www.rindegastos.com/document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8
301 Moved Permanently 167 B URL HTTP/1.1 www.rindegastos.com/document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8 HTTP/1.1
Host: www.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 01 Feb 2023 16:07:52 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://www.rindegastos.com/document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8
X-Cache: Redirect from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fXE5WM4Ntn0bLF6N-55Ebk_Y_5t-EugVwZ3wIsn1_vM5GarRtnMj9g==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2e72d45afe3d391c204b5391599607c
149d68b9d00a720b6f380fa2324779dca9dbe26d
f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7739
Expires: Wed, 01 Feb 2023 18:16:51 GMT
Date: Wed, 01 Feb 2023 16:07:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9485
Expires: Wed, 01 Feb 2023 18:45:57 GMT
Date: Wed, 01 Feb 2023 16:07:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5493
Expires: Wed, 01 Feb 2023 17:39:25 GMT
Date: Wed, 01 Feb 2023 16:07:52 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 15:36:02 GMT
content-type: application/json
age: 1910
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TNqTPGX4hVhSrzfpm44TLUTGvaxz6+OS1oWyvq9frcOuzYASh8QfNAs6YWNob9FiJgi8Fm/b57A=
x-amz-request-id: GD3D84V67DXQH3JF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 15:51:37 GMT
age: 975
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8d97576057e3e7e97825c9a8c2d46c9b
047eeeeec653f10b06e4d777cc82557ababfae15
064aa77237447376d23697b9ef03b15605b8637ca9e0bcbf379bcc405a234692
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=158864
Date: Wed, 01 Feb 2023 16:07:52 GMT
Etag: "63da5467-1d7"
Expires: Fri, 03 Feb 2023 12:15:36 GMT
Last-Modified: Wed, 01 Feb 2023 12:00:39 GMT
Server: ECS (bsa/EB18)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3zsMsIjZSfIk0KZ4oWRfvzZfkXbZrEI6t5C8R6VH_18K5GTxuSBWdg==
Age: 897
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 16:07:52 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 42d54c8c12a2f90c448a11bf42800e86
bb66d35435411c825bfcd0a091f33b7d1708191e
3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/nunito/v25/XRXV3I6Li01BKofINeaBTMnFcQ.woff2
200 OK 36 kB URL HTTP/2 fonts.gstatic.com/s/nunito/v25/XRXV3I6Li01BKofINeaBTMnFcQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35848, version 1.0\012- data
Hash 12bb96876fc38b93380a6cc76267bd0b
8a71285da71a177d92bb605fb89825f199a81b5b
7da5e32922590d2ca6057bd7f2882269bdbcce1f53d3b622cfa1b7fcb95cca5b
GET /s/nunito/v25/XRXV3I6Li01BKofINeaBTMnFcQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35848
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 09:44:09 GMT
expires: Sun, 28 Jan 2024 09:44:09 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Jul 2022 19:34:50 GMT
content-type: font/woff2
age: 368623
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 15:41:42 GMT
age: 1570
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 42d54c8c12a2f90c448a11bf42800e86
bb66d35435411c825bfcd0a091f33b7d1708191e
3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4679
Expires: Wed, 01 Feb 2023 17:25:52 GMT
Date: Wed, 01 Feb 2023 16:07:53 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash d2c6c30a9f4e356626fa230ba94476d5
2a8987b40421617d37a2a9f6f7226fa98fb8d4e5
4e7778983fcae0d9cc0d4755fbac74ccbff4871878077788ba6cca7f7506884c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5557
Cache-Control: max-age=130444
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:53 GMT
Etag: "63d9d330-118"
Expires: Fri, 03 Feb 2023 04:21:57 GMT
Last-Modified: Wed, 01 Feb 2023 02:49:20 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 279 B IP
Hash c5cb8c5184ced9f6a10afe02c73697c9
44813ed25374003affa8df6f11f828d969720637
57ae5c297c4aaaf084e6771d0d10dfdcc171258830fd05783a9acdd660c22b17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 681
Cache-Control: max-age=95276
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:53 GMT
Etag: "63d95cdd-117"
Expires: Thu, 02 Feb 2023 18:35:49 GMT
Last-Modified: Tue, 31 Jan 2023 18:24:29 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 278 B IP
Hash 889593fa9942ef02c6abe0fbcbee5b04
5a74b7b5ca5b222fe3e96493e592d88819c039ac
758a075e63a80710d6cfe1dead3018c8b57ad17c49f841e0b18af75fb6d4efc4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1171
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:53 GMT
Last-Modified: Wed, 01 Feb 2023 15:48:22 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 279 B IP
Hash 8b4f1b2684927e883eb2449da98da960
473ca8a00b6524d0d7bfc52dcf3b592ed0a1c63f
06c604e9c261a71a96e07822e5e69bbac652ca8f9757cb645fde46da696fdc3c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2866
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:53 GMT
Last-Modified: Wed, 01 Feb 2023 15:20:07 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
js.usemessages.com/conversations-embed.js
200 OK 21 kB URL HTTP/2 js.usemessages.com/conversations-embed.js
IP
File type C source, ASCII text, with very long lines (65536), with no line terminators
Hash ee9235ab01988bed50a9e3c0b25565cc
f436d37b355a6f52b515e73715b63a65f76aa739
f3584b63673e854242867351233abaee9162137db4d8398be59b34e291acaf5c
GET /conversations-embed.js HTTP/1.1
Host: js.usemessages.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:53 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 08:31:16 UTC
etag: W/"dbc5e333f8b7dd72bd6da16d6f146093"
x-amz-server-side-encryption: AES256
x-amz-version-id: JzGNjVN4YQrAp4Ga6yijUeD._fOlLcCm
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bcfffcf7e0fc8cd9cfe4125369a9f036.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: w3NQy1iHp4e4uX1O0Eja0LXDL2yUiVWmTtE_LJw--9eev9YJ8AJQcg==
cache-control: max-age=600
