandbucket.com%252Fnames%252Fprimacosta%253Fsource%253Dext&dtycbr=41098 HTTP/1.1
Host: sslwidget.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 04 Oct 2022 10:10:07 GMT
server: Kestrel
content-length: 0
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: 0
location: https://widget.us.criteo.com/event?a=23078&v=5.12.1&p0=e%3Dexd%26ci%3Damp-7tbZo5Aytjy_QZMlOmpIOQ%26site_type%3Dd&p1=e%3Dvpg&p2=e%3Ddis&adce=1&bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA&tld=brandbucket.com&dy=1&fu=https%253A%252F%252Fwww.brandbucket.com%252Fnames%252Fprimacosta%253Fsource%253Dext&dtycbr=41098
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
server-processing-duration-in-ticks: 4254638
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash e433fcb50acece9e71308bea3cae2176
2c0f6555dac211dede365146a74683d1e9dfd861
f857ceb2aa56ca52b06507625e2e52a4b27ff34f21fdd32a20048e9abf9a66b6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 311
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:07 GMT
Last-Modified: Tue, 04 Oct 2022 10:04:56 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
200 OK 314 B IP
Hash e433fcb50acece9e71308bea3cae2176
2c0f6555dac211dede365146a74683d1e9dfd861
f857ceb2aa56ca52b06507625e2e52a4b27ff34f21fdd32a20048e9abf9a66b6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6264
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:07 GMT
Last-Modified: Tue, 04 Oct 2022 08:25:44 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 314
bat.bing.com/p/action/138002826.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/138002826.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/138002826.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=1FB22E9C359F670B25483CAF34C866B8; domain=.bing.com; expires=Sun, 29-Oct-2023 10:10:07 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FB2C20561E8A42009A8AC6E98843792B Ref B: OSL30EDGE0319 Ref C: 2022-10-04T10:10:07Z
date: Tue, 04 Oct 2022 10:10:06 GMT
X-Firefox-Spdy: h2
api.hubspot.com/livechat-public/v1/message/public?portalId=20882931&conversations-embed=static-1.10873&mobile=false&messagesUtk=e301fd96b122496faee387de51a162a3&traceId=e301fd96b122496faee387de51a162a3&hubspotUtk=425fa7c621c8bf293e5e35bfc5e84976&__hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1&referrer=https%3A%2F%2Fwww.brandbucket.com%2F
200 OK 1.5 kB URL HTTP/2 api.hubspot.com/livechat-public/v1/message/public?portalId=20882931&conversations-embed=static-1.10873&mobile=false&messagesUtk=e301fd96b122496faee387de51a162a3&traceId=e301fd96b122496faee387de51a162a3&hubspotUtk=425fa7c621c8bf293e5e35bfc5e84976&__hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1&referrer=https%3A%2F%2Fwww.brandbucket.com%2F
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (2997), with no line terminators
Hash 4b6e7a0dd3216f44e992c9323397cb36
97d1f022cbac4de5440b389199b0e9bfb74363dc
f77c63e022523bbc2dfe7d04c9a3ae4551df70dd42be6af79ea4a95cfb940009
GET /livechat-public/v1/message/public?portalId=20882931&conversations-embed=static-1.10873&mobile=false&messagesUtk=e301fd96b122496faee387de51a162a3&traceId=e301fd96b122496faee387de51a162a3&hubspotUtk=425fa7c621c8bf293e5e35bfc5e84976&__hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1&referrer=https%3A%2F%2Fwww.brandbucket.com%2F HTTP/1.1
Host: api.hubspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-HubSpot-Messages-Uri: https://www.brandbucket.com/amp/tracking/names/primacosta?source=ext&ext=438673&source=ext#amp=1
Origin: https://www.brandbucket.com
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:07 GMT
content-type: application/json;charset=utf-8
content-length: 1493
cf-ray: 754d203c4d88fab8-OSL
access-control-allow-origin: https://www.brandbucket.com
cache-control: no-cache, no-store, no-transform, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent, X-HubSpot-Messages-Uri
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
x-hubspot-correlation-id: 6e6c7777-573e-4de3-84f1-1f208bedb1c8
x-trace: 2B9BFA861A3DAF904C9F1586E077678AF10EA693BA000000000000000000
set-cookie: __cf_bm=GwsQSqlSZ65IByFDiNrKSXeX5BJTXBCBRoJ9i4c_314-1664878207-0-Aehx89cKUXt/BAxDf29csGV7W/EU4BKQ7hBVPqtLLEJkfW3aVeIyRfrkjHSTtK8KT2LLZnzcxMFRZUZGAEKzfG8=; path=/; expires=Tue, 04-Oct-22 10:40:07 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xnl0c%2B%2F5a%2FDdRZYWoft1M0%2FeaKkHktlxR2mPlqr5YnE6Lh9rrZEzB0ch0qj%2B1SrSEjBoiYHR5yWblccsy97Sspyq%2FmFovZ8AnUnl6OL7ojhrM%2FtiBHeSwqKUdhnZ4YvAGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=6cad7613-f7f3-4cae-b7e2-9d08568b320a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=8dd8b352-16e1-4692-9016-90693e57767e&tw_document_href=https%3A%2F%2Fwww.brandbucket.com%2Famp%2Ftracking%2Fnames%2Fprimacosta%3Fsource%3Dext%26ext%3D438673%26source%3Dext%23amp%3D1&tw_document_referrer=https%3A%2F%2Fwww.brandbucket.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o7akj&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=6cad7613-f7f3-4cae-b7e2-9d08568b320a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=8dd8b352-16e1-4692-9016-90693e57767e&tw_document_href=https%3A%2F%2Fwww.brandbucket.com%2Famp%2Ftracking%2Fnames%2Fprimacosta%3Fsource%3Dext%26ext%3D438673%26source%3Dext%23amp%3D1&tw_document_referrer=https%3A%2F%2Fwww.brandbucket.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o7akj&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=6cad7613-f7f3-4cae-b7e2-9d08568b320a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=8dd8b352-16e1-4692-9016-90693e57767e&tw_document_href=https%3A%2F%2Fwww.brandbucket.com%2Famp%2Ftracking%2Fnames%2Fprimacosta%3Fsource%3Dext%26ext%3D438673%26source%3Dext%23amp%3D1&tw_document_referrer=https%3A%2F%2Fwww.brandbucket.com%2F&tw_iframe_status=1&tw_order_quantity=0&tw_sale_amount=0&txn_id=o7akj&type=javascript&version=2.3.27 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:07 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_XyAn52J8coGNM0Rg6TVuDA=="; Max-Age=63072000; Expires=Thu, 03 Oct 2024 10:10:07 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: c182cf28d4b85547
strict-transport-security: max-age=631138519
x-response-time: 107
x-connection-hash: 6239f05876061de63a9b327188d2e9f226d43c219423c202afe414618735f5a2
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash d63fed96a2b81ff9d260858ac0bf43e9
f5211f87c650fd7eeb535fc8e87225029e35b618
d663bf7631d4432ffeea0d7757de4af18141bb40a5962e8870399d3828f4f68d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4590
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:07 GMT
Last-Modified: Tue, 04 Oct 2022 08:53:37 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 313
gem.gbc.criteo.com/newidsd
200 OK 21 kB URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
File type JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5389)
Hash 27531ad3baa700b7e1ae29b1e0243290
