firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 09 Sep 2022 19:05:55 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kw0pokBtrCKbRx7ml7ZMnCUPaGxd6psBISOF1WS5M9DHRIxjF22J1A==
Age: 3513
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash f55e483f32b3fd50b1a2414aaada9b61
9d6b22edb98866e002e3b1ace44dfb0f8d00935f
4b09e1d2b887ded061e4ec5f82ec70ce699eeed428acc6b4fd3ef10ed9233c89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89"
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14486
Expires: Sat, 10 Sep 2022 00:05:55 GMT
Date: Fri, 09 Sep 2022 20:04:29 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.49200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.49:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qo9tz93n0i2T8fU4_Oj8o8MVryiulYx2vkogskmjPfGHiou3PBpVTg==
age: 58675
X-Firefox-Spdy: h2
trk.klclick3.com/ls/click?upn=8aBAeMPT-2Fl0Rhha-2FDJX5MCmqmHyFgXVZGOnHxSCUQQGNk7xhf9MfQleQ73SXMhe8FFEZyPGJ6ylyGzeCiIVmDHwchtccTpBdKVZfe9NuzOre3NKef2Hesy8DERIKLPlN1F1-2B-2B0AswVjrWI3nJOs5PxelDWBlUxP2laaSc-2BUPrOf-2FLu7dmwUJTdbhj4ru2q597HXM7K1tsWvc4sWqR-2F-2BDkFEUVXlCHDc4BkW7SKvBrQ7kD0eouLK1rFAX34zV-2Fti5OR7lfcjE8sTDPM0dJtSRxhC-2FnMuI-2Bcltvz6F2j0L1LrUtlK7Ep1AaMThHQ5aqzuWBwVHGULt-2B2jmvpPipUwBcNPCgH4RzIejw-2FxgL2P8-2F3psZT-2BRZKGCSX4pupX5w-2BJBnrWworb1w22AYJC91SPi0ZLgA-2BPAlVsR53tE00NXH10-3DUQKs_B10Z8Pnvok64RC6mbVhXZiKMTFOB-2F8A-2BXGw21nFkSFQx2-2BwGjwXWYe7cPU-2B8jO9eocYA839yVsxaVWnPtxSqZKYORbjygZQuJT3QSumdbQ1pp9N8gijxN-2BYxUGnkB98KWSd0oen2UasytRaYP7Po3u6j9wHbv-2FQs6EurCHzGXL5Y1xCPlfJbXXU43fNHwjL3byDfB0svTX5vczD2E6ay1Esu-2BytY2LXUb0Gf8XW40r3obCVwc0Tqfp5-2BTkEn0ZM4SnUEYGeRo2-2Ff7PePIQvEbGUpXxODRL35d1fXU5m8-2F5UWxz3r4YM5yXwVPtYcYJ43WBI8xEOlWJ978tFgiDNGP8ADC1GAK0ee9BE3jvAgqCyN6i4H5Glsa0tkOcOMyC0J
54.230.111.34302 Found 352 B URL HTTP/2 trk.klclick3.com/ls/click?upn=8aBAeMPT-2Fl0Rhha-2FDJX5MCmqmHyFgXVZGOnHxSCUQQGNk7xhf9MfQleQ73SXMhe8FFEZyPGJ6ylyGzeCiIVmDHwchtccTpBdKVZfe9NuzOre3NKef2Hesy8DERIKLPlN1F1-2B-2B0AswVjrWI3nJOs5PxelDWBlUxP2laaSc-2BUPrOf-2FLu7dmwUJTdbhj4ru2q597HXM7K1tsWvc4sWqR-2F-2BDkFEUVXlCHDc4BkW7SKvBrQ7kD0eouLK1rFAX34zV-2Fti5OR7lfcjE8sTDPM0dJtSRxhC-2FnMuI-2Bcltvz6F2j0L1LrUtlK7Ep1AaMThHQ5aqzuWBwVHGULt-2B2jmvpPipUwBcNPCgH4RzIejw-2FxgL2P8-2F3psZT-2BRZKGCSX4pupX5w-2BJBnrWworb1w22AYJC91SPi0ZLgA-2BPAlVsR53tE00NXH10-3DUQKs_B10Z8Pnvok64RC6mbVhXZiKMTFOB-2F8A-2BXGw21nFkSFQx2-2BwGjwXWYe7cPU-2B8jO9eocYA839yVsxaVWnPtxSqZKYORbjygZQuJT3QSumdbQ1pp9N8gijxN-2BYxUGnkB98KWSd0oen2UasytRaYP7Po3u6j9wHbv-2FQs6EurCHzGXL5Y1xCPlfJbXXU43fNHwjL3byDfB0svTX5vczD2E6ay1Esu-2BytY2LXUb0Gf8XW40r3obCVwc0Tqfp5-2BTkEn0ZM4SnUEYGeRo2-2Ff7PePIQvEbGUpXxODRL35d1fXU5m8-2F5UWxz3r4YM5yXwVPtYcYJ43WBI8xEOlWJ978tFgiDNGP8ADC1GAK0ee9BE3jvAgqCyN6i4H5Glsa0tkOcOMyC0J
IP 54.230.111.34:0
File type HTML document, ASCII text, with very long lines (350)
Hash beb3d0875540994ceedc6f5c893870a3
c6d138ff5009c607017c393373bce6f7b23ae8e3
598eb1224b8600fcc63070451f6a3c1b00afe1ea8afd17c25f776008501e95e2
GET /ls/click?upn=8aBAeMPT-2Fl0Rhha-2FDJX5MCmqmHyFgXVZGOnHxSCUQQGNk7xhf9MfQleQ73SXMhe8FFEZyPGJ6ylyGzeCiIVmDHwchtccTpBdKVZfe9NuzOre3NKef2Hesy8DERIKLPlN1F1-2B-2B0AswVjrWI3nJOs5PxelDWBlUxP2laaSc-2BUPrOf-2FLu7dmwUJTdbhj4ru2q597HXM7K1tsWvc4sWqR-2F-2BDkFEUVXlCHDc4BkW7SKvBrQ7kD0eouLK1rFAX34zV-2Fti5OR7lfcjE8sTDPM0dJtSRxhC-2FnMuI-2Bcltvz6F2j0L1LrUtlK7Ep1AaMThHQ5aqzuWBwVHGULt-2B2jmvpPipUwBcNPCgH4RzIejw-2FxgL2P8-2F3psZT-2BRZKGCSX4pupX5w-2BJBnrWworb1w22AYJC91SPi0ZLgA-2BPAlVsR53tE00NXH10-3DUQKs_B10Z8Pnvok64RC6mbVhXZiKMTFOB-2F8A-2BXGw21nFkSFQx2-2BwGjwXWYe7cPU-2B8jO9eocYA839yVsxaVWnPtxSqZKYORbjygZQuJT3QSumdbQ1pp9N8gijxN-2BYxUGnkB98KWSd0oen2UasytRaYP7Po3u6j9wHbv-2FQs6EurCHzGXL5Y1xCPlfJbXXU43fNHwjL3byDfB0svTX5vczD2E6ay1Esu-2BytY2LXUb0Gf8XW40r3obCVwc0Tqfp5-2BTkEn0ZM4SnUEYGeRo2-2Ff7PePIQvEbGUpXxODRL35d1fXU5m8-2F5UWxz3r4YM5yXwVPtYcYJ43WBI8xEOlWJ978tFgiDNGP8ADC1GAK0ee9BE3jvAgqCyN6i4H5Glsa0tkOcOMyC0J HTTP/1.1
Host: trk.klclick3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 352
location: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
server: nginx
date: Fri, 09 Sep 2022 20:04:29 GMT
x-robots-tag: noindex, nofollow
x-cache: Miss from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JWdB1264acVny4Cn_EUfUVtftwKQeLLsffhGbvIiykK27qi9EfocSw==
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Sep 2022 20:04:29 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 176a4d962d5d1a313af66647aaa4594a
3069ce23b56ccd30c7f0420d0b55466a657f7717
f14b506dca02f93a4ef8cfc5c31bc658b8f01a24830ac6a47a9cc9a32d26c524
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 20:04:29 GMT
Server: ECS (dcb/7F83)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: i6qQg74gHYBU7pkqXhTWkgiWdTSAzox0oCzIRB2hNIrYHGuHkzPR3g==
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 09 Sep 2022 19:56:07 GMT
Expires: Fri, 09 Sep 2022 20:52:54 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5166Rwjq8N6KyStFJOioGmJcxGbR4_q2qd6K62sBCLMXUix5s-Wi3w==
Age: 502
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d0c56e0b2955a5dd7f37ba4bbf5727b4
f435bd1f6fb8ec931f1817fe4b91e6b86a7cb14b
99f7da9dca677db8e9cec5491c0d6d8a86b9c5e907907c2fdd30973c747f4282
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4088
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:29 GMT
Last-Modified: Fri, 09 Sep 2022 18:56:21 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
www.customink.com/assets-inkpress/style_bitz/style_bitz-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.css
54.230.111.83200 OK 23 kB URL HTTP/2 www.customink.com/assets-inkpress/style_bitz/style_bitz-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.css
IP 54.230.111.83:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d5e219a32722f4aee5e6931b812204a8
0e47317ef25d36e67e87bfb275547decdcdde7e1
36260ab2ab3dc7fdd31924738747d00a2296c0ba394280400361fa29e0512174
GET /assets-inkpress/style_bitz/style_bitz-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.css HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 23170
date: Thu, 25 Aug 2022 15:47:17 GMT
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Thu, 25 Aug 2022 15:16:57 GMT
server: nginx
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jOoham49FyuSQXZK1C_7vR7mD_6jifCBg8iG2yY-nUkWBWdfpqjm6w==
age: 1311433
X-Firefox-Spdy: h2
www.customink.com/assets-inkpress/style_bitz/SharpSans-Medium-0000000000000000000000000000000000000001.woff2
54.230.111.83200 OK 42 kB URL HTTP/2 www.customink.com/assets-inkpress/style_bitz/SharpSans-Medium-0000000000000000000000000000000000000001.woff2
IP 54.230.111.83:0
File type Web Open Font Format (Version 2), TrueType, length 41465, version 1.0\012- data
Hash fb9793b64c660bf1c8c8204f857ea38b
a159aeb912e64ac136553100d280b0a06e2fc5d9
a6f32039ed402d53dd84b8c0835d6169a782d07c4ba70f210fd6a46155af9dd4
GET /assets-inkpress/style_bitz/SharpSans-Medium-0000000000000000000000000000000000000001.woff2 HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 41465
date: Wed, 18 May 2022 01:02:12 GMT
server: Apache
last-modified: Tue, 28 Nov 2017 12:08:37 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Thu, 18 May 2023 01:02:12 GMT
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rvv2G8a17LvY1wBt5k_8-EdeswAsusDnGCLVb8UlXEGKs5JYTftEEQ==
age: 9918138
X-Firefox-Spdy: h2
www.customink.com/assets-inkpress/style_bitz/SharpSans-Bold-0000000000000000000000000000000000000001.woff2
54.230.111.83200 OK 42 kB URL HTTP/2 www.customink.com/assets-inkpress/style_bitz/SharpSans-Bold-0000000000000000000000000000000000000001.woff2
IP 54.230.111.83:0
File type Web Open Font Format (Version 2), TrueType, length 41693, version 1.0\012- data
Hash 6ff3def8a006c72d31a297478c31c20e
60f6f34a01375dc0034b582a7040021e0e54e1dc
e8aa52622e9fd93085ac1f9ea02368833169306c1eccdfa50815b400da184b15
GET /assets-inkpress/style_bitz/SharpSans-Bold-0000000000000000000000000000000000000001.woff2 HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 41693
date: Thu, 09 Jun 2022 03:04:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Jun 2022 15:23:16 GMT
server: nginx/1.22.0
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xs2c5wOzTUFc_EIf751E5ftCFtLhK2vByng_ulWvsWmVjNvMUtkkVQ==
age: 8010029
X-Firefox-Spdy: h2
www.customink.com/assets-inkpress/style_bitz-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.js
54.230.111.83200 OK 24 kB URL HTTP/2 www.customink.com/assets-inkpress/style_bitz-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.js
IP 54.230.111.83:0
File type C source, ASCII text, with very long lines (32800)
Hash 27ff8d0f985176f5d7a66355a897da2b
5f4654ad1d4a689ee50d8149be641175f51a39ab
b53d390607f87e34211c26c733375b91d08ca0bfd128717a1c43c9474c0e67fa
GET /assets-inkpress/style_bitz-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.js HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 24231
date: Thu, 25 Aug 2022 15:47:29 GMT
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Thu, 25 Aug 2022 15:17:51 GMT
server: nginx
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y0500-Y8GJZ3RO1PRHQG7zoBhzjcVRdejm6wFCw_nGnUAQzHjzRclQ==
age: 1311421
X-Firefox-Spdy: h2
www.customink.com/assets-inkpress/style_bitz/customink_metrics.min-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.js
54.230.111.83200 OK 6.2 kB URL HTTP/2 www.customink.com/assets-inkpress/style_bitz/customink_metrics.min-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.js
IP 54.230.111.83:0
File type ASCII text, with very long lines (18158), with no line terminators
Hash 0d5d6dbbba265fddeea819721f5334a8
8ad8353ae70829d501a246b5216b448545f5617d
8f562bbf0d3acddcbcca16f3945df11d1c7494a438dacdedbf69dd6fb2a9165b
GET /assets-inkpress/style_bitz/customink_metrics.min-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.js HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 6172
date: Thu, 25 Aug 2022 15:47:58 GMT
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Thu, 25 Aug 2022 15:16:30 GMT
server: nginx
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I1DVQqkId6_Dv0JCuLa-2VjkSJcn0DBAAvNjkPrVrI5i_oCJQ8CV7w==
age: 1311392
X-Firefox-Spdy: h2
www.customink.com/assets-inkpress/style_bitz/metrics/interactions-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.js
54.230.111.83200 OK 1.0 kB URL HTTP/2 www.customink.com/assets-inkpress/style_bitz/metrics/interactions-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.js
IP 54.230.111.83:0
File type ASCII text, with very long lines (2408), with no line terminators
Hash 3a1aa32b340d2656fd92c941fa06d7a3
63641d3f69f4677f13a7c3d5a4dc46bbe70dbc2e
5730b65f8a8744100e6cb61892a12920fff60a7f0ac54f362923391a64c2efe1
GET /assets-inkpress/style_bitz/metrics/interactions-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.js HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 1014
date: Thu, 25 Aug 2022 15:47:17 GMT
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Thu, 25 Aug 2022 15:16:30 GMT
server: nginx
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GrAIuGqVU3tCqZnuLz5lAEZkPciBxpO5aGfrAZuhzfo7JABBjk2Kdg==
age: 1311433
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 55362bc853c99806e54641de1e0fdb0c
1c84425554ce994c84fd4d3b95833fed9bf16023
936a1c711aea3c55e6e270aec23f72818b7bbfed28b1c9859697050ebe9aaf4e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
52.27.12.161101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.27.12.161:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 9hzzArqxbjQe/3OVxBohOA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +OtQLIaTACowXV+FwnqgM19kl4I=
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
142.250.74.138200 OK 31 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP 142.250.74.138:0
File type ASCII text, with very long lines (65447)
Hash 7808e0e4b7a714230373852158500533
4a79d18722a68a2f38d52e2d3a11b550bdd30b3c
8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 09:42:03 GMT
expires: Tue, 05 Sep 2023 09:42:03 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
age: 382947
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
54.230.111.83200 OK 58 kB URL HTTP/2 www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
IP 54.230.111.83:0
Hash ce7b2f6b7a938b460779f3419fcd5eb1
0e7d8b70292ea8ceed699d0384323c3ecf231cac
a3e991e23285537c2ce45222f12208afdc0440343e076e171661abce3ed8a012
GET /designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Fri, 09 Sep 2022 20:04:29 GMT
api-version: 1
cache-control: max-age=0, private, must-revalidate
content-security-policy: frame-ancestors http://*.customink.com https://*.customink.com
etag: W/"91a4d43c6d11034d9a43590478102af0"
server: nginx
set-cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7; path=/; HttpOnly
strict-transport-security: max-age=300
x-request-id: 6dc4bb26-b863-4127-887c-53b2894e92ce
x-runtime: 0.310745
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RfCfCS7chnzDho7zZsPoTI_6lPdgN-UM7-janbt4a8NFo55ewqZ4Rg==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash d7ca9a52ea8dea969f97b7027e95dfdb
3eb233cdb73bc39f6b4b05e0de1d4327e7880a84
9d1d7831024baebe790538deb465184c29ea4a23566a98720a9715b992be2499
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 20:04:30 GMT
Last-Modified: Fri, 09 Sep 2022 18:53:07 GMT
Server: ECS (dcb/7F13)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RRwFX_RwoAf2LCHCaMqZ28eD36oXeAZafcL88YMS8wt82jYq3Vf_aw==
Age: 4283
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash f1fa8224847ea7d9b4dc8e598fae4142
cb703a2944e58d97dd48a7e56ee9f4510ced78b4
920094aad2886535e2ba9e38d4731f63fbde93038d92b38f0030b0a0f47c2ac8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.optimizely.com/js/21861540101.js
23.38.200.155200 OK 84 kB URL HTTP/2 cdn.optimizely.com/js/21861540101.js
IP 23.38.200.155:0
File type ASCII text, with very long lines (65468)
Hash 13dec9cfbc7efd417876e648048878cb
cbcc20da0144dbc27c0a10bbd73fe15654293cff
9d813d73c0b84744f0dce1392b0cf48dae00977b9b6162988c70d666a29b4e87
GET /js/21861540101.js HTTP/1.1
Host: cdn.optimizely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: AtTcvef1T9KkB2GKdjmJo99Pgsl6+1H7HUqnuYrHodo00OzZj2Y/jm2GYif1pKNqRDnmDAcVAIY=
x-amz-request-id: AXYZ7YP455J3Z4PS
x-amz-replication-status: COMPLETED
last-modified: Thu, 01 Sep 2022 18:00:27 GMT
etag: "13dec9cfbc7efd417876e648048878cb"
x-amz-server-side-encryption: AES256
x-amz-meta-revision: 94
x-amz-meta-pci_enabled: False
content-encoding: gzip
x-amz-version-id: R9mnRa_36Egm_llqNGJK9yHBICza.WdN
accept-ranges: bytes
content-type: text/javascript; charset=utf-8
server: AmazonS3
content-length: 83787
vary: Accept-Encoding
cache-control: max-age=300
date: Fri, 09 Sep 2022 20:04:30 GMT
server-timing: cdn;desc="AkamaiION";dur=0,rtt;desc="1";dur=0,cdnip;desc="23.38.200.155";dur=0,cdnmap;desc="a5048.dsca.akamaiedge.net";dur=0,proto;desc="h2";dur=0
access-control-max-age: 86400
access-control-expose-headers: x-amz-meta-revision
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
www.customink.com/assets/proof_page/proof_email-43c5d636dd27c1bddb8ff8d5b677147135c303007b7e704af38b8727b631ed56.css
54.230.111.83200 OK 450 B URL HTTP/2 www.customink.com/assets/proof_page/proof_email-43c5d636dd27c1bddb8ff8d5b677147135c303007b7e704af38b8727b631ed56.css
IP 54.230.111.83:0
File type ASCII text, with very long lines (1235)
Hash 83846aa50ec50bc038a09e7178d330e4
d13de871a59684709223dbcd8f82f0a9ae049ec6
384d1a0f39d2e59ff0756c7858770ba836465e88abd0821df6d2fd88fd611ef9
GET /assets/proof_page/proof_email-43c5d636dd27c1bddb8ff8d5b677147135c303007b7e704af38b8727b631ed56.css HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 450
date: Fri, 09 Sep 2022 20:04:30 GMT
content-encoding: gzip
last-modified: Thu, 08 Sep 2022 15:14:04 GMT
server: nginx
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Hw1yOCRVGphMaplIk4V5Mp1kLIOdtwAjDPPVi1X9oB-1LE23Qe9Qew==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash d7ca9a52ea8dea969f97b7027e95dfdb
3eb233cdb73bc39f6b4b05e0de1d4327e7880a84
9d1d7831024baebe790538deb465184c29ea4a23566a98720a9715b992be2499
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 20:04:30 GMT
Server: ECS (dcb/7F18)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CEVnL8RpYS-90H0KFacc35QeBNEPs9xi4n9bpAlVyL5OnnNkLKQSXw==
www.customink.com/assets-inkpress/style_bitz/footer/watch-poster-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.jpg
54.230.111.83200 OK 13 kB URL HTTP/2 www.customink.com/assets-inkpress/style_bitz/footer/watch-poster-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.jpg
IP 54.230.111.83:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x169, components 3\012- data
Hash e3ae7f16371ab249f412ae7d4f91dca3
60cb760daad82a3240411acaf3727afd5fe4a863
d42a3249e13e78046c6ad7e2285ea4fbf59984f51ed89e14efbc0dcad761700e
GET /assets-inkpress/style_bitz/footer/watch-poster-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.jpg HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/assets-inkpress/style_bitz/style_bitz-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.css
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7; optimizelyEndUserId=oeu1662753861276r0.1486479685460691
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 12656
date: Thu, 25 Aug 2022 16:17:45 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 25 Aug 2022 15:16:30 GMT
server: nginx
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GpKBw0rUosEPNu2csbSJo88Q6a0zqX-STZsA-H7lEmvfSuifB-pRhw==
age: 1309605
X-Firefox-Spdy: h2
www.customink.com/assets-inkpress/style_bitz/inkicons-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.woff
54.230.111.83200 OK 8.4 kB URL HTTP/2 www.customink.com/assets-inkpress/style_bitz/inkicons-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.woff
IP 54.230.111.83:0
File type Web Open Font Format, TrueType, length 8444, version 1.0\012- data
Hash b0e2faa68ce026707f64bd31761b575d
ec3bc1e4ddf2a306e67cbff8a992ac4644162ffb
697ab69212f72ab92f7450ef1cb829102b70f553d49d3ab40c2604425790c0af
GET /assets-inkpress/style_bitz/inkicons-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.woff HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.customink.com/assets-inkpress/style_bitz/style_bitz-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.css
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7; optimizelyEndUserId=oeu1662753861276r0.1486479685460691
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff
content-length: 8444
date: Fri, 26 Aug 2022 07:30:44 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 25 Aug 2022 15:16:29 GMT
server: nginx
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xr4ct9vOYlTih469FNmD2CUqFk8e7gpy4pvuqLyW4jdUY6CIjASDmQ==
age: 1254826
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a4ae55dbf8e22a357ee36e37fafa37af
18d33f606a8bc692802cfaa3a22ceb4a5eedca8c
8343a46c0a87b15be71cab0ae84912ed07d3104d4b621c55e3cd69367f58ebb6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.customink.com/assets-inkpress/style_bitz/SharpSans-MediumItalic-0000000000000000000000000000000000000001.woff2
54.230.111.83200 OK 43 kB URL HTTP/2 www.customink.com/assets-inkpress/style_bitz/SharpSans-MediumItalic-0000000000000000000000000000000000000001.woff2
IP 54.230.111.83:0
File type Web Open Font Format (Version 2), TrueType, length 42969, version 1.0\012- data
Hash d53092acaf9efd8cc8636b950b63dbf9
31c88f917270a37d31439861903f7d7ba0fcdf2f
fbdc3f83338dc18b89f05219aaa84059d45cfb2b568f862cbe961c11ee2e4ff3
GET /assets-inkpress/style_bitz/SharpSans-MediumItalic-0000000000000000000000000000000000000001.woff2 HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.customink.com/assets-inkpress/style_bitz/style_bitz-30c5ef7f22627e3f64d1d5f0dfad2871544c8381.css
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7; optimizelyEndUserId=oeu1662753861276r0.1486479685460691
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/font-woff2
content-length: 42969
date: Wed, 31 Aug 2022 03:40:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Aug 2022 19:23:19 GMT
server: nginx
vary: Origin
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gTCLb1PYkH-AWCSLGq2izPq5EN3h0rQ3ojFxO9f9e6y1me3sbIv_Cg==
age: 836626
X-Firefox-Spdy: h2
www.customink.com/assets/proof_page-8dbd300a80e0dd4c6d98a3895c0e38c0ba82d04e67ec844cea2b52f5378d5e93.js
54.230.111.83200 OK 19 kB URL HTTP/2 www.customink.com/assets/proof_page-8dbd300a80e0dd4c6d98a3895c0e38c0ba82d04e67ec844cea2b52f5378d5e93.js
IP 54.230.111.83:0
Hash afef942fd64388233e62c8545a019f93
72a022dc77c9f3d1271676277d7cd265e9916780
42f1364ff38b19c43a1c9e570307554c379bdceff9f58c7b67fc1b1344044ab8
GET /assets/proof_page-8dbd300a80e0dd4c6d98a3895c0e38c0ba82d04e67ec844cea2b52f5378d5e93.js HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 18765
date: Fri, 09 Sep 2022 20:04:30 GMT
content-encoding: gzip
last-modified: Thu, 08 Sep 2022 15:14:25 GMT
server: nginx
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 14XJsSjkeTLoIPe-OI5SATvyZUYeDG5Sym0qgdhTapn0LrCq-a-c3Q==
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-P96QK7
142.250.74.72200 OK 99 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-P96QK7
IP 142.250.74.72:0
File type ASCII text, with very long lines (34980)
Hash 69842516df49ecee37fc0f910ad7dcb6
a13d5ecde756295c3afaa814a2e2f48e7ac217c9
a57aea0acc80a7efd7e34387d4a8e25825e02d78656b8777bfe92547f16db43e
GET /gtm.js?id=GTM-P96QK7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Sep 2022 20:04:30 GMT
expires: Fri, 09 Sep 2022 20:04:30 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 98610
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 54f9e2ed11c19f565afc5d45d2f1e499
5c933cf89e4be594a152d7b1aa7bed6ab42169df
1deae88857366dba09c5e498d9067529377741b3c51b711b4adb88d861f58718