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=conversations-embed/static-1.11982/bundles/project.js&cfRay=791d07359bcc09b0-IAD
x-hs-target-asset: conversations-embed/static-1.11982/bundles/project.js
x-hs-cache-status: HIT
cache-tag: staticjsapp-conversations-embed-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 97
server: cloudflare
cf-ray: 792bf14d6be9b52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 7e2d9bed769bbda25456521b7d6e1672
33965daef36e810ffcf57e75f7ed0d0e2b8b36f5
b1691980963d43a12267004eb6b6d906082a0c2bfe7cad6122a0fee5aa918ce9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2610
Cache-Control: max-age=95111
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:53 GMT
Etag: "63d954af-118"
Expires: Thu, 02 Feb 2023 18:33:04 GMT
Last-Modified: Tue, 31 Jan 2023 17:49:35 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: n+tiDLBW14wp7mCdllYYpA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: e9qkmJ/dAdInzF/Hajs7Ir5am6I=
js.hsadspixel.net/fb.js
200 OK 2.5 kB IP
File type ASCII text, with very long lines (5795)
Hash 3c5e62954be5df63b2b4c8f33ec913c4
7c4a138f6bbcec97284c4374137e363b25fe28c6
e2ee1327e23fc844db0192870ea91f532321ca521104131fb11ed042c76ee9c4
GET /fb.js HTTP/1.1
Host: js.hsadspixel.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:53 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Tue, 31 Jan 2023 04:09:31 UTC
etag: W/"bde7af4ffd2c05ea8423271f767ebc69"
x-amz-server-side-encryption: AES256
x-amz-version-id: voeLZ8jD1qAOp4h9t0pVQ2YHSdN3ebgQ
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 16d910967d343c8da7828222a653755e.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: _7Ru9GuY8kooTDZGk-Bsqd7hy0ewDXlrOMQ_i8Jq_-8AQjt7zubv7A==
cache-control: max-age=600
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=adsscriptloaderstatic/static-1.317/bundles/pixels-release.js&cfRay=7923c52358460a3f-ARN
x-hs-target-asset: adsscriptloaderstatic/static-1.317/bundles/pixels-release.js
x-hs-cache-status: HIT
cache-tag: staticjsapp-AdsScriptLoaderCloudflare-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 336
server: cloudflare
cf-ray: 792bf14d5a56b515-OSL
content-encoding: br
X-Firefox-Spdy: h2
api.hubspot.com/livechat-public/v1/message/public?portalId=3276114&conversations-embed=static-1.11982&mobile=false&messagesUtk=0da879906a7140ebbc8792099f17732e&traceId=0da879906a7140ebbc8792099f17732e
200 OK 1.5 kB URL HTTP/2 api.hubspot.com/livechat-public/v1/message/public?portalId=3276114&conversations-embed=static-1.11982&mobile=false&messagesUtk=0da879906a7140ebbc8792099f17732e&traceId=0da879906a7140ebbc8792099f17732e
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (3007), with no line terminators
Hash 4929502f1ab2e64a702c93a0888de9a5
7dbb44dca04f3cd344ce12517ed8a1166268c71d
fea4dfb427ee8e82777d1f8409d5fec7c169cd6daf45408863e6041163916ccc
GET /livechat-public/v1/message/public?portalId=3276114&conversations-embed=static-1.11982&mobile=false&messagesUtk=0da879906a7140ebbc8792099f17732e&traceId=0da879906a7140ebbc8792099f17732e HTTP/1.1
Host: api.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-HubSpot-Messages-Uri: https://www.rindegastos.com/document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:53 GMT
content-type: application/json;charset=utf-8
content-length: 1504
cf-ray: 792bf14eba50b50f-OSL
access-control-allow-origin: https://www.rindegastos.com
cache-control: no-cache, no-store, no-transform, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent, X-HubSpot-Messages-Uri
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
x-hubspot-correlation-id: 4b0bd225-767b-4194-80df-279089185856
x-trace: 2BCE916C8D4D616563A164D1B9C38624D5120ECA2E000000000000000000
set-cookie: __cf_bm=2VwUObwMd4dc28iTkCDDVdIJEAnOoCWss3jg3Ljzcpk-1675267673-0-AXN4OzyuavQBbCbACiyz6LV15S/gWr2ogxmnESLrB1EMjHo9YFj2DiZXhnTvqjDILwqswlbue1O4EdBn4THWqDY=; path=/; expires=Wed, 01-Feb-23 16:37:53 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
__cf_bm=nPgHPlrXA4PJ.xRWNgx8CnmqmXl6S3h9yiI4V4LYlv4-1675267673-0-ASTtxbb4Nvxg4/WAtQkyDvYfL0KORu5rdLkSzVhWtuC77taqiKs8ZUrpn3egSgl2Q8X8bzvUshWrjkxBoJqC2U0=; path=/; expires=Wed, 01-Feb-23 16:37:53 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZA7ZsGVFHCqLOvfI%2Fb%2BNvhIqWa47bDGs2%2F8a63%2B67%2BqmD00yTBO6SYMXpBs%2FY1waX81zDTVsf%2BKR31I5LVR9nX8tjuWwIzmUun6YIxPuyJxwGshvVbOEXd8MQyi7ZRho6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 770eb08392c87eeed912f0016260407b
a2a9770ea6cdbf45bcd6f26129a5b626850c7651
2f357bd2c42ed10b67a6f4d8f0ef24740ef195d51f1bb2e559d33cdc7354ffe2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5617
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:53 GMT
Last-Modified: Wed, 01 Feb 2023 14:34:17 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c004ef398fc2138876eac9e202e6e7c9
9b695108fe043113ee8dc3369be58234f1a73323
ab71d4c6d64f3c7a0114070414615b26843c22de34b0f04c9ad932ca112031c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-NNLNX98
200 OK 82 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NNLNX98
IP
File type Unicode text, UTF-8 text, with very long lines (10605)
Hash ab97b0f5b762215ffbba00b1fccdf9c1
5246a947165cdfb34c20d489c733854e6ac2b996
ef64a65a0ad64b5998711e01cdec7a5de7e9585d65dfda646cd3d794b441de1b
GET /gtm.js?id=GTM-NNLNX98 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 16:07:53 GMT
expires: Wed, 01 Feb 2023 16:07:53 GMT
cache-control: private, max-age=900
last-modified: Wed, 01 Feb 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82165
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash b687f0b2a59fee75209648e8e7560074
95a4b419ff58849331ed186a0dbcc42babb2757a
83a6f137ef2d5f526fcde1b938a84a5d1571d2758d326b8ce61bcd0df934450f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4447
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:53 GMT