ef6507edd1984c0303bf8f8adbd75e86777de8da
9acbc220e3b360191c1bea252226b3680d06a997d61f8d0169e15f9a18bf9037
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:07 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 89063
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
s.adroll.com/j/pre/CX5WGUX2VJFQDM33UIXE3I/GJHNLHQNWFAQ7GKA4IB65N/index.js
200 OK 0 B URL HTTP/1.1 s.adroll.com/j/pre/CX5WGUX2VJFQDM33UIXE3I/GJHNLHQNWFAQ7GKA4IB65N/index.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/pre/CX5WGUX2VJFQDM33UIXE3I/GJHNLHQNWFAQ7GKA4IB65N/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Content-Length: 0
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 01:18:11 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: K9dzGZAohAJAB73fze0fp2Pg4vmSNhlw
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 04 Oct 2022 09:43:22 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: "d41d8cd98f00b204e9800998ecf8427e"
Vary: Accept-Encoding
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
Age: 2104
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: j_Do8-8tBvfRsnm8WKuIvUkRzS0gw2VNnDjYqz8J7MdkO-JHq6cMaw==
s.adroll.com/j/exp/CX5WGUX2VJFQDM33UIXE3I/index.js
302 Moved Temporarily 0 B URL HTTP/1.1 s.adroll.com/j/exp/CX5WGUX2VJFQDM33UIXE3I/index.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/exp/CX5WGUX2VJFQDM33UIXE3I/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
Content-Length: 0
Connection: keep-alive
Date: Mon, 03 Oct 2022 10:57:04 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/exp/index.js
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
Age: 83583
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: a2S4z_O4YxN2QuwSCrfXy2X9wBYfl3qwbh2z_nMR7-4jnj_7Egy16Q==
s.adroll.com/j/exp/index.js
200 OK 28 B URL HTTP/1.1 s.adroll.com/j/exp/index.js
IP
File type ASCII text, with no line terminators
Hash 5816cced8568d223aa09d889f300692b
95cab5e474d7391762c3da5c7dc50fcf05df529f
f59e5f34a941183aacaed25322ac0856628493c2cfd936ded3fddc0a49510e52
GET /j/exp/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 28
Connection: keep-alive
Last-Modified: Fri, 02 Sep 2022 17:25:28 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: VS8aSrwndm.MeiNnyJ10ruHH56v74CIF
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 04 Oct 2022 00:06:37 GMT
Etag: "5816cced8568d223aa09d889f300692b"
Vary: Accept-Encoding
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
Age: 36404
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: aSV0VDePb06RRu0jXLrxrrJwGEBiywuzhdJADvGQuhRaoP_C4M0rjQ==
s.adroll.com/j/pre/CX5WGUX2VJFQDM33UIXE3I/GJHNLHQNWFAQ7GKA4IB65N/fpconsent.js
302 Moved Temporarily 0 B URL HTTP/1.1 s.adroll.com/j/pre/CX5WGUX2VJFQDM33UIXE3I/GJHNLHQNWFAQ7GKA4IB65N/fpconsent.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/pre/CX5WGUX2VJFQDM33UIXE3I/GJHNLHQNWFAQ7GKA4IB65N/fpconsent.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
Content-Length: 0
Connection: keep-alive
Date: Tue, 04 Oct 2022 04:41:39 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/pre/index.js
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
Age: 19708
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5CjNOJuVQknJsPmp953jFQiG-IHFz48xXT2yMA1WzxKHmuTQqobmqw==
s.adroll.com/j/pre/index.js
200 OK 0 B URL HTTP/1.1 s.adroll.com/j/pre/index.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j/pre/index.js HTTP/1.1
Host: s.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Last-Modified: Wed, 15 Jan 2020 23:54:18 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: nQEe8wQ7h0ROt7P4GJfDfstto6x684Hy
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 04 Oct 2022 06:32:01 GMT
Etag: "d41d8cd98f00b204e9800998ecf8427e"
Vary: Accept-Encoding
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
Age: 47707
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: q-RGrXsRzLEW5KwtbTzAb1CgUsBsjv1dSoTkhFNqOWmTI0pRh6M_9g==
js.usemessages.com/conversations-embed.js
200 OK 21 kB URL HTTP/2 js.usemessages.com/conversations-embed.js
IP
File type C source, ASCII text, with very long lines (65536), with no line terminators
Hash db501b516c3de044c1f2283fb7dfb689
a3531253aa3e14130c341b1afa64128348e5c566
8d3ecfe2d1fccd858190e4863bab0021d8ac9b322446606523acfeeb41537b78
GET /conversations-embed.js HTTP/1.1
Host: js.usemessages.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:07 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Fri, 30 Sep 2022 03:28:22 UTC
etag: W/"8f72896eff8de085fc34d4ab80d97463"
x-amz-server-side-encryption: AES256
x-amz-version-id: y24q1zYP7BjLwmSbcrvN2WI7ANyjR6Yj
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 68a3b1d5c75429221abc685a453afb60.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: 08ys3UAu7YCwOBIyV3xja-Kr3ypD0W68sC6PFmcWX0TlRhw66y5TbQ==
cache-control: max-age=600
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=conversations-embed/static-1.10873/bundles/project.js&cfRay=752e0bcea9b1b4f4-IAD
x-hs-target-asset: conversations-embed/static-1.10873/bundles/project.js
x-hs-cache-status: MISS
cache-tag: staticjsapp-conversations-embed-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 75
server: cloudflare
cf-ray: 754d203abb18b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
d.adroll.com/consent/check/CX5WGUX2VJFQDM33UIXE3I?arrfrr=https%3A%2F%2Fwww.brandbucket.com%2Famp%2Ftracking%2Fnames%2Fprimacosta%3Fsource%3Dext%26ext%3D438673%26source%3Dext%23amp%3D1&_s=a1349ee88e8a659510ba3b6bdaf8571f&_b=2
200 OK 447 B URL HTTP/2 d.adroll.com/consent/check/CX5WGUX2VJFQDM33UIXE3I?arrfrr=https%3A%2F%2Fwww.brandbucket.com%2Famp%2Ftracking%2Fnames%2Fprimacosta%3Fsource%3Dext%26ext%3D438673%26source%3Dext%23amp%3D1&_s=a1349ee88e8a659510ba3b6bdaf8571f&_b=2
IP
File type ASCII text, with very long lines (447), with no line terminators
Hash fdacbdfc0676fff96ef8f96cc94ac750
e211321d013201532d1d85b490864bade42b712b
5a16900ccc365cfbfadc6022b35d5b45c65264190d4151c29a2f21ec5d1222a7
GET /consent/check/CX5WGUX2VJFQDM33UIXE3I?arrfrr=https%3A%2F%2Fwww.brandbucket.com%2Famp%2Ftracking%2Fnames%2Fprimacosta%3Fsource%3Dext%26ext%3D438673%26source%3Dext%23amp%3D1&_s=a1349ee88e8a659510ba3b6bdaf8571f&_b=2 HTTP/1.1
Host: d.adroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:08 GMT
content-type: application/javascript
content-length: 447
server: nginx/1.20.0
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 78c4ba9439859ddaf86c2cfe6addf4f7
2779cfa8758573b18fd0f4b3a64d204b22ba3cd2
bd961e63bd7fd6f8003b5d15114e24e4894b01b87a310ceb4c2f604fc7ad7d0a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 08:23:22 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: oB3gL1hxYuHr9XOUjCNCKzeMSf9lam1gmKdEKUWwQCmvIR7wjR0nSg==
Age: 6406
r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-c0VWf_Z7JCeMDRS4T1MjTjV_SXLGvtNlu2SoMQ