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.customink.com/assets/proof_page/gof_proofpage_123-3c81a40c9805ccf83e8f6ff4c69dd92f597614daa7b790d6c506634bee865d23.png
54.230.111.83200 OK 30 kB URL HTTP/2 www.customink.com/assets/proof_page/gof_proofpage_123-3c81a40c9805ccf83e8f6ff4c69dd92f597614daa7b790d6c506634bee865d23.png
IP 54.230.111.83:0
File type PNG image data, 970 x 366, 8-bit/color RGB, non-interlaced\012- data
Hash 066200c3cb82d7ea558cc8255f6efaf9
2075ec1efe5b3ced999e205a2a94c81ce243469c
3c81a40c9805ccf83e8f6ff4c69dd92f597614daa7b790d6c506634bee865d23
GET /assets/proof_page/gof_proofpage_123-3c81a40c9805ccf83e8f6ff4c69dd92f597614daa7b790d6c506634bee865d23.png HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/assets/proof_page-599299e60e59ddb91cd9775ce21098a81cf12bcf8490b94f3d9ae2dc9492248f.css
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7; optimizelyEndUserId=oeu1662753861276r0.1486479685460691
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 30321
date: Fri, 09 Sep 2022 20:04:30 GMT
last-modified: Thu, 08 Sep 2022 15:14:05 GMT
server: nginx
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: smFJ_oQ2WEHFVs3dF8qL3qKHusQtFnrjSU9P5AIgAodyCPT1WgyecA==
X-Firefox-Spdy: h2
js.adsrvr.org/up_loader.1.1.0.js
143.204.45.46200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP 143.204.45.46:0
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 09 Sep 2022 05:12:26 GMT
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YdVCQIGPYw3MoPH3ncaiescKnB9NDnZ5iO_wk5J1zzt5384fXh9GDw==
Age: 53525
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 92ca44e5b62ab50af71cb1205666ee03
ac05aa7af864a5ce7c72dc9dbd71a068ff0b231f
55830a12238f09a9521234745f43239ee65bd23a2ca7fb772683aadb0f20d134
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a21861540101.cdn.optimizely.com/client_storage/a21861540101.html
104.110.8.48200 OK 799 B URL HTTP/2 a21861540101.cdn.optimizely.com/client_storage/a21861540101.html
IP 104.110.8.48:0
File type HTML document, ASCII text, with very long lines (1371)
Hash e65f5030a56a863337b06ca30000e273
a1abc7d4957442e6179e26c1abfa0564ded49e8b
e8f389a38e230e9790670c93898672be1a31d28659e1c6647e4d9df29ad8aa0a
GET /client_storage/a21861540101.html HTTP/1.1
Host: a21861540101.cdn.optimizely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: pL1AMXOA2olLVKJObhkCVo6I/lEOlA7cMAIae7jNJA5owgxk+5+niCnKG/+NShteVHtw2IlWv00=
x-amz-request-id: 6XDZEXHMVQWK9YG9
x-amz-replication-status: COMPLETED
last-modified: Thu, 01 Sep 2022 18:00:25 GMT
etag: "e65f5030a56a863337b06ca30000e273"
x-amz-server-side-encryption: AES256
x-amz-meta-pci_enabled: False
content-encoding: gzip
x-amz-version-id: nR1apjKonbXGkBZXbZYmixZXSXuvB7op
accept-ranges: bytes
content-type: text/html; charset=utf-8
server: AmazonS3
content-length: 799
vary: Accept-Encoding
cache-control: max-age=120
date: Fri, 09 Sep 2022 20:04:30 GMT
server-timing: cdn;desc="AkamaiION";dur=0,rtt;desc="2";dur=0,cdnip;desc="104.110.8.48";dur=0,cdnmap;desc="a4728.x.akamaiedge.net";dur=0,proto;desc="h2";dur=0
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash b767f92db6ca34290a001739ab2cf514
405eb88c85f15cb4baef24dfcc153023018afcaf
93cc2014db0eed4b96dda869d22a128c087129b42acc0c13b39792bc7c24df07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 92ca44e5b62ab50af71cb1205666ee03
ac05aa7af864a5ce7c72dc9dbd71a068ff0b231f
55830a12238f09a9521234745f43239ee65bd23a2ca7fb772683aadb0f20d134
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
8494807.fls.doubleclick.net/activityi;src=8494807;type=global;cat=uvisit;ord=1;num=4030272829506;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp?
142.250.74.70200 OK 587 B URL HTTP/2 8494807.fls.doubleclick.net/activityi;src=8494807;type=global;cat=uvisit;ord=1;num=4030272829506;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp?
IP 142.250.74.70:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1179), with no line terminators
Hash 7973b9cb98012d17f082f413074d2b9e
9c343f5a5f1c4eaad4e3a7d0f4743dd4d84967bf
b654e2ce54127309be538fe9ea01ccc60ff0f592dff9c3de3f362af38d42937c
GET /activityi;src=8494807;type=global;cat=uvisit;ord=1;num=4030272829506;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp? HTTP/1.1
Host: 8494807.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 20:04:30 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 587
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 20:19:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
8494807.fls.doubleclick.net/activityi;src=8494807;type=global;cat=allpv;ord=581065562270;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;u3=;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp?
142.250.74.70200 OK 581 B URL HTTP/2 8494807.fls.doubleclick.net/activityi;src=8494807;type=global;cat=allpv;ord=581065562270;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;u3=;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp?
IP 142.250.74.70:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1175), with no line terminators
Hash 914eb6ecc1282e1be202b1163bcfee62
b84d77b09169743f02679f1e2bb0a98f5cf17b42
87888ea1de52c38d5c240922eeed1607e9831f42e04e488fffbdf50db05f9210
GET /activityi;src=8494807;type=global;cat=allpv;ord=581065562270;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;u3=;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp? HTTP/1.1
Host: 8494807.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 20:04:30 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 581
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 20:19:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
11319611.fls.doubleclick.net/activityi;src=11319611;type=keyse0;cat=custo0;ord=1;num=3730336153993;gtm=2wg970;auiddc=68622478.1662753862;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp?
142.250.74.70200 OK 565 B URL HTTP/2 11319611.fls.doubleclick.net/activityi;src=11319611;type=keyse0;cat=custo0;ord=1;num=3730336153993;gtm=2wg970;auiddc=68622478.1662753862;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp?
IP 142.250.74.70:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (794), with no line terminators
Hash 41f4a4be22db0e66562c7ceea77f2c81
e6c3c16d6607df09d580a9bd000ea54ea3c22938
e0b800848d3119ab6b758c6e270c7660cde4bff709a1adf1f40a0c344858efbc
GET /activityi;src=11319611;type=keyse0;cat=custo0;ord=1;num=3730336153993;gtm=2wg970;auiddc=68622478.1662753862;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp? HTTP/1.1
Host: 11319611.fls.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 20:04:30 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 565
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 20:19:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 8eff04c632228209e7209fb206c192de
d85b333f6eb47b7b307cdb3b7b706b35f0edce3c
0216c7e153ecdb39dec321487049b146cc737f97c2866273497bbcefde3e25d1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=99725
Date: Fri, 09 Sep 2022 20:04:30 GMT
Etag: "631a6614-1d7"
Expires: Sat, 10 Sep 2022 23:46:35 GMT
Last-Modified: Thu, 08 Sep 2022 22:00:52 GMT
Server: ECS (dcb/7F81)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qQBe2gT4bx-rO_hvluaJ5JamlhjGY6kYb5RnUCELbqDlhn5-HwX1qg==
Age: 6343
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 92ca44e5b62ab50af71cb1205666ee03
ac05aa7af864a5ce7c72dc9dbd71a068ff0b231f
55830a12238f09a9521234745f43239ee65bd23a2ca7fb772683aadb0f20d134
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 92ca44e5b62ab50af71cb1205666ee03
ac05aa7af864a5ce7c72dc9dbd71a068ff0b231f
55830a12238f09a9521234745f43239ee65bd23a2ca7fb772683aadb0f20d134
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 90af7f9fc306540e02535db3d00dca64
9e05b003b35ed57277b6b295adde93add7c41b0b
64abd990305ef3f25ffb3fb2ccae04b76e178375752ecb2020411df8f7974fcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 90af7f9fc306540e02535db3d00dca64
9e05b003b35ed57277b6b295adde93add7c41b0b
64abd990305ef3f25ffb3fb2ccae04b76e178375752ecb2020411df8f7974fcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ede92f781233f857c299e00d2090aeba
b7296da3b0981e9c1937bf8ebc73d5138c5fa19a
16a97da8a523d4cb06430ff26d026d14377c888e5e80a78937afba38fded3122
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/ddm/fls/i/src=8494807;type=global;cat=uvisit;ord=1;num=4030272829506;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
142.250.74.162200 OK 587 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=8494807;type=global;cat=uvisit;ord=1;num=4030272829506;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
IP 142.250.74.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1178), with no line terminators
Hash f79730c505524e32222e396cc142875f
53bfc67aedf8b7c8730fbda3c9bf947a8048a954
dedb9b62dcabf94fcea8c75ed49ed70faf6569d9a8195e620baf02c40b9d34a7
GET /ddm/fls/i/src=8494807;type=global;cat=uvisit;ord=1;num=4030272829506;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8494807.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 20:04:30 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 587
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=11319611;type=keyse0;cat=custo0;ord=1;num=3730336153993;gtm=2wg970;auiddc=68622478.1662753862;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
142.250.74.162200 OK 565 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=11319611;type=keyse0;cat=custo0;ord=1;num=3730336153993;gtm=2wg970;auiddc=68622478.1662753862;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
IP 142.250.74.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (793), with no line terminators
Hash fb82fac9ba71cf090e49798dd6605ace
bc5d098a5adfff4c24767d04e2102f2df2c15b17
85ee730e3960dbee7a72381c5b8ce40688e874d298bca5ea6a7c1e472d98be6d
GET /ddm/fls/i/src=11319611;type=keyse0;cat=custo0;ord=1;num=3730336153993;gtm=2wg970;auiddc=68622478.1662753862;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://11319611.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 20:04:30 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 565
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/ddm/fls/i/src=8494807;type=global;cat=allpv;ord=581065562270;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;u3=;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
142.250.74.162200 OK 582 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=8494807;type=global;cat=allpv;ord=581065562270;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;u3=;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
IP 142.250.74.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1174), with no line terminators
Hash 1a3a8ee40ae164fdf20ee9ac80c0bf44
e7bc8270e48475e6119bcea7bebbb4c780dc3316
4e20421e66187801e49ddbf26d75a94faa87b20c898bc49b64357deb5fee8f3d
GET /ddm/fls/i/src=8494807;type=global;cat=allpv;ord=581065562270;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;u3=;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8494807.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 20:04:30 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 582
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 20849192c0b1896a64fd243ef7d1c054
284650cb76665f42dc310ed730f0a48cf78f5d79
092a2545d1689eb32cb884b3995a6b8590b591e09d6e1b623f241f0e5d8dd76c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 20:04:30 GMT
Last-Modified: Fri, 09 Sep 2022 18:23:56 GMT
Server: ECS (nyb/1D0B)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2C5yr8vGTlxjJVcun8hqXadCOO_qs_lrfGQXta1qmi3JWtsbFN8sBQ==
Age: 6034
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 90af7f9fc306540e02535db3d00dca64
9e05b003b35ed57277b6b295adde93add7c41b0b
64abd990305ef3f25ffb3fb2ccae04b76e178375752ecb2020411df8f7974fcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 629977ef3e811313c3398e85eab258c4
69022414f3775ed783dd6d65254988b52eecf3bd
e01f6c335c13dacce6d6a8fb67f165f6c786bbffca33976484ce03922cc04237
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 18d9c80e93810b52880aab445613e4b7
ca08ea7190fac815eae23eb6022d7f524694a518
6ed2db33b116fbb84b14f8509886515c5b9d8277437c8ac00b5735712f7f662f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 629977ef3e811313c3398e85eab258c4
69022414f3775ed783dd6d65254988b52eecf3bd
e01f6c335c13dacce6d6a8fb67f165f6c786bbffca33976484ce03922cc04237
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/ddm/fls/i/src=8494807;type=global;cat=uvisit;ord=1;num=4030272829506;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
142.250.74.130200 OK 177 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=8494807;type=global;cat=uvisit;ord=1;num=4030272829506;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
IP 142.250.74.130:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9393b28661a65a763699c108887882eb
c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
GET /ddm/fls/i/src=8494807;type=global;cat=uvisit;ord=1;num=4030272829506;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 20:04:30 GMT
expires: Fri, 09 Sep 2022 20:04:30 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=8494807;type=global;cat=allpv;ord=581065562270;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;u3=;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
142.250.74.130200 OK 177 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=8494807;type=global;cat=allpv;ord=581065562270;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;u3=;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
IP 142.250.74.130:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9393b28661a65a763699c108887882eb
c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
GET /ddm/fls/i/src=8494807;type=global;cat=allpv;ord=581065562270;gtm=2wg970;auiddc=68622478.1662753862;u2=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;u1=%7C;u3=;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 20:04:30 GMT
expires: Fri, 09 Sep 2022 20:04:30 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=11319611;type=keyse0;cat=custo0;ord=1;num=3730336153993;gtm=2wg970;auiddc=68622478.1662753862;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
142.250.74.130200 OK 177 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=11319611;type=keyse0;cat=custo0;ord=1;num=3730336153993;gtm=2wg970;auiddc=68622478.1662753862;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
IP 142.250.74.130:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 9393b28661a65a763699c108887882eb
c237ba6491e6fb9ca57da33dd9d048ca8e86cfda
2bdce28c6fb3cb210861d4aba734ab7aedfc979a8fa273512a61d8cf8afc78b0
GET /ddm/fls/i/src=11319611;type=keyse0;cat=custo0;ord=1;num=3730336153993;gtm=2wg970;auiddc=68622478.1662753862;~oref=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 20:04:30 GMT
expires: Fri, 09 Sep 2022 20:04:30 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 177
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Df6c2e158-3e16-24a5-4b81-41931d8da4b3%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.customink.com&ex-hargs=v%3D1.0%3Bc%3D1069608560801%3Bp%3DF6C2E158-3E16-24A5-4B81-41931D8DA4B3&cb=573558389263042370
52.46.151.131302 Found 0 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Df6c2e158-3e16-24a5-4b81-41931d8da4b3%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.customink.com&ex-hargs=v%3D1.0%3Bc%3D1069608560801%3Bp%3DF6C2E158-3E16-24A5-4B81-41931D8DA4B3&cb=573558389263042370
IP 52.46.151.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iu3?d=generic&ex-fargs=%3Fid%3Df6c2e158-3e16-24a5-4b81-41931d8da4b3%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.customink.com&ex-hargs=v%3D1.0%3Bc%3D1069608560801%3Bp%3DF6C2E158-3E16-24A5-4B81-41931D8DA4B3&cb=573558389263042370 HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Fri, 09 Sep 2022 20:04:30 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: D0K6N61YSKA0GJ35QDK1
Set-Cookie: ad-id=A7nRfLBXvE_UqbNsH14p4K8|t; Domain=.amazon-adsystem.com; Expires=Sat, 01-Apr-2023 20:04:30 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Df6c2e158-3e16-24a5-4b81-41931d8da4b3%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.customink.com&ex-hargs=v%3D1.0%3Bc%3D1069608560801%3Bp%3DF6C2E158-3E16-24A5-4B81-41931D8DA4B3&cb=573558389263042370&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 18d9c80e93810b52880aab445613e4b7
ca08ea7190fac815eae23eb6022d7f524694a518
6ed2db33b116fbb84b14f8509886515c5b9d8277437c8ac00b5735712f7f662f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
data.adxcel-ec2.com/pixel/?ad_log=referer&action=content&value=undefined&order_id=undefined&content_id=undefined&pixid=6709f282-197d-478d-bd53-2aa0a1cc895e>mcb=835649445
52.45.183.32200 OK 43 B URL HTTP/1.1 data.adxcel-ec2.com/pixel/?ad_log=referer&action=content&value=undefined&order_id=undefined&content_id=undefined&pixid=6709f282-197d-478d-bd53-2aa0a1cc895e>mcb=835649445
IP 52.45.183.32:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash a5098c60b3b0c879a2c7af6c68b7b53f
939f40be7f1aaf623f62886de4aaba3886df9b65
693d949d8c3fdc7fd4ace7c340b5f177a9f0c5be7bafee8bc93a7d88b7523d75
GET /pixel/?ad_log=referer&action=content&value=undefined&order_id=undefined&content_id=undefined&pixid=6709f282-197d-478d-bd53-2aa0a1cc895e>mcb=835649445 HTTP/1.1
Host: data.adxcel-ec2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Df6c2e158-3e16-24a5-4b81-41931d8da4b3%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.customink.com&ex-hargs=v%3D1.0%3Bc%3D1069608560801%3Bp%3DF6C2E158-3E16-24A5-4B81-41931D8DA4B3&cb=573558389263042370&dcc=t
52.46.151.131200 OK 65 B URL HTTP/1.1 s.amazon-adsystem.com/iu3?d=generic&ex-fargs=%3Fid%3Df6c2e158-3e16-24a5-4b81-41931d8da4b3%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.customink.com&ex-hargs=v%3D1.0%3Bc%3D1069608560801%3Bp%3DF6C2E158-3E16-24A5-4B81-41931D8DA4B3&cb=573558389263042370&dcc=t
IP 52.46.151.131:0
File type HTML document, ASCII text
Hash 22fdf49482d8200e8f305bbe262eff14
f254bd4053267c2cf46675613e689016d8b7f775
115d83ece49fd1c5769409aab9d78572eed86cd38a0556b4cdeeac82c83091d3
GET /iu3?d=generic&ex-fargs=%3Fid%3Df6c2e158-3e16-24a5-4b81-41931d8da4b3%26type%3D55%26m%3D1&ex-fch=416613&ex-src=https://www.customink.com&ex-hargs=v%3D1.0%3Bc%3D1069608560801%3Bp%3DF6C2E158-3E16-24A5-4B81-41931D8DA4B3&cb=573558389263042370&dcc=t HTTP/1.1
Host: s.amazon-adsystem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.customink.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Server
Date: Fri, 09 Sep 2022 20:04:31 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 65
Connection: keep-alive
x-amz-rid: MPGAKZTM6X7X451RDPYS
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
pixel.pointmediatracker.com/kpi?c=customink&kpi=visit&tag_id=163&fpc=10c60c5f-7808-4214-bd9a-cac44af2caa4&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29>mcb=1015898004
143.204.55.34302 Found 2 B URL HTTP/2 pixel.pointmediatracker.com/kpi?c=customink&kpi=visit&tag_id=163&fpc=10c60c5f-7808-4214-bd9a-cac44af2caa4&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29>mcb=1015898004
IP 143.204.55.34:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /kpi?c=customink&kpi=visit&tag_id=163&fpc=10c60c5f-7808-4214-bd9a-cac44af2caa4&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29>mcb=1015898004 HTTP/1.1
Host: pixel.pointmediatracker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: application/json
content-length: 2
location: https://cnv.event.prod.bidr.io/log/cnv?tag_id=163&buzz_key=blisspoint&value=customink&segment_key=&order=879d8fb2-f9c4-4887-9998-1145bee7480b.null&ord=6136860476929442181
date: Fri, 09 Sep 2022 20:04:31 GMT
x-amzn-requestid: 60c01165-eaea-4e36-87b1-e32c5619c992
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
set-cookie: c=125630b6-660a-4524-ae8d-940f4fc29b91; domain=.pointmediatracker.com; expires=Sat, 09-Sep-2023 20:04:31 GMT; path=/; secure; SameSite=None
x-amz-apigw-id: YNVcYGaaPHcF9kA=
x-amzn-trace-id: Root=1-631b9c4f-75ec6a1d37e0fd4d63cea45f;Sampled=0
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NuDqLqp1Rs9ZgVYXttxL3SX6oaxywEL-ueg6-jTBeAP3yM47fCpXeA==
X-Firefox-Spdy: h2
mms-images.out.customink.com/mms/images/catalog/colors/201606/views/alt/back_medium_extended.png?design=urx0-00cn-agz9&pblegacy=1&pblegacysize=small&pblegacywm=1
143.204.55.114200 OK 35 kB URL HTTP/2 mms-images.out.customink.com/mms/images/catalog/colors/201606/views/alt/back_medium_extended.png?design=urx0-00cn-agz9&pblegacy=1&pblegacysize=small&pblegacywm=1
IP 143.204.55.114:0
File type JPEG image data, baseline, precision 8, 300x287, components 3\012- data
Hash 753b8d803e785e2b1cce353f283f081b
83bcf145a5e83c337e31a3d24b598711a87f4286
53b50d80d556be54abbddf4a4745751f5777ec0383a0c8db0d08cfeea8ad835c
GET /mms/images/catalog/colors/201606/views/alt/back_medium_extended.png?design=urx0-00cn-agz9&pblegacy=1&pblegacysize=small&pblegacywm=1 HTTP/1.1
Host: mms-images.out.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 35002
date: Fri, 09 Sep 2022 20:04:30 GMT
etag: 83bcf145a5e83c337e31a3d24b598711a87f4286
content-disposition: inline
content-transfer-encoding: binary
cache-control: no-cache, no-store, must-revalidate
x-aws-lambda-function-version: 14
apigw-requestid: YNVcSgw6IAMEVbw=
x-cache: Miss from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iMcFZKAg8FOMN_CKJf3ebIxnsdqZCu8nMaNEnvehmfU6pJW5Q2NjJg==
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9802
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 20:04:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9802
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 20:04:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9802
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 20:04:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9802