Last-Modified: Wed, 01 Feb 2023 14:53:46 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c004ef398fc2138876eac9e202e6e7c9
9b695108fe043113ee8dc3369be58234f1a73323
ab71d4c6d64f3c7a0114070414615b26843c22de34b0f04c9ad932ca112031c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=3276114
200 OK 387 B URL HTTP/2 api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=3276114
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6d32d5394db3e7c5f0de8b3a36a90d0d
2df4a4e9fd911405c780022004109d33f6a9bfc5
eb427ed2b6379c9badbd3c3e76e12e42326b5be0a8df5e3cec6c4b44a739a562
GET /hs-script-loader-public/v1/config/pixels-and-events/json?portalId=3276114 HTTP/1.1
Host: api.hubapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:54 GMT
content-type: application/json;charset=utf-8
cf-ray: 792bf151cc3eb529-OSL
access-control-allow-origin: https://www.rindegastos.com
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: origin, Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-max-age: 180
x-hubspot-correlation-id: d99c11bf-8e96-4a8b-bd66-c96d9c311c42
x-trace: 2BC500572087BA10EE0F3D6554AF806AC64C994FDD000000000000000000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z7oI06pIh8AilsvnIci7Cs8INAVw4bgMi4ZPZR%2Br482zdxGbCC7ZzxTIIha9Ge1hPWuaFYyj8xuhwSEx35dcqIzG0Kd7lCPFPP8ABY11eK8CeViBUWEvJQP%2FQAG%2BonVU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c644a73d518a8a2348eb5b434842e6ce
3ea3d6025c17f60713ec37e8c4ddc02eba5128e3
5d113be969619c442c2b4b048990d9756efce76dda98148d2832ae6893d8f17b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 01 Feb 2023 16:07:54 GMT
Last-Modified: Wed, 01 Feb 2023 15:54:51 GMT
Server: ECS (nyb/1D08)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AqS85CvxLmJYYOPhLzG3RkksIYVJ1gYxOsLZOnU7zn-cNjUwdRpLqg==
Age: 783
ocsp.digicert.com/
200 OK 279 B IP
Hash 0a2afa2ee971db306bd852581ac54d29
900c20ef472637ce06260bd174138359ebc190c6
00cce5b36a5c3ff9dd7baa1f5c15a5b02cabfd4c5f73b2186883117b6bc7b94e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4779
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:54 GMT
Last-Modified: Wed, 01 Feb 2023 14:48:15 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash b687f0b2a59fee75209648e8e7560074
95a4b419ff58849331ed186a0dbcc42babb2757a
83a6f137ef2d5f526fcde1b938a84a5d1571d2758d326b8ce61bcd0df934450f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4068
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:54 GMT
Last-Modified: Wed, 01 Feb 2023 15:00:06 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 0a2afa2ee971db306bd852581ac54d29
900c20ef472637ce06260bd174138359ebc190c6
00cce5b36a5c3ff9dd7baa1f5c15a5b02cabfd4c5f73b2186883117b6bc7b94e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3946
Cache-Control: max-age=105784
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:54 GMT
Etag: "63d97928-117"
Expires: Thu, 02 Feb 2023 21:30:58 GMT
Last-Modified: Tue, 31 Jan 2023 20:25:12 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
static.hsappstatic.net/hubspot-dlb/static-1.352/bundle.production.js
200 OK 96 kB URL HTTP/2 static.hsappstatic.net/hubspot-dlb/static-1.352/bundle.production.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6cbd5ea00ba2193096523147e4dbd7dd
56f7e16ee15dd460482992cd82085aa6f99db127
f3dc84c461efa391d7b7871cbca80169e4ce63a504879b047a00c8bbc5748771
GET /hubspot-dlb/static-1.352/bundle.production.js HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:54 GMT
content-type: application/javascript
access-control-allow-origin: https://app.hubspot.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Thu, 26 Jan 2023 17:07:33 GMT
etag: W/"ad05b7da4f5b501dafa9768c8e784ff8"
x-amz-server-side-encryption: AES256
x-amz-version-id: lUmRJ.EMHGuGoOzmCmMes42qja_ehMGL
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 1b63c221130bf48b8c220d4e1a3e14b0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: cpIHMMPmiZ126rAGqAf6hCWqBmo4PaoNF_Zcrjww1JjROzyjQJHoFA==
cf-cache-status: HIT
age: 511523
expires: Thu, 01 Feb 2024 16:07:54 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dNlvD9S06SjMX%2BBEheh4EvDiMC4bqhgBg9h7meDpYue6JuN9iUYccSnnLSBddC3sw8ygd%2BHRJaUc5NkJMzANcBuT1xBB%2BaW%2BoyRwCTs9q78Mo6za07ZyZypr5IMgCgfYzNwealeJAi0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 792bf1531f4e1bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
js.hscollectedforms.net/collectedforms.js
200 OK 26 kB URL HTTP/2 js.hscollectedforms.net/collectedforms.js
IP
File type Unicode text, UTF-8 text, with very long lines (65392), with no line terminators
Hash 7d35119ff1a908ed576c92a3ab5fa597
098c2d439fe0292c5315cca91cd56f7dcecaf8d2
9abcfabe9f7658a6379863cd9b847c837caf3d41f3f126a63b4c6b4d8327e51e
GET /collectedforms.js HTTP/1.1
Host: js.hscollectedforms.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:53 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Dec 2022 02:49:13 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: SN4HXBautbT5xHa4DdPckLpyluwLE8QR
etag: W/"349cabd549e2249f8fb6ac3ac6f08e00"
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 b77313059f3d50280ced20238b151620.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: f3NE66iLw_jvZUSlS5FBILrbJtxotEhIOwRrbY9O46TkAzZWXa4mSA==
cache-control: s-maxage=600, max-age=300
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=collected-forms-embed-js/static-1.312/bundles/project.js&cfRay=792bf14d3b5e0b06-IAD
x-hs-target-asset: collected-forms-embed-js/static-1.312/bundles/project.js
x-hs-cache-status: MISS
cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prod
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 792bf14d3b5e0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=35618
date: Wed, 01 Feb 2023 16:07:54 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 717cf52cfdc9e790ae36f7a4e1d19d16
03b71415f75565d67d059f1046fa363be72245e5
