r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5994
Expires: Fri, 25 Nov 2022 12:37:22 GMT
Date: Fri, 25 Nov 2022 10:57:28 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6037
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:28 GMT
Last-Modified: Fri, 25 Nov 2022 09:16:51 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16656
Expires: Fri, 25 Nov 2022 15:35:04 GMT
Date: Fri, 25 Nov 2022 10:57:28 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 10:19:05 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2303
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: EdkR7pVPZUdNkP6lePB3F/74bjHHKuLPRUwUaWuwVL38xvTOjWZISxcnKSNf8hfQV2qij5VY7XU=
x-amz-request-id: SDQ849EMKB37HX8J
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 10:40:46 GMT
age: 1002
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 10:57:28 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 10:08:53 GMT
cache-control: public,max-age=3600
age: 2916
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ly.yjlianyi.top/
200 OK 82 kB IP
ASN #45090 Shenzhen Tencent Computer Systems Company Limited
File type ASCII text, with very long lines (65230), with CRLF line terminators
Hash b5d82f6e72b6d5857c8b73a1e3a60a99
3245ef5c56c34128343548d77ae755ba8c70b4e0
4e837487295703f75bd5df00c6c53622986a475c77c41532bfe6298193e71955
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: ly.yjlianyi.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 10:57:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5785
Cache-Control: max-age=171947
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:29 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 10:43:16 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
ly.yjlianyi.top/favicon.ico
404 Not Found 146 B URL HTTP/1.1 ly.yjlianyi.top/favicon.ico
IP
ASN #45090 Shenzhen Tencent Computer Systems Company Limited
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /favicon.ico HTTP/1.1
Host: ly.yjlianyi.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ly.yjlianyi.top/
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 25 Nov 2022 10:57:29 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aJAakgLoqxzj18+e6FKvyA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +YtSVWS+aLMejAJx+KOZL8v99W8=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14070
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 10:57:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14070
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 10:57:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14070
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 10:57:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14070
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 10:57:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14070
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 10:57:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4006a9037ab5f28dca62b0aa7a704c41
74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 02:07:28 GMT
age: 31802
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f6292a2988fb4505d0098553b8e99ddc
9b8aafcda0e22edcc16d3048f4b88659d3b42419
16b7b473229c5e519ab81b385c50277424f3f3b2a5d7647035e84ba58e44f3be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6385
x-amzn-requestid: 4c2a84f7-f038-4f5a-86c2-5c8ce1a48c6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cI5NVFMAoAMFn7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63803bee-45c6411c2430e2375f530dd8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 03:52:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fj82i9qJmEiUy2DOkkowq8WRyzupMwNyQqu110sJ3o72HEW4yb7bjQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 07:22:46 GMT
age: 12884
etag: "9b8aafcda0e22edcc16d3048f4b88659d3b42419"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 8f679d7f-2ea5-4e47-b78d-79af59435a62