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 20:04:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9802
Expires: Fri, 09 Sep 2022 22:47:53 GMT
Date: Fri, 09 Sep 2022 20:04:31 GMT
Connection: keep-alive
mms-images.out.customink.com/mms/images/catalog/colors/201606/views/alt/front_medium_extended.png?design=urx0-00cn-agz9&pblegacy=1&pblegacysize=small&pblegacywm=1
143.204.55.114200 OK 33 kB URL HTTP/2 mms-images.out.customink.com/mms/images/catalog/colors/201606/views/alt/front_medium_extended.png?design=urx0-00cn-agz9&pblegacy=1&pblegacysize=small&pblegacywm=1
IP 143.204.55.114:0
File type JPEG image data, baseline, precision 8, 300x287, components 3\012- data
Hash 28ba45a4e8e341cd5fb3a4d74af9fb87
6e2e611e8f3733f7477b9fd3e2215a1e827b7218
49be1c320716a58e37162a07222aa2733e2da2d2307e7f0b51114eb019a38d56
GET /mms/images/catalog/colors/201606/views/alt/front_medium_extended.png?design=urx0-00cn-agz9&pblegacy=1&pblegacysize=small&pblegacywm=1 HTTP/1.1
Host: mms-images.out.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 32858
date: Fri, 09 Sep 2022 20:04:31 GMT
content-disposition: inline
content-transfer-encoding: binary
cache-control: no-cache, no-store, must-revalidate
x-aws-lambda-function-version: 14
etag: 6e2e611e8f3733f7477b9fd3e2215a1e827b7218
apigw-requestid: YNVcRgpQIAMEMFg=
x-cache: Miss from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1fJeUYriQysC-GqPjseqcse7iBCAXHQhOA0lYzv0BSB2UWNJ2BnP2Q==
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5fdeb374d4e3669ce5d9ff2cd22cd19
70ede5692526afd351d134a391383461dafdc64f
10c5d8e41aae1a36525a45375966b5067333f0c7edc176a540fd6527ebe1ad8c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc632269f-fb89-42dc-acc4-f733f3d7beb7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4532
x-amzn-requestid: e5694699-7f38-4542-8808-54bda7ee7d86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIMmGGUmIAMF2cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63198e26-1aa6788e24fcfdf0008bee21;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 06:39:34 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zdVUahmbPQ7sQMlg14M89JOwjN2PEM03GNLYEwxPjcaioRpyqb8isA==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:26:32 GMT
age: 77879
etag: "70ede5692526afd351d134a391383461dafdc64f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 60fa03262bb3728f24a4c7a8177ec788
09dcbdc6043f01dd56920cca3ce3920d0d07b795
e7448f186933f9848f1d55f0e8dba593918846d02fb9cc3a7cd86d69b96a7fde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7515
x-amzn-requestid: eaf81b32-3b53-4e89-a9d0-943bc9f9982f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0j0QFhxoAMF-Mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6311b34e-114287d30092033a2b54ec01;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 07:39:58 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: _mlXN3nJ7ZPcUDWIqqiv2CB6dkSJ2Y-AZIXNs4xOj18ZX6DYMdhXAA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 ece5d4a731ece5ff46c564ab2b946ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:46:19 GMT
age: 80292
etag: "09dcbdc6043f01dd56920cca3ce3920d0d07b795"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg
34.120.237.76200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9590b525c8b07a297c8784f02b161a1
cec8428d159a5bde29e89c64cfb04146f759d52b
d309772ce79d36f7b1df0a3ea85a01f8278db2909c860721d105b772efed82ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F793f20c6-757e-47e5-8ab6-4d73ceae75af.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4002
x-amzn-requestid: ea2f5309-e220-4b7e-b718-9339b9444cc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQ6hHM8IAMFeJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a61dc-7d45fd9253b7b7fa732b6f8d;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:42:52 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: VD7SlrM2RwFk5cfQvul2bTJA__GPYd5_UPY0D0_5NGLHoBj3yur7PA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 22:15:21 GMT
age: 78550
etag: "cec8428d159a5bde29e89c64cfb04146f759d52b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg
34.120.237.76200 OK 3.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0078c7a407144a1ede33aef6f734eecf
113393e0dbabb3aff949d19ab6517ba1082b622d
42afcaf15e45dfa9aff14f59f69d60a3de127005e35783d2d35a4cfa652b57b3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498f96cc-d02c-4ca3-a7e2-0be324253465.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3125
x-amzn-requestid: 5820e798-6469-40f9-8d70-ee71f1a163b9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLM5GGQAoAMF8eQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ac1d3-3a0e9db848ea7ab145f1cffa;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 04:32:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: eZaKpjBYe3Qn7vs3zF52Cxob-xu3LMFs8esQAu6Lp6bzM0aOEHoXVg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1352c0a623ff0601dd16439f3f225f70.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 04:32:20 GMT
etag: "113393e0dbabb3aff949d19ab6517ba1082b622d"
content-type: image/jpeg
age: 55931
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7afe346e3b24ea4388913b449d1ffc42
f5348ba99fb8966dded580409108316f4e4e1237
1d1cafc3e99c20b23212679838567d4d5fc98c45cf902188e44b25ff2982c8ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9258cc3-ebbf-4d4c-85d1-6bc185623583.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8354
x-amzn-requestid: 55971de2-bf63-4300-9007-1bc234962d0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKRKXFGTIAMFp3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6242-23914ec672a0a898498bbed6;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:44:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: lxqcvxSdM4FBQBZTNnhCrpl02fsnInyii7Yaw7fs4STzEd2fZIuuXA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 a8e5d5aeee6eacca5c379e5059b1f68c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:45:36 GMT
etag: "f5348ba99fb8966dded580409108316f4e4e1237"
content-type: image/jpeg
age: 80335
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5f31e9e-7d20-466c-a9b3-ce9e9c5475e8.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5f31e9e-7d20-466c-a9b3-ce9e9c5475e8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba8d1b764c2d18807caecb5ee1e046c0
c0e3d10ce67f77a92b54954410e30621af7ee87c
f558c4827c2edf896588b6e3f0b4f295269e95f86143b40729a7a2a5e1adbbb6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5f31e9e-7d20-466c-a9b3-ce9e9c5475e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9011
x-amzn-requestid: cf861da4-5f3b-43b8-931a-5285839c6301
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YKQgHFbOoAMFYVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a6133-4cf2e37f5e762a557b081446;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 21:40:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: wqcl8zkszPZhWjJ7mr_p82IRaNzU2vMV3wtipUYgRaL7Vj3ntmYYqQ==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:47:07 GMT
age: 80244
etag: "c0e3d10ce67f77a92b54954410e30621af7ee87c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
l.hrzn-nxt.com/pxl?stm=1662753861786&e=pv&url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&page=Custom%20T-shirts%20-%20Design%20Your%20Own%20T-Shirts%20Online%20-%20Free%20Shipping!&tv=js-2.12.0&tna=nf&aid=customink-2228352f-80ba-4602-90a3-21b1a3ca1266&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=9f7fd22d-fd1d-4d47-9c07-5b0e2d6ec1c4&dtm=1662753861785&vp=1280x939&ds=1268x1845&vid=1&sid=f7e00451-d43c-449a-a7ee-c35131d73428&duid=0584c149-8cc8-4e22-8313-4f0298b52c74&fp=1326250463
54.230.111.13200 OK 43 B URL HTTP/2 l.hrzn-nxt.com/pxl?stm=1662753861786&e=pv&url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&page=Custom%20T-shirts%20-%20Design%20Your%20Own%20T-Shirts%20Online%20-%20Free%20Shipping!&tv=js-2.12.0&tna=nf&aid=customink-2228352f-80ba-4602-90a3-21b1a3ca1266&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=9f7fd22d-fd1d-4d47-9c07-5b0e2d6ec1c4&dtm=1662753861785&vp=1280x939&ds=1268x1845&vid=1&sid=f7e00451-d43c-449a-a7ee-c35131d73428&duid=0584c149-8cc8-4e22-8313-4f0298b52c74&fp=1326250463
IP 54.230.111.13:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /pxl?stm=1662753861786&e=pv&url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&page=Custom%20T-shirts%20-%20Design%20Your%20Own%20T-Shirts%20Online%20-%20Free%20Shipping!&tv=js-2.12.0&tna=nf&aid=customink-2228352f-80ba-4602-90a3-21b1a3ca1266&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=9f7fd22d-fd1d-4d47-9c07-5b0e2d6ec1c4&dtm=1662753861785&vp=1280x939&ds=1268x1845&vid=1&sid=f7e00451-d43c-449a-a7ee-c35131d73428&duid=0584c149-8cc8-4e22-8313-4f0298b52c74&fp=1326250463 HTTP/1.1
Host: l.hrzn-nxt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
date: Fri, 09 Sep 2022 20:04:32 GMT
last-modified: Wed, 17 Apr 2019 18:13:20 GMT
etag: "fb02f374b8f73825415db1bccd4bd76d"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QZWbsFAXwy0c_8cJtVlF9CeGVpJJFk2As3oU79dKePLhVPVlzZfadw==
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
23.36.76.210200 OK 3.1 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP 23.36.76.210:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (7751)
Hash 57efbbeb3e1d23c82b677511c67c8b0e
f927ba115ef4be362694c22850ddbdd1c1b054d1
873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 12 Aug 2022 20:23:36 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=39482
date: Fri, 09 Sep 2022 20:04:31 GMT
content-length: 3063
x-cdn: AKAM
X-Firefox-Spdy: h2
cdn.pbbl.co/r/2663.js
143.204.55.59403 Forbidden 986 B IP 143.204.55.59:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e99b6fd5bb5082026709fade19e94ba6
e7db9c847dfd8890d9dedf215d896d3d5f5691b9
c593ba43eb82224ba9fcde479dd22ae16740019f4359e2f0fc570d192bd25db8
GET /r/2663.js HTTP/1.1
Host: cdn.pbbl.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
server: CloudFront
date: Fri, 09 Sep 2022 20:04:31 GMT
content-type: text/html
content-length: 986
x-cache: Error from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bhtrvrSfJSB4rX_PvbApyu2K3Drh8-9SwpylDCG2cNJzKUWiW6pq-w==
vary: Origin
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Fri, 09 Sep 2022 18:41:12 GMT
expires: Fri, 09 Sep 2022 20:41:12 GMT
cache-control: public, max-age=7200
age: 4999
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/bat.js
204.79.197.200200 OK 11 kB IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=2E2F116033EE6A3B37DA037A321B6BFE; domain=.bing.com; expires=Wed, 04-Oct-2023 20:04:31 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 88C18CB4073247CA99DB02BA509C4933 Ref B: OSL30EDGE0516 Ref C: 2022-09-09T20:04:31Z
date: Fri, 09 Sep 2022 20:04:31 GMT
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-9Z9D1BQPKN>m=2oe970&_p=348521928&cid=1767514299.1662753862&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662753861&sct=1&seg=0&dl=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&dt=Custom%20T-shirts%20-%20Design%20Your%20Own%20T-Shirts%20Online%20-%20Free%20Shipping!&en=page_view&_fv=1&_nsi=1&_ss=2
216.239.32.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-9Z9D1BQPKN>m=2oe970&_p=348521928&cid=1767514299.1662753862&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662753861&sct=1&seg=0&dl=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&dt=Custom%20T-shirts%20-%20Design%20Your%20Own%20T-Shirts%20Online%20-%20Free%20Shipping!&en=page_view&_fv=1&_nsi=1&_ss=2
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-9Z9D1BQPKN>m=2oe970&_p=348521928&cid=1767514299.1662753862&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662753861&sct=1&seg=0&dl=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&dt=Custom%20T-shirts%20-%20Design%20Your%20Own%20T-Shirts%20Online%20-%20Free%20Shipping!&en=page_view&_fv=1&_nsi=1&_ss=2 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.customink.com
date: Fri, 09 Sep 2022 20:04:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=20042032&Ver=2&mid=741d1ecc-3f7f-4115-b796-bc9807e721ac&sid=98a512d0307a11eda14e05d43cc6780e&vid=98a53f40307a11edb45c41f88bd53569&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Custom%20T-shirts%20-%20Design%20Your%20Own%20T-Shirts%20Online%20-%20Free%20Shipping!&p=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&r=<=1627&evt=pageLoad&sv=1&rn=945871
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=20042032&Ver=2&mid=741d1ecc-3f7f-4115-b796-bc9807e721ac&sid=98a512d0307a11eda14e05d43cc6780e&vid=98a53f40307a11edb45c41f88bd53569&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Custom%20T-shirts%20-%20Design%20Your%20Own%20T-Shirts%20Online%20-%20Free%20Shipping!&p=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&r=<=1627&evt=pageLoad&sv=1&rn=945871
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=20042032&Ver=2&mid=741d1ecc-3f7f-4115-b796-bc9807e721ac&sid=98a512d0307a11eda14e05d43cc6780e&vid=98a53f40307a11edb45c41f88bd53569&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Custom%20T-shirts%20-%20Design%20Your%20Own%20T-Shirts%20Online%20-%20Free%20Shipping!&p=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&r=<=1627&evt=pageLoad&sv=1&rn=945871 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=30F0F4F1BCC260A00C65E6EBBD3761D7; domain=.bing.com; expires=Wed, 04-Oct-2023 20:04:31 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1341872F0D8A4737B5B3C3E294CF5F48 Ref B: OSL30EDGE0516 Ref C: 2022-09-09T20:04:31Z
date: Fri, 09 Sep 2022 20:04:31 GMT
X-Firefox-Spdy: h2
s.pinimg.com/ct/core.js
23.38.200.197200 OK 1.2 kB IP 23.38.200.197:0
File type ASCII text, with very long lines (1181), with no line terminators
Hash f39b41a7452d393e5bd9a13ca2ed5077
ac2a43723ebc3f26e247414022e6f808f75080bc
e12ab96acd2f7ef7732fb3959dcf9e3401a88c8d4efd09768a65e8be01a24801
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "f39b41a7452d393e5bd9a13ca2ed5077"
cache-control: max-age=7200
accept-ranges: bytes
content-type: application/javascript
content-length: 1181
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash fb7355a848282f90a4397f775de28f77
96c3088720082bed09b2b73ee5a0f92ee512cc72
d51e0384e8a14ada47c6a5347b55fb4ce7930381b51cf81de72198bb2aadd12b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 20:04:31 GMT
Last-Modified: Fri, 09 Sep 2022 18:17:38 GMT
Server: ECS (nyb/1D23)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: y9hIx-9c9BBusNYL0CjZMsq5pAZ3fa6Ud3I-EjMU_9NKPKNgM72zxA==
Age: 6413
bat.bing.com/action/0?ti=20042032&Ver=2&mid=741d1ecc-3f7f-4115-b796-bc9807e721ac&sid=98a512d0307a11eda14e05d43cc6780e&vid=98a53f40307a11edb45c41f88bd53569&vids=0&msclkid=N&gc=USD&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=537707
204.79.197.200204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=20042032&Ver=2&mid=741d1ecc-3f7f-4115-b796-bc9807e721ac&sid=98a512d0307a11eda14e05d43cc6780e&vid=98a53f40307a11edb45c41f88bd53569&vids=0&msclkid=N&gc=USD&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=537707
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=20042032&Ver=2&mid=741d1ecc-3f7f-4115-b796-bc9807e721ac&sid=98a512d0307a11eda14e05d43cc6780e&vid=98a53f40307a11edb45c41f88bd53569&vids=0&msclkid=N&gc=USD&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=537707 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=08FDCE0F99AE6D960806DC15985B6CDC; domain=.bing.com; expires=Wed, 04-Oct-2023 20:04:31 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B849C179949342B9A970AD44FA5475B1 Ref B: OSL30EDGE0516 Ref C: 2022-09-09T20:04:31Z
date: Fri, 09 Sep 2022 20:04:31 GMT
X-Firefox-Spdy: h2
cnv.event.prod.bidr.io/log/cnv?tag_id=163&buzz_key=blisspoint&value=customink&segment_key=&order=879d8fb2-f9c4-4887-9998-1145bee7480b.null&ord=6136860476929442181
52.214.24.113303 See Other 0 B URL HTTP/1.1 cnv.event.prod.bidr.io/log/cnv?tag_id=163&buzz_key=blisspoint&value=customink&segment_key=&order=879d8fb2-f9c4-4887-9998-1145bee7480b.null&ord=6136860476929442181
IP 52.214.24.113:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /log/cnv?tag_id=163&buzz_key=blisspoint&value=customink&segment_key=&order=879d8fb2-f9c4-4887-9998-1145bee7480b.null&ord=6136860476929442181 HTTP/1.1
Host: cnv.event.prod.bidr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.customink.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Fri, 09 Sep 2022 20:04:31 GMT
location: https://cnv.event.prod.bidr.io/log/cnv?tag_id=163&buzz_key=blisspoint&value=customink&segment_key=&order=879d8fb2-f9c4-4887-9998-1145bee7480b.null&ord=6136860476929442181&_bee_ppp=1
Server: nginx
set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 09 Sep 2022 20:14:31 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
www.customink.com/favicon.ico
54.230.111.83200 OK 15 kB URL HTTP/2 www.customink.com/favicon.ico
IP 54.230.111.83:0
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 402fa1b98f3d07c3c31ce2055bf70ca9
a26219a09128ec036395605a3be73187964702d4
b66aeb4ac3f2460ac38d9ebcc06e5fc935ec18bb14ec16c7fd831cd3735f377a
GET /favicon.ico HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7; optimizelyEndUserId=oeu1662753861276r0.1486479685460691; fsTrigger=false; _gcl_au=1.1.68622478.1662753862; FPC=10c60c5f-7808-4214-bd9a-cac44af2caa4; FB Event ID=1662753861583.v5lnch5f; _ga_9Z9D1BQPKN=GS1.1.1662753861.1.1.1662753861.0.0.0; _ga=GA1.1.1767514299.1662753862; interactions=a%3Ao%253Acode%253Ds%25253AHL-191722%255Edate%253Dn%25253A1662753861382
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 15086
date: Fri, 09 Sep 2022 20:04:31 GMT
last-modified: Thu, 08 Sep 2022 15:14:04 GMT
server: nginx
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: P-xwfSr2HcnpO5tos6_rMF0Doob5fNvcA7eppSxLQbEhkaUWLrmdNA==
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 863f9f9778e13dd2f0c5a0ba852e540b
c13ea25e5880f470779277906d32caec83ad146e
727713f0f68b972669ca2cea3b6d26b0c26ec56a778d4aebd29ec4fc84983fc0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1941
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:31 GMT
Last-Modified: Fri, 09 Sep 2022 19:32:11 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3017114&time=1662753862291&url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
13.107.42.14302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3017114&time=1662753862291&url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3017114&time=1662753862291&url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3017114%26time%3D1662753862291%26url%3Dhttps%253A%252F%252Fwww.customink.com%252Fdesigns%252Fisumls%252Furx0-00cn-agz9%252Fhotlink%253Fpc%253DHL-191722%2526utm_content%253Dviewbutton%2526oe%253D43433358-df9f6%2526utm_source%253DHotlink%2526utm_medium%253Demail%2526utm_campaign%253DHotlink%2525201%252520Test%252520%2525231%252520August%25252025%25252C%2525202022%252520Variation%252520E%252520%252528WAnzm5%252529%2526_kx%253DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%25253D.SKGNUp%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQJNH4AJsSUK7wAAAYMj2pY95qe1qCT1qdueVikaxbV7raZBzCqFexlgnlpvEw5m5hY8Yg0YlD-keA; Max-Age=2592000; Expires=Sun, 09 Oct 2022 20:04:31 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQKzVD4qPCHSgQAAAYMj2pY9uCUZyLLZ5F4XLmOBvV6oHjjHqexOOMxjbsKCfNXzs0P5gXXe_Qb_v4Y319y0PA; Max-Age=2592000; Expires=Sun, 09 Oct 2022 20:04:31 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&e2062eef-b767-4c6e-847e-614cfe2f4a60"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 09-Sep-2023 20:04:31 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2379:u=1:x=1:i=1662753871:t=1662840271:v=2:sig=AQH6rBc3wgPYDh2FhLjobT950yIWZPPP"; Expires=Sat, 10 Sep 2022 20:04:31 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXoRA3avG/RDWhsED5uAw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 726B8BE8914D4D07AA7A2D2E3053E2AC Ref B: OSL30EDGE0409 Ref C: 2022-09-09T20:04:31Z
date: Fri, 09 Sep 2022 20:04:30 GMT
content-length: 0
X-Firefox-Spdy: h2
bat.bing.com/p/action/20042032.js
204.79.197.200200 OK 667 B URL HTTP/2 bat.bing.com/p/action/20042032.js
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash 8d5ddd502bf7fc20b547c208aa5b8bf7
088aa8563aac9e1e97592e7b9cd9cb83765038e7
f1da69eae9ccec7f0400a29b1a1416697afc1a69bae3b3dd0b3c9f11049800e7
GET /p/action/20042032.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 667
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=391031AE1CB0698E3B5D23B41D4568D3; domain=.bing.com; expires=Wed, 04-Oct-2023 20:04:31 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F830B447BC834FD2B5BA7592DC9CAB9F Ref B: OSL30EDGE0516 Ref C: 2022-09-09T20:04:31Z
date: Fri, 09 Sep 2022 20:04:31 GMT
X-Firefox-Spdy: h2
cnv.event.prod.bidr.io/log/cnv?tag_id=163&buzz_key=blisspoint&value=customink&segment_key=&order=879d8fb2-f9c4-4887-9998-1145bee7480b.null&ord=6136860476929442181&_bee_ppp=1
52.214.24.113200 OK 43 B URL HTTP/1.1 cnv.event.prod.bidr.io/log/cnv?tag_id=163&buzz_key=blisspoint&value=customink&segment_key=&order=879d8fb2-f9c4-4887-9998-1145bee7480b.null&ord=6136860476929442181&_bee_ppp=1
IP 52.214.24.113:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /log/cnv?tag_id=163&buzz_key=blisspoint&value=customink&segment_key=&order=879d8fb2-f9c4-4887-9998-1145bee7480b.null&ord=6136860476929442181&_bee_ppp=1 HTTP/1.1
Host: cnv.event.prod.bidr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.customink.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
cache-control: no-cache, must-revalidate
content-type: image/gif
Date: Fri, 09 Sep 2022 20:04:31 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
p3p: CP="This is not a P3P policy! See https://beeswax.com/privacy for more info."