f76f4406c8796751e4b51ecff884ff3b3ea2bff4c60b6a8941d68b31951b4541
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4598
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:54 GMT
Last-Modified: Wed, 01 Feb 2023 14:51:16 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 01 Feb 2023 15:45:20 GMT
expires: Wed, 01 Feb 2023 17:45:20 GMT
cache-control: public, max-age=7200
age: 1354
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dc2e297877f6332a114de88eeeaca61
cc91e58f3dd132b078223d21cd3177f0819e40e7
94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.hsappstatic.net/conversations-visitor-ui/static-1.14434/bundles/visitor.js
200 OK 212 kB URL HTTP/2 static.hsappstatic.net/conversations-visitor-ui/static-1.14434/bundles/visitor.js
IP
File type Unicode text, UTF-8 text, with very long lines (65461), with no line terminators
Size 212 kB (212166 bytes)
Hash ccac3569744e2f565d91cb72c33b4450
da8e959f7c4431aa7023dbc92fe00b60269d4ec5
09a2b24f65411ee8935dfac84385b69d0d69714cd313bb407efe2e13a926d4d0
GET /conversations-visitor-ui/static-1.14434/bundles/visitor.js HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:54 GMT
content-type: application/javascript
access-control-allow-origin: https://app.hubspot.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 20:09:33 GMT
etag: W/"02f76bb6e32bed0873b142ca83e71ef4"
x-amz-server-side-encryption: AES256
x-amz-version-id: X9Zsl45AVQCrOfo2kgP7ThvmUmEE_.Tv
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 978313776816dba934d16309fa2c65c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: _4ERJPJtOS0bHd8TJjBISkV7QkF0Tv3SPpubqABr6QL8hti_RGwV3A==
cf-cache-status: HIT
age: 156989
expires: Thu, 01 Feb 2024 16:07:54 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dtxFMvoo5HnCoWGZKcadvBXQYA7Qgv%2BB4K1j1HMIHvcIxcQN6jFXPDEioiynKIDDAT9lRtck4ByYqg%2B%2Flx5POpLeDmV05UpG7AG8lgUzAh9FCFrO3zxaxCnaN1%2FOC0DqXPE9p5Qks7Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 792bf1531f581bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/950321305/?random=1675267696109&cv=11&fst=1675267696109&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&auid=1611435025.1675267696&rfmt=3&fmt=4
200 OK 902 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/950321305/?random=1675267696109&cv=11&fst=1675267696109&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&auid=1611435025.1675267696&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (1915), with no line terminators
Hash a9524c00f1892b54528de28e3936df4c
028c72bc08d4d96a619b21968e92619762e13617
fb07c1d887047a11afa9cb9c67d4f24cac4efd077f4790d243b3db8fb4d73c44
GET /pagead/viewthroughconversion/950321305/?random=1675267696109&cv=11&fst=1675267696109&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&auid=1611435025.1675267696&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 16:07:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 902
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 01-Feb-2023 16:22:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 717cf52cfdc9e790ae36f7a4e1d19d16
03b71415f75565d67d059f1046fa363be72245e5
f76f4406c8796751e4b51ecff884ff3b3ea2bff4c60b6a8941d68b31951b4541
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4598
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:54 GMT
Last-Modified: Wed, 01 Feb 2023 14:51:16 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
api.ipify.org/?format=json
200 OK 21 B URL HTTP/2 api.ipify.org/?format=json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7d69c71af0f191e9a72db6153f8018d1
f67c5f2887bc05654b47f76e9621e53a4091aed1
5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65
GET /?format=json HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.rindegastos.com
content-type: application/json
date: Wed, 01 Feb 2023 16:07:54 GMT
vary: Origin
content-length: 21
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dc2e297877f6332a114de88eeeaca61
cc91e58f3dd132b078223d21cd3177f0819e40e7
94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4253e662d539c01b8656dbb6d73aab1
08f71eead367b6fa76b99f7f590680a5f5650b62
f05b99f6b0c8fb5c38221d02c0c9ed96389fbd5105d6329cdc733d1fae411df2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b4c9a8ce96aa57d27a6bd55df00f08ac
180302ed4863fb5b22b45ab0cc7c770a12a8c63d
3707163ad693f536f95ed3331f045060ad51b12e95d55690d341a4a93e7f1d12
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a327176edf538c07784f9b0da660c22d
4a56cfcac291dfe1cc177bd3eff976f106731834
aae92a95f747be0bca6982ed7e3e58af8ac74ff69c799b55046ab38474e149dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-0CNWYJZDVN&cid=963110725.1675267696>m=2oe1u0&aip=1&z=5940727
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-0CNWYJZDVN&cid=963110725.1675267696>m=2oe1u0&aip=1&z=5940727
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-0CNWYJZDVN&cid=963110725.1675267696>m=2oe1u0&aip=1&z=5940727 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 16:07:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/950321305/?random=1675267696109&cv=11&fst=1675267200000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&fmt=3&is_vtc=1&random=2989448462&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/950321305/?random=1675267696109&cv=11&fst=1675267200000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&fmt=3&is_vtc=1&random=2989448462&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/950321305/?random=1675267696109&cv=11&fst=1675267200000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&fmt=3&is_vtc=1&random=2989448462&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 16:07:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/950321305/?random=1675267696109&cv=11&fst=1675267200000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&fmt=3&is_vtc=1&random=2989448462&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/950321305/?random=1675267696109&cv=11&fst=1675267200000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&fmt=3&is_vtc=1&random=2989448462&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/950321305/?random=1675267696109&cv=11&fst=1675267200000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tiba=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&fmt=3&is_vtc=1&random=2989448462&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 16:07:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