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFPHYHkAIAMFpBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec562-26108a785e910dc3355d58f1;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 01:14:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NKwpIdw2RZNZNh69AF5GNvunA_QfRGClvzcRP3zYwn7c8BLBlt097g==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 08:37:15 GMT
age: 8415
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8784bb7a8b88736a6016f712e3183bf3
b0ddc1555d2506177adcdcea77864d75f1245d07
8e331713b0ad0b5670dd33dfdadde665e076a40ddb80905d4df89876d49803d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11743
x-amzn-requestid: 9ab0aba7-5cd1-4f6c-8984-dc221e1cbf8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cICD-F7joAMFqmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe3b2-152ba5f1495a44447356cdab;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oWSNdsrz59sJC2znLnFqa_Zm3T14_d6j-rjzDQe4yV22Dy2Qc4Swaw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:54:45 GMT
age: 46965
etag: "b0ddc1555d2506177adcdcea77864d75f1245d07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b6ee13d43732f7c764a49500d092865
5d15fd672e968d59b541e4d5d0d01cd5e69f4075
fc3623d527147e1c6aab399251ed8d527e6eefdee6ad7183f00df2613498bfe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8006
x-amzn-requestid: 78aab013-df11-464b-a1c7-ee41b7e77b40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB-AHSrIAMFvKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38c-4d795f410a57fc2c21d7075d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: q53jN1uOtSdeThbk2_0UF6Rl3g4_-_TW7uK1_6Z5oDwSTSRk8XRjyQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:08 GMT
etag: "5d15fd672e968d59b541e4d5d0d01cd5e69f4075"
content-type: image/jpeg
age: 48142
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dfd2143-7cf2-4a28-b8bf-bc3121d6a4d8.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dfd2143-7cf2-4a28-b8bf-bc3121d6a4d8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4abf25d4a15ce58edadd54994b3434a2
18800e21d05596f7b64213072dee7dda5c1faf61
633138e70f43e2be9cc447967044c4070bfc4d9285e5228361bebe255dc286e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dfd2143-7cf2-4a28-b8bf-bc3121d6a4d8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10950
x-amzn-requestid: 9bb73841-83d9-48b2-8c79-f00a57612b4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFNstFeZoAMFopQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec31d-4e6aafd367c7740c77df133b;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 01:04:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5e4ptr__XHPd9Qsf8lEDqiZGKptuB9en72UAucNWxlGG_mEbhpFgdA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 07:43:51 GMT
age: 11619
etag: "18800e21d05596f7b64213072dee7dda5c1faf61"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
freshtools.to/
301 Moved Permanently 231 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 803a960e452ca90d256956b9893e4d43
6a8e5e33d210c2629b71a6891cc68cc319f6a489
db957d3c71b60cce40fedfb2d3a28b00f93957eaaae11f92c615c0f3ebef0291
GET / HTTP/1.1
Host: freshtools.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Fri, 25 Nov 2022 10:57:31 GMT
Server: Apache
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
Location: https://freshtools.net/
Content-Length: 231
Keep-Alive: timeout=5, max=500
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.pki.goog/s/gts1p5/ecBi_As-X0A
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/ecBi_As-X0A
IP
Hash 14b176199452944d18c20e8d777f8c47
c0bc1e590693b744d7b772f873a2380d9527071f
ae12bca0eebbb6e8070b1d774ffe4af35663581dd0ccd9f2ca00ee3c416da396
POST /s/gts1p5/ecBi_As-X0A HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:33 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
freshtools.net/
302 Found 744 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (384)
Hash 5573e60d4726b4d330daba7a3694904c