pragma: no-cache
Server: nginx
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 43
Connection: keep-alive
s.pinimg.com/ct/lib/main.55e552f9.js
23.38.200.197200 OK 19 kB URL HTTP/2 s.pinimg.com/ct/lib/main.55e552f9.js
IP 23.38.200.197:0
File type Unicode text, UTF-8 text, with very long lines (54284), with no line terminators
Hash 84c1602180f73853dc1e35f7296bdf7d
40aea44ea928e8d539381759b791f5c70f6d4c82
6b2faea09b5d5015a36ab4300e1034e1907895b40249e5fd11b42a66fbd21dac
GET /ct/lib/main.55e552f9.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "84c1602180f73853dc1e35f7296bdf7d"
content-encoding: gzip
accept-ranges: bytes
content-type: application/javascript
content-length: 18601
cache-control: max-age=1209600
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 97e5566c275b9fe27464690811145846
fa8973c8004db59d9a8fd46e9743fb6c9a8d3efd
e77cd1a4510c736e628aa10719f7694d7c7fef15adf1a449d800f90cde76fb88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 66d104807d52bc36f5fb92212da5ea8c
80024475e9a90f2f6a5fa5ddbd0b2a4e0c3d7306
002b0ae7ee961d9243da22a430747a0d4ba85d8f485e993fd75160b3c6678358
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:31 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 03:43:29 GMT
Expires: Wed, 14 Sep 2022 03:43:28 GMT
Etag: "80024475e9a90f2f6a5fa5ddbd0b2a4e0c3d7306"
Cache-Control: max-age=372536,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748288900a92b505-OSL
us.creativecdn.com/tags?type=script&id=pr_oUmt0LP6DaxLCcmDvho7&ncm=1&id=pr_oUmt0LP6DaxLCcmDvho7_uid_unknown
185.184.10.30302 Found 0 B URL HTTP/2 us.creativecdn.com/tags?type=script&id=pr_oUmt0LP6DaxLCcmDvho7&ncm=1&id=pr_oUmt0LP6DaxLCcmDvho7_uid_unknown
IP 185.184.10.30:0
ASN #203690 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tags?type=script&id=pr_oUmt0LP6DaxLCcmDvho7&ncm=1&id=pr_oUmt0LP6DaxLCcmDvho7_uid_unknown HTTP/1.1
Host: us.creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 09 Sep 2022 20:04:31 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-max-age: 3600
vary: Origin
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: u=enb4Wt6NdVN0R8jsBY48;Path=/;Domain=.creativecdn.com;Expires=Sat, 09-Sep-2023 20:04:31 GMT;Max-Age=31536000;Secure;SameSite=None
ts=1662753871;Path=/;Domain=.creativecdn.com;Expires=Sat, 09-Sep-2023 20:04:31 GMT;Max-Age=31536000;Secure;SameSite=None
location: https://us.creativecdn.com/tags?type=script&id=pr_oUmt0LP6DaxLCcmDvho7&ncm=1&id=pr_oUmt0LP6DaxLCcmDvho7_uid_unknown&tc=1
content-length: 0
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-860220-1&cid=1767514299.1662753862&jid=1630245563&gjid=1998153181&_gid=213782404.1662753862&_u=aCDAAEACQAAAAC~&z=930744702
142.251.1.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-860220-1&cid=1767514299.1662753862&jid=1630245563&gjid=1998153181&_gid=213782404.1662753862&_u=aCDAAEACQAAAAC~&z=930744702
IP 142.251.1.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-860220-1&cid=1767514299.1662753862&jid=1630245563&gjid=1998153181&_gid=213782404.1662753862&_u=aCDAAEACQAAAAC~&z=930744702 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.customink.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 09 Sep 2022 20:04:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lptag.liveperson.net/tag/tag.js?site=23156914
178.249.101.23200 OK 7.6 kB URL HTTP/2 lptag.liveperson.net/tag/tag.js?site=23156914
IP 178.249.101.23:0
File type ASCII text, with very long lines (21652), with no line terminators
Hash 6b675640425ec8551a433e26a377d954
7234f02cce1ccb2a4facf2b34b9185cfcf27299d
8c9716f14d2e964be7c93d3d8c28819cb35c529fce6206a79061cda509e05bfd
GET /tag/tag.js?site=23156914 HTTP/1.1
Host: lptag.liveperson.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:31 GMT
content-type: application/javascript
content-length: 7567
last-modified: Thu, 03 Sep 2020 08:27:49 GMT
etag: "5f50a905-1d8f"
content-encoding: gzip
server: ws
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
cache-control: public, max-age=630
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3017114%26time%3D1662753862291%26url%3Dhttps%253A%252F%252Fwww.customink.com%252Fdesigns%252Fisumls%252Furx0-00cn-agz9%252Fhotlink%253Fpc%253DHL-191722%2526utm_content%253Dviewbutton%2526oe%253D43433358-df9f6%2526utm_source%253DHotlink%2526utm_medium%253Demail%2526utm_campaign%253DHotlink%2525201%252520Test%252520%2525231%252520August%25252025%25252C%2525202022%252520Variation%252520E%252520%252528WAnzm5%252529%2526_kx%253DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%25253D.SKGNUp%26liSync%3Dtrue
13.107.42.14302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3017114%26time%3D1662753862291%26url%3Dhttps%253A%252F%252Fwww.customink.com%252Fdesigns%252Fisumls%252Furx0-00cn-agz9%252Fhotlink%253Fpc%253DHL-191722%2526utm_content%253Dviewbutton%2526oe%253D43433358-df9f6%2526utm_source%253DHotlink%2526utm_medium%253Demail%2526utm_campaign%253DHotlink%2525201%252520Test%252520%2525231%252520August%25252025%25252C%2525202022%252520Variation%252520E%252520%252528WAnzm5%252529%2526_kx%253DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%25253D.SKGNUp%26liSync%3Dtrue
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D3017114%26time%3D1662753862291%26url%3Dhttps%253A%252F%252Fwww.customink.com%252Fdesigns%252Fisumls%252Furx0-00cn-agz9%252Fhotlink%253Fpc%253DHL-191722%2526utm_content%253Dviewbutton%2526oe%253D43433358-df9f6%2526utm_source%253DHotlink%2526utm_medium%253Demail%2526utm_campaign%253DHotlink%2525201%252520Test%252520%2525231%252520August%25252025%25252C%2525202022%252520Variation%252520E%252520%252528WAnzm5%252529%2526_kx%253DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%25253D.SKGNUp%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.customink.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=3017114&time=1662753862291&url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&ebf34291-27f8-4dff-8078-8c86df6b5539"; Domain=.linkedin.com; Expires=Sat, 09-Sep-2023 20:04:31 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20220909200431b78c403d-037a-4099-820a-a10c1d3bc548AQEhEvsLidGyz-6PkSilqyHjM6zk4KcS"; Domain=.www.linkedin.com; Expires=Sat, 09-Sep-2023 20:04:31 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NjI3NTM4NzE7MjswMjGS4cHMCsmIOr5ljHBHEMHXRZbYkyUiUjMpmgW8qg15kg==; Domain=.linkedin.com; Expires=Wed, 08 Mar 2023 20:04:31 GMT; Path=/; Secure; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2379:u=1:x=1:i=1662753871:t=1662840271:v=2:sig=AQGLYGeROp8GzSjtk2PbTDhk7pVvnOEL"; Expires=Sat, 10 Sep 2022 20:04:31 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXoRA3c/ptJ7fkaHiIRuw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 7FF050B933B740DDA2D2142EDD75CADB Ref B: OSL30EDGE0409 Ref C: 2022-09-09T20:04:31Z
date: Fri, 09 Sep 2022 20:04:31 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash bd602c4457a3d610e4ad0ff9f4bbe5ef
b98abd3f5391378ff5c99331b5b1a47df3bd4cd1
0eb83abd99694ed232c7d73fd62526dfbb2087bb0ac39d5b2e3d590f038b5309
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 20:04:31 GMT
Last-Modified: Fri, 09 Sep 2022 19:14:51 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rt42C6gmfROcZafqtCoJ8XcE6X3_Hrp6EKUuLqbGKgrTT00hTwPdug==
Age: 2980
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash dad8f08be4d6d5166c7f54004cb37c64
949b5738d5c880445510774f1da0e0af667308b3
398205f8248c3e00126eb21e6cb1d4e21a981a1b46d59ff4993e6023f33c6b9f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ct.pinterest.com/user/?tid=2618884964404&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%5D%2C%22md_frequency%22%3A0%7D&cb=1662753862554
151.101.84.84200 OK 374 B URL HTTP/2 ct.pinterest.com/user/?tid=2618884964404&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%5D%2C%22md_frequency%22%3A0%7D&cb=1662753862554
IP 151.101.84.84:0
File type JSON data\012- , ASCII text, with very long lines (539), with no line terminators
Hash 59fd533cb8242e01cf9d54b39afde6b9
dd79675c13919448b24fc7e5dac3d0bbff028c44
7a71032f619f9f2fe5a9b80f68165db08ba14d0a6147f8c7af263240975dbc72
GET /user/?tid=2618884964404&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%5D%2C%22md_frequency%22%3A0%7D&cb=1662753862554 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPU9USTBZbUl3TkRVdE1EZzVNQzAwT1dVM0xUbGtOamN0TmpVNE1XRXdaakZtWkdFeg
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.customink.com
content-type: application/json; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 1149629067436122
date: Fri, 09 Sep 2022 20:04:31 GMT
x-cdn: fastly
content-length: 374
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2618884964404&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%5D%2C%22md_frequency%22%3A0%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1662753862555
151.101.84.84200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2618884964404&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%5D%2C%22md_frequency%22%3A0%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1662753862555
IP 151.101.84.84:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2618884964404&pd=%7B%22np%22%3A%22gtm%22%2C%22gtm_aem_configs%22%3A%5B%5D%2C%22md_frequency%22%3A0%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2255e552f9%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1662753862555 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1042483648994029
date: Fri, 09 Sep 2022 20:04:31 GMT
x-cdn: fastly
content-length: 35
X-Firefox-Spdy: h2
us.creativecdn.com/tags?type=script&id=pr_oUmt0LP6DaxLCcmDvho7&ncm=1&id=pr_oUmt0LP6DaxLCcmDvho7_uid_unknown&tc=1
185.184.10.30200 OK 603 B URL HTTP/2 us.creativecdn.com/tags?type=script&id=pr_oUmt0LP6DaxLCcmDvho7&ncm=1&id=pr_oUmt0LP6DaxLCcmDvho7_uid_unknown&tc=1
IP 185.184.10.30:0
ASN #203690 Rtb House S.A.
File type ASCII text, with very long lines (1116), with no line terminators
Hash 6109c65ea8e107de5daf5275a77f4ee5
1856bd1c68015ca1e17765827eaf04d80b4ff9ad
23e822ac89e85fb519f15ad23e4e87de581646d0e5d8b9c8fd4abcf84adef4bb
GET /tags?type=script&id=pr_oUmt0LP6DaxLCcmDvho7&ncm=1&id=pr_oUmt0LP6DaxLCcmDvho7_uid_unknown&tc=1 HTTP/1.1
Host: us.creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.customink.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-max-age: 3600
vary: Origin, Accept-Encoding
content-type: application/javascript; charset=UTF-8
cache-control: no-cache, no-store, must-revalidate, private, max-age=0
pragma: no-cache
date: Fri, 09 Sep 2022 20:04:31 GMT, Fri, 09 Sep 2022 20:04:31 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-length: 603
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 86354a78c1da4ea13a932216048b2abf
ade657780508cffa8655f7cab6492dc25a79f0d2
458dbf1fcc4ef14e78b991b2f906704b4d27a985d2feb500bb5e5f832232887b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-860220-1&cid=1767514299.1662753862&jid=1630245563&_u=aCDAAEACQAAAAC~&z=1385228528
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-860220-1&cid=1767514299.1662753862&jid=1630245563&_u=aCDAAEACQAAAAC~&z=1385228528
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-860220-1&cid=1767514299.1662753862&jid=1630245563&_u=aCDAAEACQAAAAC~&z=1385228528 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 20:04:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
logx.optimizely.com/v1/events
54.237.3.206204 No Content 0 B URL HTTP/1.1 logx.optimizely.com/v1/events
IP 54.237.3.206:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/events HTTP/1.1
Host: logx.optimizely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 858
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.customink.com
Access-Control-Expose-Headers: X-Results-Data-Source
Content-Type: text/plain
Date: Fri, 09 Sep 2022 20:04:31 GMT
Server: nginx/1.21.0
Timing-Allow-Origin: *
X-Request-Id: dbf93e80-a392-483a-bb10-04a180b0cbfe
Connection: keep-alive
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-860220-1&cid=1767514299.1662753862&jid=1630245563&_u=aCDAAEACQAAAAC~&z=1385228528
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-860220-1&cid=1767514299.1662753862&jid=1630245563&_u=aCDAAEACQAAAAC~&z=1385228528
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-860220-1&cid=1767514299.1662753862&jid=1630245563&_u=aCDAAEACQAAAAC~&z=1385228528 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Sep 2022 20:04:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/20042032
104.212.67.154200 OK 1.6 kB URL HTTP/2 www.clarity.ms/tag/uet/20042032
IP 104.212.67.154:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (1588), with no line terminators
Hash cb5cd0a13d0bfcaf1e5d9589961548cc
3339f847923c40848a20472799442bfa0db7a9bb
1450da11e59376ee104b9ebbfbb8585dab4c1a9e3a496826553710916d68690d
GET /tag/uet/20042032 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-length: 1588
content-type: application/x-javascript
expires: -1
set-cookie: CLID=c408b1e216aa466b9d55f9e916004ab8.20220909.20230909; expires=Sat, 09 Sep 2023 20:04:31 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0T5wbYwAAAACnXcIfoKlVRInD14BNcLCSTUFOMzBFREdFMDMwNgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 09 Sep 2022 20:04:31 GMT
X-Firefox-Spdy: h2
us.creativecdn.com/tags?type=iframe&id=pr_oUmt0LP6DaxLCcmDvho7&id=pr_oUmt0LP6DaxLCcmDvho7_uid_unknown&ncm=1&tc=1
185.184.10.30200 OK 26 B URL HTTP/2 us.creativecdn.com/tags?type=iframe&id=pr_oUmt0LP6DaxLCcmDvho7&id=pr_oUmt0LP6DaxLCcmDvho7_uid_unknown&ncm=1&tc=1
IP 185.184.10.30:0
ASN #203690 Rtb House S.A.