js-agent.newrelic.com/nr-spa-1216.min.js
200 OK 18 kB URL HTTP/2 js-agent.newrelic.com/nr-spa-1216.min.js
IP
File type ASCII text, with very long lines (32010)
Hash 6561a2403142205f966207d61576f1a6
1310e72f494e12ab63a4280fc1600a2c89dc9bb8
0e496fcab0b9120938373e271fa6631b7da17adf33f8a490637467c170a3e37a
GET /nr-spa-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: emAkzc02wDoi/4j+kNkFMQFgRL5PN5RT68FVYAmgTzQXT7TFZy0VlLzQFV0kvFgsR9Av3cedyZ4=
x-amz-request-id: 33WCNDX1WCTE0BBA
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "63e2df852d15ab21d7ff8fc4363222e8"
x-amz-version-id: UU.F5jvoumAjQChriwTQHbisCFw_OInU
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 01 Feb 2023 16:07:54 GMT
via: 1.1 varnish
x-served-by: cache-bma1659-BMA
x-cache: HIT
x-cache-hits: 2181
x-timer: S1675267675.521009,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 18216
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/66325/domain/rindegastos.com/token
200 OK 533 B URL HTTP/2 cdn.linkedin.oribi.io/partner/66325/domain/rindegastos.com/token
IP
Hash 690a89ff2745a0bbd7c0eb5b8f21fee8
fdd96a15ec6b40f0dcdbbf3135f8b75c4134b1e4
1534ed34d28c582dc6099589514be254903310afe550fd7c690426c8ec007261
GET /partner/66325/domain/rindegastos.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Wed, 01 Feb 2023 13:18:34 GMT
access-control-allow-origin: *
cache-control: public, max-age=19168
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U50nMCHc7So8ZrXW4FFW89h0ZdJAp5UN11GJGnSKp0lfsdpjqncPVw==
age: 10160
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e0bc98d03057dabba1334b62bea0975b
b358a8123908fe4b1c94a1273cac45c4e23b212e
10ef320ba825ca0e17d039b66fd2f321f4d2c687a8734d226fa25e9b45e109d9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1675267696416&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tm=gtmv2
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1675267696416&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tm=gtmv2
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=66325&time=1675267696416&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tm=gtmv2 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1675267696416%26url%3Dhttps%253A%252F%252Fwww.rindegastos.com%252Fredirect%26tm%3Dgtmv2%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQKvkSe9PQ7NngAAAYYNvBGF0PRTze29qj4vledOvFcSuXbfOkUq6Zio2WeDvFKE9VD9J3jXYWzeiw; Max-Age=2592000; Expires=Fri, 03 Mar 2023 16:07:54 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQJ4MJdUAz449QAAAYYNvBGFkkpM0sntn67OGe0BTjiOekXiWgg5uQO3buzoQr9sT7aWsk9xo23qvexYbUTx7A; Max-Age=2592000; Expires=Fri, 03 Mar 2023 16:07:54 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&87d34a18-7184-4e25-8dbe-45c798820dd8"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 01-Feb-2024 16:07:54 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2453:u=1:x=1:i=1675267674:t=1675354074:v=2:sig=AQHOgXAGAzvQRDav08TBAuglAQP3Yg38"; Expires=Thu, 02 Feb 2023 16:07:54 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXzpaakVLNoIoWBTAToDg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 570458AA52144C56A031AA7FA72A9BAD Ref B: OSL30EDGE0212 Ref C: 2023-02-01T16:07:54Z
date: Wed, 01 Feb 2023 16:07:54 GMT
content-length: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13608
Expires: Wed, 01 Feb 2023 19:54:42 GMT
Date: Wed, 01 Feb 2023 16:07:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13608
Expires: Wed, 01 Feb 2023 19:54:42 GMT
Date: Wed, 01 Feb 2023 16:07:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13608
Expires: Wed, 01 Feb 2023 19:54:42 GMT
Date: Wed, 01 Feb 2023 16:07:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13608
Expires: Wed, 01 Feb 2023 19:54:42 GMT
Date: Wed, 01 Feb 2023 16:07:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13608
Expires: Wed, 01 Feb 2023 19:54:42 GMT
Date: Wed, 01 Feb 2023 16:07:54 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 27e95b7912edc909d6b031e36fe83534
eb27fae0bb17dbe0929a620002195233ef50c1d0
b32e7e1a2eee367c5bf9e99bcb38f4c74c4e9e7bdfe7fb0f8f2a657060c0624c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8597
x-amzn-requestid: e7bf4ac9-d86d-4ee9-9e10-8a42e5dfe2c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcRaNEW4IAMFatA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4c90d-7731312f630b00ba028836ca;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 07:04:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z3ZJ7bq6LuJd-9I9D22VIs0avctNGVDKnYmt-fxevCheQibivmUomQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 12:57:00 GMT
age: 11454
etag: "eb27fae0bb17dbe0929a620002195233ef50c1d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/66325/domain/rindegastos.com/token
200 OK 533 B URL HTTP/2 cdn.linkedin.oribi.io/partner/66325/domain/rindegastos.com/token
IP
Hash 12adb6ef76c999bb18e5bc3650eed6e7
d5a8a8206526a2084fc324b7dcadd1e2af3642a3
315343c18ea3082330f2be9881c59c75b12db7d3430276e4512962811ef08d82
GET /partner/66325/domain/rindegastos.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Wed, 01 Feb 2023 13:18:34 GMT
access-control-allow-origin: *
cache-control: public, max-age=19168
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qhBnlxqnIGHDFeDoXKgghDrM1OxMjPvq4lyjKpHW4fG95smqHpferQ==
age: 10160