302 Found 0 B URL HTTP/2 r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-c0VWf_Z7JCeMDRS4T1MjTjV_SXLGvtNlu2SoMQ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=20&external_user_id=k-c0VWf_Z7JCeMDRS4T1MjTjV_SXLGvtNlu2SoMQ HTTP/1.1
Host: r.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 04 Oct 2022 10:10:08 GMT
content-length: 0
location: /rum?cm_dsp_id=20&external_user_id=k-c0VWf_Z7JCeMDRS4T1MjTjV_SXLGvtNlu2SoMQ&C=1
cf-ray: 754d204239620b69-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=YzwGgHyQGuvMl14KYbyrswAA; Path=/; Domain=casalemedia.com; Expires=Wed, 04 Oct 2023 10:10:08 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4332; Path=/; Domain=casalemedia.com; Expires=Mon, 02 Jan 2023 10:10:08 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4332; Path=/; Domain=casalemedia.com; Expires=Mon, 02 Jan 2023 10:10:08 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fu8Li0dpcPgVf0w0KusSdNi%2Frd2wnGORzeICPRIcaJSvpuB86JDJ%2Bqcyx42yxIMl4YlBnfHrBiF9LSnbwFjtABr0%2FR%2FH7s7KoTjChe9wIBGYlSEtv1gn3WkpWb5QZpN%2Foamp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 20dd3ab6f6bc52a8ea8a1ce544b9d7e7
e96cef0aff3d5dac87fa3a22d50414120aef4ebd
bb9257bee878bbcff510e1781dd55bda4147b6a033c3dbae30e8448a60a2ef3c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5869
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 08:32:19 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
criteo-sync.teads.tv/um?eid=80&uid=k-1ArqwvZ7JCeMDRS4T1MjTjV_SXJDiR9yaYkZtw
200 OK 23 B URL HTTP/2 criteo-sync.teads.tv/um?eid=80&uid=k-1ArqwvZ7JCeMDRS4T1MjTjV_SXJDiR9yaYkZtw
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash da5b449fff36752a93779fa4067cd2eb
71a96eea77f21ab5f1819b96c4cedd5cd34476ca
328e90a318268aea96180cc31666ae6d6f79d90d078c123bc3d98ee08a192fb7
GET /um?eid=80&uid=k-1ArqwvZ7JCeMDRS4T1MjTjV_SXJDiR9yaYkZtw HTTP/1.1
Host: criteo-sync.teads.tv
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
server: akka-http/10.2.9
content-length: 23
expires: Tue, 04 Oct 2022 10:10:08 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 04 Oct 2022 10:10:08 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9fde55b4ba25a0ca5fbf39c50615b2e0
6210374d3f3c48ce99086cf1be4dc7f12d378959
de0b8be4552817341f225c840c3ae5788ce0a21fb09a14f6d0332965b3973cba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1452
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 09:45:56 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 1d8d9b9d274270d7a62493a235350977
5d2a14d44529ea82687a56c366a48a142b8a7579
33ac6bc12a8d3868dffb9d5f8d53cd254a16686857ccbccaa2a74306b19e121d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6149
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 08:27:39 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
contextual.media.net/cksync.php?cs=3&type=crt&ovsid=k-omlqdPZ7JCeMDRS4T1MjTjV_SXKUAKV3Lcboyg
200 OK 45 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=crt&ovsid=k-omlqdPZ7JCeMDRS4T1MjTjV_SXKUAKV3Lcboyg
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash 99cceceaed4d575484b69ddaf9ed66a7
1e3a3b15296b585833a22d987a387aa58aa1642d
832f63f4187160c195b04f1911c2e623a75e805f4b23abb9b0bea214b4283a43
GET /cksync.php?cs=3&type=crt&ovsid=k-omlqdPZ7JCeMDRS4T1MjTjV_SXKUAKV3Lcboyg HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
content-length: 45
content-type: image/gif
set-cookie: visitor-id=3078798083580267000V10; Expires=Wed, 04 Oct 2023 10:10:08 GMT; domain=.media.net; Path=/;
data-c-ts=1664878208;Expires=Thu, 03 Nov 2022 10:10:08 GMT;path=/;domain=.media.net;
data-c=k-omlqdPZ7JCeMDRS4T1MjTjV_SXKUAKV3Lcboyg~~3;Expires=Thu, 03 Nov 2022 10:10:08 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Tue, 04 Oct 2022 10:10:08 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 04 Oct 2022 10:10:08 GMT
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-FydOQfZ7JCeMDRS4T1MjTjV_SXLwQ0rDov0h3g&google_cm&google_hm=ay1GeWRPUWZaN0pDZU1EUlM0VDFNalRqVl9TWEx3UTByRG92MGgzZw
302 Found 440 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-FydOQfZ7JCeMDRS4T1MjTjV_SXLwQ0rDov0h3g&google_cm&google_hm=ay1GeWRPUWZaN0pDZU1EUlM0VDFNalRqVl9TWEx3UTByRG92MGgzZw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 544476c5a7c3538f054970b64f73df2e
ba1f9c5d2378f62796825ffa00ff863c58289bde
24e574c63956f3c8f25bd023167b68c0f747b9d36107cd10407615614ef7ba94
GET /pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k-FydOQfZ7JCeMDRS4T1MjTjV_SXLwQ0rDov0h3g&google_cm&google_hm=ay1GeWRPUWZaN0pDZU1EUlM0VDFNalRqVl9TWEx3UTByRG92MGgzZw HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-FydOQfZ7JCeMDRS4T1MjTjV_SXLwQ0rDov0h3g&google_cm=&google_hm=ay1GeWRPUWZaN0pDZU1EUlM0VDFNalRqVl9TWEx3UTByRG92MGgzZw&google_tc=
date: Tue, 04 Oct 2022 10:10:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 440
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 04-Oct-2022 10:25:08 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.adform.net/pixel?adform_pid=15&adform_pc=k-9duvmfZ7JCeMDRS4T1MjTjV_SXLfgu9pr5e9-A
200 OK 43 B URL HTTP/2 cm.adform.net/pixel?adform_pid=15&adform_pc=k-9duvmfZ7JCeMDRS4T1MjTjV_SXLfgu9pr5e9-A
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /pixel?adform_pid=15&adform_pc=k-9duvmfZ7JCeMDRS4T1MjTjV_SXLfgu9pr5e9-A HTTP/1.1
Host: cm.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 10:10:08 GMT
content-type: image/gif
content-length: 43
last-modified: Thu, 28 Jul 2022 12:09:37 GMT
etag: "62e27c81-2b"
accept-ranges: bytes
X-Firefox-Spdy: h2
ad.yieldlab.net/m?dt_id=8664&ext_id=k-rYX_C_Z7JCeMDRS4T1MjTjV_SXJze1jwQWuQbA
204 No Content 0 B URL HTTP/1.1 ad.yieldlab.net/m?dt_id=8664&ext_id=k-rYX_C_Z7JCeMDRS4T1MjTjV_SXJze1jwQWuQbA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /m?dt_id=8664&ext_id=k-rYX_C_Z7JCeMDRS4T1MjTjV_SXJze1jwQWuQbA HTTP/1.1
Host: ad.yieldlab.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
x-application-context: application
Cache-Control: no-store,no-cache,max-age=-3600,must-revalidate,post-check=0,pre-check=0
Pragma: no-cache
Expires: Mon, 03 Oct 2022 10:10:08 GMT
Date: Tue, 04 Oct 2022 10:10:08 GMT
Connection: keep-alive
Set-Cookie: id=ebe3f9cc-e89e-49af-9245-8bd7db4acfc8; Path=/; Domain=yieldlab.net; Expires=Wed, 04-Oct-2023 10:10:08 GMT; Max-Age=31536000; Secure; SameSite=None
ocsp.digicert.com/
200 OK 313 B IP
Hash a8ff44bfd1462abc776c3b6b63b10698
4aab8d72da1e255c630ff6ea6af5db94a401da2f
1055ce48cc37edc3e433318f8d0be6e3a2275347c57b9a9807bddeb6d3c7b93e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4165
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 09:00:43 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 313
pixel.rubiconproject.com/tap.php?v=6434&nid=2149&put=k-HcXVRPZ7JCeMDRS4T1MjTjV_SXJRj0uI3ZD3IQ&expires=30
204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=6434&nid=2149&put=k-HcXVRPZ7JCeMDRS4T1MjTjV_SXJRj0uI3ZD3IQ&expires=30