f30560d1a04ced499161ec5b696f7dc9603235ef
a944f68f286ab49dc0daa213ad9e90fdf80297c327e017150e8cecc6c88417ad
GET / HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: text/html; charset=UTF-8
location: http://freshtools.net/login
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6InpUME1UYlo0SWxTYmpqNGhhUkRNV0E9PSIsInZhbHVlIjoia2VNQTNoSEcrNEl3YUdNTzM0QTFRZm0yYVhDUXlRZENKV0lxdXQxVklPTFBYTmdUK1lpbFZTNyswOFQ4VjIwbTNjb3hIT09nWW1pUUlaMDlOVGdlZHRNUDV6aktIL0JuZTRBTUpMZFNOa09RU0dwRndiSW5wdWI4blQvSE5HYlUiLCJtYWMiOiIyZTE1ZWU5MmE2NTcwOTMzN2UxZmFlNzk3N2Y3ZjdkY2MzM2EyMjc5ZDUyOTY2MTUwOTYwY2UyYzAxNTdhYTBlIiwidGFnIjoiIn0%3D; expires=Sun, 08-Feb-2252 01:29:33 GMT; Max-Age=7232941920; path=/; samesite=lax
freshtools_session=eyJpdiI6InJBY1ZMdjdWQkZSV3JuQVFLRU5USXc9PSIsInZhbHVlIjoiRFlRbVJBaVFyWUt5dCtCRTIydW1KUkVwR0tmb1VabHNPUUZ2L05lRVE1V25QR2tRbFJEQm5kczVQQ09LNHhwL2ZCUTRod1FBRFQ1VWpyVUxkZnFpcVNSTFlHWG1Ta2dZdXBwWVBhYW05dHNabC8wdzdTU1BBR0FsemxJR29oTVIiLCJtYWMiOiJhMTFmOTczZWUwMWJkYTAwM2ExMzU5MTcyYjhmYjMyYjdjYjVjZDFkYjFjZjhhNWFmYWFmMTI1NGE4YzRlMDczIiwidGFnIjoiIn0%3D; expires=Sun, 08-Feb-2252 01:29:33 GMT; Max-Age=7232941920; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SR3st5CiDZ6vuWMlDtbvuCqy%2BY93n4l%2Bx2Pedbi%2BahHomBd6hNCD1KTN7kxS2B3Ym%2FVmW0ZJhec1veP%2ByDXsSsVmVS6l4XGhTOGpKU%2F4uxxxkVAFju4AjV6vGr504o%2BT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f9dd35fabbfabc-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a130aed83a382264ec43322177a9c014
3a9e6f3d1042d4d7f9a4ef820d87771fed73d0a9
2ccdd60ee29576aebe6879a34b8245ecebf6825ffc87a85f6f6dfdc9893c7522
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2353
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:33 GMT
Last-Modified: Fri, 25 Nov 2022 10:18:22 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b44543de9922ec7d97f2e0be1865553e
caef856450efd75de0cfae9402903b1f4bd6de4c
d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76544babbcf6515110bd81aaee8e7e63
043497692868c67ac84cdfe70d0a484517abd1c2
a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
freshtools.net/uploads/New-Project-(7)-90-(1)-93.png
200 OK 77 kB URL HTTP/2 freshtools.net/uploads/New-Project-(7)-90-(1)-93.png
IP
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash 8cd01f4e6a06f44bfe3adfb7258eeadb
20cb50ef762633682d67d0a12c129e8b58d05ff8
e5b379c755c7f8bcf5aff3c5447f0a47e34332f79732729acb39b3c918601a5f
GET /uploads/New-Project-(7)-90-(1)-93.png HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: image/png
content-length: 77118
last-modified: Thu, 14 Jul 2022 08:37:52 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5g0orHXl%2BXopeLO5057O5%2F6eRDJ0kTb7tCHgIuCqI08u4A0VIMkSDhub4ek4YSYL8ZPP0H6wN3Lst63It4LntTltwmIo63ZjnG44rmk%2FJExDZSaHMP3GjWnjtmQuJUj2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd39fde0fabc-OSL
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=explicit&onload=onloadCallback
200 OK 578 B URL HTTP/2 www.google.com/recaptcha/api.js?render=explicit&onload=onloadCallback
IP
File type ASCII text, with very long lines (909), with no line terminators
Hash ec941e5d30fc3bb1d1aaa543ae406681
2c61a6ebfa4f2e36b59c773ef8f3d35378b6959b
6e32c0dc483787dcfab84cdc891c1865104738de265e3f2ae1331a7c8d6013bf
GET /recaptcha/api.js?render=explicit&onload=onloadCallback HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 25 Nov 2022 10:57:33 GMT
date: Fri, 25 Nov 2022 10:57:33 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 578
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
freshtools.net/vendor/tilt/tilt.jquery.min.js
200 OK 2.3 kB URL HTTP/2 freshtools.net/vendor/tilt/tilt.jquery.min.js
IP
File type ASCII text, with very long lines (5640), with no line terminators
Hash 1bdc79b730dddd59876abdeec591fba3
cf8e9c080de06c701c2d8d2bf7ee6d083d8b8530
d86918bbca056f4fb631ebd9633918afbf1ddf669320d8b6073bfc6dd23b83a5
