| recruitment-agency-london-2023.reg.buzz/rae-eshot?mc_cid=4eb4aa9c59&mc_eid=27ab710a86 |  172.67.26.148 | 301 Moved Permanently | 0 B |
URL HTTP/1.1recruitment-agency-london-2023.reg.buzz/rae-eshot?mc_cid=4eb4aa9c59&mc_eid=27ab710a86 IP172.67.26.148:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET /rae-eshot?mc_cid=4eb4aa9c59&mc_eid=27ab710a86 HTTP/1.1
Host: recruitment-agency-london-2023.reg.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 31 Jan 2023 11:10:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 31 Jan 2023 12:10:16 GMT
Location: https://recruitment-agency-london-2023.reg.buzz/rae-eshot?mc_cid=4eb4aa9c59&mc_eid=27ab710a86
Set-Cookie: __cf_bm=leg_ZzZhPTYesfbtCtCGvldj4iR_DSBkhLP80nwfTcs-1675163416-0-Aa9sZNH8lnu/2Vge3zfMAwk9ZlmmgVSCFHRAM6thz/P55szPAn7d64/r5y9uqppOBDVOx742ta4ryizDHUfmOJ0=; path=/; expires=Tue, 31-Jan-23 11:40:16 GMT; domain=.reg.buzz; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7921fffa0dcbb51e-OSL
|
|
| r3.o.lencr.org/ |  95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash0c35c3ec659d3a26ea97e68d787bb043 d97e3672244efec5b7814f2d8a734cd1a9387854 4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2210
Expires: Tue, 31 Jan 2023 11:47:06 GMT
Date: Tue, 31 Jan 2023 11:10:16 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashd2e72d45afe3d391c204b5391599607c 149d68b9d00a720b6f380fa2324779dca9dbe26d f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14323
Expires: Tue, 31 Jan 2023 15:08:59 GMT
Date: Tue, 31 Jan 2023 11:10:16 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashdcd75ca6daca51c5e39d431468511793 07f76d3bf23d65c9110d810fa71a994e39e085d3 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 10:43:17 GMT
content-type: application/json
age: 1619
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hasha8d45deaa7ebfcd996c2055dae592ab8 55befe074589fe7b39757c145968058162a8fc6b 50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10731
Expires: Tue, 31 Jan 2023 14:09:07 GMT
Date: Tue, 31 Jan 2023 11:10:16 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: GsyEYX1PgWYRAfGbxZJUQrkk6ZvchnIc2OekWWOXimzPERzhtAWTX5dUz0lOBlh9UUGklM5ud3I=
x-amz-request-id: RSTN48RH8GA8ZCYB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 10:22:11 GMT
age: 2885
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hashcaa8d2b85164dc57c09f3aead2bc871a 223364973460a619b7df8dbe4f24f4dd1b366ade 222b1156b1507f40eff22dc63e0e1d04196d93d8ee7cc94e391a9cf5c6a91c81
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:10:17 GMT
Etag: "63d6b2d2-117"
Server: ECS (amb/6BA5)
Content-Length: 278
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:10:17 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 10:41:42 GMT
age: 1715
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash22b9916fc1fafc9bdc9bb37f9eac8a9a 86f640e134a741a0f906a8e3a0f5c6659dd0e394 a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15028
Expires: Tue, 31 Jan 2023 15:20:45 GMT
Date: Tue, 31 Jan 2023 11:10:17 GMT
Connection: keep-alive
|
|
| cdnjs.cloudflare.com/ajax/libs/babel-polyfill/6.26.0/polyfill.min.js |  104.17.25.14 | 200 OK | 30 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/babel-polyfill/6.26.0/polyfill.min.js IP104.17.25.14:0
File typeUnicode text, UTF-8 text, with very long lines (31999), with LF, NEL line terminators Hash8e40e09a5ab192af76b40edb602212d6 eeb2446ca62e29fe69b2f10c961510a0c7b4612f af25536d6c64c3cf00c3b81789199d8c82d050177800bbd5a19bfd09abce887e
GET /ajax/libs/babel-polyfill/6.26.0/polyfill.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:10:17 GMT
content-type: application/javascript; charset=utf-8
content-length: 29511
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d6b-19873"
last-modified: Mon, 04 May 2020 16:06:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1616627
expires: Sun, 21 Jan 2024 11:10:17 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CElpS3iRWXIZFYQ22IC5GMIQF6PzviOXhH9tW6sUVhwWSpmqWSIT09yJLAN0CD3b1PDbf2c1gTra6jR%2BK%2FQWMNMrjFIKAysY4TVLZaf1uRb%2FqNOlqnIjiYj53kQm46VsGYg%2FtYN1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79220001fc9fb505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| recruitment-agency-london-2023.reg.buzz/images/livebuzz-logo-white.png | 172.67.26.148 | 200 OK | 16 kB |