File type HTML document, ASCII text, with no line terminators
Hash b256d97fbb697428b7a1286ea33539c0
7e4e54e0434406746420141881f419ac165d3edc
f70b370debd085dd9e9fb6495c796cdccf41c44574cc185dbe124f3ea8237623
GET /tags?type=iframe&id=pr_oUmt0LP6DaxLCcmDvho7&id=pr_oUmt0LP6DaxLCcmDvho7_uid_unknown&ncm=1&tc=1 HTTP/1.1
Host: us.creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-max-age: 3600
vary: Origin, Accept-Encoding
content-type: text/html;charset=utf-8
cache-control: no-cache, no-store, must-revalidate, private, max-age=0
pragma: no-cache
date: Fri, 09 Sep 2022 20:04:31 GMT, Fri, 09 Sep 2022 20:04:31 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 26
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=3017114&time=1662753862291&url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&liSync=true
13.107.42.14200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=3017114&time=1662753862291&url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&liSync=true
IP 13.107.42.14:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=3017114&time=1662753862291&url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.customink.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&640666a7-55f4-49dd-8195-37df25be44ac"; domain=.linkedin.com; Path=/; Secure; Expires=Sat, 09-Sep-2023 20:04:31 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2341:u=1:x=1:i=1662753871:t=1662840271:v=2:sig=AQGyoIfzsKNrdKM_NjvmMxDjJwkcMm8b"; Expires=Sat, 10 Sep 2022 20:04:31 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXoRA3fj23L20WppV1dLA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 9266651B7EBC4904893EF692CD8BD396 Ref B: OSL30EDGE0409 Ref C: 2022-09-09T20:04:31Z
date: Fri, 09 Sep 2022 20:04:31 GMT
content-length: 0
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.40/clarity.js
104.212.67.154200 OK 23 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.40/clarity.js
IP 104.212.67.154:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (54745)
Hash 6a87d835543a151541da0ae963173dd7
80bac2abc74d2fa93a63ff82514fd64ee8caf9a0
c806647a143cb92f41ed1e60c6be245cd4e78b447c90adbed881ca54ecfa7337
GET /eus2/s/0.6.40/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-length: 23442
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8bd4806fdad30"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0T5wbYwAAAADI7vXqWC7PRrOWGGwpcmdyTUFOMzBFREdFMDMwNgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Fri, 09 Sep 2022 20:04:31 GMT
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash abaee6ad9821254ddb087b8e85629533
f39f6df8880d90e55e61f91d85bf2b2ec84c6e9a
d1c5e704aba4c2fb6aa25ce5ba8b800a759e2538a36c10d64d5af922079c45af
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:32 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 09 Sep 2022 16:31:55 GMT
Expires: Fri, 16 Sep 2022 16:31:54 GMT
Etag: "f39f6df8880d90e55e61f91d85bf2b2ec84c6e9a"
Cache-Control: max-age=591441,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748288943da5b4f3-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash abaee6ad9821254ddb087b8e85629533
f39f6df8880d90e55e61f91d85bf2b2ec84c6e9a
d1c5e704aba4c2fb6aa25ce5ba8b800a759e2538a36c10d64d5af922079c45af
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:32 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 09 Sep 2022 16:31:55 GMT
Expires: Fri, 16 Sep 2022 16:31:54 GMT
Etag: "f39f6df8880d90e55e61f91d85bf2b2ec84c6e9a"
Cache-Control: max-age=591441,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74828893ffa7b505-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash abaee6ad9821254ddb087b8e85629533
f39f6df8880d90e55e61f91d85bf2b2ec84c6e9a
d1c5e704aba4c2fb6aa25ce5ba8b800a759e2538a36c10d64d5af922079c45af
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:32 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 09 Sep 2022 16:31:55 GMT
Expires: Fri, 16 Sep 2022 16:31:54 GMT
Etag: "f39f6df8880d90e55e61f91d85bf2b2ec84c6e9a"
Cache-Control: max-age=591441,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748288941c7c1c06-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash abaee6ad9821254ddb087b8e85629533
f39f6df8880d90e55e61f91d85bf2b2ec84c6e9a
d1c5e704aba4c2fb6aa25ce5ba8b800a759e2538a36c10d64d5af922079c45af
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:32 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 09 Sep 2022 16:31:55 GMT
Expires: Fri, 16 Sep 2022 16:31:54 GMT
Etag: "f39f6df8880d90e55e61f91d85bf2b2ec84c6e9a"
Cache-Control: max-age=591441,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748288940d3bfabc-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash abaee6ad9821254ddb087b8e85629533
f39f6df8880d90e55e61f91d85bf2b2ec84c6e9a
d1c5e704aba4c2fb6aa25ce5ba8b800a759e2538a36c10d64d5af922079c45af
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:32 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 09 Sep 2022 16:31:55 GMT
Expires: Fri, 16 Sep 2022 16:31:54 GMT
Etag: "f39f6df8880d90e55e61f91d85bf2b2ec84c6e9a"
Cache-Control: max-age=591441,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748288943dfdb517-OSL
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/lpChatV3.min.js?version=10.20.1.9-release_5536
178.249.97.98200 OK 31 kB URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/lpChatV3.min.js?version=10.20.1.9-release_5536
IP 178.249.97.98:0
File type ASCII text, with very long lines (32002)
Hash 61cf665b507158db5a0df564aaaf11dc
59895a13d34d0a6342722d97b9a7eb19a1e8bd98
f5100de034b03c3bd38586f7e195140461ed6a97d0cf9f78d23c39341ec7de92
GET /le_unified_window/10.20.1.9-release_5536/lpChatV3.min.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:32 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:35 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Sat, 09 Sep 2023 20:04:32 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/surveylogicinstance.min.js?version=10.20.1.9-release_5536
178.249.97.98200 OK 18 kB URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/surveylogicinstance.min.js?version=10.20.1.9-release_5536
IP 178.249.97.98:0
File type ASCII text, with very long lines (40041)
Hash 4c46c44210ad52c19f6703a5f260529e
9c60731776c743344ae1732c1ae2f5bdd53f008c
757f4c795aacaf6427e7974b9dc290b988a48f9e4269e5db475b0578246e994d
GET /le_unified_window/10.20.1.9-release_5536/surveylogicinstance.min.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:32 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:35 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Sat, 09 Sep 2023 20:04:32 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
resources.digital-cloud-west.medallia.com/wdcwest/5548/onsite/embed.js
151.101.85.230200 OK 531 B URL HTTP/2 resources.digital-cloud-west.medallia.com/wdcwest/5548/onsite/embed.js
IP 151.101.85.230:0
File type ASCII text, with very long lines (592)
Hash bd1aa4b1c75efe67d529ecb8f91cbfcb
a6cb625cbfc0eae87352e0a5f646c0893f00c383
b4f3fbedc14aa1c72136479933d8c6f5977bd02bb2a06c374e7d10a71e5b9dcc
GET /wdcwest/5548/onsite/embed.js HTTP/1.1
Host: resources.digital-cloud-west.medallia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ulXikLBNzxEZchoKk03p7c4UXMo9lodw0z5i25ozsH4gotRD1N6HHBVBvbmf/XVEm29k9JDsKH4=
x-amz-request-id: 7W2D9FMGN7CR58TH
last-modified: Mon, 29 Aug 2022 11:06:35 GMT
etag: "3f2a0687767c2e66e954d92d8c041923"
x-amz-version-id: g54p6tOeRIkCGmRB0X2qEY1lR34mzQJw
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
cache-control: max-age=0,must-revalidate
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:32 GMT
age: 482903
x-served-by: cache-sea4471-SEA, cache-bma1682-BMA
x-cache: HIT, HIT
x-cache-hits: 12, 1
x-timer: S1662753873.679603,VS0,VE1
vary: Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 531
X-Firefox-Spdy: h2
resources.digital-cloud-west.medallia.com/wdcwest/5548/onsite/generic1661771193524.js
151.101.85.230200 OK 83 kB URL HTTP/2 resources.digital-cloud-west.medallia.com/wdcwest/5548/onsite/generic1661771193524.js
IP 151.101.85.230:0
File type Unicode text, UTF-8 text, with very long lines (40192)
Hash c130177c2513d0abd0d913da103aec2a
ad6ed6ad8aab00db8197f746179d7e2b727937fe
18f44f958ec1bd1f6674ab86e82644b83e7423230cdf9c61315159d13a0c3b94
GET /wdcwest/5548/onsite/generic1661771193524.js HTTP/1.1
Host: resources.digital-cloud-west.medallia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: ANCn4bA7QbyYxBciYvahdaMZZeYrdoLl6YzHMpHh0zPB2SAY+YKN2r/f2aJx8FYmWDRzu0jP+gc=
x-amz-request-id: 7GGTY291N6E3Z6Y7
last-modified: Mon, 29 Aug 2022 11:06:34 GMT
etag: "2f08b66d4f9f2cda01f3a81beb833766"
x-amz-version-id: Ei8DgthJwcTdykdvZVNM0Wd9KwMcbSr1
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
cache-control: max-age=2592000
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:32 GMT
age: 482904
x-served-by: cache-sea4446-SEA, cache-bma1682-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1662753873.698048,VS0,VE1
vary: Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 83043
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=1AF869CF973D49F59B88547FAFF44D97&RedC=c.clarity.ms&MXFR=36ED770DBA5969DC0DB16517BE596708
204.79.197.200302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=1AF869CF973D49F59B88547FAFF44D97&RedC=c.clarity.ms&MXFR=36ED770DBA5969DC0DB16517BE596708
IP 204.79.197.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=1AF869CF973D49F59B88547FAFF44D97&RedC=c.clarity.ms&MXFR=36ED770DBA5969DC0DB16517BE596708 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.customink.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=1AF869CF973D49F59B88547FAFF44D97&MUID=103F9CFCFE176C1B11948EE6FFE26D49
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=103F9CFCFE176C1B11948EE6FFE26D49; domain=c.bing.com; expires=Wed, 04-Oct-2023 20:04:32 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D2431E44CD844AF5A01251BACDE06F0B Ref B: OSL30EDGE0516 Ref C: 2022-09-09T20:04:32Z
date: Fri, 09 Sep 2022 20:04:32 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=1AF869CF973D49F59B88547FAFF44D97&MUID=103F9CFCFE176C1B11948EE6FFE26D49
20.234.93.27200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=1AF869CF973D49F59B88547FAFF44D97&MUID=103F9CFCFE176C1B11948EE6FFE26D49
IP 20.234.93.27:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=1AF869CF973D49F59B88547FAFF44D97&MUID=103F9CFCFE176C1B11948EE6FFE26D49 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.customink.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Wed, 17 Aug 2022 23:56:46 GMT
accept-ranges: bytes
etag: "de363c295b2d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Fri, 09-Sep-2022 20:14:32 GMT; path=/; SameSite=None; Secure;
date: Fri, 09 Sep 2022 20:04:32 GMT
content-length: 42
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 1667b3d6fb24dbfd92ac4be10e505803
d58861522bc5ad5efaa0c7e7713f6b1b505084e2
8c9369b75e66dbcaf4960e2fb2af0dbaed509f9967339248f3d636faa9e336c0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 20:04:32 GMT
Last-Modified: Fri, 09 Sep 2022 18:27:50 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zdN8IdEirR55mzpUFyWiNGOm0KriZlUrMyc5F2DRwZ9gj_fBtGoz3g==
Age: 5803
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 1667b3d6fb24dbfd92ac4be10e505803
d58861522bc5ad5efaa0c7e7713f6b1b505084e2
8c9369b75e66dbcaf4960e2fb2af0dbaed509f9967339248f3d636faa9e336c0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 20:04:32 GMT
Last-Modified: Fri, 09 Sep 2022 18:31:41 GMT
Server: ECS (nyb/1D1A)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qjvK_UxxvOyiVzBqpDLI25O9hvAbhgQOaF3_fOS9Od7wq8htkt-f_Q==
Age: 5571
accdn.lpsnmedia.net/api/account/23156914/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
178.249.101.99200 OK 4.0 kB URL HTTP/2 accdn.lpsnmedia.net/api/account/23156914/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
IP 178.249.101.99:0
Hash d4042cf4f6249e06a169e40ab2543956
ff8d81c297a71142549f29b7674382f3c230940e
8f5f936c73fa7c70ed2ac8935c349a581d940525b6737c02b0a0ee5b96a50b58
GET /api/account/23156914/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:32 GMT
content-type: application/javascript
vary: Accept
expires: Fri, 09 Sep 2022 20:04:32 GMT
x-envoy-upstream-service-time: 1
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
ocsps.ssl.com/
52.6.97.148200 OK 1.9 kB IP 52.6.97.148:0
Hash 9a0918ce002a1094fb8f8c81e1f3409b
b1a54c53a4709a2c1967f7c4b441c67ee573dc07
c5821cc3a053be3921e1aa3b876255dd65465d7c3b5ca58b081098f465380988
POST / HTTP/1.1
Host: ocsps.ssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Sep 2022 20:04:32 GMT
Content-Type: application/ocsp-response
Content-Length: 1883
Connection: keep-alive
Expires: Fri, 16 Sep 2022 15:23:55 GMT
Cache-Control: max-age=86400,public,no-transform,must-revalidate
ETag: "b1a54c53a4709a2c1967f7c4b441c67ee573dc07"
Last-Modified: Fri, 09 Sep 2022 15:23:56 GMT
X-Proxy-Cache: HIT
errors.client.optimizely.com/log
3.229.71.121204 No Content 0 B URL HTTP/1.1 errors.client.optimizely.com/log
IP 3.229.71.121:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /log HTTP/1.1
Host: errors.client.optimizely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 330
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.customink.com
Access-Control-Expose-Headers:
Content-Type: text/plain
Date: Fri, 09 Sep 2022 20:04:32 GMT
Connection: keep-alive
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/UMSClientAPI.min.js?version=10.20.1.9-release_5536
178.249.97.98200 OK 30 kB URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/UMSClientAPI.min.js?version=10.20.1.9-release_5536
IP 178.249.97.98:0
File type ASCII text, with very long lines (32003)
Hash befb347da25fe637c8445f45be42315d
6b81f86df41a44dc3fca13a75aa27383b59e5249
742aa454ef95535912e157bb1991dd23474191a9fae856ac0f7bc33c8de8c724
GET /le_unified_window/10.20.1.9-release_5536/UMSClientAPI.min.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:32 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:34 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Sat, 09 Sep 2023 20:04:32 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
udc-neb.kampyle.com/v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track
35.241.45.82200 OK 59 B URL HTTP/2 udc-neb.kampyle.com/v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track
IP 35.241.45.82:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 0ab969c512ad71613832d03710eadde2
f64271cfa7e4b386fed80e18a958a90ffd1e3893
cbc1399b82e42018fbc8b8b9277200665d6367c9134ead9308ea5e568b00e459
POST /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1
Host: udc-neb.kampyle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 2601
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:33 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.customink.com
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-allow-headers: X-Requested-With, Origin, Content-Type, Accept
access-control-max-age: 1800
x-me: prod-instance-gatewayservice-blue-g40z
x-application-context: application:9090
content-type: text/plain;charset=ISO-8859-1
content-length: 59
server: Jetty(9.2.11.v20150529)
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash cd196dbc0cbf50b9a9fda9f7670419b0
4e51366bbb089e80b7dbd360f6cd5d0dad7adc82
689427e77152cdcf83dc50398036769b9bc29ff6bc8121751dcd2ceddf9cfa48
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:33 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 09 Sep 2022 11:37:40 GMT
Expires: Fri, 16 Sep 2022 11:37:39 GMT
Etag: "4e51366bbb089e80b7dbd360f6cd5d0dad7adc82"
Cache-Control: max-age=573785,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74828899af9db505-OSL
b.clarity.ms/collect
20.75.32.255204 No Content 0 B IP 20.75.32.255:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 4151
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.customink.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Fri, 09 Sep 2022 20:04:32 GMT
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_re/3.52.0.0-release_5108/jsv2/UISuite.js?_v=3.52.0.0-release_5108
178.249.97.98200 OK 12 kB URL HTTP/2 lpcdn.lpsnmedia.net/le_re/3.52.0.0-release_5108/jsv2/UISuite.js?_v=3.52.0.0-release_5108
IP 178.249.97.98:0
Hash 81b5e06a180bbb8ae3d0e90da890e9de
cc2bb84b85852aaf3bfd84c5e8b48c471352ad2f
2866c8cc27b4524a3179b888341d333845bae2dfd0d3b99cb41eb3aa815db7c7
GET /le_re/3.52.0.0-release_5108/jsv2/UISuite.js?_v=3.52.0.0-release_5108 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:33 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 03:12:57 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Sat, 09 Sep 2023 20:04:33 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/23156914/configuration/le-campaigns/campaigns/605500712/engagements/243758014/revision/2058?v=3.0&cb=lp243758014&flavor=dependency
178.249.101.99200 OK 30 kB URL HTTP/2 accdn.lpsnmedia.net/api/account/23156914/configuration/le-campaigns/campaigns/605500712/engagements/243758014/revision/2058?v=3.0&cb=lp243758014&flavor=dependency
IP 178.249.101.99:0
File type ASCII text, with very long lines (57115)
Hash edb1250ccc8a76c19bc31686325e6342
e5ca753c13feb648a4ba0d9fdb18ee0bd6439a34
5b20d5056b7a0893c8178b5a5d338c80e91139e6f3bee200b683da45718356a2
GET /api/account/23156914/configuration/le-campaigns/campaigns/605500712/engagements/243758014/revision/2058?v=3.0&cb=lp243758014&flavor=dependency HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:33 GMT
content-type: application/javascript
vary: Accept
expires: Fri, 09 Sep 2022 20:04:46 GMT
x-envoy-upstream-service-time: 1
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/23156914/configuration/engagement-window/window-confs/2499984830?cb=lpCb41712x14538
178.249.101.99200 OK 2.2 kB URL HTTP/2 accdn.lpsnmedia.net/api/account/23156914/configuration/engagement-window/window-confs/2499984830?cb=lpCb41712x14538
IP 178.249.101.99:0
Hash 2b804eb7ef321a3f51029933536a7399
fc2217b207b0aa05b80e913ad147445a9b9f86b9
be86ded2fa4a0f528d9d8ebfe7cd77dd988c06658be9992689a1524996857b65
GET /api/account/23156914/configuration/engagement-window/window-confs/2499984830?cb=lpCb41712x14538 HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:33 GMT
content-type: application/javascript
vary: Accept
expires: Fri, 09 Sep 2022 20:05:26 GMT
x-envoy-upstream-service-time: 1
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
va.v.liveperson.net/api/js/23156914?sid=DGoM7u9GR3yMqx8R80Mhxw&cb=lpCb72301x73364&t=pl&ts=1662753863531&pid=9882155973&tid=5139962259&vid=NmYTRmODI2NTJkMzhjMDc4
208.89.12.87200 OK 595 B URL HTTP/2 va.v.liveperson.net/api/js/23156914?sid=DGoM7u9GR3yMqx8R80Mhxw&cb=lpCb72301x73364&t=pl&ts=1662753863531&pid=9882155973&tid=5139962259&vid=NmYTRmODI2NTJkMzhjMDc4
IP 208.89.12.87:0
Hash 148e2bf1455885ecfb1620e38b78f55e
94503599914028b8799b4f76ce6b306df1900073
9da7cacf76834ec4cf250cf2a932b79e9bd6516dd5af90ee637cc4f44cb787ab
GET /api/js/23156914?sid=DGoM7u9GR3yMqx8R80Mhxw&cb=lpCb72301x73364&t=pl&ts=1662753863531&pid=9882155973&tid=5139962259&vid=NmYTRmODI2NTJkMzhjMDc4 HTTP/1.1
Host: va.v.liveperson.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:33 GMT
content-type: application/javascript
cache-control: no-store
server: ws
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/23156914/configuration/engagement-window/window-confs/2499984830?cb=lpCb42923x3690
178.249.101.99200 OK 1.7 kB URL HTTP/2 accdn.lpsnmedia.net/api/account/23156914/configuration/engagement-window/window-confs/2499984830?cb=lpCb42923x3690
IP 178.249.101.99:0
Hash 2ac46bb7249f5b9c4bfceea06f8dad8b
4d66752cea5dc2eff09b5db502671fbb11c8d966
563ce2e90fd62c991ff2ed3ec980c38cfcee8d6aafbdf3248b8ace9ffe4a78a3
GET /api/account/23156914/configuration/engagement-window/window-confs/2499984830?cb=lpCb42923x3690 HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:33 GMT
content-type: application/javascript
vary: Accept
expires: Fri, 09 Sep 2022 20:05:26 GMT
x-envoy-upstream-service-time: 1
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
va.v.liveperson.net/api/js/23156914?sid=DGoM7u9GR3yMqx8R80Mhxw&cb=lpCb34782x25996&t=uc&ts=1662753864526&pid=9882155973&tid=5139962259&vid=NmYTRmODI2NTJkMzhjMDc4&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A605500712%2C%22engId%22%3A225974414%2C%22revision%22%3A2058%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%224%22%7D%5D%7D%5D
208.89.12.87200 OK 92 kB URL HTTP/2 va.v.liveperson.net/api/js/23156914?sid=DGoM7u9GR3yMqx8R80Mhxw&cb=lpCb34782x25996&t=uc&ts=1662753864526&pid=9882155973&tid=5139962259&vid=NmYTRmODI2NTJkMzhjMDc4&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A605500712%2C%22engId%22%3A225974414%2C%22revision%22%3A2058%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%224%22%7D%5D%7D%5D
IP 208.89.12.87:0
File type ASCII text, with very long lines (64471)
Hash 2b84575014a11ea108ad1443080f71b2
319d42fff897171e840ee9f79d061ee5f7c83c9d
ae8eb5925e1c70647a3941b57e752ad36cf69a1dd7120fe479e36cca72a3565f
GET /api/js/23156914?sid=DGoM7u9GR3yMqx8R80Mhxw&cb=lpCb34782x25996&t=uc&ts=1662753864526&pid=9882155973&tid=5139962259&vid=NmYTRmODI2NTJkMzhjMDc4&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A605500712%2C%22engId%22%3A225974414%2C%22revision%22%3A2058%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%224%22%7D%5D%7D%5D HTTP/1.1
Host: va.v.liveperson.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:34 GMT
content-type: application/javascript
cache-control: no-store
server: ws
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
www.customink.com/ink/sb-localinfo
54.230.111.83200 OK 718 B URL HTTP/2 www.customink.com/ink/sb-localinfo
IP 54.230.111.83:0
Hash 2d361eeec694e50fd76e63971233fcbd
079e0845fa0fba3d7433250aa92aba40e99f1341
53ca065588895f8b53113b7be278f73bebf5a4cb36be85dcc609aa1fb3c96ba6
GET /ink/sb-localinfo HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-CSRF-Token: 5vELgYtdr5Ew4nowSRUmvqywtHShkAsco84WS3RFbqbx4F+fiPMPqydC/4pYKp8v2x0zVdTorAFvzWg3d+jKRw==
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7; optimizelyEndUserId=oeu1662753861276r0.1486479685460691; fsTrigger=false; _gcl_au=1.1.68622478.1662753862; FPC=10c60c5f-7808-4214-bd9a-cac44af2caa4; FB Event ID=1662753861583.v5lnch5f; _ga_9Z9D1BQPKN=GS1.1.1662753861.1.1.1662753861.0.0.0; _ga=GA1.1.1767514299.1662753862; interactions=a%3Ao%253Acode%253Ds%25253AHL-191722%255Edate%253Dn%25253A1662753861382