GET /vendor/tilt/tilt.jquery.min.js HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: application/javascript
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GBNzb038e%2BMIHCiuK%2B8hwkYzBW6E91DDTmYZGvKLtw1VqfRO7I3NRHAHA5AINUKv%2FQgntYRshOXwDkXH7AuvX%2F6LnGLmGNVc7b%2FhrlFp6Bh34chBcoY26At4fcDFI%2B4f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd3a0deefabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/js/login.js?id=05e6aef094e9312e2954b725dd73026c
200 OK 914 B URL HTTP/2 freshtools.net/js/login.js?id=05e6aef094e9312e2954b725dd73026c
IP
File type ASCII text, with very long lines (954)
Hash 698e2c2a04139329ab52ce934b3f5e03
fd4ed7225ae10efc34e4bd434c27f922e294fe0e
4f8bdd570e9f8e85c027fb6c0dc87a3427795c68e74b431768d50235a0b536bb
GET /js/login.js?id=05e6aef094e9312e2954b725dd73026c HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: application/javascript
last-modified: Wed, 28 Sep 2022 23:13:38 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lJ1X62P0F%2FXr%2BnnsASJY9ZeLInIYTo%2FtyDbNzdyTIxCvddIX5d02o4Nn0217Ni%2FCO9w0w4uEx4lctvSFvHVDUao68dLXpAtzZrICBOk2I4xHjRtDez3Tvv67pesidQRd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd3a0df0fabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/vendor/css-hamburgers/hamburgers.min.css
200 OK 4.9 kB URL HTTP/2 freshtools.net/vendor/css-hamburgers/hamburgers.min.css
IP
File type ASCII text, with very long lines (19499), with CRLF line terminators
Hash ddfc29c1373f8b2637db2137aa32daaf
611cb168827f813f558fd1037d79bed5a9c95199
8603e67b51eb03c51d045dd5d068fbc058d677b05e47d4d14c836f213f408de0
GET /vendor/css-hamburgers/hamburgers.min.css HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: text/css
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xAucNaXt8Yds4GfRUF55iMy%2FitfBMEcN%2F7wriirSrALBpLyTz2Gqjbay8TDhO%2FOHWLaUFURhrtMls5Z%2BFJF8pgh1Wt6VcKeMWlot2snlKsBLwp6pVq6Ym%2F4dMlIeZWAW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd39ddc6fabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/css/bootstrap.css
200 OK 74 kB URL HTTP/2 freshtools.net/css/bootstrap.css
IP
File type ASCII text, with very long lines (65260), with CRLF, LF line terminators
Hash ae14006dc73f58eec0c44c425708e987
8bed8c72f9117a4cd25b9c40452068e9a68b27ec
e66ed33c34779f27e7bb1a53b6e3aaa473097f898ede1fe0fabdcae31c3ee052
GET /css/bootstrap.css HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: text/css
last-modified: Wed, 28 Sep 2022 23:13:38 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8xCEeYCrZ7zY5HTJygEg7xYrPcXlKA5rcUdlYQsBQ8VHC07DKhJ51TQJXq%2BJMC5L%2Bv75rS%2Fah4ypMCsbI7jcJgxTDPCHfiignFZ05nTsHXaUZOcj6gecOILpeFM6ciaT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd39ddc3fabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.youtube.com/embed/2dDbaVsWxsY
200 OK 127 kB URL HTTP/2 www.youtube.com/embed/2dDbaVsWxsY
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58644)
Size 127 kB (126559 bytes)
Hash bc5ea49f75d10cb03d9be94cc0b77b96
878ce76d911edcfaf100aad247320f8f477a5ec1
a223c10bfc450e072c520ce22b7209434fc47e9e7303ee8cea69b2f04929a5e4
GET /embed/2dDbaVsWxsY HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 25 Nov 2022 10:57:33 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=JopoBbxXN4Q; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=VeCjj8y2yoU; Domain=.youtube.com; Expires=Wed, 24-May-2023 10:57:33 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+588; expires=Sun, 24-Nov-2024 10:57:33 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
freshtools.net/fonts/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 freshtools.net/fonts/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /fonts/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://freshtools.net/fonts/font-awesome-4.7.0/css/font-awesome.min.css
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:34 GMT
content-type: font/woff2
content-length: 77160