URL HTTP/2recruitment-agency-london-2023.reg.buzz/images/livebuzz-logo-white.png IP172.67.26.148:0
File typePNG image data, 600 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash838aa8f05e06ab2d5ce390c2154bf191 085fcdc623dd01231e78e80a9a22070ecd00fa5f d544a70295c68ab2afffa517e94ded7f8ff4cfe80d87cd31326d3d32a84b6fac
GET /images/livebuzz-logo-white.png HTTP/1.1
Host: recruitment-agency-london-2023.reg.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/rae-eshot?mc_cid=4eb4aa9c59&mc_eid=27ab710a86
Cookie: ApplicationGatewayAffinityCORS=8dac2540a0d13940f6c3a92019a5d103; ApplicationGatewayAffinity=8dac2540a0d13940f6c3a92019a5d103; XSRF-TOKEN=eyJpdiI6ImI2V25PRW41V3VjdStOMTZPcUJSemc9PSIsInZhbHVlIjoiZEo4YTFwZTRmQ1dneWVnWlpVeDlxWUw0eXY1U24xczkyV2ZSM3N2VkdxeHZIRW5ocEUzOFwvb1lDMlZ2ZDhYWSsiLCJtYWMiOiJjYWYxOGMxZDVjN2RlZjMyODI4YmM2MmI5MDJlMDE5M2FkODFkYTE4MWI1YTUwZGM5NjY1NzRhYTIzZDc5NGE2In0%3D; buzz_session=qSqcAOJdR4bETbu8JTOvii7nTNX0d912fcMuPsQ0; __cf_bm=4L.vPzXVfnyd_oOV95RnLJPBiGxVs0KUGHB837GuQvc-1675163417-0-AYOHjXsoIFmZgGiVrl/0BjvWixEovXe1QwVmGhYdrTo87+ooCG2ln525btY4BAg0oo+G7S4UgJlEu+e44W77FzM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:10:17 GMT
content-type: image/png
content-length: 16389
last-modified: Thu, 19 Jan 2023 10:40:21 GMT
etag: "63c91e15-4005"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79220001dd72b500-OSL
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 35.81.123.193 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.81.123.193:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IMzf+FznKYrt1NxxZViAJQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /D4eyyLykbmSldLPb8iufsxfDIk=
|
|
| recruitment-agency-london-2023.reg.buzz/js/buzz.js?id=4e9ac381f4758b930f04 | 172.67.26.148 | 200 OK | 4.2 kB |
URL HTTP/2recruitment-agency-london-2023.reg.buzz/js/buzz.js?id=4e9ac381f4758b930f04 IP172.67.26.148:0
Hash0a16f6fa6a719d288080090de9b56b4b 7f5fba0dd339b6249a1a5d8b189c782fa82b805e def68bbe88a8f9c78aea9ed5ddb44711c9e47d47cb5a207ed8132cf9f41efdba
GET /js/buzz.js?id=4e9ac381f4758b930f04 HTTP/1.1
Host: recruitment-agency-london-2023.reg.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/rae-eshot?mc_cid=4eb4aa9c59&mc_eid=27ab710a86
Cookie: ApplicationGatewayAffinityCORS=8dac2540a0d13940f6c3a92019a5d103; ApplicationGatewayAffinity=8dac2540a0d13940f6c3a92019a5d103; XSRF-TOKEN=eyJpdiI6ImI2V25PRW41V3VjdStOMTZPcUJSemc9PSIsInZhbHVlIjoiZEo4YTFwZTRmQ1dneWVnWlpVeDlxWUw0eXY1U24xczkyV2ZSM3N2VkdxeHZIRW5ocEUzOFwvb1lDMlZ2ZDhYWSsiLCJtYWMiOiJjYWYxOGMxZDVjN2RlZjMyODI4YmM2MmI5MDJlMDE5M2FkODFkYTE4MWI1YTUwZGM5NjY1NzRhYTIzZDc5NGE2In0%3D; buzz_session=qSqcAOJdR4bETbu8JTOvii7nTNX0d912fcMuPsQ0; __cf_bm=4L.vPzXVfnyd_oOV95RnLJPBiGxVs0KUGHB837GuQvc-1675163417-0-AYOHjXsoIFmZgGiVrl/0BjvWixEovXe1QwVmGhYdrTo87+ooCG2ln525btY4BAg0oo+G7S4UgJlEu+e44W77FzM=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:10:17 GMT
content-type: application/javascript
last-modified: Thu, 19 Jan 2023 10:40:21 GMT
etag: W/"63c91e15-2712"
cache-control: max-age=14400
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 79220001ed78b500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.39 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.39:0
Hash8fe43aaf6fc1593efebaa7617dd1f037 b8b4ecfd6911686610fcf9bfa95cc643fbe503ce ab3d49218ca6b179c00aa166e4f7879e9c4a95233614c0dbfe6dd3a26fd68e6c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=170980
Date: Tue, 31 Jan 2023 11:10:18 GMT
Etag: "63d8d74f-1d7"
Expires: Thu, 02 Feb 2023 10:39:58 GMT
Last-Modified: Tue, 31 Jan 2023 08:54:39 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hkjBxgjgySXEtn7JVAj-NOsFqSnhej1HwuiMA3L2pRSiRSxT_LPTXw==
Age: 6319
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash40bac282ee9730b7a7fde839fcf58736 be00063ec5c760560f34663d0a6a9cad87cfebe4 45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:10:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.39 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.39:0
Hash184491128cfb1a27b7922d7c90a9daa9 ab86c62cf0d980129619a294e1a927d30a5c0a3e 081c330bc1edbc3d9c1b90c3632f9b2cef5a2e15fd0f48e58bfa3115f8898d52
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 31 Jan 2023 11:10:18 GMT
Last-Modified: Tue, 31 Jan 2023 09:25:39 GMT
Server: ECS (dcb/7F82)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ny9VjGxkGHQZYsdBRnCGP35xTMQaNK11dAQ9qyRDHnzMSZMXCpj4ow==