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Fri, 09 Sep 2022 20:04:31 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.customink.com
access-control-request-method: GET
cache-control: max-age=0, private, must-revalidate
etag: W/"c1447bf1b499b5530546603fa9ef2f5c"
server: nginx
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-request-id: caf29d31-30b7-423a-bb88-fbd87cd762fb
x-runtime: 0.066492
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OR9aK-T2uFHaMmtPErj4q2kCkzGXknl9ReFfBhmU3qXDd2yCR0JUTg==
X-Firefox-Spdy: h2
pxl.qccerttest.com/pixel?r=385406848;fpan=1;fpa=P0-1594712437-1662753865263;pbc=;ns=0;ce=1;qjs=1;qv=087c24cc-20220902090643;ref=;cm=;gdpr=0;d=customink.com;dst=0;et=1662753865263;tzo=0;url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;ogl=title.Custom%20Ink%20Design%20%27isumls%27%2Cdescription.Create%252C%20save%252C%20share%252C%20or%20order%20your%20own%20products%20at%20CustomInk%252Ecom%2Csite_name.CustomInk%252Ecom%2Curl.https%3A%2F%2Fwww%252Ecustomink%252Ecom%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fsocial%3Fpc%3DFBWM-47419%2Cimage.https%3A%2F%2Fmms-images%252Eout%252Ecustomink%252Ecom%2Fmms%2Fimages%2Fcatalog%2Fcolors%2F201606%2Fviews%2Falt%2F%2Ctype.product
143.204.55.81200 OK 35 B URL HTTP/2 pxl.qccerttest.com/pixel?r=385406848;fpan=1;fpa=P0-1594712437-1662753865263;pbc=;ns=0;ce=1;qjs=1;qv=087c24cc-20220902090643;ref=;cm=;gdpr=0;d=customink.com;dst=0;et=1662753865263;tzo=0;url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;ogl=title.Custom%20Ink%20Design%20%27isumls%27%2Cdescription.Create%252C%20save%252C%20share%252C%20or%20order%20your%20own%20products%20at%20CustomInk%252Ecom%2Csite_name.CustomInk%252Ecom%2Curl.https%3A%2F%2Fwww%252Ecustomink%252Ecom%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fsocial%3Fpc%3DFBWM-47419%2Cimage.https%3A%2F%2Fmms-images%252Eout%252Ecustomink%252Ecom%2Fmms%2Fimages%2Fcatalog%2Fcolors%2F201606%2Fviews%2Falt%2F%2Ctype.product
IP 143.204.55.81:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55d25e9dc950d5db4d53a3b195c046c6
75e91ae3e549dab12ed1c9787ade9131aef1c981
a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
GET /pixel?r=385406848;fpan=1;fpa=P0-1594712437-1662753865263;pbc=;ns=0;ce=1;qjs=1;qv=087c24cc-20220902090643;ref=;cm=;gdpr=0;d=customink.com;dst=0;et=1662753865263;tzo=0;url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;ogl=title.Custom%20Ink%20Design%20%27isumls%27%2Cdescription.Create%252C%20save%252C%20share%252C%20or%20order%20your%20own%20products%20at%20CustomInk%252Ecom%2Csite_name.CustomInk%252Ecom%2Curl.https%3A%2F%2Fwww%252Ecustomink%252Ecom%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fsocial%3Fpc%3DFBWM-47419%2Cimage.https%3A%2F%2Fmms-images%252Eout%252Ecustomink%252Ecom%2Fmms%2Fimages%2Fcatalog%2Fcolors%2F201606%2Fviews%2Falt%2F%2Ctype.product HTTP/1.1
Host: pxl.qccerttest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 35
date: Fri, 09 Sep 2022 02:29:20 GMT
last-modified: Thu, 04 Aug 2022 16:01:04 GMT
etag: "55d25e9dc950d5db4d53a3b195c046c6"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zziJjrEzA6kqGWr6tVlWUsVcP0Yn4b5c4OOb5FLh5LGpdcdaWtWdNA==
age: 63315
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Origin
X-Firefox-Spdy: h2
pixel.quantserve.com/pixel;r=152183956;labels=_fp.event.Default;rf=0;a=p-BUjach_RzVDf0;url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;uht=2;fpan=0;fpa=P0-1594712437-1662753865263;pbc=;ns=0;ce=1;qjs=1;qv=087c24cc-20220902090643;cm=;gdpr=0;ref=;d=customink.com;dst=0;et=1662753865266;tzo=0;ogl=title.Custom%20Ink%20Design%20'isumls'%2Cdescription.Create%252C%20save%252C%20share%252C%20or%20order%20your%20own%20products%20at%20CustomInk%252Ecom%2Csite_name.CustomInk%252Ecom%2Curl.https%3A%2F%2Fwww%252Ecustomink%252Ecom%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fsocial%3Fpc%3DFBWM-47419%2Cimage.https%3A%2F%2Fmms-images%252Eout%252Ecustomink%252Ecom%2Fmms%2Fimages%2Fcatalog%2Fcolors%2F201606%2Fviews%2Falt%2F%2Ctype.product;ses=e200246c-0ae0-464a-bc9c-45ab84f53d2a
91.228.74.168200 OK 35 B URL HTTP/2 pixel.quantserve.com/pixel;r=152183956;labels=_fp.event.Default;rf=0;a=p-BUjach_RzVDf0;url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;uht=2;fpan=0;fpa=P0-1594712437-1662753865263;pbc=;ns=0;ce=1;qjs=1;qv=087c24cc-20220902090643;cm=;gdpr=0;ref=;d=customink.com;dst=0;et=1662753865266;tzo=0;ogl=title.Custom%20Ink%20Design%20'isumls'%2Cdescription.Create%252C%20save%252C%20share%252C%20or%20order%20your%20own%20products%20at%20CustomInk%252Ecom%2Csite_name.CustomInk%252Ecom%2Curl.https%3A%2F%2Fwww%252Ecustomink%252Ecom%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fsocial%3Fpc%3DFBWM-47419%2Cimage.https%3A%2F%2Fmms-images%252Eout%252Ecustomink%252Ecom%2Fmms%2Fimages%2Fcatalog%2Fcolors%2F201606%2Fviews%2Falt%2F%2Ctype.product;ses=e200246c-0ae0-464a-bc9c-45ab84f53d2a
IP 91.228.74.168:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55d25e9dc950d5db4d53a3b195c046c6
75e91ae3e549dab12ed1c9787ade9131aef1c981
a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
GET /pixel;r=152183956;labels=_fp.event.Default;rf=0;a=p-BUjach_RzVDf0;url=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp;uht=2;fpan=0;fpa=P0-1594712437-1662753865263;pbc=;ns=0;ce=1;qjs=1;qv=087c24cc-20220902090643;cm=;gdpr=0;ref=;d=customink.com;dst=0;et=1662753865266;tzo=0;ogl=title.Custom%20Ink%20Design%20'isumls'%2Cdescription.Create%252C%20save%252C%20share%252C%20or%20order%20your%20own%20products%20at%20CustomInk%252Ecom%2Csite_name.CustomInk%252Ecom%2Curl.https%3A%2F%2Fwww%252Ecustomink%252Ecom%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fsocial%3Fpc%3DFBWM-47419%2Cimage.https%3A%2F%2Fmms-images%252Eout%252Ecustomink%252Ecom%2Fmms%2Fimages%2Fcatalog%2Fcolors%2F201606%2Fviews%2Falt%2F%2Ctype.product;ses=e200246c-0ae0-464a-bc9c-45ab84f53d2a HTTP/1.1
Host: pixel.quantserve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:34 GMT
content-type: image/gif
content-length: 35
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: mc=631b9c52-552c2-36c4c-2caba; expires=Tue, 10-Oct-2023 20:04:34 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 8d49e243390267dd619b28654ce2b088
136992f5af13c6b809c156cd77abe79cebfa347d
bd68e6921e6cab274b0340ab6b95839626e19889f20ccb3a2054ea280367df8d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 02:15:46 GMT
Expires: Wed, 14 Sep 2022 02:15:45 GMT
Etag: "136992f5af13c6b809c156cd77abe79cebfa347d"
Cache-Control: max-age=367270,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748288a22bbcb505-OSL
20814341p.rfihub.com/ca.html?ver=9&rb=38276&ca=20814341&_o=38276&_t=20814341&pe=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&pf=&ra=5080537359264015
193.0.160.128200 OK 3.0 kB URL HTTP/1.1 20814341p.rfihub.com/ca.html?ver=9&rb=38276&ca=20814341&_o=38276&_t=20814341&pe=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&pf=&ra=5080537359264015
IP 193.0.160.128:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (2954), with no line terminators
Hash 311b8b54936efa4dabd9f692d13cd56f
f0d40507e599572625c52bd1e5cf53f8889be939
32bc6a189ee6dc5d7b3613cb00571ca4a87f298db06f1cf583da9c96f0ff9e4f
GET /ca.html?ver=9&rb=38276&ca=20814341&_o=38276&_t=20814341&pe=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp&pf=&ra=5080537359264015 HTTP/1.1
Host: 20814341p.rfihub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:34 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruds=H4sIAAAAAAAA_-MSNjU0MTI2NjM3tLQwNDY0MDM3NxXiM9Q19nPPsEgqz3IKzHIGAG8reUclAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0MTI2NjM3tLQwNDY0MDM3NxXiM9Q19nPPsEgqz3IKzHIGAG8reUclAAAA; Path=/; Domain=.rfihub.com; Expires=Wed, 4 Oct 2023 20:04:34 GMT; Secure; SameSite=None
eud=H4sIAAAAAAAA_5vFyGtoZmZkbmpsYW5iYmm4Co1_Co3_Co3_C40_iQmVPwuNvwiNvwqNvwmNvwtdPQsq_xYafxMrmn5uNPei8RcJo_IfofEB4AKImyABAAA; Path=/; Domain=.rfihub.com; Expires=Wed, 4 Oct 2023 20:04:34 GMT; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: text/html;charset=utf-8
Content-Length: 2954
Server: Jetty(9.3.29.v20201019)
static.klaviyo.com/onsite/js/klaviyo.js?company_id=Q4AcEH
151.101.86.133200 OK 1.0 kB URL HTTP/2 static.klaviyo.com/onsite/js/klaviyo.js?company_id=Q4AcEH
IP 151.101.86.133:0
File type ASCII text, with very long lines (2904)
Hash 791ade51eec0befafbf80eb54265325e
9d093e1a716e02d3ec8ce4f9f4510a4e6bce20fc
ea60ec9ff5c6ed2afdfa3785c45b537bd8e44bd39ac279fc8c0f380a748610f0
GET /onsite/js/klaviyo.js?company_id=Q4AcEH HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: OPTIONS, GET
cache-control: max-age=1, stale-while-revalidate=10800
content-encoding: gzip
content-type: application/javascript
etag: W/"50c59ae673f86c484c8b72334439acc8"
server: nginx
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
age: 1669
x-served-by: cache-lga13628-LGA, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 1
x-timer: S1662753875.653570,VS0,VE1
vary: Accept-Encoding
content-length: 1036
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_secure_storage/3.18.0.0-release_5078/storage.secure.min.js?loc=https%3A%2F%2Fwww.customink.com&site=23156914&force=1&env=prod
178.249.97.98200 OK 28 kB URL HTTP/2 lpcdn.lpsnmedia.net/le_secure_storage/3.18.0.0-release_5078/storage.secure.min.js?loc=https%3A%2F%2Fwww.customink.com&site=23156914&force=1&env=prod
IP 178.249.97.98:0
File type ASCII text, with very long lines (38683)
Hash fa8b57dfcc9506b5ae511efeb929deea
877f20dafea152a4d8b0e3e0756228cd4cb3e429
3e3a79145fbf02e38e5d8bee49331b86a37dd23979a8b2fb53e2a6691d39532f
GET /le_secure_storage/3.18.0.0-release_5078/storage.secure.min.js?loc=https%3A%2F%2Fwww.customink.com&site=23156914&force=1&env=prod HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:32 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 03:15:58 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Sat, 09 Sep 2023 20:04:32 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
va.v.liveperson.net/api/js/23156914?sid=DGoM7u9GR3yMqx8R80Mhxw&cb=lpCb38844x31999&t=uc&ts=1662753864489&pid=9882155973&tid=5139962259&vid=NmYTRmODI2NTJkMzhjMDc4&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A605500712%2C%22engId%22%3A243758014%2C%22revision%22%3A2058%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%222%22%7D%5D%7D%5D
208.89.12.87200 OK 19 kB URL HTTP/2 va.v.liveperson.net/api/js/23156914?sid=DGoM7u9GR3yMqx8R80Mhxw&cb=lpCb38844x31999&t=uc&ts=1662753864489&pid=9882155973&tid=5139962259&vid=NmYTRmODI2NTJkMzhjMDc4&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A605500712%2C%22engId%22%3A243758014%2C%22revision%22%3A2058%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%222%22%7D%5D%7D%5D
IP 208.89.12.87:0
File type ASCII text, with very long lines (26640)
Hash 2704f9162f51ba285580373819e4b8b3
3541c1ffe8d4240594b9beb784a643d39d779e8c
94dac9048cb895df181fab0dd4a90a6113c7f05bef59cd214fd858c1f1f3c66a
GET /api/js/23156914?sid=DGoM7u9GR3yMqx8R80Mhxw&cb=lpCb38844x31999&t=uc&ts=1662753864489&pid=9882155973&tid=5139962259&vid=NmYTRmODI2NTJkMzhjMDc4&sdes=%5B%7B%22type%22%3A%22impDisplay%22%2C%22campaign%22%3A605500712%2C%22engId%22%3A243758014%2C%22revision%22%3A2058%2C%22eContext%22%3A%5B%7B%22type%22%3A%22engagementContext%22%2C%22id%22%3A%222%22%7D%5D%7D%5D HTTP/1.1
Host: va.v.liveperson.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:33 GMT
content-type: application/javascript
cache-control: no-store
server: ws
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/23156914/configuration/le-campaigns/campaigns/605500712/engagements/225974214/revision/2058?v=3.0&cb=lp225974214&flavor=dependency
178.249.101.99200 OK 16 kB URL HTTP/2 accdn.lpsnmedia.net/api/account/23156914/configuration/le-campaigns/campaigns/605500712/engagements/225974214/revision/2058?v=3.0&cb=lp225974214&flavor=dependency
IP 178.249.101.99:0
Hash 03b6f2d5ba6c8d5d37073061b8868a8e
320988053987de0581da6ac3a66bbd3942927e38
d12996a2c5f31d5d5f500ca5c2c8648db568b07ad8906e4de466daebe1d100dc
GET /api/account/23156914/configuration/le-campaigns/campaigns/605500712/engagements/225974214/revision/2058?v=3.0&cb=lp225974214&flavor=dependency HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:33 GMT
content-type: application/javascript
vary: Accept
expires: Fri, 09 Sep 2022 20:04:46 GMT
x-envoy-upstream-service-time: 4
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336719813106775&referrer=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
143.204.55.19302 Found 661 B URL HTTP/2 live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336719813106775&referrer=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp
IP 143.204.55.19:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (575)
Hash b92afd9eda617e7fe0218fead7f97606
c49ae5ccbf5adc45ab00e043a6694a2f80494d49
dac616b3ac7d4a3166f85fa8ce061c4f7c270e85300d4edd8fcd09cdd268a4c1
GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5142336719813106775&referrer=https%3A%2F%2Fwww.customink.com%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink%3Fpc%3DHL-191722%26utm_content%3Dviewbutton%26oe%3D43433358-df9f6%26utm_source%3DHotlink%26utm_medium%3Demail%26utm_campaign%3DHotlink%25201%2520Test%2520%25231%2520August%252025%252C%25202022%2520Variation%2520E%2520%2528WAnzm5%2529%26_kx%3DQV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%253D.SKGNUp HTTP/1.1
Host: live.rezync.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 661
location: https://p.rfihub.com/cm?pub=39342&in=0&userid=a4842958-5e24-43e1-9352-c7a9c7bb21a2%3A1662753874.6576748&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Da4842958-5e24-43e1-9352-c7a9c7bb21a2%253A1662753874.6576748
date: Fri, 09 Sep 2022 20:04:34 GMT
set-cookie: zync-uuid=a4842958-5e24-43e1-9352-c7a9c7bb21a2:1662753874.6576748; Domain=rezync.com; Expires=Wed, 08 Mar 2023 20:04:34 GMT; Path=/; SameSite=None; Secure
sd-session-id=.eJwNysEOwiAMANB_6XkYW1oK_MzCsAeiQzPmxWX_7o4veQfMH9vW0q3vkPftaxPUV7s0IB8w2m-1J2QQZPI-KKaIHu9BVeCcYNgY7d3n9rhO4ciUJDoxYsfe0CUv5KqWVHVZCAtlDIFUfFS-BdGgHOH8A5UGJR8.YxucUg.ZyhxRYRiY_1LdGqcqtWBiqyL75o; Expires=Wed, 08 Mar 2023 20:04:34 GMT; HttpOnly; Path=/; SameSite=None; Secure
vary: Cookie
server: lighttpd/1.4.59
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: c6-puZ6rvnHvvFmMyAMThR7jQ0kgftvuIFlqxqBK69hxZMGRTQDsWQ==
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/signup_forms.47564cabd447e0caeb79.js?cb=1
151.101.86.133200 OK 12 kB URL HTTP/2 static.klaviyo.com/onsite/js/signup_forms.47564cabd447e0caeb79.js?cb=1
IP 151.101.86.133:0
File type Unicode text, UTF-8 text, with very long lines (35080), with no line terminators
Hash baeffa65b049c4924b49cbfffc1afb97
3a35818b9a6babada70426a59576d901075fc66e
379d738619d85f7219a98c01eb67a5b54bc926d62cf02328ab45669fd0641a4d
GET /onsite/js/signup_forms.47564cabd447e0caeb79.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: gOGqJffLj4AyKttnk4HnLQClK31k93MkdrDcfE1uaoIaY+1Pk8e0n3DUWutMyfZy8McC3mfuuUA=
x-amz-request-id: NB2XG3YCBMHKQSVG
last-modified: Thu, 08 Sep 2022 18:16:36 GMT
etag: "2d63267addf14fe8300469051c594504"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: YzUvVFTSTm9rqYmTEJ4211JqvsZ4AZ2T
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
age: 1669
x-served-by: cache-lga21950-LGA, cache-bma1662-BMA
x-cache: HIT, HIT
x-cache-hits: 3, 512
vary: Accept-Encoding
content-length: 11607
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/fender_analytics.9bd929e66a2449a7cdc1.js?cb=1
151.101.86.133200 OK 11 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/fender_analytics.9bd929e66a2449a7cdc1.js?cb=1
IP 151.101.86.133:0
File type ASCII text, with very long lines (27584), with no line terminators
Hash 0f29e4f1e3f2addc67e4852883ecf694
5c059b2980e9c5356fdc0b2c727a3a86c320c5a9
2949ec27afb5fb53e7bba607529a9529a8c75a4d71dcbea074b88dd679f1b8c9
GET /onsite/js/fender_analytics.9bd929e66a2449a7cdc1.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 36f/ps//h2tsvtsRUgp6Mk8LzgnmM0HKjWkeHSxHbhGWZ7W/4R77UIFLmwMJGAxxLaUgzekp6vo=
x-amz-request-id: V3VGV2WY5XZ8QSWT
last-modified: Fri, 26 Aug 2022 20:33:40 GMT
etag: "d48fad1b3f959b474b934ed39d9ba542"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: DxlKU8PAW5Z2L0V.1wRK5LqPR2sBWhOg
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
age: 1669
x-served-by: cache-lga21973-LGA, cache-bma1657-BMA
x-cache: HIT, HIT
x-cache-hits: 5, 657
vary: Accept-Encoding
content-length: 10605
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/static.444020cd426b0bea12c1.js?cb=1
151.101.86.133200 OK 5.2 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/static.444020cd426b0bea12c1.js?cb=1
IP 151.101.86.133:0
File type ASCII text, with very long lines (12428), with no line terminators
Hash 8a51385137b20bdfcace3e12a6e9981f
b291ae4859ec56be11f24617f556db2be626d1f6
60157d9b98c625ee91011c3c06ee76809c5ac9225554e26a891462e8ed39c77d
GET /onsite/js/static.444020cd426b0bea12c1.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NVmB6Kd0YFo9iCmGx+yu+eOqiC5jqbz25AtCBJn8Vs1Hbf0QGGXROARgd05prVYM5kfCwyQJ2xk=
x-amz-request-id: EYA39404SA8WM76Q
last-modified: Thu, 18 Aug 2022 15:05:14 GMT
etag: "1774dcfd43ae7a477e554d4266bbaa8e"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: ep5t_kHI_qKbZWWytxIKzh5j3YAjdqHx
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
age: 1669
x-served-by: cache-lga21968-LGA, cache-bma1657-BMA
x-cache: HIT, HIT
x-cache-hits: 57, 668
vary: Accept-Encoding
content-length: 5219
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/sentry.32defc2659e6aaee877c.js
151.101.86.133200 OK 14 kB URL HTTP/2 static.klaviyo.com/onsite/js/sentry.32defc2659e6aaee877c.js
IP 151.101.86.133:0
File type Unicode text, UTF-8 text, with very long lines (39962), with no line terminators
Hash 93429c6be72678683e9267a528e4c0b4
dec00b93c3128f0094770ae508f24cb3f25fb317
f8e4e0da84f668d6f21293c30e6bfa6b1460cd2cc9b4e84cade80e81a680f477
GET /onsite/js/sentry.32defc2659e6aaee877c.js HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: iq43u9z8C5ggfgPwFsn+4bKUQtK7mcyE9p8ercG9UOmhgEJVt0S8OxGaklyy2Cyy2H5tse9JGrQ=
x-amz-request-id: KNB7YRE35ZYYP34A
last-modified: Mon, 27 Jun 2022 21:34:56 GMT
etag: "28b2f273ea92b5951335870743671025"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: SEi8mXkr3rDKIOIawsPVx86hWqhxnHRI
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
age: 1669
x-served-by: cache-lga21963-LGA, cache-bma1662-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 415
vary: Accept-Encoding
content-length: 13736
X-Firefox-Spdy: h2
static-forms.klaviyo.com/forms/api/v6/Q4AcEH/full-forms
151.101.86.133200 OK 4.4 kB URL HTTP/2 static-forms.klaviyo.com/forms/api/v6/Q4AcEH/full-forms
IP 151.101.86.133:0
File type HTML document, ASCII text, with very long lines (30058), with no line terminators
Hash 8de95dc4f1e2dfc4411512aa215b1997
f80de6ee64ed581650eaff375201447446a1b27c
b29dc844277ff687e01b16c8a6fd62c4308eee185b3211de75b28c35071f1310
GET /forms/api/v6/Q4AcEH/full-forms HTTP/1.1
Host: static-forms.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: bV/lDI0JRmjlTwQXOhx5JNFmKavW2CeIMyLHvde7OLgJR/+sBPmWyuReOmLNU9+ID14MMwPcA2g=
x-amz-request-id: KZ3B1KJ5ZAW25MM6
last-modified: Thu, 18 Aug 2022 00:52:12 GMT
etag: "80ca1a0fad60642d5cbf7c7c797a3e82"
cache-control: max-age=5
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: full-forms/shared full-forms/Q4AcEH custom-fonts/Q4AcEH
x-amz-version-id: ZQ3DvfM2i.DVoje253HuKBL7hPHzX5R4
content-type: application/json
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
via: 1.1 varnish
age: 1523566
x-served-by: cache-bma1654-BMA
x-cache: HIT
x-cache-hits: 12
x-timer: S1662753875.823060,VS0,VE0
vary: Accept-Encoding
client-geo-continent: EU
client-geo-country: NO
access-control-expose-headers: client-geo-continent, client-geo-country
access-control-allow-origin: *
content-length: 4367
X-Firefox-Spdy: h2
fast.a.klaviyo.com/custom-fonts/api/v1/company-fonts/onsite?company_id=Q4AcEH
151.101.86.133200 OK 711 B URL HTTP/2 fast.a.klaviyo.com/custom-fonts/api/v1/company-fonts/onsite?company_id=Q4AcEH
IP 151.101.86.133:0
File type JSON data\012- , ASCII text, with very long lines (711), with no line terminators
Hash d396413e3ebd2f8ef47cc16399739530
71b740ad529a6a73188b9150ebc7b76dce95613b
5d673abe1fafe0f1e8f1770bbdc74ebe54e591ed9aa098ee8ff6f88785e3839e
GET /custom-fonts/api/v1/company-fonts/onsite?company_id=Q4AcEH HTTP/1.1
Host: fast.a.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: GET, HEAD, OPTIONS
cache-control: max-age=10
content-type: application/json; charset=utf-8
server: nginx
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
age: 5747382
x-served-by: cache-bos4664-BOS, cache-bma1620-BMA
x-cache: HIT, HIT
x-cache-hits: 33, 1
vary: Cookie
strict-transport-security: max-age=900
content-length: 711
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/vendors~ClientStore.b6bb5f35dfd04ba9f47d.js
151.101.86.133200 OK 11 kB URL HTTP/2 static.klaviyo.com/onsite/js/vendors~ClientStore.b6bb5f35dfd04ba9f47d.js
IP 151.101.86.133:0
File type ASCII text, with very long lines (30947)
Hash 5381db77099778cd6ad36abaf776f10a
d1353b83d76d3f8e5f78b39668aa11d152cc9af5
5461ad39f712558b7f8098f68cc7efab57bfe0636f2bfe6876a65280f485a394
GET /onsite/js/vendors~ClientStore.b6bb5f35dfd04ba9f47d.js HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: tst2YjINPBRyHXncHP/3iI0oIeA3eIuf+5/GiN6V+A84q/0UmyfiwVu4jopHKiLm+0RAf7c29dc=
x-amz-request-id: X2ZRGM0Q2VCCQ7J1
last-modified: Wed, 06 Jul 2022 14:15:12 GMT
etag: "f264fe5ef7ace72b1eda057aeb9598fb"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: FclCE5qAj6ZDMV_WlrSrm5zeH1ND.oEW
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
age: 1669
x-served-by: cache-lga21982-LGA, cache-bma1662-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 228
vary: Accept-Encoding
content-length: 10707
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/ClientStore.0b713032848246a5e094.js
151.101.86.133200 OK 24 kB URL HTTP/2 static.klaviyo.com/onsite/js/ClientStore.0b713032848246a5e094.js
IP 151.101.86.133:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 85e7c4c0f72ddc0f29e0b3ef82a30359
f7b206869e2954a93187ee311dfe4ff21596a8f0
885ff7e846faf9b02e5322f5cb0795e73daf911801f4654c41b1df6dfeb9fe2c
GET /onsite/js/ClientStore.0b713032848246a5e094.js HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: CpgZ4ONHVW9Ihy3tsdWykrCE/yWmnl6/aPZP8yupyCHPCxJfT1A+BBOChJn6hktgTNSUNfRiro0=