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=6434&nid=2149&put=k-HcXVRPZ7JCeMDRS4T1MjTjV_SXJRj0uI3ZD3IQ&expires=30 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: 54ab5e55007c9747024b4f039df5ce6b
Content-Type: image/gif
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 32bb28ca31875a794be64a3fe0698ab7
d3e59c7371451a8836ea847e56dd70b0a5f97e4d
c67a2ff747735e636fea91ad110b53532a199be894b7d5d303f0931ef10a37a8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 09:00:56 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zPToHCkuHkZVX23iKsq344NPlWJ1FXESSVVSxQf-CzVTihvI7uYaMg==
Age: 4152
ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-29rLKvZ7JCeMDRS4T1MjTjV_SXLqKL3gxNH6Ag
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-29rLKvZ7JCeMDRS4T1MjTjV_SXLqKL3gxNH6Ag
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58301/sync?_origin=1&uid=k-29rLKvZ7JCeMDRS4T1MjTjV_SXLqKL3gxNH6Ag HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 04 Oct 2022 10:10:08 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-29rLKvZ7JCeMDRS4T1MjTjV_SXLqKL3gxNH6Ag&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBIAGPGMCECTe8lcP6qvTKPxDvFCr6hUFEgEBAQFYPWNFYwAAAAAA_eMAAA&S=AQAAAlIC86-4R5xZeWwVLrjXlqw; Expires=Wed, 4 Oct 2023 16:10:08 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-FydOQfZ7JCeMDRS4T1MjTjV_SXLwQ0rDov0h3g&google_cm=&google_hm=ay1GeWRPUWZaN0pDZU1EUlM0VDFNalRqVl9TWEx3UTByRG92MGgzZw&google_tc=
302 Found 332 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-FydOQfZ7JCeMDRS4T1MjTjV_SXLwQ0rDov0h3g&google_cm=&google_hm=ay1GeWRPUWZaN0pDZU1EUlM0VDFNalRqVl9TWEx3UTByRG92MGgzZw&google_tc=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 95541ccac08ceae9d034c3a75377aa07
691df1ceb8ce2b748687272e79ca40350e3f2d32
c82a428ff538b8402f6cc96effe7e57be31784a0be528681c2013ec277cd4188
GET /pixel?google_nid=cjp&google_sc=&google_ula=913071&CriteoUserId=k-FydOQfZ7JCeMDRS4T1MjTjV_SXLwQ0rDov0h3g&google_cm=&google_hm=ay1GeWRPUWZaN0pDZU1EUlM0VDFNalRqVl9TWEx3UTByRG92MGgzZw&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-FydOQfZ7JCeMDRS4T1MjTjV_SXLwQ0rDov0h3g&google_error=3
date: Tue, 04 Oct 2022 10:10:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 332
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-c0VWf_Z7JCeMDRS4T1MjTjV_SXLGvtNlu2SoMQ&C=1
200 OK 43 B URL HTTP/2 r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-c0VWf_Z7JCeMDRS4T1MjTjV_SXLGvtNlu2SoMQ&C=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=20&external_user_id=k-c0VWf_Z7JCeMDRS4T1MjTjV_SXLGvtNlu2SoMQ&C=1 HTTP/1.1
Host: r.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:08 GMT
content-type: image/gif
content-length: 43
cf-ray: 754d2042a9cf0b69-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5E8uzxHpesYom%2BMCnNXI7bYBMMEGLI8%2BCk7i4USo%2FjNbwkUmmad62Ol8nIV9tLNF12rDl%2F4HxygvBmgUK5aTdtVmRcbEPBS4lylnFe%2BbPNUChAL41AEbvDAHb1imp7UH0lMs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-CXc03fZ7JCeMDRS4T1MjTjV_SXKELsBCB36e4BmF8rFRnb5e
200 OK 491 B URL HTTP/2 exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-CXc03fZ7JCeMDRS4T1MjTjV_SXKELsBCB36e4BmF8rFRnb5e
IP
Hash b4d073d69649ebe3f667d9a1a48875f3
a5918a0ae032c0e3a5c1e10ebb21642d26539b7f
858b7c8c4991e5ed5edc14089cd83519e7a0b4a8581aa3c28aac65cf919b84a9
GET /usersync/push?partner=criteo&partnerId=k-CXc03fZ7JCeMDRS4T1MjTjV_SXKELsBCB36e4BmF8rFRnb5e HTTP/1.1
Host: exchange.mediavine.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:08 GMT
content-type: text/html; charset=utf-8
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: private, no-cache
set-cookie: mv_tokens=%7B%22mv_uuid%22%3A%22b98cdf80-43cc-11ed-9da1-01706e4cd247%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Tue, 18 Oct 2022 10:10:08 GMT; Secure; SameSite=None
mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%22b98cdf80-43cc-11ed-9da1-01706e4cd247%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Tue, 18 Oct 2022 10:10:08 GMT; Secure; SameSite=None
am_tokens=%7B%22mv_uuid%22%3A%22b98cdf80-43cc-11ed-9da1-01706e4cd247%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Tue, 18 Oct 2022 10:10:08 GMT; Secure; SameSite=None
am_tokens_eu-v1=%7B%22mv_uuid%22%3A%22b98cdf80-43cc-11ed-9da1-01706e4cd247%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Tue, 18 Oct 2022 10:10:08 GMT; Secure; SameSite=None
criteo=%7B%22id%22%3A%22k-CXc03fZ7JCeMDRS4T1MjTjV_SXKELsBCB36e4BmF8rFRnb5e%22%2C%22version%22%3A%22criteo%22%7D; Path=/; Expires=Tue, 18 Oct 2022 10:10:08 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 123c2efbf06cb624b76690d8bb59f94d
76c1a7b36c78c6b8d53b54073111004da6891fe8
e69513023b03f7bc982ede0b8b4d255ea087bed95cb97d3a46aadef19f627897
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3562
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 09:10:46 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
eb2.3lift.com/xuid?mid=2711&xuid=k-4IFfVvZ7JCeMDRS4T1MjTjV_SXI0-tdH1DaXcg&dongle=013b
200 OK 37 B URL HTTP/2 eb2.3lift.com/xuid?mid=2711&xuid=k-4IFfVvZ7JCeMDRS4T1MjTjV_SXI0-tdH1DaXcg&dongle=013b
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /xuid?mid=2711&xuid=k-4IFfVvZ7JCeMDRS4T1MjTjV_SXI0-tdH1DaXcg&dongle=013b HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:08 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k-mE1djPZ7JCeMDRS4T1MjTjV_SXI9fd6quMKyUw
404 Not Found 21 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k-mE1djPZ7JCeMDRS4T1MjTjV_SXI9fd6quMKyUw
IP
ASN #201081 SmartAdServer SAS
File type ASCII text, with no line terminators
Hash efa6ba503d1db3c0aeb36d2dfe12081a
bcb085dea063066be3fed25872f48e310261dc8f
673c79de9e33392bc95881a3d58488cf44e0509352a299e09bf119e2b09d170a
GET /redir/?partnerid=79&partneruserid=k-mE1djPZ7JCeMDRS4T1MjTjV_SXI9fd6quMKyUw HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
date: Tue, 04 Oct 2022 10:10:08 GMT
content-length: 21
content-type: text/plain; charset=utf-8
visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-pRp1OPZ7JCeMDRS4T1MjTjV_SXIYxPnHPwfbjQ
200 OK 49 B URL HTTP/2 visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-pRp1OPZ7JCeMDRS4T1MjTjV_SXIYxPnHPwfbjQ
IP
ASN #200271 Iguane Solutions SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 4408efc0174f07ad685c456f1de521ca
e3bc3250f8f32bd98dc7b05fd8940b74617eb8d1
d1371feb0512d700cf724b05a588ce79f8d8dfbb0991ae5f45ecd3ab08983a38
GET /visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-pRp1OPZ7JCeMDRS4T1MjTjV_SXIYxPnHPwfbjQ HTTP/1.1
Host: visitor.omnitagjs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=534bdd589f76c6b4a9e3c4822d96c24f; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Tue, 04 Oct 2022 10:10:08 GMT
content-length: 49
x-envoy-upstream-service-time: 3
server: ayl-lb-fra02