Age: 6279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash063b1ec88d56dbb98ebe3c5989d676aa 6e88a086e55ed7d5f3a2e59bc2f19e61f8298fee dc4bb629fde210bb7df8c0b78bf3b58a9ea6d9d73d7d0f35e1388b346464f373
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6234
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:10:18 GMT
Last-Modified: Tue, 31 Jan 2023 09:26:24 GMT
Server: ECS (amb/6BC2)
X-Cache: HIT
Content-Length: 279
|
|
| livebuzz-production.s3.eu-west-1.amazonaws.com/bluewater-events/stream/273275ce-5c30-11ed-88c1-000000000000/system/system_logo.jpg |  52.218.56.96 | 200 OK | 108 kB |
URL HTTP/1.1livebuzz-production.s3.eu-west-1.amazonaws.com/bluewater-events/stream/273275ce-5c30-11ed-88c1-000000000000/system/system_logo.jpg IP52.218.56.96:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 800x200, components 3\012- data Size108 kB (108407 bytes) Hash0409a2b8c2c836ffcc00114522596e30 e1eebf4aa00019883a0a985d67f94f9dde3d1975 514ff9b10c1fae871334b0f7884df913c8b81c507a37910020e83f2138d05c00
GET /bluewater-events/stream/273275ce-5c30-11ed-88c1-000000000000/system/system_logo.jpg HTTP/1.1
Host: livebuzz-production.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: Stx9IkHPDLek/FgSSLP6JW1vomscl1vbsHN7i3Sk8fShqdjBJW9Z3I1A4VJqNqdALfA/WcVrXow=
x-amz-request-id: PBJF2H2HFPE3R3J9
Date: Tue, 31 Jan 2023 11:10:19 GMT
Last-Modified: Tue, 22 Nov 2022 11:40:18 GMT
ETag: "0409a2b8c2c836ffcc00114522596e30"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 108407
|
|
| fonts.googleapis.com/css?family=Raleway:300,400,600 | 142.250.74.138 | 200 OK | 78 kB |
URL HTTP/2fonts.googleapis.com/css?family=Raleway:300,400,600 IP142.250.74.138:0
Hashd8d3481e7f6e4ed5d9ddcd033b485236 ace6c6156da0853950cf9ddebded4ecda3b48c9c 243e2bdb1aac9620c3963c7f1a41ed0d48506962b6f932a9a3beba91618b511b
GET /css?family=Raleway:300,400,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 11:10:18 GMT
date: Tue, 31 Jan 2023 11:10:18 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| livebuzz-production.s3.eu-west-1.amazonaws.com/bluewater-events/campaign/58204a0e-5c2f-11ed-b632-000000000000/RAE23-LON-VISITOR-PAGE-BACKGROUND-1920X1080-V4.jpg | 52.218.56.96 | 200 OK | 1.5 MB |
URL HTTP/1.1livebuzz-production.s3.eu-west-1.amazonaws.com/bluewater-events/campaign/58204a0e-5c2f-11ed-b632-000000000000/RAE23-LON-VISITOR-PAGE-BACKGROUND-1920X1080-V4.jpg IP52.218.56.96:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 2289x1080, components 3\012- data Size1.5 MB (1457069 bytes) Hash9254c7203d707aa08d9dbe2dd54e1820 e9de3ec922fa07ba268ac3d19250af430600b13c 72b52763b8c0cc01e01c564c298fdc078b01bbb8258381c0a3fe3e79ed4727d4
GET /bluewater-events/campaign/58204a0e-5c2f-11ed-b632-000000000000/RAE23-LON-VISITOR-PAGE-BACKGROUND-1920X1080-V4.jpg HTTP/1.1
Host: livebuzz-production.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: +ZsnZ24sZfdCOeUV7Gc5/ZeKRg0u8AzX+Pga5P/d3vHpeWemAABkAMLHw3YEXd5y10CF2Z/90W4=
x-amz-request-id: PBJ6C2MN3TM7RZST
Date: Tue, 31 Jan 2023 11:10:19 GMT
Last-Modified: Tue, 22 Nov 2022 11:39:29 GMT
ETag: "9254c7203d707aa08d9dbe2dd54e1820"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 1457069
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashd48dd8b2c5f59237b93866b9d3e3c4ea 6b81734848c405d64207aa7c0fe57f882cc88828 073ceb3f06686de53abdc6d4bda39cc3b6562fe9dd4d1457e7c6870dcade3667
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "073CEB3F06686DE53ABDC6D4BDA39CC3B6562FE9DD4D1457E7C6870DCADE3667"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14273
Expires: Tue, 31 Jan 2023 15:08:11 GMT
Date: Tue, 31 Jan 2023 11:10:18 GMT
Connection: keep-alive
|
|
| cdn.feathr.co/js/boomerang.min.js | 172.67.159.92 | 200 OK | 53 kB |
URL HTTP/2cdn.feathr.co/js/boomerang.min.js IP172.67.159.92:0
File typeUnicode text, UTF-8 text, with very long lines (65464) Hash1973e353a55feb11345a1d0ab116c936 499cdf426d57597a6cbf9c093deb974401de581b f5c07afefb72dfef0867f6d8d22951eadd7a297124d48561063702c1a311d0b6
GET /js/boomerang.min.js HTTP/1.1
Host: cdn.feathr.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:10:18 GMT
content-type: text/javascript; charset=utf-8
x-amz-id-2: CloyzBJZVpVxqm+Kc3hOcFJjXMw4dLxYzi0RQSPUL9Wo8hcjdSSH39e2yDMnbnQ790lZQblQ4I4=
x-amz-request-id: EYSVCAAWW1HD35B2