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 02:29:58 GMT
age: 49076
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65c02d8a1b0d6a210cb2a649c5c67469
027dbc7a104c922904f067ed15d696c363c11774
89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10997
x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj30FX7IAMFa5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _xCzARAxn6PB9wrQAL98hWvnUxQOocZFqMoS2l_CoIzOJC18bXQuSQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:53:32 GMT
age: 65662
etag: "027dbc7a104c922904f067ed15d696c363c11774"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4bb3a6fba496d54cdbbccaf2b9600386
8e30002699e9fbf2047f9ac11a36d2175fc9c591
927bf3a04b011b4e3bc8d8772a3d5813507f7f523312d43627767b64615562f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15857
x-amzn-requestid: cfe36b9d-34f6-4f3f-896e-e70ec45c4a04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2JGGWoAMFSLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf3-0dd68dd778b9aba268a129b0;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: pU_436f27nMZKPxZZWqZekERHFTvcG5NT5p_CYEXHRPtIWjDtSA-uA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:27:41 GMT
age: 31213
etag: "8e30002699e9fbf2047f9ac11a36d2175fc9c591"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2998f7f50ac0eec931c348e8a0fb0c60
f5e411cda74cb7fb4a662f4787e9543b9749c8b5
0c81413a819e379212bf757b1c9469415aec2ac8fdf47f94ff23c420a1da20e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5736
x-amzn-requestid: 895ee89b-8d2e-42f9-a392-466557f8a0d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffEtEGk_oAMFYPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e7ed-026a1b0d79dc7eb572317bd2;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:28:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4yxwz2MFTdpb8I56VVbFU2Zz0qG_uHcYc3aDtn6boQPjhw7UFLLnYw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 10:37:09 GMT
age: 19845
etag: "f5e411cda74cb7fb4a662f4787e9543b9749c8b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3c83dcdb618756ebbfeb69a8bff6d38c
5f909182ab6847690e7ebd100e3f0d2798e36192
2e29d0747fb973908228501178465ac09f6553ef8e50dd70ee617f3379eb733c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7049
x-amzn-requestid: bc6522f2-eb6b-4e59-9912-0c03d145f021
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk31LGE2IAMF8rw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839ba-67477ed1260c27f67e28043d;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q_aVbWJKMbX1_bjggzbdnWbgmfooGvXj76t55QGGXRr_y6ZgW2gctw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 12:23:45 GMT
age: 13449
etag: "5f909182ab6847690e7ebd100e3f0d2798e36192"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=137915846834106&ev=PageView&dl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&rl=&if=false&ts=1675267696756&sw=1280&sh=1024&v=2.9.95&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1675267696756.1520909807&it=1675267696510&coo=false&tm=1&rqm=GET
200 OK 110 kB URL HTTP/2 www.facebook.com/tr/?id=137915846834106&ev=PageView&dl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&rl=&if=false&ts=1675267696756&sw=1280&sh=1024&v=2.9.95&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1675267696756.1520909807&it=1675267696510&coo=false&tm=1&rqm=GET
IP
File type gzip compressed data, from Unix\012- data
Size 110 kB (110199 bytes)
Hash 6c08c78bca4e721443eddeb44faf81c8
eba93705b90d9955ef4331c7ff5e431bc69ff154
e816b81ab091325ec37b0c9183e3e6b08ed83fbbb4b1793c919e961e059667f7
GET /tr/?id=137915846834106&ev=PageView&dl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&rl=&if=false&ts=1675267696756&sw=1280&sh=1024&v=2.9.95&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1675267696756.1520909807&it=1675267696510&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 01 Feb 2023 16:07:54 GMT
X-Firefox-Spdy: h2
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1675267696416%26url%3Dhttps%253A%252F%252Fwww.rindegastos.com%252Fredirect%26tm%3Dgtmv2%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1675267696416%26url%3Dhttps%253A%252F%252Fwww.rindegastos.com%252Fredirect%26tm%3Dgtmv2%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1675267696416%26url%3Dhttps%253A%252F%252Fwww.rindegastos.com%252Fredirect%26tm%3Dgtmv2%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rindegastos.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1675267696416&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tm=gtmv2&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&0d480563-8b26-4a2a-8e70-74a6328bcc1a"; Domain=.linkedin.com; Expires=Thu, 01-Feb-2024 16:07:54 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20230201160754cd1fc470-8676-4ccd-899d-9ed8503e6de5AQG8Js8UfYIUNtgwFPUadyRTXqzx-GL5"; Domain=.www.linkedin.com; Expires=Thu, 01-Feb-2024 16:07:54 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzUyNjc2NzQ7MjswMjG4IbuVefhfRkJUecijb7oKEyUopmR/PEhEL4RKHI+z+A==; Domain=.linkedin.com; Expires=Mon, 31 Jul 2023 16:07:54 GMT; Path=/; Secure; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2453:u=1:x=1:i=1675267674:t=1675354074:v=2:sig=AQHOgXAGAzvQRDav08TBAuglAQP3Yg38"; Expires=Thu, 02 Feb 2023 16:07:54 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXzpaam7S9fUctORBZfBA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 71A240B2D7D945C186455D0271F736E1 Ref B: OSL30EDGE0212 Ref C: 2023-02-01T16:07:54Z
date: Wed, 01 Feb 2023 16:07:54 GMT
content-length: 0
X-Firefox-Spdy: h2