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-29rLKvZ7JCeMDRS4T1MjTjV_SXLqKL3gxNH6Ag&verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-29rLKvZ7JCeMDRS4T1MjTjV_SXLqKL3gxNH6Ag&verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58301/sync?_origin=1&uid=k-29rLKvZ7JCeMDRS4T1MjTjV_SXLqKL3gxNH6Ag&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 10:10:08 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBIAGPGMCEFS7UFsLVHc_UN01g5-KqPMFEgEBAQFYPWNFYwAAAAAA_eMAAA&S=AQAAAgskBggZ8lJFj-Ygn9e-fPU; Expires=Wed, 4 Oct 2023 16:10:08 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:k-EwWUBfZ7JCeMDRS4T1MjTjV_SXL8LffAWGwjqQ
200 OK 42 B URL HTTP/2 simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:k-EwWUBfZ7JCeMDRS4T1MjTjV_SXL8LffAWGwjqQ
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:k-EwWUBfZ7JCeMDRS4T1MjTjV_SXL8LffAWGwjqQ HTTP/1.1
Host: simage2.pubmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 10:10:07 GMT
content-type: image/gif; charset=utf-8
content-length: 42
set-cookie: KRTBCOOKIE_97=3385-uid:k-EwWUBfZ7JCeMDRS4T1MjTjV_SXL8LffAWGwjqQ&KRTB&23144-uid:k-EwWUBfZ7JCeMDRS4T1MjTjV_SXL8LffAWGwjqQ&KRTB&23286-uid:k-EwWUBfZ7JCeMDRS4T1MjTjV_SXL8LffAWGwjqQ&KRTB&23287-uid:k-EwWUBfZ7JCeMDRS4T1MjTjV_SXL8LffAWGwjqQ; domain=pubmatic.com; secure; expires=Thu, 03-Nov-2022 10:10:07 GMT; path=/
PugT=1664878207; domain=pubmatic.com; secure; expires=Thu, 03-Nov-2022 10:10:07 GMT; path=/
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
cache-control: no-store, no-cache, private
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9769b62b9dfb197e07199afd88f7fcdd
12d3ee924f49a70aeb865219edf4767169386e36
2a66f835263251fdbd62ff6e625029304a9630d13d5fd10d3afd46d27d399329
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 09:53:28 GMT
Server: ECS (bsa/EB14)
X-Cache: Miss from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: W-u9GvXaBkv0D09MWYhNKtAQBYNBpl5OJxbeNNZh8HUtbHbU4mAmKw==
Age: 1000
ocsp.digicert.com/
200 OK 471 B IP
Hash 5a6c6d6439fbfee3e4de4bf7fc22969d
b106eec378c5e9e38243dd2e979cfe0e83de6367
850cad230b5952f1d3dc8b852d95bfa506f8447554957fb28c106f49aa87bb37
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4475
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 08:55:33 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 471 B IP
Hash b8469fcdf1f9936ba7e6d68d202de04e
581d3a5d1979b2c2374e0bba3231ef46868ef55f
fe333565928984049e3f12a239341030d6e651e8fd0c6193f59e2ef744ff8abe
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 10:10:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 01:56:50 GMT
Expires: Sat, 08 Oct 2022 01:56:49 GMT
Etag: "581d3a5d1979b2c2374e0bba3231ef46868ef55f"
Cache-Control: max-age=315400,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754d20430aa5b511-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0da3acf1a24a90a0f532c4368b71de21
2c5e6648bb2e02021bf1becb75b2f33c50986739
828f1a3d656b011423129708b81ba9ca7f347f353d221ca9c325f8b91ce406c9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 08:33:22 GMT
Server: ECS (nyb/1D32)
X-Cache: Miss from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FzLm14TuNjCvLH-bAOvm-jqyvHXo-Yo95mPC9twnxw-aWASpXxtkIA==
Age: 5806
ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 10:10:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID
AN-X-Request-Uuid: 757d40b5-afb3-4fbe-83da-bfe971257ae9
Set-Cookie: uuid2=4513614696075314161; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 02-Jan-2023 10:10:08 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 539.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
sync-criteo.ads.yieldmo.com/sync?id=k-DLCgkPZ7JCeMDRS4T1MjTjV_SXLTa3ITeEHR3A&pn_id=criteo&ext=1
200 OK 43 B URL HTTP/2 sync-criteo.ads.yieldmo.com/sync?id=k-DLCgkPZ7JCeMDRS4T1MjTjV_SXLTa3ITeEHR3A&pn_id=criteo&ext=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?id=k-DLCgkPZ7JCeMDRS4T1MjTjV_SXLTa3ITeEHR3A&pn_id=criteo&ext=1 HTTP/1.1
Host: sync-criteo.ads.yieldmo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:08 GMT
content-type: image/gif
content-length: 43
set-cookie: yieldmo_id=gb673988dbcfff8e7d2e%7C1664878208553%7C0%7C; Domain=.yieldmo.com; Expires=Wed, 04-Oct-2023 10:10:08 GMT; Path=/; Secure; SameSite=None; Secure
ptrcriteo=k-DLCgkPZ7JCeMDRS4T1MjTjV_SXLTa3ITeEHR3A; Domain=ads.yieldmo.com; Expires=Wed, 04-Oct-2023 10:10:08 GMT; Path=/; Secure; SameSite=None; Secure
access-control-allow-origin: *
access-control-request-headers: Cache-Control, Pragma
access-control-allow-methods: GET, OPTIONS
pragma: no-cache
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 76705a5d468b2291793f298cc42da642
60864fdff61aec47bf4b8606abf2b73e8d095b32
8fdfdc69c3c7c2c8a0beb22aaa83296b72537699444cd17e30604f8a3a3d720f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 08:58:49 GMT
Server: ECS (bsa/EB18)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Mf9Bo1fuKha2DD90mqFH_pwuM7PPzOjNSaCXNcSkAnMwP3-XrZEJSw==
Age: 4280
dpm.demdex.net/ibs:dpid=28645&dpuuid=
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=28645&dpuuid=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=28645&dpuuid= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v044-07a02cb5f.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=44745556969434185971055061571652317814; Max-Age=15552000; Expires=Sun, 02 Apr 2023 10:10:08 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: h/LqtA0FTSg=
Content-Length: 0
Connection: keep-alive
match.sharethrough.com/sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-biOOgfZ7JCeMDRS4T1MjTjV_SXIA1sdVj63hFg
204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-biOOgfZ7JCeMDRS4T1MjTjV_SXIA1sdVj63hFg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-biOOgfZ7JCeMDRS4T1MjTjV_SXIA1sdVj63hFg HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 10:10:08 GMT
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=46&user_id=k-6RDYkvZ7JCeMDRS4T1MjTjV_SXJ4X0NFRYQsNg&expires=30
302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/sync?dsp_id=46&user_id=k-6RDYkvZ7JCeMDRS4T1MjTjV_SXJ4X0NFRYQsNg&expires=30
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=46&user_id=k-6RDYkvZ7JCeMDRS4T1MjTjV_SXJ4X0NFRYQsNg&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Tue, 04 Oct 2022 10:10:08 GMT
Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=46&user_id=k-6RDYkvZ7JCeMDRS4T1MjTjV_SXJ4X0NFRYQsNg&expires=30
Set-Cookie: tuuid=5072eacc-bbb9-45c8-9558-f54412775f76; path=/; expires=Wed, 04-Oct-2023 10:10:08 GMT; domain=.bidswitch.net; samesite=none; secure
c=1664878208; path=/; expires=Wed, 04-Oct-2023 10:10:08 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1664878208; path=/; expires=Wed, 04-Oct-2023 10:10:08 GMT; domain=.bidswitch.net; samesite=none; secure
c=1664878208; path=/; expires=Wed, 04-Oct-2023 10:10:08 GMT; domain=.bidswitch.net; samesite=none; secure
Content-Length: 0
Connection: keep-alive
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Tue, 04 Oct 2022 10:10:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=0
AN-X-Request-Uuid: 394bee61-47d8-4415-bf2b-339347814b5c