last-modified: Wed, 07 Dec 2022 16:15:56 GMT
x-amz-version-id: Zr93uu74l0PMqqqVrsHYWd9wSbolPgQw
etag: W/"51d5b76c27d7ab6f3bb2e545bf73b2bf"
cache-control: max-age=14400
cf-cache-status: HIT
age: 873
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AOTXGzbG0NTikJdnkPWdbLd1SHq4akCv4JGSUDjaG7a8VXaMjX8bH2dcWRTRqsK3IMQTX8d4rtKkYMaJnL%2Bi%2BESX%2BIyJQQsrWpnkm7O%2FfzYKO7xlz3GrDQWLczPleDT4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 792200038b46b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| polo.feathr.co/v1/accounts/5de55f567d9144f98554bda1/integrations | 54.204.247.164 | 200 OK | 31 B |
URL HTTP/2polo.feathr.co/v1/accounts/5de55f567d9144f98554bda1/integrations IP54.204.247.164:0
File typeJSON data\012- , ASCII text Hashb4e8a630470a9512c846504a5afd5a50 2bd1c0c5ab56bcb2b60db1cc7aafeff7f276d54f 559382b44a7cb0b397c474fe76532f50b622824e15440784425d1f4a42a991de
GET /v1/accounts/5de55f567d9144f98554bda1/integrations HTTP/1.1
Host: polo.feathr.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://recruitment-agency-london-2023.reg.buzz
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.8
date: Tue, 31 Jan 2023 11:10:18 GMT
content-type: application/json
content-length: 31
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
X-Firefox-Spdy: h2
|
|
| app.ingo.me/api/v2/widget/event/empty.gif?wi=6E256ED7F4024DAD89050B59A0150A77&ei=873B1C5E68204B119B21C7BEEF9E7D6B&wt=login&wv=2.17.4&e=render%3Astarted&u=https%3A%2F%2Frecruitment-agency-london-2023.reg.buzz%2Frae-eshot%3Fmc_cid%3D4eb4aa9c59%26mc_eid%3D27ab710a86&t=1675163434849&ci=IT-364727351620.1675163434842 | 54.144.83.194 | 200 OK | 35 B |
URL HTTP/2app.ingo.me/api/v2/widget/event/empty.gif?wi=6E256ED7F4024DAD89050B59A0150A77&ei=873B1C5E68204B119B21C7BEEF9E7D6B&wt=login&wv=2.17.4&e=render%3Astarted&u=https%3A%2F%2Frecruitment-agency-london-2023.reg.buzz%2Frae-eshot%3Fmc_cid%3D4eb4aa9c59%26mc_eid%3D27ab710a86&t=1675163434849&ci=IT-364727351620.1675163434842 IP54.144.83.194:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash28d6814f309ea289f847c69cf91194c6 0f4e929dd5bb2564f7ab9c76338e04e292a42ace 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /api/v2/widget/event/empty.gif?wi=6E256ED7F4024DAD89050B59A0150A77&ei=873B1C5E68204B119B21C7BEEF9E7D6B&wt=login&wv=2.17.4&e=render%3Astarted&u=https%3A%2F%2Frecruitment-agency-london-2023.reg.buzz%2Frae-eshot%3Fmc_cid%3D4eb4aa9c59%26mc_eid%3D27ab710a86&t=1675163434849&ci=IT-364727351620.1675163434842 HTTP/1.1
Host: app.ingo.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:10:18 GMT
content-type: image/gif; charset=utf-8
content-length: 35
server: cloudflare-nginx
expires: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
set-cookie: SESSID=65058305-d6bb-48b4-90b3-7e44e12813f7; Path=/; Max-Age=3600; HttpOnly; SameSite=None; Secure
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
p3p: CP="Potato"
X-Firefox-Spdy: h2
|
|
| app.ingo.me/api/v2/widget/event/empty.gif?wi=6E256ED7F4024DAD89050B59A0150A77&ei=873B1C5E68204B119B21C7BEEF9E7D6B&wt=login&wv=2.17.4&e=render%3Afinished&u=https%3A%2F%2Frecruitment-agency-london-2023.reg.buzz%2Frae-eshot%3Fmc_cid%3D4eb4aa9c59%26mc_eid%3D27ab710a86&t=1675163434856&ci=IT-364727351620.1675163434842 | 54.144.83.194 | 200 OK | 35 B |
URL HTTP/2app.ingo.me/api/v2/widget/event/empty.gif?wi=6E256ED7F4024DAD89050B59A0150A77&ei=873B1C5E68204B119B21C7BEEF9E7D6B&wt=login&wv=2.17.4&e=render%3Afinished&u=https%3A%2F%2Frecruitment-agency-london-2023.reg.buzz%2Frae-eshot%3Fmc_cid%3D4eb4aa9c59%26mc_eid%3D27ab710a86&t=1675163434856&ci=IT-364727351620.1675163434842 IP54.144.83.194:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash28d6814f309ea289f847c69cf91194c6 0f4e929dd5bb2564f7ab9c76338e04e292a42ace 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /api/v2/widget/event/empty.gif?wi=6E256ED7F4024DAD89050B59A0150A77&ei=873B1C5E68204B119B21C7BEEF9E7D6B&wt=login&wv=2.17.4&e=render%3Afinished&u=https%3A%2F%2Frecruitment-agency-london-2023.reg.buzz%2Frae-eshot%3Fmc_cid%3D4eb4aa9c59%26mc_eid%3D27ab710a86&t=1675163434856&ci=IT-364727351620.1675163434842 HTTP/1.1
Host: app.ingo.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:10:18 GMT
content-type: image/gif; charset=utf-8
content-length: 35
server: cloudflare-nginx
expires: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