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ryGbyO%2FzzUd%2BxAiWkdXDseArQxEZd68JbL8gv0gnXz%2FRh49o1TkM1eLC4SDnBwGHzuNAP0GbUsJAhBuhbjg3EeiSenWhf7%2F0eSunEXQMpHqbjzmeA%2FBE0r59%2Bx68mgjO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd3b0ee6fabc-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
freshtools.net/vendor/animate/animate.css
200 OK 596 kB URL HTTP/2 freshtools.net/vendor/animate/animate.css
IP
File type ASCII text, with CRLF line terminators
Size 596 kB (595634 bytes)
Hash ccdf77f0afd2cca84aa9f0819bc1243b
1a6cf175a655f7568857cde8d96b7ebd2efcac31
d29ffee7d5485a210bb7397d8c161f7bcf4b2963c421e6487f154b735529ce4b
GET /vendor/animate/animate.css HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: text/css
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XN1VuMlJrGD3b3PNCLpane0yaHER2kr9h0DifTdX2NgqGVaYwNSS1NL5L%2Bs6KKsodpJjKkuVnFhFmWOlyNt%2BeSJTNofD31OPv56UwflqY4JS%2FKcnEPhUxNwS9UC%2BxISG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd39ddc4fabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/css/loginStyle.css?id=7abd190e74023b3175577bbf86ba8bf6
200 OK 17 kB URL HTTP/2 freshtools.net/css/loginStyle.css?id=7abd190e74023b3175577bbf86ba8bf6
IP
File type ASCII text, with very long lines (5424)
Hash dbba7b2506abfa86c79d86527a4f441e
b8941136b4cfc9cd133765ada2ffc6192fff98a7
8562d984d475c5290208888191151a6ec5b3d163eeab205faeca9be0af3d4e43
GET /css/loginStyle.css?id=7abd190e74023b3175577bbf86ba8bf6 HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: text/css
last-modified: Wed, 05 Oct 2022 03:32:30 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zOh6wekQbL6FTOkFWhrUIZzTYuzMnNNq7jVnQ83XiZ4EXphgD11Pjue4qqYs73qTLniuavmCDQasUbInyvOk0aAAbXvf5jg%2F8d6AxhOakJhqmfSTcXahxnvWJ95mq34A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd39edccfabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/vendor/select2/select2.min.css
200 OK 17 kB URL HTTP/2 freshtools.net/vendor/select2/select2.min.css
IP
File type ASCII text, with very long lines (15063), with CRLF line terminators
Hash ccccb7c96643d35822f0c879ea563272
bf7d3166013732187cfd0aa5631032435defcced
e7ac9dffa2d59b4917a118d853d23b9bc0f12b0aabd6906eed6ae189db15d6e5
GET /vendor/select2/select2.min.css HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: text/css
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4qOUPk7THMTHuEt0PL7dE2MIfYazJbQMkIoBIwLoG74tnD5UkFM48ffR%2BW6MSedL6ptMosrI2GzB7BXvkmXoTReBzTENgGoKj%2BaALQEC%2BfckLkhfn6lrBZix%2F7U0dw2g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd39edc8fabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
freshtools.net/js/app.js
200 OK 324 kB IP
File type ASCII text, with very long lines (65475)
Size 324 kB (323690 bytes)
Hash 33cd6d1695b82014c3bc4465edc4b0f7
b95bd5fe46c15bd0e26274b70f28020e90f0b8dd
1e95f0bfd9d322af0a4c747c2cb6cf85bfb23a08f387eefdedab63c4f60fd064
GET /js/app.js HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: application/javascript
last-modified: Tue, 04 Oct 2022 06:19:56 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UpfGCtMHZ%2BsywDyG89ddi71xsZbH9bJgSTLMWh7lGwcutJghsuDKkZCOiveKmMDqWq%2FGSR6WJFPYlc5rsHz1obY2MZI%2BxYIqvCaESPuUGKlnUAM3o1L%2B8%2Bhea0LKROoR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd39fde6fabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 60951c730d96e02c20219f2765873699
64d0ecb0d9001990841e9faa434d9239af4b6927
9eb0e510930409a6eed080afd7759a51ca4ecb58dd30ea04221cea917358f658
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 10:45:21 GMT
expires: Fri, 25 Nov 2022 11:00:21 GMT
cache-control: public, max-age=900
age: 733
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Fri, 25 Nov 2022 10:57:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 60951c730d96e02c20219f2765873699
64d0ecb0d9001990841e9faa434d9239af4b6927
9eb0e510930409a6eed080afd7759a51ca4ecb58dd30ea04221cea917358f658