x-amz-request-id: YZVJZS2K6XM3DHW9
last-modified: Fri, 09 Sep 2022 18:52:52 GMT
etag: "caa413d558444c16182aa1e8c171a949"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: P_tpRVdBiky0_U2FzU_mVtMmoePEsDKD
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
age: 1669
x-served-by: cache-lga21957-LGA, cache-bma1662-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 228
vary: Accept-Encoding
content-length: 23920
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 9bf9ec65bb3e3c09acd884bae9b11d08
def8813c6dc9efb309c221da79f949d4ad05cd0a
5fda4d2b1b651ac3b10ab36309e2155cc94531b70817a3ae6f8c28235dcdfaf7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 20:04:34 GMT
Last-Modified: Fri, 09 Sep 2022 19:40:41 GMT
Server: ECS (dcb/7EEE)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AD9yQM_2QqkBXecfdhXXztUqfN0BRB58GKeYob5oPG-Q-ZldYLcQHQ==
Age: 1433
cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MjMzNjcxOTgxMzEwNjc3NQ==&forward=
142.250.74.130302 Found 369 B URL HTTP/2 cm.g.doubleclick.net/pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MjMzNjcxOTgxMzEwNjc3NQ==&forward=
IP 142.250.74.130:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash d2374f78b6f12a147cf4aa2cf69d51a7
9c3f765b7a16952340bc2049c3feeb8ab443c108
6bf10bb345b9bcdc95ef883ea8ac069d09081a0d7278afa31f786b21aeb127c7
GET /pixel?&in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MjMzNjcxOTgxMzEwNjc3NQ==&forward= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MjMzNjcxOTgxMzEwNjc3NQ==&forward=&google_tc=
date: Fri, 09 Sep 2022 20:04:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 369
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 09-Sep-2022 20:19:34 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/532.dd9a1df84d96cf83ca19.css
151.101.86.133200 OK 1.7 kB URL HTTP/2 static.klaviyo.com/onsite/js/532.dd9a1df84d96cf83ca19.css
IP 151.101.86.133:0
File type ASCII text, with very long lines (6145)
Hash 0dc1c7a389b78ca81cb988e822f60b27
46b51d1f25d7fd5801faf6fade531a522ebcf959
173dfa0bd0f19b6527e56113ebe3e9b56602cdde00eb79c8b589a64e128be82a
GET /onsite/js/532.dd9a1df84d96cf83ca19.css HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: rF+SgaY1JPHmOI2PeI/zWSe/LyjjtU/QsBKqPGP86t3Wu2nwz7zm08yMVPyC0AkKxgU4BT1hYZw=
x-amz-request-id: XKPN5MDSG2QEZVZT
last-modified: Wed, 17 Aug 2022 13:59:48 GMT
etag: "a178d611a5a0600884426f0e16e9f9e4"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: NmgOJvBkHXpa0JV2BKocdZJD4tDGqyDN
content-type: text/css
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
age: 1669
x-served-by: cache-lga21983-LGA, cache-bma1662-BMA
x-cache: HIT, HIT
x-cache-hits: 61, 192
vary: Accept-Encoding
content-length: 1654
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/styles.06769e22f72371c9b731.js
151.101.86.133200 OK 117 B URL HTTP/2 static.klaviyo.com/onsite/js/styles.06769e22f72371c9b731.js
IP 151.101.86.133:0
File type ASCII text, with no line terminators
Hash 165a43fbc3f6ac64ee453c40594d4b6e
88770190662a5df69ee6b5f7f4a7f783d27d357f
408d62a598fc868660dadf1c79b30e3101030c3288d44bae48671873449c839e
GET /onsite/js/styles.06769e22f72371c9b731.js HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: xxySH2kk4Sd9Bm4rig1uRJk8xN44TK0ylUSoTfG2wcWKKfyB/n23Zsc9Rsqxoaprwgk1Dp5NYGI=
x-amz-request-id: SGXCPKDSPC5A8EYJ
last-modified: Wed, 17 Aug 2022 13:59:50 GMT
etag: "1e42456f05009fb98935fe5367b13871"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: hc65Rgpl_37o1Cu9uuDQDop3eGFZ2TYC
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
age: 1669
x-served-by: cache-lga21944-LGA, cache-bma1662-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 190
vary: Accept-Encoding
content-length: 117
X-Firefox-Spdy: h2
www.customink.com/profiles/sb-identity?path=%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink&oe=43433358-df9f6
54.230.111.83200 OK 74 B URL HTTP/2 www.customink.com/profiles/sb-identity?path=%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink&oe=43433358-df9f6
IP 54.230.111.83:0
Hash 89f0a17d34b5caee3e4d9516f89a39cb
59640d7a67af329bc16c9d1d335faec9cd58847f
c0b3ad908248bf76bd18f7442b78ece8b689737783afee2501580b731e266eb4
GET /profiles/sb-identity?path=%2Fdesigns%2Fisumls%2Furx0-00cn-agz9%2Fhotlink&oe=43433358-df9f6 HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-CSRF-Token: 5vELgYtdr5Ew4nowSRUmvqywtHShkAsco84WS3RFbqbx4F+fiPMPqydC/4pYKp8v2x0zVdTorAFvzWg3d+jKRw==
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7; optimizelyEndUserId=oeu1662753861276r0.1486479685460691; fsTrigger=false; _gcl_au=1.1.68622478.1662753862; FPC=10c60c5f-7808-4214-bd9a-cac44af2caa4; FB Event ID=1662753861583.v5lnch5f; _ga_9Z9D1BQPKN=GS1.1.1662753861.1.1.1662753861.0.0.0; _ga=GA1.1.1767514299.1662753862; interactions=a%3Ao%253Acode%253Ds%25253AHL-191722%255Edate%253Dn%25253A1662753861382
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Fri, 09 Sep 2022 20:04:31 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.customink.com
access-control-request-method: GET
cache-control: no-cache, no-store
etag: W/"414bfb39f370accc7ccbad9c9d9190a8"
server: nginx
set-cookie: oe=a2FHOXc2QXVJWXRNb2dYUHArdENraXJBOFlsM25SbHFuNnpKSGI2Y2Eydz0tLUR1cnJiMmhreTdQSVZrT3pkMEJNWnc9PQ%3D%3D--410c8050bf8bf35c1873b745c745865eb640db61; domain=.customink.com; path=/; expires=Sat, 09 Sep 2023 20:04:31 GMT; secure
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-request-id: feb3ea35-3ade-4c5b-88e8-3b853756800b
x-runtime: 0.044861
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NdxrH1sTZ-eVrq6vD73F_BTLYL27JILIf4RSjVTZdn9gjPi_jw-ouw==
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/vendors~Render.d67bcbf78caa39f7838e.js
151.101.86.133200 OK 13 kB URL HTTP/2 static.klaviyo.com/onsite/js/vendors~Render.d67bcbf78caa39f7838e.js
IP 151.101.86.133:0
File type Unicode text, UTF-8 text, with very long lines (40196)
Hash 520f7b234642ce7dade1029ca5c3cdc7
23d3ce4694e261e3ffe7ba60093070770e56bc28
41eb65de2458c7fdceb667ca9d2458e0a9101d174fe7505847e7d33805f3ed5b
GET /onsite/js/vendors~Render.d67bcbf78caa39f7838e.js HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: iBEXU92Cz7cAFfo+PXVfqwWoz0p4/SGiUcgWTvmD/RCY0dwBhTJlUDW7SJFmtwDlmyqdDk3z9mg=
x-amz-request-id: JC9ERXSPX8WAT9VD
last-modified: Wed, 10 Aug 2022 19:33:42 GMT
etag: "6a206c674547fef2d1036a3d87692532"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: SJ7sAHU9RXE_yLtOA8eojvwfBk1QJbUA
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
age: 1669
x-served-by: cache-lga21970-LGA, cache-bma1662-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 192
vary: Accept-Encoding
content-length: 13275
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1fb5da17cfbc7441d222648bdfdc78b6
633516a01fd1287ca1dede6b79f5226b4c06836a
e4c35b376cae0a954f843c334f79a65016dd3c23c3037026ef648285a1e4d96b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4876
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:34 GMT
Last-Modified: Fri, 09 Sep 2022 18:43:18 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
static.klaviyo.com/onsite/js/Render.070c8138be24d0a84ca7.js
151.101.86.133200 OK 26 kB URL HTTP/2 static.klaviyo.com/onsite/js/Render.070c8138be24d0a84ca7.js
IP 151.101.86.133:0
File type ASCII text, with very long lines (18278)
Hash b6308ceb3c153e0ac7957e04ae21a996
bbf6a717f648d18136e8644c0e0f905ea6ec09ab
0525373bab3e100a8a3a84d6ab8562224e204e53c16149472522640841b7bd7c
GET /onsite/js/Render.070c8138be24d0a84ca7.js HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 3PBZdEXO2rxM3D7ZtqNwh1ABD/Cq9Fojz4urkobTSAg63iap9/6VbDwQXFH/6EE6K1tC3/ckhcY=
x-amz-request-id: XBA42G3K5BSN3XVF
last-modified: Fri, 09 Sep 2022 18:52:52 GMT
etag: "53e6d96e62835d8ccc63c716a053f32f"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 4Z2EGbfljWM7Fj01XivzafOcPACE0HKn
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 09 Sep 2022 20:04:34 GMT
age: 1669
x-served-by: cache-lga21930-LGA, cache-bma1662-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 224
vary: Accept-Encoding
content-length: 26227
X-Firefox-Spdy: h2
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5142336719813106775&forward=
104.18.18.126302 Found 0 B URL HTTP/2 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5142336719813106775&forward=
IP 104.18.18.126:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=57&external_user_id=5142336719813106775&forward= HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 09 Sep 2022 20:04:34 GMT
content-length: 0
location: /rum?cm_dsp_id=57&external_user_id=5142336719813106775&forward=&C=1
cf-ray: 748288a63842b4fd-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=YxucUhGIFpiiqRrBbhpvcQAA; Path=/; Domain=casalemedia.com; Expires=Sat, 09 Sep 2023 20:04:34 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=4498; Path=/; Domain=casalemedia.com; Expires=Thu, 08 Dec 2022 20:04:34 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=4498; Path=/; Domain=casalemedia.com; Expires=Thu, 08 Dec 2022 20:04:34 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WS6LMP0rpx0eY3Kl0lUijuMx75eUXVnJ0QJ%2BUu%2BoGsGF6WQ2gbRCU5iTTOEv3tan%2BifBw1Yo9gkCKmUp1yf3Oa1n4U6PTo0wVmdiy%2B2Jhz9boWt0sz3choCsZ4myhrBVVWA5%2BQftkZaYSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MjMzNjcxOTgxMzEwNjc3NQ==&forward=&google_tc=
142.250.74.130302 Found 269 B URL HTTP/2 cm.g.doubleclick.net/pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MjMzNjcxOTgxMzEwNjc3NQ==&forward=&google_tc=
IP 142.250.74.130:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 2ac1f21e70e438c7e2193d02ee7e9be0
f9a11bb626bad146751fc166f96b91f6aeae7eab
de4a04a623ca095cd229a54edeb3120d9dc94d227198b75cb9a0a69677ed7c85
GET /pixel?in=0&google_nid=zeta_interactive&google_cm=&google_sc=&google_hm=NTE0MjMzNjcxOTgxMzEwNjc3NQ==&forward=&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20814341p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
date: Fri, 09 Sep 2022 20:04:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 269
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ib.adnxs.com/setuid?entity=18&code=5142336719813106775
185.83.142.19307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/setuid?entity=18&code=5142336719813106775
IP 185.83.142.19:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /setuid?entity=18&code=5142336719813106775 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Fri, 09 Sep 2022 20:04:34 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5142336719813106775
AN-X-Request-Uuid: d8ba4be3-d448-4a80-ad02-77012aae336c
Set-Cookie: uuid2=6627856128578381134; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 08-Dec-2022 20:04:34 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bpi.rtactivate.com/tag/?id=11017&user_id=5142336719813106775
3.94.157.102200 OK 43 B URL HTTP/2 bpi.rtactivate.com/tag/?id=11017&user_id=5142336719813106775
IP 3.94.157.102:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /tag/?id=11017&user_id=5142336719813106775 HTTP/1.1
Host: bpi.rtactivate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Fri, 09 Sep 2022 20:04:34 GMT
content-type: image/gif
content-length: 43
X-Firefox-Spdy: h2
p.rfihub.com/cm?pub=24472&in=1
193.0.160.128302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=24472&in=1
IP 193.0.160.128:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=24472&in=1 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 302 Found
Date: Fri, 09 Sep 2022 20:04:35 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruds=H4sIAAAAAAAA_-MSNjU0NjQwNzc3MjKxNDU2MTQ0MRTiM9QtqIysSC4tcHTxNQ4HAAfB7TklAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0NjQwNzc3MjKxNDU2MTQ0MRTiM9QtqIysSC4tcHTxNQ4HAAfB7TklAAAA; Path=/; Domain=.rfihub.com; Expires=Wed, 4 Oct 2023 20:04:35 GMT; Secure; SameSite=None
eud=H4sIAAAAAAAA_7vFwmtoZmZkbmpsYW5qYGgGAHZkrzMQAAAA; Path=/; Domain=.rfihub.com; Expires=Wed, 4 Oct 2023 20:04:35 GMT; Secure; SameSite=None
Location: https://ps.eyeota.net/match?uid=5131077722495341141&bid=omt9pi0
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 036503cc936376cef5be41f98367c50d
d9666d73708f4b3e0835bcce3df75b5442427c44
e114ca897f98d06fcb3dadd2a9271bbe0bc0dc760556531bd6ed747d3c846011
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 20:04:34 GMT
Last-Modified: Fri, 09 Sep 2022 18:18:45 GMT
Server: ECS (nyb/1D29)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _xi6sRd5OsNF6lMOQ2YcoRHXaO5jCnKQcOpQNPL2f6w6fN3Vv_s-QQ==
Age: 6349
ocsp.digicert.com/
93.184.220.29200 OK 727 B IP 93.184.220.29:0
Hash bd7d4b0f773bc04e708dd8b785bf8115
cbfabd35ffdaa24818991e1a0f3ce1764694a95f
89ad4e367faf8dfa00db5f2048f6059eecc639100d0ce579371ff2fe88ea9fb1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6572
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:35 GMT
Last-Modified: Fri, 09 Sep 2022 18:15:03 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 727
dpm.demdex.net/ibs:dpid=1121&dpuuid=5142336719813106775&redir=
52.213.133.86302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=1121&dpuuid=5142336719813106775&redir=
IP 52.213.133.86:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=1121&dpuuid=5142336719813106775&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v039-0714bbbcd.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5142336719813106775&redir=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=00194832034553714111347311074862755462; Max-Age=15552000; Expires=Wed, 08 Mar 2023 20:04:35 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: mr+tTHauT6M=
Content-Length: 0
Connection: keep-alive
dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5142336719813106775&forward=&C=1
104.18.18.126200 OK 43 B URL HTTP/2 dsum-sec.casalemedia.com/rum?cm_dsp_id=57&external_user_id=5142336719813106775&forward=&C=1
IP 104.18.18.126:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=57&external_user_id=5142336719813106775&forward=&C=1 HTTP/1.1
Host: dsum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20814341p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:35 GMT
content-type: image/gif
content-length: 43
cf-ray: 748288a6d968b4fd-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FZ7zYSG7n9w4a1nnORSOkZpfxPDEL9z6TYGn5VT%2BeQwpARz5KzsCt9KCQO940X9oxvofvwuREBv0q%2BfsFVymqcFKBdrDU1W2NREA%2B9WZxCtL30NV8NfiQdzc5WXmBlBEHCk4w4ihDLsZaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8a6889453daa29e019e2874c71609ae0
63d7d742b498c369b0150372db532932d0602b6d
83585e6ec4910038499bab231b2dde88064650398512f6995efc02fc062001c1
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3324
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:35 GMT
Last-Modified: Fri, 09 Sep 2022 19:09:11 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash bba65294ad72d8487fe92cc0712fcf32
39c024910223b234bcee0ab1fab54bde0bc3f8b8
5fb8446f4678d63bb735acd64fe4a0d856a47bcf537dc835684bb66590284aa7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5952
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Sep 2022 20:04:35 GMT
Last-Modified: Fri, 09 Sep 2022 18:25:23 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
p.rfihub.com/cm?pub=39342&in=0&userid=a4842958-5e24-43e1-9352-c7a9c7bb21a2%3A1662753874.6576748&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Da4842958-5e24-43e1-9352-c7a9c7bb21a2%253A1662753874.6576748
193.0.160.128302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=39342&in=0&userid=a4842958-5e24-43e1-9352-c7a9c7bb21a2%3A1662753874.6576748&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Da4842958-5e24-43e1-9352-c7a9c7bb21a2%253A1662753874.6576748
IP 193.0.160.128:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=39342&in=0&userid=a4842958-5e24-43e1-9352-c7a9c7bb21a2%3A1662753874.6576748&forward=https%3A//idsync.rlcdn.com/501709.gif%3Fpartner_uid%3Da4842958-5e24-43e1-9352-c7a9c7bb21a2%253A1662753874.6576748 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20814341p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Fri, 09 Sep 2022 20:04:35 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: eud=H4sIAAAAAAAA_z3IuRGAMAwEwAqIXIcY9J5EN7LHDRFSLRkb7jPQliblSb7FyHQzlbrQQtfCnMItN0cIXBN2hiNg-Y7jT7-CP3KWvw1KAAAA; Path=/; Domain=.rfihub.com; Expires=Wed, 4 Oct 2023 20:04:35 GMT; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0MTG1sDA1MjQ2N7Q0MDW1tBDiM9TNsyj1zsiKqnCv9HUCAC_H-qslAAAA; Path=/; Domain=.rfihub.com; Expires=Wed, 4 Oct 2023 20:04:35 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTG1sDA1MjQ2N7Q0MDW1tBDiM9TNsyj1zsiKqnCv9HUCAC_H-qslAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
euds=H4sIAAAAAAAA_wXBwQ3AMAgEsE_XoRJwcNBtSJRFMnnt-3BQsI6SOAaBH5X2MNmc3lzLdOzTTGN4EW8Gk6gfsrcAaDoAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
Location: https://idsync.rlcdn.com/501709.gif?partner_uid=a4842958-5e24-43e1-9352-c7a9c7bb21a2%3A1662753874.6576748
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5142336719813106775
185.83.142.19200 OK 43 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D18%26code%3D5142336719813106775
IP 185.83.142.19:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fsetuid%3Fentity%3D18%26code%3D5142336719813106775 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20814341p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Fri, 09 Sep 2022 20:04:35 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: d1c9c35d-170c-43ef-af18-40341723cf13
Set-Cookie: anj=dTM7k!M4/YErk#WF']wIg2GVSo152q!]tbPl1MNu::wpAk`W=ifSt1mlxJOii.LcagmYzUn>?sT4^@wn!_6-zQEVk`!*_(b20$^Q; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 08-Dec-2022 20:04:35 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
bs.serving-sys.com/serving?cn=um&dpid=12&rtu=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D17945%26userid%3D%5B%25tp_UserID%25%5D
52.29.252.234200 OK 0 B URL HTTP/2 bs.serving-sys.com/serving?cn=um&dpid=12&rtu=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D17945%26userid%3D%5B%25tp_UserID%25%5D
IP 52.29.252.234:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /serving?cn=um&dpid=12&rtu=https%3A%2F%2Fp.rfihub.com%2Fcm%3Fin%3D1%26pub%3D17945%26userid%3D%5B%25tp_UserID%25%5D HTTP/1.1
Host: bs.serving-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:35 GMT
content-length: 0
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="NOI DEVa OUR BUS UNI"
X-Firefox-Spdy: h2
x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5142336719813106775
23.38.201.22200 OK 43 B URL HTTP/2 x.dlx.addthis.com/e/rocketfuel_sync?na_exid=5142336719813106775
IP 23.38.201.22:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /e/rocketfuel_sync?na_exid=5142336719813106775 HTTP/1.1
Host: x.dlx.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 43
expires: Fri, 09 Sep 2022 20:04:35 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 09 Sep 2022 20:04:35 GMT
strict-transport-security: max-age=2628000
X-Firefox-Spdy: h2
aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5142336719813106775
54.171.98.27200 OK 43 B URL HTTP/2 aa.agkn.com/adscores/g.pixel?sid=9212192898&rf=5142336719813106775
IP 54.171.98.27:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /adscores/g.pixel?sid=9212192898&rf=5142336719813106775 HTTP/1.1
Host: aa.agkn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:35 GMT
content-type: image/gif
content-length: 43
server: AAWebServer
p3p: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID"
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type
X-Firefox-Spdy: h2
sync.search.spotxchange.com/partner?adv_id=7180&uid=5142336719813106775&img=1
185.94.180.126302 Found 0 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5142336719813106775&img=1
IP 185.94.180.126:0
ASN #35220 SpotXchange, INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /partner?adv_id=7180&uid=5142336719813106775&img=1 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 09 Sep 2022 20:04:35 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Set-Cookie: audience=a03e4ce4-307a-11ed-b70f-17d925990406; expires=Fri, 07-Oct-2022 20:04:35 GMT; path=/; domain=.spotxchange.com; SameSite=none
Location: /partner?adv_id=7180&uid=5142336719813106775&img=1&__user_check__=1&sync_id=a03e4d26-307a-11ed-b70f-17d925990406
X-fe: 4
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5142336719813106775
54.170.82.49204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner_id=rfuel&partner_user_id=5142336719813106775
IP 54.170.82.49:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner_id=rfuel&partner_user_id=5142336719813106775 HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 09 Sep 2022 20:04:35 GMT
set-cookie: _kuid_=PEbw7hGW; Expires=Wed, 08-Mar-23 20:04:35 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n010-dub-prod.krxd.net
x-request-time: D=25 t=1662753875
X-Firefox-Spdy: h2
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5142336719813106775&redir=
52.213.133.86200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5142336719813106775&redir=
IP 52.213.133.86:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=1121&dpuuid=5142336719813106775&redir= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20814341p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-2-v039-0e7f52837.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: vufEnIBfRj4=
Content-Length: 59
Connection: keep-alive
sync.search.spotxchange.com/partner?adv_id=7180&uid=5142336719813106775&img=1&__user_check__=1&sync_id=a03e4d26-307a-11ed-b70f-17d925990406
185.94.180.126200 OK 43 B URL HTTP/1.1 sync.search.spotxchange.com/partner?adv_id=7180&uid=5142336719813106775&img=1&__user_check__=1&sync_id=a03e4d26-307a-11ed-b70f-17d925990406
IP 185.94.180.126:0
ASN #35220 SpotXchange, INC
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /partner?adv_id=7180&uid=5142336719813106775&img=1&__user_check__=1&sync_id=a03e4d26-307a-11ed-b70f-17d925990406 HTTP/1.1
Host: sync.search.spotxchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20814341p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 09 Sep 2022 20:04:35 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Set-Cookie: audience=a045e64b-307a-11ed-844e-1626150c0306; expires=Fri, 07-Oct-2022 20:04:35 GMT; path=/; domain=.spotxchange.com
x-spotx-halt-type: Audience DSP sync endpoint was unable to cookie the audience.