set-cookie: SESSID=84d8fde3-6ae5-45d7-9e28-bcb66ea1178c; Path=/; Max-Age=3600; HttpOnly; SameSite=None; Secure
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
p3p: CP="Potato"
X-Firefox-Spdy: h2
|
|
| livebuzz-production.s3.eu-west-1.amazonaws.com/bluewater-events/campaign/58204a0e-5c2f-11ed-b632-000000000000/favicon.png | 52.218.56.96 | 200 OK | 468 B |
URL HTTP/1.1livebuzz-production.s3.eu-west-1.amazonaws.com/bluewater-events/campaign/58204a0e-5c2f-11ed-b632-000000000000/favicon.png IP52.218.56.96:0
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data Hashf7b29eb15883bbf100b1eda360f64446 24a85643a8ba5f214a7b7c02ab50d83bfbf29fa9 618b84e95ed19362caa1fc27e1839e3b51507a18f8a161a7d75ed216bf4fa41b
GET /bluewater-events/campaign/58204a0e-5c2f-11ed-b632-000000000000/favicon.png HTTP/1.1
Host: livebuzz-production.s3.eu-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: jcvQEg/LFrpvt1KbeqG5iDG3mD9KL7auBOC3Qm/Nt9Yu2bkAon73dpky2RL+zm/tJCn+kbFi+jA=
x-amz-request-id: GNBY78RRQ0HZFX1S
Date: Tue, 31 Jan 2023 11:10:20 GMT
Last-Modified: Fri, 02 Dec 2022 11:34:26 GMT
ETag: "f7b29eb15883bbf100b1eda360f64446"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 468
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashdfb84426fed94988d5c90372baff059c f1c4740830034ff8a5759d59ae3f657ea524d083 d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8192
Expires: Tue, 31 Jan 2023 13:26:51 GMT
Date: Tue, 31 Jan 2023 11:10:19 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashdfb84426fed94988d5c90372baff059c f1c4740830034ff8a5759d59ae3f657ea524d083 d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8192
Expires: Tue, 31 Jan 2023 13:26:51 GMT
Date: Tue, 31 Jan 2023 11:10:19 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashdfb84426fed94988d5c90372baff059c f1c4740830034ff8a5759d59ae3f657ea524d083 d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8192
Expires: Tue, 31 Jan 2023 13:26:51 GMT
Date: Tue, 31 Jan 2023 11:10:19 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2c4934be94898028e2ab696561b51462 6cf734e2d29938688913daacfb75506d8e004a94 239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Gif_csWkacU59D_hnOrJpK6u2aPI8Ylf2JyQEJZ2RLNMCrXSmmMa9w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:56:35 GMT
age: 33224
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4a2d26da68a313cc65958fc2692351c2 798c3538f3147ca77d317676ddd1bf040bd0f93b 76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10898
x-amzn-requestid: e29f8dfc-07d4-4136-afaf-e1e067eea2ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zxGshIAMFw5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-5e87d2a44722af9e4e86c3d4;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XYo_QvM8GWDyulOtUb5nVjS9PxOinaRJ3lYvCreeqd_9tHI5yv5xcQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:48:21 GMT
age: 48118
etag: "798c3538f3147ca77d317676ddd1bf040bd0f93b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70d0f84c-475c-41c3-922d-8f0be8fbfff4.jpeg | 34.120.237.76 | 200 OK | 6.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70d0f84c-475c-41c3-922d-8f0be8fbfff4.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf6790dfb54452775c77c50890d17669a a21e3ac869acae92640075dcb9da9ded4b7f0c92 b24238875cca2327ef4df93e5e66303f02b7f64265faebcb033a245c14638817
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70d0f84c-475c-41c3-922d-8f0be8fbfff4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6481
x-amzn-requestid: ca20c9a5-983f-4cde-a833-2a561c13af95
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY-T9FcXoAMFnlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d3774c-665397d31a681a155b8a7d53;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:03:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BpOJ8IlnGRS5RbTLM1pQdk11d9NJLiiUy7oIMbwYykeX5E6OyAAFdw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 17:04:34 GMT
age: 65145
etag: "a21e3ac869acae92640075dcb9da9ded4b7f0c92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg | 34.120.237.76 | 200 OK | 14 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash63486f2a937aa8fd013fc2c2d1b32f2d e8868de34c2f79348c1edad764259eb70bebd7a6 fa6e5ce374031c0df3b3f2d6de823cf1fe08fdaf9957a0722770867cfdec0ed1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13639