bam-cell.nr-data.net/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=763&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e&be=442&fe=661&dc=593&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1675267695921,%22n%22:0,%22f%22:0,%22dn%22:0,%22dne%22:0,%22c%22:0,%22s%22:0,%22ce%22:0,%22rq%22:43,%22rp%22:197,%22rpe%22:200,%22dl%22:216,%22di%22:569,%22ds%22:593,%22de%22:594,%22dc%22:659,%22l%22:659,%22le%22:664%7D,%22navigation%22:%7B%7D%7D&ja=%7B%22nrSnippetVersion%22:%221198%22,%22environment%22:%22prod%22,%22deployed%22:true,%22hublet%22:%22na1%22,%22userAgentRaw%22:%22Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0%22,%22supportsPromiseRejectionEvent%22:true,%22hsOlderBrowserVersion%22:false,%22cpuCores%22:16,%22conditionalPolyfillsInstalled%22:false,%22portalId%22:3276114,%22package%22:%22conversations-visitor-ui%22,%22packageVersion%22:%221.14434%22,%22template%22:%22visitor-index.html.tsx%22,%22user-online%22:true,%22visibility%22:%22visible%22,%22currentVisibility%22:%22visible%22,%22isEmbeddedInProduct%22:%22false%22,%22reactRhumbVersion%22:%221.8614%22,%22reaganVersion%22:%22react-rhumb%22,%22route%22:%22/%22%7D&jsonp=NREUM.setToken
200 OK 72 B URL HTTP/1.1 bam-cell.nr-data.net/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=763&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e&be=442&fe=661&dc=593&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1675267695921,%22n%22:0,%22f%22:0,%22dn%22:0,%22dne%22:0,%22c%22:0,%22s%22:0,%22ce%22:0,%22rq%22:43,%22rp%22:197,%22rpe%22:200,%22dl%22:216,%22di%22:569,%22ds%22:593,%22de%22:594,%22dc%22:659,%22l%22:659,%22le%22:664%7D,%22navigation%22:%7B%7D%7D&ja=%7B%22nrSnippetVersion%22:%221198%22,%22environment%22:%22prod%22,%22deployed%22:true,%22hublet%22:%22na1%22,%22userAgentRaw%22:%22Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0%22,%22supportsPromiseRejectionEvent%22:true,%22hsOlderBrowserVersion%22:false,%22cpuCores%22:16,%22conditionalPolyfillsInstalled%22:false,%22portalId%22:3276114,%22package%22:%22conversations-visitor-ui%22,%22packageVersion%22:%221.14434%22,%22template%22:%22visitor-index.html.tsx%22,%22user-online%22:true,%22visibility%22:%22visible%22,%22currentVisibility%22:%22visible%22,%22isEmbeddedInProduct%22:%22false%22,%22reactRhumbVersion%22:%221.8614%22,%22reaganVersion%22:%22react-rhumb%22,%22route%22:%22/%22%7D&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash 107d93e382e2c9b00fbf9fb0edc65d86
77e750e3ebf9706f4f6dd253785602d70be17c6c
a1ee50b689ea433a0acdccbf4ee4629e9ea3f9c4bcdd21effb334359a2f9e937
GET /1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=763&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e&be=442&fe=661&dc=593&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1675267695921,%22n%22:0,%22f%22:0,%22dn%22:0,%22dne%22:0,%22c%22:0,%22s%22:0,%22ce%22:0,%22rq%22:43,%22rp%22:197,%22rpe%22:200,%22dl%22:216,%22di%22:569,%22ds%22:593,%22de%22:594,%22dc%22:659,%22l%22:659,%22le%22:664%7D,%22navigation%22:%7B%7D%7D&ja=%7B%22nrSnippetVersion%22:%221198%22,%22environment%22:%22prod%22,%22deployed%22:true,%22hublet%22:%22na1%22,%22userAgentRaw%22:%22Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0%22,%22supportsPromiseRejectionEvent%22:true,%22hsOlderBrowserVersion%22:false,%22cpuCores%22:16,%22conditionalPolyfillsInstalled%22:false,%22portalId%22:3276114,%22package%22:%22conversations-visitor-ui%22,%22packageVersion%22:%221.14434%22,%22template%22:%22visitor-index.html.tsx%22,%22user-online%22:true,%22visibility%22:%22visible%22,%22currentVisibility%22:%22visible%22,%22isEmbeddedInProduct%22:%22false%22,%22reactRhumbVersion%22:%221.8614%22,%22reaganVersion%22:%22react-rhumb%22,%22route%22:%22/%22%7D&jsonp=NREUM.setToken HTTP/1.1
Host: bam-cell.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:07:54 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 792bf156bb69b4ee-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=d2452dc7f0ed90fb; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T%2FiNfUgKxg9miqlcQR3Y%2FzfurNpgKXkgGbPs7wuglRFwjRwfxn%2FJUi97c1WDXUCc70k8HVXcGF%2F6Jg0ewABh6Ir%2Bch0hEYCJ42qGzcyf88tyLk9U4yZfmRSo57E61FbEJOh6LVK0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
region1.analytics.google.com/g/collect?v=2&tid=G-0CNWYJZDVN>m=2oe1u0&_p=1387429624&_gaz=1&cid=963110725.1675267696&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675267696&sct=1&seg=0&dl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&dt=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 374 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-0CNWYJZDVN>m=2oe1u0&_p=1387429624&_gaz=1&cid=963110725.1675267696&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675267696&sct=1&seg=0&dl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&dt=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash cd66e947185b88f2b2e9690ad6b879d5
764469ac4da37365b3510c97628d587d28328aae
583db0f5604a6a5d5f0ad3ca632184eb0f77b3e2ce3fa26a7fdbe928c94098f2
POST /g/collect?v=2&tid=G-0CNWYJZDVN>m=2oe1u0&_p=1387429624&_gaz=1&cid=963110725.1675267696&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675267696&sct=1&seg=0&dl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&dt=RindeGastos%20-%20La%20soluci%C3%B3n%20para%20tus%20rendiciones%20de%20gastos&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.rindegastos.com
date: Wed, 01 Feb 2023 16:07:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/g/collect?v=2&tid=G-0CNWYJZDVN&cid=963110725.1675267696>m=2oe1u0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-0CNWYJZDVN&cid=963110725.1675267696>m=2oe1u0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-0CNWYJZDVN&cid=963110725.1675267696>m=2oe1u0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.rindegastos.com
date: Wed, 01 Feb 2023 16:07:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 592559549cb91753ccc8dc2c0e1c6a65
19351db7e1140c53df5aedb02e0482cf228f62ca
bfa9b8857d4d6702d9c9c198260ce722d6d7c84b372eb7246caeea161b4f658d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BFA9B8857D4D6702D9C9C198260CE722D6D7C84B372EB7246CAEEA161B4F658D"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3647