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 25 Nov 2022 10:57:34 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 56950d3dd070ce0eef4253ff9309dfcb
6daa94237d72278773dd81bbcf46e8e1cd4aa32f
4c3bcc62ab5b97eaa29cb312bf1f2e0e8fe1c24039fac8de9474ef2754591a41
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 25 Nov 2022 10:57:34 GMT
server: ESF
cache-control: private
content-length: 31042
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b7757171f2e55c37975a5bcdeba7a4ae
1ce146a166c3c1d510d26c855321ca4b2426353d
7675dc8e0d7a554bf286e61db1c9546aa6fc7188cb83c3d9bd5beb80c2351fe5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 216d858ad02d0f9765e7844973400881
62a1fb9255bfc33b0fbc8960502272a42ecf73f6
f90483fc88bda7a012064641af0cf72c31d2ae7522097e4ac52f0b096b519f79
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/fnWfZN7v3RRVLHSu3pxGZ5InE2dC48XKAIJPr6VJf-BABs1N4JNoz6HMGgwNBlhVZgdkMF_6=s68-c-k-c0x00ffffff-no-rj
200 OK 3.0 kB URL HTTP/2 yt3.ggpht.com/fnWfZN7v3RRVLHSu3pxGZ5InE2dC48XKAIJPr6VJf-BABs1N4JNoz6HMGgwNBlhVZgdkMF_6=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash 7ac6ddd07e8f029c714d87895213d59f
263b8d9db37535840418f7e536ab23b31fd969e1
299b632acdd2cc708fffe4989c21d3b3a2879e45f371f0c630e6dff4d152145f
GET /fnWfZN7v3RRVLHSu3pxGZ5InE2dC48XKAIJPr6VJf-BABs1N4JNoz6HMGgwNBlhVZgdkMF_6=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2966
x-xss-protection: 0
date: Fri, 25 Nov 2022 10:57:34 GMT
expires: Thu, 24 Nov 2022 02:35:57 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.ytimg.com/vi/2dDbaVsWxsY/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXCg_MA8=&rs=AOn4CLAfjTTVYX8Xc3z3YUVx3Hqym2IhCg
200 OK 80 kB URL HTTP/2 i.ytimg.com/vi/2dDbaVsWxsY/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXCg_MA8=&rs=AOn4CLAfjTTVYX8Xc3z3YUVx3Hqym2IhCg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash 8894bdaf38bc7c1b8d9f0e78f07292f3
ece7b1914563f0c18fbde0c23cb4750442cb4787
57a254469af00ba74e93b1569c1eca763a44e338bd365910feb7c132dc161ebe
GET /vi/2dDbaVsWxsY/maxresdefault.jpg?sqp=-oaymwEmCIAKENAF8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGGUgXCg_MA8=&rs=AOn4CLAfjTTVYX8Xc3z3YUVx3Hqym2IhCg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 79956
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 10:57:34 GMT
expires: Fri, 25 Nov 2022 12:57:34 GMT
cache-control: public, max-age=7200
etag: "1658014483"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b7757171f2e55c37975a5bcdeba7a4ae
1ce146a166c3c1d510d26c855321ca4b2426353d
7675dc8e0d7a554bf286e61db1c9546aa6fc7188cb83c3d9bd5beb80c2351fe5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 216d858ad02d0f9765e7844973400881
62a1fb9255bfc33b0fbc8960502272a42ecf73f6
f90483fc88bda7a012064641af0cf72c31d2ae7522097e4ac52f0b096b519f79
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 10:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
freshtools.net/cdn-cgi/rum?
204 No Content 0 B URL HTTP/2 freshtools.net/cdn-cgi/rum?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 5995
Origin: https://freshtools.net
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Fri, 25 Nov 2022 10:57:35 GMT
access-control-allow-origin: https://freshtools.net
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 76f9dd422cfefabc-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 25 Nov 2022 10:57:35 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash a60fb7c65e4137d07f0e12ce5819d391
4757d8a49612020467d33be69a0e2d93205e4d0a
945eb81fab1610592d4e3e63f1a79872b38ab5f6b23e6f308d53806d5a668543
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1031
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 25 Nov 2022 10:57:35 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freshtools.net
Connection: keep-alive
Referer: https://freshtools.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd3a4c28b521-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
freshtools.net/css/util.css
200 OK 0 B URL HTTP/2 freshtools.net/css/util.css