x-amzn-requestid: 8131c878-620a-4972-ba8f-1456859acae2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYcJSF0SIAMFe1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d340a1-18c7280940d508c440c0182c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:10:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: L6MnX0h8Bn9-ufqI6yOzQAPhqc4SoJKySgzlm756NaiVrfJpnftIWQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 06:29:38 GMT
age: 16841
etag: "e8868de34c2f79348c1edad764259eb70bebd7a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg | 34.120.237.76 | 200 OK | 9.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3366ef4f8733cb9c89a5c88f63a0a441 7da46843b6d885f38a4759a08e6c899906ab7b97 7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 00:33:02 GMT
age: 38237
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa70b0b84-f0e7-44e4-a574-ee3e55fbc0d3.jpeg | 34.120.237.76 | 200 OK | 4.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa70b0b84-f0e7-44e4-a574-ee3e55fbc0d3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb43468b05cd1fd11c398263a80e4edb2 02e964ea5a88c866267ac6c5601bfcde26ffd42b 19783f05297f7ed5d7ca8cec0fc0e1676831275ac48f1510a4f410dbe2802314
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa70b0b84-f0e7-44e4-a574-ee3e55fbc0d3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4634
x-amzn-requestid: 2941da94-203c-47d1-99ee-d864bdbf6993
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffCAHF9kIAMFrUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e39a-78bb7189351d830a7ef70c67;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:10:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hWONP8eVA6h5VMyREx_CgRY2zeb9KUxipWiXdx9dHBtU2YDV07lGXQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 05:35:57 GMT
age: 20062
etag: "02e964ea5a88c866267ac6c5601bfcde26ffd42b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| polo.feathr.co/v1/accounts/5de55f567d9144f98554bda1/pixel.js?pk=feathr | 54.204.247.164 | 200 OK | 32 B |
URL HTTP/2polo.feathr.co/v1/accounts/5de55f567d9144f98554bda1/pixel.js?pk=feathr IP54.204.247.164:0
Hash9661451032832f869c969fbfcb85bc8b a680f072c27e72a8dcc6ad56b53d5286b31ff875 eacfa4f711eaca1336ff82619c8a2d310dec11266d594fbc7e5a91259cebf848
GET /v1/accounts/5de55f567d9144f98554bda1/pixel.js?pk=feathr HTTP/1.1
Host: polo.feathr.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Cookie: f_id=63d8f71aa820fc0008a49a44
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.8
date: Tue, 31 Jan 2023 11:10:19 GMT
content-type: text/javascript
content-length: 32
cache-control: must-revalidate, max-age=14400
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/gsgccr3dvtlsca2020 | 104.18.21.226 | 200 OK | 1.4 kB |
URL HTTP/1.1ocsp.globalsign.com/gsgccr3dvtlsca2020 IP104.18.21.226:0
Hash9147edb9c72f53cf2485d0924bc178de 1f3ec780cffe31be389db972505796d746047c13 622130dc6411fcb7c1047bd324ebd2f6fec88fa80ede18e96fef93135824f2db
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 11:10:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sat, 04 Feb 2023 09:22:09 GMT
ETag: "1f3ec780cffe31be389db972505796d746047c13"
Last-Modified: Tue, 31 Jan 2023 09:22:10 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3167
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7922000b08e00b3d-OSL
|
|
| polo.feathr.co/v1/analytics/match/script.js?pk=feathr&cb=1675163435309 | 54.204.247.164 | 200 OK | 229 B |
URL HTTP/2polo.feathr.co/v1/analytics/match/script.js?pk=feathr&cb=1675163435309 IP54.204.247.164:0
Hashdd94d5db8e944481b33f6a018f0bc869 19cb3624529c1cf69c599f42401f4ad322f49a0e 8059e020d93011997890cc3d72824f6d5ff1398d7690f9e45cc5df098755e38b
GET /v1/analytics/match/script.js?pk=feathr&cb=1675163435309 HTTP/1.1
Host: polo.feathr.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Cookie: f_id=63d8f71aa820fc0008a49a44
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.8
date: Tue, 31 Jan 2023 11:10:19 GMT
content-type: text/javascript
vary: Accept-Encoding
cache-control: no-cache, max-age=0
etag: W/"63d8f71aa820fc0008a49a44"
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| polo.feathr.co/v1/analytics/crumb?cb=1675163439708&a_id=5de55f567d9144f98554bda1&f_id=63d8f71aa820fc0008a49a44&ses_id=63d8f72a2861063654d5d0be&flvr=page_view&loc_url=https%3A%2F%2Frecruitment-agency-london-2023.reg.buzz%2Frae-eshot%3Fmc_cid%3D4eb4aa9c59%26mc_eid%3D27ab710a86&s_w=1280&s_h=1024&b_w=1280&b_h=939&cust_params=e30= | 54.204.247.164 | 200 OK | 43 B |