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 539.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
status.thawte.com/
200 OK 471 B IP
Hash e6c5694d139b225009d36f48904cf1bd
22a02c147bfaa16c0623ce74545d5e4d34cb7c78
88a66880ab97ab03ed3892f164dfceca4a4b91780cb74ef3735b89a45f65d209
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2704
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 09:25:04 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-P-yo9fZ7JCeMDRS4T1MjTjV_SXKu90nXOWEB3A
302 Found 0 B URL HTTP/2 ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-P-yo9fZ7JCeMDRS4T1MjTjV_SXKu90nXOWEB3A
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?publisher_dsp_id=38&external_user_id=k-P-yo9fZ7JCeMDRS4T1MjTjV_SXKu90nXOWEB3A HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 04 Oct 2022 10:10:08 GMT
content-type: text/plain
content-length: 0
location: https://ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-P-yo9fZ7JCeMDRS4T1MjTjV_SXKu90nXOWEB3A
set-cookie: tuuid=3f06541e-f00f-4c19-a1a7-08b4c32fa1b9; Expires=Mon, 02 Jan 2023 10:10:08 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1664878208; Expires=Mon, 02 Jan 2023 10:10:08 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?dsp_id=46&user_id=k-6RDYkvZ7JCeMDRS4T1MjTjV_SXJ4X0NFRYQsNg&expires=30
200 OK 43 B URL HTTP/1.1 x.bidswitch.net/ul_cb/sync?dsp_id=46&user_id=k-6RDYkvZ7JCeMDRS4T1MjTjV_SXJ4X0NFRYQsNg&expires=30
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=46&user_id=k-6RDYkvZ7JCeMDRS4T1MjTjV_SXJ4X0NFRYQsNg&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Tue, 04 Oct 2022 10:10:08 GMT
Content-Length: 43
Connection: keep-alive
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid=
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v044-0f7f1a203.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: 49YtzlSkSX4=
Content-Length: 59
Connection: keep-alive
ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-P-yo9fZ7JCeMDRS4T1MjTjV_SXKu90nXOWEB3A
200 OK 43 B URL HTTP/2 ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-P-yo9fZ7JCeMDRS4T1MjTjV_SXKu90nXOWEB3A
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/match?publisher_dsp_id=38&external_user_id=k-P-yo9fZ7JCeMDRS4T1MjTjV_SXKu90nXOWEB3A HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:08 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash bdb95e6379de01f974d31872ed940a5f
77dc35b3a02b64adccce339347abb986d9b7b928
d4ccb157ec8c90b6de7a518451bf6d8ccd73518771b971e7c8c63734a3e641bb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=114512
Date: Tue, 04 Oct 2022 10:10:08 GMT
Etag: "633b0a15-1d7"
Expires: Wed, 05 Oct 2022 17:58:40 GMT
Last-Modified: Mon, 03 Oct 2022 16:13:09 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hnQU6sz-VFV6XPDWfaP03T0BxjC2gxiTqf3yI2Hp79maauD9tY8BcQ==
Age: 6331
gum.criteo.com/sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40
302 Found 0 B URL HTTP/2 gum.criteo.com/sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 04 Oct 2022 10:10:08 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://beacon.krxd.net/usermatch.gif?partner=criteo&partner_uid=
server-processing-duration-in-ticks: 737802
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
sync.outbrain.com/cookie-sync?p=criteo&uid=k-oXf1-PZ7JCeMDRS4T1MjTjV_SXLSektisyTMrA
200 OK 0 B URL HTTP/1.1 sync.outbrain.com/cookie-sync?p=criteo&uid=k-oXf1-PZ7JCeMDRS4T1MjTjV_SXLSektisyTMrA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync?p=criteo&uid=k-oXf1-PZ7JCeMDRS4T1MjTjV_SXLSektisyTMrA HTTP/1.1
Host: sync.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 10:10:08 GMT
Content-Length: 0
Cache-Control: no-cache
X-TraceId: 77e2ea57aa219cedac3a3eac4fa85d35
ocsp.digicert.com/
200 OK 471 B IP
Hash 1cc8e28a7b7b150cf87243b4c71eb7d1
f8cf59b6f5d1539c2e88c3758ce9d85dd8157cf5
ec9db369c12e341be6c26c071fa05c2eff6276d18a5b5aef816cfb92c6055973
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1546
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 10:10:08 GMT
Last-Modified: Tue, 04 Oct 2022 09:44:23 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
beacon.krxd.net/usermatch.gif?partner=criteo&partner_uid=
204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner=criteo&partner_uid=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner=criteo&partner_uid= HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 10:10:08 GMT
set-cookie: _kuid_=PHhm8hLS; Expires=Sun, 02-Apr-23 10:10:08 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n020-dub-prod.krxd.net
x-request-time: D=32 t=1664878208
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40
302 Found 0 B URL HTTP/2 gum.criteo.com/sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 04 Oct 2022 10:10:08 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://s.thebrighttag.com/cs?btt=0&tp=cr&uid=
server-processing-duration-in-ticks: 520785
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash f5f4048587fcba4e19b5068aa782adc4
164ae95feedd80e6c67fb7b736715af0223b9a1f
8d971a1cfb975335b1d15b9f3a5f53feaeb14d0a14162df63b85978e22cc59b8
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "8D971A1CFB975335B1D15B9F3A5F53FEAEB14D0A14162DF63B85978E22CC59B8"
Last-Modified: Tue, 04 Oct 2022 08:00:00 UTC
Content-Length: 1586
Cache-Control: public, no-transform, must-revalidate, max-age=2962
Expires: Tue, 04 Oct 2022 10:59:31 GMT
Date: Tue, 04 Oct 2022 10:10:09 GMT
Connection: keep-alive
s.thebrighttag.com/cs?btt=0&tp=cr&uid=
200 OK 35 B URL HTTP/2 s.thebrighttag.com/cs?btt=0&tp=cr&uid=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /cs?btt=0&tp=cr&uid= HTTP/1.1
Host: s.thebrighttag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:09 GMT
content-type: image/gif
content-length: 35
x-bt-requestid: ba1437f0-43cc-11ed-9be9-0000ac1700b3
cache-control: private, must-revalidate
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin:
server: nginx
p3p: CP=NOI DSP COR NID
X-Firefox-Spdy: h2
www.brandbucket.com/names/primacosta?source=ext
200 OK 0 B URL HTTP/2 www.brandbucket.com/names/primacosta?source=ext
IP
GET /names/primacosta?source=ext HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:03 GMT
content-type: text/html
vary: Accept-Encoding
set-cookie: PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; path=/
land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; expires=Mon, 02-Jan-2023 10:10:03 GMT; Max-Age=7776000; path=/
land_referrer=1664878203%3B; expires=Mon, 02-Jan-2023 10:10:03 GMT; Max-Age=7776000; path=/
bb_recent=438673; expires=Mon, 24-Oct-2022 10:10:03 GMT; Max-Age=1728000; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: https://js.stripe.com/, https://get.brandbucket.com/, //staging.brandbucket.com/
brandbucket-domain: primacosta.com #438673
x-frame-options: DENY
access-control-allow-credentials: true
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 754d20233b94b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