X-fe: 137
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
ocsp.usertrust.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 8c792406c47e669c74acdb96553a2a26
0279ca615001cf6952c2171aea938e103b2b9e1d
66246f467ace0210c18a1e1b07701eb08e2640786d050b1b091dc08a460e5ccf
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:35 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 09:01:03 GMT
Expires: Wed, 14 Sep 2022 09:01:02 GMT
Etag: "0279ca615001cf6952c2171aea938e103b2b9e1d"
Cache-Control: max-age=602568,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 355
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 748288a7ceb0b51e-OSL
a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
193.0.160.128200 OK 42 B URL HTTP/1.1 a.rfihub.com/cm?pub=445&in=0&forward=&google_error=3
IP 193.0.160.128:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
GET /cm?pub=445&in=0&forward=&google_error=3 HTTP/1.1
Host: a.rfihub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20814341p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:35 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: ruds=H4sIAAAAAAAA_-MSNjU0NjQwNzc3MjKxNDU2MTQ0MxfiM9R1Lk1z9LXIi3DJzqsAAFQSwuwlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0NjQwNzc3MjKxNDU2MTQ0MxfiM9R1Lk1z9LXIi3DJzqsAAFQSwuwlAAAA; Path=/; Domain=.rfihub.com; Expires=Wed, 4 Oct 2023 20:04:35 GMT; Secure; SameSite=None
eud=H4sIAAAAAAAA_-NicjUO4jU0MzMyNzW2MDc1NLMAAFmQqmkTAAAA; Path=/; Domain=.rfihub.com; Expires=Wed, 4 Oct 2023 20:04:35 GMT; Secure; SameSite=None
euds=H4sIAAAAAAAA_-NicjUGAEAxo38EAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
Cache-Control: no-cache
Content-Type: image/gif
Content-Length: 42
Server: Jetty(9.3.29.v20201019)
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash bab52ad1ce249bfad7884d7436a99287
94092573837519023d4502dfa029439c02563367
e7bd38386c81e9c9b7309d365166da7cc88f4a16830ca9c48a59cdd2fe7c80ea
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 13:42:55 GMT
Expires: Wed, 14 Sep 2022 13:42:54 GMT
Etag: "94092573837519023d4502dfa029439c02563367"
Cache-Control: max-age=408498,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748288a6bb01b505-OSL
ps.eyeota.net/match?uid=5131077722495341141&bid=omt9pi0
52.57.150.20200 OK 0 B URL HTTP/1.1 ps.eyeota.net/match?uid=5131077722495341141&bid=omt9pi0
IP 52.57.150.20:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?uid=5131077722495341141&bid=omt9pi0 HTTP/1.1
Host: ps.eyeota.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20814341p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Set-Cookie: SERVERID=23706~DM; Domain=eyeota.net; Path=/; Expires=Fri, 09 Sep 2022 20:14:35 GMT; Secure; SameSite=None;
P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml"
Content-Length: 0
Date: Fri, 09 Sep 2022 20:04:35 GMT
idsync.rlcdn.com/360947.gif?partner_uid=5142336719813106775
35.244.174.68200 OK 42 B URL HTTP/2 idsync.rlcdn.com/360947.gif?partner_uid=5142336719813106775
IP 35.244.174.68:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /360947.gif?partner_uid=5142336719813106775 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: image/gif
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 08 Nov 2022 20:04:35 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Fri, 09 Sep 2022 20:04:35 GMT
content-length: 42
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 383356bfedba065b572865d31afba139
2a4d2e6f4455a54886435d65fd4589483e1124c0
d4ce658695350f5eb3c8551b73f5ec755efc43bbe717dc4c1f7c9f5f81c635a5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 20:04:35 GMT
Last-Modified: Fri, 09 Sep 2022 18:23:15 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: DOfDpLDFIqOuyc-1jnFrWuCB0y7Oev0L1Sbox5FIFBB7V8oQBBXEKQ==
Age: 6080
idsync.rlcdn.com/501709.gif?partner_uid=a4842958-5e24-43e1-9352-c7a9c7bb21a2%3A1662753874.6576748
35.244.174.68307 Temporary Redirect 0 B URL HTTP/2 idsync.rlcdn.com/501709.gif?partner_uid=a4842958-5e24-43e1-9352-c7a9c7bb21a2%3A1662753874.6576748
IP 35.244.174.68:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /501709.gif?partner_uid=a4842958-5e24-43e1-9352-c7a9c7bb21a2%3A1662753874.6576748 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20814341p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 307 Temporary Redirect
cache-control: no-cache, no-store
location: https://idsync.rlcdn.com/1000.gif?memo=CM3PHhJBCj0IARAFGjdhNDg0Mjk1OC01ZTI0LTQzZTEtOTM1Mi1jN2E5YzdiYjIxYTI6MTY2Mjc1Mzg3NC42NTc2NzQ4EAAaDQjTuO6YBhIFCOgHEABCAEoA
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: rlas3=AG/SfC5DiYyzfalZ2VdBKTK532oepfNw8Xq4RhtuNeM=; Path=/; Domain=rlcdn.com; Expires=Sat, 09 Sep 2023 20:04:35 GMT; Secure; SameSite=None
pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 08 Nov 2022 20:04:35 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Fri, 09 Sep 2022 20:04:35 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 44b3b73dc542468e212e4eb1474bb750
439a4192ef32e15b2fd5829b29bb1ed468a7f3f2
a666be3157b316a845cbdf81892fdfe1fbf55fe289ca9accffad95c4524da66f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 13:56:50 GMT
Expires: Tue, 13 Sep 2022 13:56:49 GMT
Etag: "439a4192ef32e15b2fd5829b29bb1ed468a7f3f2"
Cache-Control: max-age=322933,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748288a738cab4f3-OSL
a.klaviyo.com/api/track
104.18.5.166200 OK 32 B IP 104.18.5.166:0
File type very short file (no magic)
Hash ddb1a425d3deed03d52b50da5d092cf7
9a4d76d0e138c67579f213956a9360b1151ca977
67c222c4d67a0f566522818c7c996e1d17ae40d00610749285d0fabec3105cdf
POST /api/track HTTP/1.1
Host: a.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------77973755829918136021102415524
Content-Length: 1440
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:35 GMT
content-type: text/html; charset=utf-8
cf-ray: 748288a6a924b4ee-OSL
access-control-allow-origin: https://www.customink.com
allow: GET, POST, HEAD, OPTIONS
vary: Accept, Cookie, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
x-robots-tag: noindex, nofollow
set-cookie: __cf_bm=rVvUk.WF905aIiljQVZywjA6q4Itf0yWC00HcU4RtbU-1662753875-0-AWzrLQyVlpMK0Y9P8BwHNA11+f8fOUP/eBJ1RwchCA1pX6XAaJEjs1ea3YLL0kp+LHgpe582kWpM00r3l8if6Tg=; path=/; expires=Fri, 09-Sep-22 20:34:35 GMT; domain=.klaviyo.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=119&user_id=5142336719813106775&expires=30
52.59.103.37302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/sync?dsp_id=119&user_id=5142336719813106775&expires=30
IP 52.59.103.37:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=119&user_id=5142336719813106775&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Fri, 09 Sep 2022 20:04:35 GMT
Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5142336719813106775&expires=30
Set-Cookie: tuuid=695307f0-a55a-4f3b-aa85-6da337a15d0e; path=/; expires=Sat, 09-Sep-2023 20:04:35 GMT; domain=.bidswitch.net; samesite=none; secure
c=1662753875; path=/; expires=Sat, 09-Sep-2023 20:04:35 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1662753875; path=/; expires=Sat, 09-Sep-2023 20:04:35 GMT; domain=.bidswitch.net; samesite=none; secure
c=1662753875; path=/; expires=Sat, 09-Sep-2023 20:04:35 GMT; domain=.bidswitch.net; samesite=none; secure
Content-Length: 0
Connection: keep-alive
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash bab52ad1ce249bfad7884d7436a99287
94092573837519023d4502dfa029439c02563367
e7bd38386c81e9c9b7309d365166da7cc88f4a16830ca9c48a59cdd2fe7c80ea
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 13:42:55 GMT
Expires: Wed, 14 Sep 2022 13:42:54 GMT
Etag: "94092573837519023d4502dfa029439c02563367"
Cache-Control: max-age=408498,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748288a86d35b505-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash bab52ad1ce249bfad7884d7436a99287
94092573837519023d4502dfa029439c02563367
e7bd38386c81e9c9b7309d365166da7cc88f4a16830ca9c48a59cdd2fe7c80ea
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Sep 2022 20:04:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 13:42:55 GMT
Expires: Wed, 14 Sep 2022 13:42:54 GMT
Etag: "94092573837519023d4502dfa029439c02563367"
Cache-Control: max-age=408498,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748288a78dad1c06-OSL
x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5142336719813106775&expires=30
52.59.103.37200 OK 43 B URL HTTP/1.1 x.bidswitch.net/ul_cb/sync?dsp_id=119&user_id=5142336719813106775&expires=30
IP 52.59.103.37:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/sync?dsp_id=119&user_id=5142336719813106775&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20814341p.rfihub.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Fri, 09 Sep 2022 20:04:35 GMT
Content-Length: 43
Connection: keep-alive
telemetrics.klaviyo.com/v1/metric
54.230.111.19204 No Content 0 B URL HTTP/2 telemetrics.klaviyo.com/v1/metric
IP 54.230.111.19:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/metric HTTP/1.1
Host: telemetrics.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1423
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 09 Sep 2022 20:04:35 GMT
x-amzn-requestid: d3ad36e8-39ab-43d0-b047-a947374ee2e7
access-control-allow-origin: *
x-amz-apigw-id: YNVdBEMUoAMF3kg=
x-amzn-trace-id: Root=1-631b9c53-11b0288653bbfbaa6fbdb60c;Sampled=0
x-cache: Miss from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vjly8al26R49atKm6fGRta_JnZ6gdjrLTIkj8CQSukwYfQKsDTBFzQ==
X-Firefox-Spdy: h2
b.clarity.ms/collect
20.75.32.255204 No Content 0 B IP 20.75.32.255:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 10577
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.customink.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Fri, 09 Sep 2022 20:04:35 GMT
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/23156914/configuration/setting/accountproperties/?cb=accountSettingsCB
178.249.101.99200 OK 0 B URL HTTP/2 accdn.lpsnmedia.net/api/account/23156914/configuration/setting/accountproperties/?cb=accountSettingsCB
IP 178.249.101.99:0
GET /api/account/23156914/configuration/setting/accountproperties/?cb=accountSettingsCB HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:32 GMT
content-type: application/javascript
vary: Accept
expires: Fri, 09 Sep 2022 20:05:09 GMT
x-envoy-upstream-service-time: 1
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/23156914/configuration/le-campaigns/campaigns/605500712/engagements/225974414/revision/2058?v=3.0&cb=lp225974414&flavor=dependency
178.249.101.99200 OK 0 B URL HTTP/2 accdn.lpsnmedia.net/api/account/23156914/configuration/le-campaigns/campaigns/605500712/engagements/225974414/revision/2058?v=3.0&cb=lp225974414&flavor=dependency
IP 178.249.101.99:0
GET /api/account/23156914/configuration/le-campaigns/campaigns/605500712/engagements/225974414/revision/2058?v=3.0&cb=lp225974414&flavor=dependency HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:33 GMT
content-type: application/javascript
vary: Accept
expires: Fri, 09 Sep 2022 20:04:46 GMT
x-envoy-upstream-service-time: 3
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
partners.tremorhub.com/sync?UIRF=5142336719813106775&r=R4ZAbxnx0lOq
34.192.121.129200 OK 0 B URL HTTP/2 partners.tremorhub.com/sync?UIRF=5142336719813106775&r=R4ZAbxnx0lOq
IP 34.192.121.129:0
GET /sync?UIRF=5142336719813106775&r=R4ZAbxnx0lOq HTTP/1.1
Host: partners.tremorhub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20814341p.rfihub.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:35 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
lptag.liveperson.net/lptag/api/account/23156914/configuration/applications/taglets/.jsonp?v=2.0&df=0&b=3
178.249.101.23200 OK 0 B URL HTTP/2 lptag.liveperson.net/lptag/api/account/23156914/configuration/applications/taglets/.jsonp?v=2.0&df=0&b=3
IP 178.249.101.23:0
GET /lptag/api/account/23156914/configuration/applications/taglets/.jsonp?v=2.0&df=0&b=3 HTTP/1.1
Host: lptag.liveperson.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:31 GMT
content-type: application/x-javascript
cache-control: public, max-age=630
server: ws
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_re/3.52.0.0-release_5108/jsv2/overlay.js?_v=3.52.0.0-release_5108
178.249.97.98200 OK 0 B URL HTTP/2 lpcdn.lpsnmedia.net/le_re/3.52.0.0-release_5108/jsv2/overlay.js?_v=3.52.0.0-release_5108
IP 178.249.97.98:0
GET /le_re/3.52.0.0-release_5108/jsv2/overlay.js?_v=3.52.0.0-release_5108 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:33 GMT
content-type: application/javascript
last-modified: Mon, 08 Aug 2022 03:12:57 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Sat, 09 Sep 2023 20:04:33 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900&display=swap
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900&display=swap
IP 142.250.74.10:0
GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Sep 2022 20:04:34 GMT
date: Fri, 09 Sep 2022 20:04:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/23156914/configuration/le-campaigns/campaigns/1182604612/engagements/1316379114/revision/2057?v=3.0&cb=lp1316379114&flavor=dependency
178.249.101.99200 OK 0 B URL HTTP/2 accdn.lpsnmedia.net/api/account/23156914/configuration/le-campaigns/campaigns/1182604612/engagements/1316379114/revision/2057?v=3.0&cb=lp1316379114&flavor=dependency
IP 178.249.101.99:0
GET /api/account/23156914/configuration/le-campaigns/campaigns/1182604612/engagements/1316379114/revision/2057?v=3.0&cb=lp1316379114&flavor=dependency HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:33 GMT
content-type: application/javascript
vary: Accept
expires: Fri, 09 Sep 2022 20:04:46 GMT
x-envoy-upstream-service-time: 1
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
www.customink.com/interactions/date
54.230.111.83200 OK 0 B URL HTTP/2 www.customink.com/interactions/date
IP 54.230.111.83:0
GET /interactions/date HTTP/1.1
Host: www.customink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/designs/isumls/urx0-00cn-agz9/hotlink?pc=HL-191722&utm_content=viewbutton&oe=43433358-df9f6&utm_source=Hotlink&utm_medium=email&utm_campaign=Hotlink%201%20Test%20%231%20August%2025%2C%202022%20Variation%20E%20%28WAnzm5%29&_kx=QV5GUVvL6z7fJh2F4EefGkgrxr_eIgWdjQCAepdXM1I%3D.SKGNUp
Cookie: _customink_frontend_session=aec83a386fa63f640ed9dd9f2a3930a7; optimizelyEndUserId=oeu1662753861276r0.1486479685460691
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Fri, 09 Sep 2022 20:04:30 GMT
api-version: 1
cache-control: max-age=0, private, must-revalidate
content-security-policy: frame-ancestors http://*.customink.com https://*.customink.com
etag: W/"39773ea6608206e4f2e68a150c0c4701"
server: nginx
strict-transport-security: max-age=300
x-request-id: 7ce6e884-2965-421d-9cc5-3ac68c43317c
x-runtime: 0.003537
x-cache: Miss from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rXcdJVMMEf1-SQ6FkwWH8105Kpfss7aChAhcrgjwkgfoNmizQthowg==
X-Firefox-Spdy: h2
lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/desktopEmbedded.js?version=10.20.1.9-release_5536
178.249.97.98200 OK 0 B URL HTTP/2 lpcdn.lpsnmedia.net/le_unified_window/10.20.1.9-release_5536/desktopEmbedded.js?version=10.20.1.9-release_5536
IP 178.249.97.98:0
GET /le_unified_window/10.20.1.9-release_5536/desktopEmbedded.js?version=10.20.1.9-release_5536 HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:32 GMT
content-type: application/javascript
last-modified: Wed, 31 Aug 2022 14:50:34 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Sat, 09 Sep 2023 20:04:32 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
a.klaviyo.com/api/onsite/identify?c=Q4AcEH
104.18.5.166200 OK 0 B URL HTTP/2 a.klaviyo.com/api/onsite/identify?c=Q4AcEH
IP 104.18.5.166:0
POST /api/onsite/identify?c=Q4AcEH HTTP/1.1
Host: a.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 62
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:34 GMT
content-type: application/json
cf-ray: 748288a59fe1b4ee-OSL
access-control-allow-origin: https://www.customink.com
vary: Cookie, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: POST, GET, OPTIONS
access-control-max-age: 86400
x-robots-tag: noindex, nofollow
set-cookie: __cf_bm=6Oq8um633D9LqegMOoKx0q0dZ9SfOacUiuvHWpKrc9g-1662753874-0-AQyDwzViTL+KK2aA+5w4ha07VWlvR6I8J2FbCnxCxoEqsm6GajpKW2y1B2dB9AMeQ/OZQ+iLosmhZLmbr/dEbcQ=; path=/; expires=Fri, 09-Sep-22 20:34:34 GMT; domain=.klaviyo.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
c.hrzn-nxt.com/js/v2.12.0/connect.min.js
54.230.111.19200 OK 0 B URL HTTP/2 c.hrzn-nxt.com/js/v2.12.0/connect.min.js
IP 54.230.111.19:0
GET /js/v2.12.0/connect.min.js HTTP/1.1
Host: c.hrzn-nxt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Thu, 01 Oct 2020 01:22:23 GMT
x-amz-meta-cb-modifiedtime: Thu, 02 Jan 2020 17:05:29 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 18:26:18 GMT
cache-control: max-age=7200
etag: W/"237f31c1c4f949ec68d5e446713a7630"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0RJX8W5Pa9VCMKGkzNLdAGsLH68NlOMer33cE3_ORGkAOj8iMlA9ug==
age: 5950
X-Firefox-Spdy: h2
liveapi.yext.com/v2/accounts/me/entities/geosearch?v=20190117&api_key=2181ea8f899d7b657336dbb29c643737&location=59.955,10.859&radius=15&filter=%7B%0A%20%20%27c_show%27%3A%20%7B%0A%20%20%20%20%27%24eq%27%3A%20true%0A%20%20%7D%0A%7D
104.18.173.63200 OK 0 B URL HTTP/2 liveapi.yext.com/v2/accounts/me/entities/geosearch?v=20190117&api_key=2181ea8f899d7b657336dbb29c643737&location=59.955,10.859&radius=15&filter=%7B%0A%20%20%27c_show%27%3A%20%7B%0A%20%20%20%20%27%24eq%27%3A%20true%0A%20%20%7D%0A%7D
IP 104.18.173.63:0
GET /v2/accounts/me/entities/geosearch?v=20190117&api_key=2181ea8f899d7b657336dbb29c643737&location=59.955,10.859&radius=15&filter=%7B%0A%20%20%27c_show%27%3A%20%7B%0A%20%20%20%20%27%24eq%27%3A%20true%0A%20%20%7D%0A%7D HTTP/1.1
Host: liveapi.yext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.customink.com
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:31 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: no-cache
rate-limit-limit: 100000
rate-limit-remaining: 99975
rate-limit-reset: 1662757200
referrer-policy: no-referrer
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
yext-uuid: 01GCHXN5RK8A69HNJ2WYHEWDCW
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=AIw2NCHSKE1g4My9hJXukGDXAOIQj_FNlqLxYCEjuAM-1662753871-0-AXehwfW/FzcBRfKSA4pNYvU8ZkTyhCHSUZkB4sAYQHW+OQdPMFpkxctmciwk7R5hugNo6m77iwGhsdQm3gQTjeMVCe8ACbVpUqPWdU6ESlyN; path=/; expires=Fri, 09-Sep-22 20:34:31 GMT; domain=.yext.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 748288917a241c0e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
va.v.liveperson.net/api/js/23156914?sid=DGoM7u9GR3yMqx8R80Mhxw&cb=lpCb83725x39711&t=uc&ts=1662753863254&pid=9882155973&tid=5139962259&sdes=%5B%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22LP_DIV_RB_6687889599%22%7D%2C%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22LP_DIV_RB_0435608517%22%7D%2C%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22LP_DIV_RB_1501165477970%22%7D%2C%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22LP_DIV_1542654749058%22%7D%5D&vid=NmYTRmODI2NTJkMzhjMDc4
208.89.12.87200 OK 0 B URL HTTP/2 va.v.liveperson.net/api/js/23156914?sid=DGoM7u9GR3yMqx8R80Mhxw&cb=lpCb83725x39711&t=uc&ts=1662753863254&pid=9882155973&tid=5139962259&sdes=%5B%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22LP_DIV_RB_6687889599%22%7D%2C%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22LP_DIV_RB_0435608517%22%7D%2C%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22LP_DIV_RB_1501165477970%22%7D%2C%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22LP_DIV_1542654749058%22%7D%5D&vid=NmYTRmODI2NTJkMzhjMDc4
IP 208.89.12.87:0
GET /api/js/23156914?sid=DGoM7u9GR3yMqx8R80Mhxw&cb=lpCb83725x39711&t=uc&ts=1662753863254&pid=9882155973&tid=5139962259&sdes=%5B%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22LP_DIV_RB_6687889599%22%7D%2C%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22LP_DIV_RB_0435608517%22%7D%2C%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22LP_DIV_RB_1501165477970%22%7D%2C%7B%22type%22%3A%22pagediv%22%2C%22divId%22%3A%22LP_DIV_1542654749058%22%7D%5D&vid=NmYTRmODI2NTJkMzhjMDc4 HTTP/1.1
Host: va.v.liveperson.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.customink.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Sep 2022 20:04:33 GMT
content-type: application/javascript
cache-control: no-store
server: ws
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2