URL HTTP/2polo.feathr.co/v1/analytics/crumb?cb=1675163439708&a_id=5de55f567d9144f98554bda1&f_id=63d8f71aa820fc0008a49a44&ses_id=63d8f72a2861063654d5d0be&flvr=page_view&loc_url=https%3A%2F%2Frecruitment-agency-london-2023.reg.buzz%2Frae-eshot%3Fmc_cid%3D4eb4aa9c59%26mc_eid%3D27ab710a86&s_w=1280&s_h=1024&b_w=1280&b_h=939&cust_params=e30= IP54.204.247.164:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdb04c7b378cb2db912c3ba8a5a774ee3 dee34bd86c3484d31002182aa2b7caa4699126b8 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /v1/analytics/crumb?cb=1675163439708&a_id=5de55f567d9144f98554bda1&f_id=63d8f71aa820fc0008a49a44&ses_id=63d8f72a2861063654d5d0be&flvr=page_view&loc_url=https%3A%2F%2Frecruitment-agency-london-2023.reg.buzz%2Frae-eshot%3Fmc_cid%3D4eb4aa9c59%26mc_eid%3D27ab710a86&s_w=1280&s_h=1024&b_w=1280&b_h=939&cust_params=e30= HTTP/1.1
Host: polo.feathr.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Cookie: f_id=63d8f71aa820fc0008a49a44
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.8
date: Tue, 31 Jan 2023 11:10:23 GMT
content-type: image/gif
content-length: 43
cache-control: max-age=0,no-cache,no-store
set-cookie: f_id=63d8f71aa820fc0008a49a44; Domain=.feathr.co; Expires=Wed, 31-Jan-2024 11:10:23 GMT; Secure; Path=/; SameSite=None
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
X-Firefox-Spdy: h2
|
|
| recruitment-agency-london-2023.reg.buzz/css/app.css?id=f581d61749438e729f7e | 172.67.26.148 | 200 OK | 0 B |
URL HTTP/2recruitment-agency-london-2023.reg.buzz/css/app.css?id=f581d61749438e729f7e IP172.67.26.148:0
GET /css/app.css?id=f581d61749438e729f7e HTTP/1.1
Host: recruitment-agency-london-2023.reg.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/rae-eshot?mc_cid=4eb4aa9c59&mc_eid=27ab710a86
Cookie: ApplicationGatewayAffinityCORS=8dac2540a0d13940f6c3a92019a5d103; ApplicationGatewayAffinity=8dac2540a0d13940f6c3a92019a5d103; XSRF-TOKEN=eyJpdiI6ImI2V25PRW41V3VjdStOMTZPcUJSemc9PSIsInZhbHVlIjoiZEo4YTFwZTRmQ1dneWVnWlpVeDlxWUw0eXY1U24xczkyV2ZSM3N2VkdxeHZIRW5ocEUzOFwvb1lDMlZ2ZDhYWSsiLCJtYWMiOiJjYWYxOGMxZDVjN2RlZjMyODI4YmM2MmI5MDJlMDE5M2FkODFkYTE4MWI1YTUwZGM5NjY1NzRhYTIzZDc5NGE2In0%3D; buzz_session=qSqcAOJdR4bETbu8JTOvii7nTNX0d912fcMuPsQ0; __cf_bm=4L.vPzXVfnyd_oOV95RnLJPBiGxVs0KUGHB837GuQvc-1675163417-0-AYOHjXsoIFmZgGiVrl/0BjvWixEovXe1QwVmGhYdrTo87+ooCG2ln525btY4BAg0oo+G7S4UgJlEu+e44W77FzM=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:10:17 GMT
content-type: text/css
last-modified: Thu, 19 Jan 2023 10:40:21 GMT
etag: W/"63c91e15-3728f"
cache-control: max-age=14400
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 79220001dd6eb500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| recruitment-agency-london-2023.reg.buzz/js/vendor.js?id=73fafd341f954f286a45 | 172.67.26.148 | 200 OK | 0 B |
URL HTTP/2recruitment-agency-london-2023.reg.buzz/js/vendor.js?id=73fafd341f954f286a45 IP172.67.26.148:0
GET /js/vendor.js?id=73fafd341f954f286a45 HTTP/1.1
Host: recruitment-agency-london-2023.reg.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/rae-eshot?mc_cid=4eb4aa9c59&mc_eid=27ab710a86
Cookie: ApplicationGatewayAffinityCORS=8dac2540a0d13940f6c3a92019a5d103; ApplicationGatewayAffinity=8dac2540a0d13940f6c3a92019a5d103; XSRF-TOKEN=eyJpdiI6ImI2V25PRW41V3VjdStOMTZPcUJSemc9PSIsInZhbHVlIjoiZEo4YTFwZTRmQ1dneWVnWlpVeDlxWUw0eXY1U24xczkyV2ZSM3N2VkdxeHZIRW5ocEUzOFwvb1lDMlZ2ZDhYWSsiLCJtYWMiOiJjYWYxOGMxZDVjN2RlZjMyODI4YmM2MmI5MDJlMDE5M2FkODFkYTE4MWI1YTUwZGM5NjY1NzRhYTIzZDc5NGE2In0%3D; buzz_session=qSqcAOJdR4bETbu8JTOvii7nTNX0d912fcMuPsQ0; __cf_bm=4L.vPzXVfnyd_oOV95RnLJPBiGxVs0KUGHB837GuQvc-1675163417-0-AYOHjXsoIFmZgGiVrl/0BjvWixEovXe1QwVmGhYdrTo87+ooCG2ln525btY4BAg0oo+G7S4UgJlEu+e44W77FzM=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:10:17 GMT
content-type: application/javascript
last-modified: Thu, 19 Jan 2023 10:40:21 GMT
etag: W/"63c91e15-9489f"
cache-control: max-age=14400
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 79220001ed75b500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.ingo.me/widgets/6E256ED7F4024DAD89050B59A0150A77.js | 54.230.111.61 | 200 OK | 0 B |