js.hs-analytics.net/analytics/1664878200000/20882931.js
200 OK 0 B URL HTTP/2 js.hs-analytics.net/analytics/1664878200000/20882931.js
IP
GET /analytics/1664878200000/20882931.js HTTP/1.1
Host: js.hs-analytics.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:07 GMT
content-type: text/javascript
x-amz-id-2: Y2WrgdHXklg5JiU2/CeWKTEKq1BndjKzwop5YQ1X0jqRr8AsxR+R+KtozgiqpykdIvljUSayzYg=
x-amz-request-id: EF253EVZEARRJYYT
last-modified: Wed, 31 Aug 2022 14:06:50 GMT
etag: W/"ae2f524bc295017dee70bb69092256ec"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: null
access-control-allow-credentials: false
vary: origin, Accept-Encoding
expires: Tue, 04 Oct 2022 10:15:07 GMT
cf-cache-status: MISS
server: cloudflare
cf-ray: 754d203aace61c06-OSL
content-encoding: br
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=Qigfil80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFXbXJPZXRSJTJGYXR6Wm5sVSUyRjMlMkIyWEwzRndJZDltOEtNVEp3eWszQ3g1aWk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:07 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=OsN-1V80M0RITmhlJTJCZkMwOUJGQlhaMUN2czFXbXJPZXRSJTJGYXR6Wm5sVSUyRjMlMkIyWEtmYW1JRHdDTDVJcSUyQnhjTTFaOFhNUQ; expires=Sun, 29 Oct 2023 10:10:07 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 238966
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
static.hsappstatic.net/head-dlb/static-1.234/bundle.production.js
200 OK 0 B URL HTTP/2 static.hsappstatic.net/head-dlb/static-1.234/bundle.production.js
IP
GET /head-dlb/static-1.234/bundle.production.js HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:10 GMT
content-type: application/javascript
access-control-allow-origin: https://app.hubspot.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Wed, 28 Sep 2022 17:07:56 GMT
etag: W/"af59323cc47b2bf2c3eeb0ed50217041"
x-amz-server-side-encryption: AES256
x-amz-version-id: YWDtvP_ZHgEUkBeD2cA0UllWA7dKrCQJ
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 c7d9288645d6ac47a3da7aa32b297716.cloudfront.net (CloudFront)
x-amz-cf-pop: LAX50-C1
x-amz-cf-id: a5a69UqO45fse30MPHotuBymdWlkY-vuZ76S3pWVtgK9TO0LhuX9kA==
cf-cache-status: HIT
age: 491204
expires: Wed, 04 Oct 2023 10:10:10 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VQg%2BrQSl2Wyupp9M5v%2FV%2BgMLcag8UYqg2%2BpIEveV%2BzN9Li0FnxxUL05mXe4TWT7ShXR3nMaTHgherY9DTE2IutgZBxzlAYjI5K%2FbEl5uhtRuRA3dOqJxH6xYmCCRigkiwUmBKon0hIg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 754d204ddf34b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.hsappstatic.net/conversations-visitor-ui/static-1.13292/i18n-data-data-locales-en-us.js
200 OK 0 B URL HTTP/2 static.hsappstatic.net/conversations-visitor-ui/static-1.13292/i18n-data-data-locales-en-us.js
IP
GET /conversations-visitor-ui/static-1.13292/i18n-data-data-locales-en-us.js HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:10 GMT
content-type: application/javascript
access-control-allow-origin: https://app.hubspot.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Tue, 27 Sep 2022 18:36:30 GMT
etag: W/"90252da4cfd33e680909d40cc81a456b"
x-amz-server-side-encryption: AES256
x-amz-version-id: ceDgXuucQz1PLxRfKSR7xx_vX_2QQY.l
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 d30a7800f939c215cded21c657c43fc8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: d-YudJ4bIe1VupOHgEY_t118lnt0pqhsifMhICDAxt-3z1wuwS7LmA==
cf-cache-status: HIT
age: 329792
expires: Wed, 04 Oct 2023 10:10:10 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tQ%2FEsE8vUI2972mLTAUkkrmGfRmjlGEb6UvXXUL7XcdrbsS7DVB8QIEQtUb671%2FCWh6e%2Fw0TBvNvb%2FlKPkV3Jl1oxujyan9Bpep176dd9liRo4%2FhdP4FEn3r3Kfi9ax3qmvrlBT1Th4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 754d204ed840b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.brandbucket.com/amp/tracking/names/primacosta?source=ext&ext=438673&source=ext
200 OK 0 B URL HTTP/2 www.brandbucket.com/amp/tracking/names/primacosta?source=ext&ext=438673&source=ext
IP
GET /amp/tracking/names/primacosta?source=ext&ext=438673&source=ext HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/
Connection: keep-alive
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:06 GMT
content-type: text/html
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-credentials: true
set-cookie: bb_recent=438673; expires=Mon, 24-Oct-2022 10:10:06 GMT; Max-Age=1728000; path=/
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 754d20377e23b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
dynamic.criteo.com/js/ld/ld.js?a=23078
200 OK 0 B URL HTTP/2 dynamic.criteo.com/js/ld/ld.js?a=23078
IP
GET /js/ld/ld.js?a=23078 HTTP/1.1
Host: dynamic.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:06 GMT
content-type: application/javascript; charset=utf-8
server: Kestrel
cache-control: public,max-age=10800
content-encoding: br
vary: Origin, Accept-Encoding
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:07 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 67125
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.dwin1.com/19038.js
200 OK 0 B IP
GET /19038.js HTTP/1.1
Host: www.dwin1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
x-amz-replication-status: COMPLETED
last-modified: Fri, 30 Sep 2022 13:44:21 GMT
x-amz-version-id: PePIwPZRZIbkiCepyO3R4xCxJh0XNXLN
server: AmazonS3
content-encoding: gzip
date: Tue, 04 Oct 2022 10:08:14 GMT
cache-control: max-age=600, s-maxage=600
etag: W/"d2563bca28261a57e5abbf1655472eaa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zm-3mTKcaEZmsB9YB-CKw3La2OslID9gHCKJ4g47PfiNmYV62BYwOw==
age: 112
X-Firefox-Spdy: h2
static.hsappstatic.net/conversations-visitor-ui/static-1.13325/bundles/visitor.js
200 OK 0 B URL HTTP/2 static.hsappstatic.net/conversations-visitor-ui/static-1.13325/bundles/visitor.js
IP
GET /conversations-visitor-ui/static-1.13325/bundles/visitor.js HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:09 GMT
content-type: application/javascript
access-control-allow-origin: https://app.hubspot.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 30 Sep 2022 15:00:58 GMT
etag: W/"b7314e5c2ccf63c800c5119b6c75b721"
x-amz-server-side-encryption: AES256
x-amz-version-id: alCi0ss_LCvbn4fkk1UpshgP1giGWdic
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 432d52d55ad517cddd9081b248b2f116.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: Q77OVlzgqJmZO26LrIEmmPwCdrEJgiKXviqYcia3pNOUNyBnxJRMOw==
cf-cache-status: HIT
age: 326495
expires: Wed, 04 Oct 2023 10:10:09 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I1KYeN2DjLv85%2BTk%2BuZ5Egy%2Fn%2BQTC08KmRMczB6ZCNezRMeaHjMOBpLlOHoFtCA%2F%2BURxcebkltD2sYeG9lklbaytJrNCfbxR5cuDv8aJKZrumtOYaotQkTNIU%2FAvacWy9CJuLw%2B0S9Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 754d204c0d0eb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=0
200 OK 0 B URL HTTP/2 dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=0