IP
GET /css/util.css HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: text/css
last-modified: Wed, 28 Sep 2022 23:13:38 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4eMsN37Ui0%2F8TRx4AGTzII3pOdmziy4kK8eaYqmkgAqtJsE5DCRi0UP80lwx6C%2F2iNX7RFnU6%2FYXhPkpRrZIq08H20bxXPZL8PaGg4ashzT%2BgXzjuHBV3Wo2TmSM0iAT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd39edcbfabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/vendor/select2/select2.min.js
200 OK 0 B URL HTTP/2 freshtools.net/vendor/select2/select2.min.js
IP
GET /vendor/select2/select2.min.js HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: application/javascript
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rBn6WLeRP8vYNDQBaMAGt3QjsokCW42spshj1oOScch6OpmPEUpVu%2F08VSvHPF89SirgrP5%2F%2BVK2on8plwkEHJy4%2Bl59SrUGG4J5O4BFNU47jhQZbTR%2BSePtucRFHa%2Fr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd3a0decfabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/login
200 OK 0 B IP
GET /login HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InpUME1UYlo0SWxTYmpqNGhhUkRNV0E9PSIsInZhbHVlIjoia2VNQTNoSEcrNEl3YUdNTzM0QTFRZm0yYVhDUXlRZENKV0lxdXQxVklPTFBYTmdUK1lpbFZTNyswOFQ4VjIwbTNjb3hIT09nWW1pUUlaMDlOVGdlZHRNUDV6aktIL0JuZTRBTUpMZFNOa09RU0dwRndiSW5wdWI4blQvSE5HYlUiLCJtYWMiOiIyZTE1ZWU5MmE2NTcwOTMzN2UxZmFlNzk3N2Y3ZjdkY2MzM2EyMjc5ZDUyOTY2MTUwOTYwY2UyYzAxNTdhYTBlIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6InJBY1ZMdjdWQkZSV3JuQVFLRU5USXc9PSIsInZhbHVlIjoiRFlRbVJBaVFyWUt5dCtCRTIydW1KUkVwR0tmb1VabHNPUUZ2L05lRVE1V25QR2tRbFJEQm5kczVQQ09LNHhwL2ZCUTRod1FBRFQ1VWpyVUxkZnFpcVNSTFlHWG1Ta2dZdXBwWVBhYW05dHNabC8wdzdTU1BBR0FsemxJR29oTVIiLCJtYWMiOiJhMTFmOTczZWUwMWJkYTAwM2ExMzU5MTcyYjhmYjMyYjdjYjVjZDFkYjFjZjhhNWFmYWFmMTI1NGE4YzRlMDczIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; expires=Sun, 08-Feb-2252 01:29:33 GMT; Max-Age=7232941920; path=/; samesite=lax
freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D; expires=Sun, 08-Feb-2252 01:29:33 GMT; Max-Age=7232941920; path=/; httponly; samesite=lax
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KOkjmjpXocS5pnri46m5NwPG9RDaQdz7n5sq5vHzC5Hh29fnsw%2FQZLTydUWAlLfTPbOk4TIRgATaSrG8IdtIsEO%2FgMp9oOFeI1rTyiFioFIYsgiu4vZ%2BoenVsvquPvXu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f9dd37bbfffabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
freshtools.net/fonts/font-awesome-4.7.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 freshtools.net/fonts/font-awesome-4.7.0/css/font-awesome.min.css
IP
GET /fonts/font-awesome-4.7.0/css/font-awesome.min.css HTTP/1.1
Host: freshtools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freshtools.net/login
Cookie: XSRF-TOKEN=eyJpdiI6IkNQeEpjWHpqSTR4c3dxWkpVeXJoZEE9PSIsInZhbHVlIjoiN1NaN2Rycm03dkhKK1V4NWxWTE55UzBzYzFxVUtxWVMwTktNRWZydi9RZnBybUNhN2xPbEVkbjNwRmwzUXJJYk1uTnFXMmZ3RnZUeTlURzdSNmQ4VEcvZHRCRUxuMmdrWDhuQ3M5UmQ4anI2ZzJXcXY1Z0NZb095bDBoUHIzcW4iLCJtYWMiOiIwODIzMGE0MDFjMTMyOTk3Y2FlZTMwOWQ3YzEzODBiMWFmMjA4MDI1MDQwODIzNGNmMTUxZDFlY2E4NTZmNmYzIiwidGFnIjoiIn0%3D; freshtools_session=eyJpdiI6IlFvU2dYdjdLYUtFOUV1bk43WmNhMVE9PSIsInZhbHVlIjoiVzFYY2tkckdqS2RkaDMxT3ljbHFMYStGakJrNlY0UERhZzZma2F3R2wzYWF2OU1MYnJ1NFBUVU41RFVkREYrQ3lxUllQcG5Xcm9tOVZnYTBablhmbi9LZUg1cVk4TC9Td0drYkQ5QzVmMDBhM2NWTnF4bUpjMzJQYU1JMXpoTFMiLCJtYWMiOiIzZDBhOTlhMzUxNTIwYTVlY2Q5NTBlYmU1M2Q4ZDNmNTZmZGU5NDBhY2NmMTJmY2U1MTg2YjcxNzkzM2U0NzVkIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 10:57:33 GMT
content-type: text/css
last-modified: Mon, 18 Oct 2021 20:32:36 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T0M61R8nZOtm6SykCr4J0o12JpGArR7NOA8QuK9p17Jgj%2FEW2nzhqAGAgRHTCoICClWQQCsTvuzWYMtsJF0VN1wVSog8nmWBMKFPs3Qrra9ntAkJXAZ%2BOFqjCu4uYNer"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f9dd39ddc2fabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
81.68.152.197
142.250.74.161
104.16.56.101
158.85.120.178
93.184.220.29
23.36.77.32