URL HTTP/2cdn.ingo.me/widgets/6E256ED7F4024DAD89050B59A0150A77.js IP54.230.111.61:0
GET /widgets/6E256ED7F4024DAD89050B59A0150A77.js HTTP/1.1
Host: cdn.ingo.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 11 Jan 2023 11:34:21 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: M1LhzYfFk3q9eEEEy76kfq3bhlS26iZV
server: AmazonS3
content-encoding: gzip
date: Tue, 31 Jan 2023 11:09:54 GMT
cache-control: max-age=60
etag: W/"7ab9d1a811b46cb9366200b0883cf206"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BhTu2xNcw8q2HWkgxjN3BX9feZVGQtNQ5aIQldso_iIRo3WQx7DEVA==
age: 25
X-Firefox-Spdy: h2
|
|
| recruitment-agency-london-2023.reg.buzz/rae-eshot?mc_cid=4eb4aa9c59&mc_eid=27ab710a86 | 172.67.26.148 | 200 OK | 0 B |
URL HTTP/2recruitment-agency-london-2023.reg.buzz/rae-eshot?mc_cid=4eb4aa9c59&mc_eid=27ab710a86 IP172.67.26.148:0
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO HTTP Request to a *.buzz domain |
GET /rae-eshot?mc_cid=4eb4aa9c59&mc_eid=27ab710a86 HTTP/1.1
Host: recruitment-agency-london-2023.reg.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:10:17 GMT
content-type: text/html; charset=UTF-8
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
cf-cache-status: DYNAMIC
set-cookie: ApplicationGatewayAffinityCORS=8dac2540a0d13940f6c3a92019a5d103; Path=/; SameSite=None; Secure
ApplicationGatewayAffinity=8dac2540a0d13940f6c3a92019a5d103; Path=/
XSRF-TOKEN=eyJpdiI6ImI2V25PRW41V3VjdStOMTZPcUJSemc9PSIsInZhbHVlIjoiZEo4YTFwZTRmQ1dneWVnWlpVeDlxWUw0eXY1U24xczkyV2ZSM3N2VkdxeHZIRW5ocEUzOFwvb1lDMlZ2ZDhYWSsiLCJtYWMiOiJjYWYxOGMxZDVjN2RlZjMyODI4YmM2MmI5MDJlMDE5M2FkODFkYTE4MWI1YTUwZGM5NjY1NzRhYTIzZDc5NGE2In0%3D; expires=Tue, 31-Jan-2023 13:10:17 GMT; Max-Age=7200; path=/
buzz_session=qSqcAOJdR4bETbu8JTOvii7nTNX0d912fcMuPsQ0; expires=Tue, 31-Jan-2023 13:10:17 GMT; Max-Age=7200; path=/; httponly
__cf_bm=4L.vPzXVfnyd_oOV95RnLJPBiGxVs0KUGHB837GuQvc-1675163417-0-AYOHjXsoIFmZgGiVrl/0BjvWixEovXe1QwVmGhYdrTo87+ooCG2ln525btY4BAg0oo+G7S4UgJlEu+e44W77FzM=; path=/; expires=Tue, 31-Jan-23 11:40:17 GMT; domain=.reg.buzz; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7921fffcce62b500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| recruitment-agency-london-2023.reg.buzz/js/manifest.js?id=7999d63793f040b855fb | 172.67.26.148 | 200 OK | 0 B |
URL HTTP/2recruitment-agency-london-2023.reg.buzz/js/manifest.js?id=7999d63793f040b855fb IP172.67.26.148:0
GET /js/manifest.js?id=7999d63793f040b855fb HTTP/1.1
Host: recruitment-agency-london-2023.reg.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/rae-eshot?mc_cid=4eb4aa9c59&mc_eid=27ab710a86
Cookie: ApplicationGatewayAffinityCORS=8dac2540a0d13940f6c3a92019a5d103; ApplicationGatewayAffinity=8dac2540a0d13940f6c3a92019a5d103; XSRF-TOKEN=eyJpdiI6ImI2V25PRW41V3VjdStOMTZPcUJSemc9PSIsInZhbHVlIjoiZEo4YTFwZTRmQ1dneWVnWlpVeDlxWUw0eXY1U24xczkyV2ZSM3N2VkdxeHZIRW5ocEUzOFwvb1lDMlZ2ZDhYWSsiLCJtYWMiOiJjYWYxOGMxZDVjN2RlZjMyODI4YmM2MmI5MDJlMDE5M2FkODFkYTE4MWI1YTUwZGM5NjY1NzRhYTIzZDc5NGE2In0%3D; buzz_session=qSqcAOJdR4bETbu8JTOvii7nTNX0d912fcMuPsQ0; __cf_bm=4L.vPzXVfnyd_oOV95RnLJPBiGxVs0KUGHB837GuQvc-1675163417-0-AYOHjXsoIFmZgGiVrl/0BjvWixEovXe1QwVmGhYdrTo87+ooCG2ln525btY4BAg0oo+G7S4UgJlEu+e44W77FzM=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:10:17 GMT
content-type: application/javascript
last-modified: Thu, 19 Jan 2023 10:40:21 GMT
etag: W/"63c91e15-31e"
cache-control: max-age=14400
cf-cache-status: HIT
vary: Accept-Encoding
server: cloudflare
cf-ray: 79220001ed74b500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| polo.feathr.co/v1/analytics/match/script.js?pk=feathr&cb=1675163435888 | 54.204.247.164 | 200 OK | 0 B |
URL HTTP/2polo.feathr.co/v1/analytics/match/script.js?pk=feathr&cb=1675163435888 IP54.204.247.164:0
GET /v1/analytics/match/script.js?pk=feathr&cb=1675163435888 HTTP/1.1
Host: polo.feathr.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://recruitment-agency-london-2023.reg.buzz/
Cookie: f_id=63d8f71aa820fc0008a49a44
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.8
date: Tue, 31 Jan 2023 11:10:19 GMT
content-type: text/javascript
vary: Accept-Encoding
cache-control: no-cache, max-age=0
etag: W/"63d8f71aa820fc0008a49a44"
access-control-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
content-encoding: gzip
X-Firefox-Spdy: h2
|
|