IP
GET /dis/rtb/appnexus/cookiematch.aspx?appnxsid=0 HTTP/1.1
Host: dis.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:07 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP='NON DSP COR CURa PSA PSD OUR BUS NAV STA'
timing-allow-origin: *
server-processing-duration-in-ticks: 649219
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
criteo-partners.tremorhub.com/sync?UICR=k-M6jT_PZ7JCeMDRS4T1MjTjV_SXJcW33Kyz9nuQ
200 OK 0 B URL HTTP/2 criteo-partners.tremorhub.com/sync?UICR=k-M6jT_PZ7JCeMDRS4T1MjTjV_SXJcW33Kyz9nuQ
IP
GET /sync?UICR=k-M6jT_PZ7JCeMDRS4T1MjTjV_SXJcW33Kyz9nuQ HTTP/1.1
Host: criteo-partners.tremorhub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:08 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
static.hsappstatic.net/hubspot-dlb/static-1.323/bundle.production.js
200 OK 0 B URL HTTP/2 static.hsappstatic.net/hubspot-dlb/static-1.323/bundle.production.js
IP
GET /hubspot-dlb/static-1.323/bundle.production.js HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:09 GMT
content-type: application/javascript
access-control-allow-origin: https://app.hubspot.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Wed, 28 Sep 2022 19:48:57 GMT
etag: W/"935799ee774e355e90f1cbb52fd06f07"
x-amz-server-side-encryption: AES256
x-amz-version-id: Ln.tyCbqyOrowcoF3r7BJeIsSNnld2Qd
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 1a8662d51ed58f0336021036df8bf88a.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: VbaAAYEQbfHvxGfIkNWB2pS767L3TM1stqVz9FCSRwTlWK-lU0S3PA==
cf-cache-status: HIT
age: 418619
expires: Wed, 04 Oct 2023 10:10:09 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S7OP2E9dLAQKlC8s%2F6PgxHeVcuv8N%2BZsFa0PJ9DZOcSc%2FWRm4DumEMFR9D3T0GJcu3F7GkDaY%2FxuDMo%2Fk18EDTOdkXG4wj%2BRuVMDFvt8amnXhMA4ZL8bQXJycR%2BoWMhqgxAMhHKA1OY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 754d204c1d10b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.brandbucket.com/amp/cookie?action=load_all&__amp_source_origin=https%3A%2F%2Fwww.brandbucket.com
200 OK 0 B URL HTTP/2 www.brandbucket.com/amp/cookie?action=load_all&__amp_source_origin=https%3A%2F%2Fwww.brandbucket.com
IP
GET /amp/cookie?action=load_all&__amp_source_origin=https%3A%2F%2Fwww.brandbucket.com HTTP/1.1
Host: www.brandbucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.brandbucket.com/names/primacosta?source=ext
AMP-Same-Origin: true
Connection: keep-alive
Cookie: _ga=amp-7tbZo5Aytjy_QZMlOmpIOQ; _uetvid=a70dab60e55711ecad10f9ba179de29e; __hstc=96751872.425fa7c621c8bf293e5e35bfc5e84976.1654492517646.1654492517646.1654492517646.1; hubspotutk=425fa7c621c8bf293e5e35bfc5e84976; cto_bundle=HIQln19mUDNIajlVMiUyRmYzSVQlMkI0c1p6OEVmaHUyN2U3M1JDeGpZbmNqQzRkUFdodkx4S3lJOW5IMGFMJTJGdmpCekclMkJFbk94TjA1dFRhZ0ElMkI3akx1RUFtTEJPZzZudkgxY3JFTktFRW45STI1WjRHN2lYSCUyQlElMkJKNHVPdmZMV2lETndORXhtRjlOajV0QTJHV0llNkNOb1BmdWt3QSUzRCUzRA; PHPSESSID=fbbu4vs5eamf5hm8m5p5j70h54; land_URL=1664878203%3B%2Fnames%2Fprimacosta%3Fsource%3Dext; land_referrer=1664878203%3B; bb_recent=438673
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:05 GMT
content-type: application/json
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-credentials: true
set-cookie: cart=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
fav=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
amp_run_time: 0.005864s
strict-transport-security: max-age=63072000; includeSubDomains; preload; always;
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 754d202d8947b50b-OSL
X-Firefox-Spdy: h2
cdn.ampproject.org/v0.js
200 OK 0 B IP
GET /v0.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 72501
date: Tue, 04 Oct 2022 10:10:04 GMT
expires: Tue, 04 Oct 2022 10:10:04 GMT
cache-control: private, max-age=3000, stale-while-revalidate=1206600
etag: "b0a9bc3cc165f0cd"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-FydOQfZ7JCeMDRS4T1MjTjV_SXLwQ0rDov0h3g&google_error=3
200 OK 0 B URL HTTP/2 dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-FydOQfZ7JCeMDRS4T1MjTjV_SXLwQ0rDov0h3g&google_error=3
IP
GET /dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-FydOQfZ7JCeMDRS4T1MjTjV_SXLwQ0rDov0h3g&google_error=3 HTTP/1.1
Host: dis.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:08 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP='NON DSP COR CURa PSA PSD OUR BUS NAV STA'
timing-allow-origin: *
server-processing-duration-in-ticks: 262595
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?topUrl=www.brandbucket.com&origin=onetag
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?topUrl=www.brandbucket.com&origin=onetag
IP
GET /syncframe?topUrl=www.brandbucket.com&origin=onetag HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.brandbucket.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:06 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=9b5c97dc-5235-4c9f-939a-7671ce109687; expires=Sun, 29 Oct 2023 10:10:06 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 607310
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
sync-t1.taboola.com/sg/criteortb-network/1/rtb-h/?taboola_hm=k-BPDAHfZ7JCeMDRS4T1MjTjV_SXLolzX8BfP-ow
200 OK 0 B URL HTTP/2 sync-t1.taboola.com/sg/criteortb-network/1/rtb-h/?taboola_hm=k-BPDAHfZ7JCeMDRS4T1MjTjV_SXLolzX8BfP-ow
IP
ASN #200478 Taboola.com ltd
GET /sg/criteortb-network/1/rtb-h/?taboola_hm=k-BPDAHfZ7JCeMDRS4T1MjTjV_SXLolzX8BfP-ow HTTP/1.1
Host: sync-t1.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 10:10:08 GMT
x-fastly-to-nlb-rtt: 21141
access-control-allow-credentials: true
X-Firefox-Spdy: h2
static.hsappstatic.net/conversations-visitor-ui/static-1.11843/sass/visitor.css
200 OK 0 B URL HTTP/2 static.hsappstatic.net/conversations-visitor-ui/static-1.11843/sass/visitor.css
IP
GET /conversations-visitor-ui/static-1.11843/sass/visitor.css HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 10:10:09 GMT
content-type: text/css
x-amz-replication-status: PENDING
last-modified: Mon, 15 Nov 2021 19:50:41 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: LgyvJN0nZOCplqIYlCYJJ1cibXdW_3K_
etag: W/"370a89ea102d7b437eb549729472631f"
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 ef25da0c32f918931915d02ad16016b9.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-C1
x-amz-cf-id: sozNdfbKXPQ27W1Gh5_Ogz2KizWAagYWFHGF-Qbcer07dank0z_klg==
cf-cache-status: HIT
age: 1188597
expires: Wed, 04 Oct 2023 10:10:09 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uYRe0vIeHReZp0bXXxLr%2FdqpHW4BquB9q7Qnm5zvOHoeDIXkVwSQTPG5PF%2Fk%2BNJ65Uggll5OwcFOkvSUbQ19WQb3XPGH7XP%2BqOIka0qjpxwSr583msJu3jGqrsSzAOQczMeKk4%2B2kRQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 754d204c09531c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
13.56.33.8
151.101.84.84
23.195.255.234
18.159.40.100
178.250.0.163
104.18.32.68
213.19.162.80
37.157.2.234
52.214.200.155
141.226.228.48