Expires: Wed, 01 Feb 2023 17:08:41 GMT
Date: Wed, 01 Feb 2023 16:07:54 GMT
Connection: keep-alive
px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1675267696416&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tm=gtmv2&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1675267696416&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tm=gtmv2&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=66325&time=1675267696416&url=https%3A%2F%2Fwww.rindegastos.com%2Fredirect&tm=gtmv2&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.rindegastos.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&ad2d2a78-9e28-4250-87f3-dd3d25bb7c63"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 01-Feb-2024 16:07:54 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2480:u=1:x=1:i=1675267674:t=1675354074:v=2:sig=AQHH8iDGTuci2YIF6Et4cMNWsvUF1dtr"; Expires=Thu, 02 Feb 2023 16:07:54 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXzpaaqgs1ELtov3zTntg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 40B8AF11590843BEA3C52658B8C2A8E9 Ref B: OSL30EDGE0212 Ref C: 2023-02-01T16:07:54Z
date: Wed, 01 Feb 2023 16:07:54 GMT
content-length: 0
X-Firefox-Spdy: h2
bam-cell.nr-data.net/ins/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=1036&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e
204 No Content 0 B URL HTTP/1.1 bam-cell.nr-data.net/ins/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=1036&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ins/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=1036&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e HTTP/1.1
Host: bam-cell.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 2547
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Wed, 01 Feb 2023 16:07:54 GMT
Connection: keep-alive
CF-Ray: 792bf157ccc2b4ee-OSL
Access-Control-Allow-Origin: https://app.hubspot.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qdn5K1Zy5esA%2FqAazg4vd8OVWJ2zlrUjja%2FqfQv6k1YnIB3nrv1IfHNf9PF%2B5Txuy4vY6vQe%2FVip%2BvGBDTeuF6A6u5fOthDSTfgmJsKbe72p9PyVObgHoItPDYpw%2Fpbgd8WVoTuU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
bam-cell.nr-data.net/events/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=1042&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e
200 OK 24 B URL HTTP/1.1 bam-cell.nr-data.net/events/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=1042&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash bc32ed98d624acb4008f986349a20d26
2d3df8c11d2168ce2c27e0937421d11d85016361
0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=1042&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e HTTP/1.1
Host: bam-cell.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 1060
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:07:54 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 792bf157ddbeb503-OSL
Access-Control-Allow-Origin: https://app.hubspot.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kg5YejJ3z4O4MlF70l9wcEAK7zsI1CsJKHiCn%2FnHgk2ajYxjudZdyoG4fTrNc%2F935qC%2BmYyPpCXzrofhoMu%2FkUhmE1OONGmqYWTDzg%2Fs4hEZaj5ng%2FGLJHskvV5rXiTcJZSwOtia"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 592559549cb91753ccc8dc2c0e1c6a65
19351db7e1140c53df5aedb02e0482cf228f62ca
bfa9b8857d4d6702d9c9c198260ce722d6d7c84b372eb7246caeea161b4f658d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BFA9B8857D4D6702D9C9C198260CE722D6D7C84B372EB7246CAEEA161B4F658D"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3646
Expires: Wed, 01 Feb 2023 17:08:41 GMT
Date: Wed, 01 Feb 2023 16:07:55 GMT
Connection: keep-alive
forms.hubspot.com/lead-flows-config/v1/config/json?portalId=3276114&utk=3f70ce331619e76fc8e3917acff71d04&__hstc=139960876.3f70ce331619e76fc8e3917acff71d04.1675267697081.1675267697081.1675267697081.1&__hssc=139960876.1.1675267697081¤tUrl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect
200 OK 230 B URL HTTP/2 forms.hubspot.com/lead-flows-config/v1/config/json?portalId=3276114&utk=3f70ce331619e76fc8e3917acff71d04&__hstc=139960876.3f70ce331619e76fc8e3917acff71d04.1675267697081.1675267697081.1675267697081.1&__hssc=139960876.1.1675267697081¤tUrl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 56d686bc9f94b011036d199a4ccc6d7f
7cb5bb32a18119c6ce248d93fcb096a0ee1fecb3
4b4128f815840aca3ec15ec7dabc5ac3fbdf43ed5b749dd549f200b207580abd
GET /lead-flows-config/v1/config/json?portalId=3276114&utk=3f70ce331619e76fc8e3917acff71d04&__hstc=139960876.3f70ce331619e76fc8e3917acff71d04.1675267697081.1675267697081.1675267697081.1&__hssc=139960876.1.1675267697081¤tUrl=https%3A%2F%2Fwww.rindegastos.com%2Fredirect HTTP/1.1
Host: forms.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:55 GMT
content-type: application/json;charset=utf-8
vary: origin
x-hubspot-correlation-id: 24e632ad-94ab-4235-a6e5-b4a55bfc43ca
access-control-allow-credentials: false
access-control-allow-origin: https://www.rindegastos.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Accept, Accept-Charset, Accept-Encoding, Accept-Language, Content-Type, Host, Origin, Referer, User-Agent
access-control-max-age: 180
cache-control: max-age=0, no-cache, no-store
x-robots-tag: none
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=p560XL33371AV2zGKavHNeFlrz3vuig6pG3ZBxGvE2E-1675267675-0-ATvklRhBjAbWBlg3NWDGlJnAc2aaMMeIgSXKSfrSFPqJoAVbVukl5GzZJ3KaROAWRhSy8lYlkwSas5PyLP57w3o=; path=/; expires=Wed, 01-Feb-23 16:37:55 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j3dS49xU0IUmjQgX%2B3eZv6Fi3u9G0GVYlXP8WuwVT9o1NYKZqmRrADhtEiRPZsmTUG5htoZ4qh7o%2BLr44wACFZjN05IAxgt8KufmyDm%2Bx1%2FV2%2BkHRm2HPEmY7oSdeAs9YRhB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 792bf1589a53b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9ba686f4ee5897ef055f55ec10a834fd
4bf8b8ee4a764f4ea9d04ca3d80ef061710ece36
b99922c2a8d63b23f938d27260203574e5b9f6d9f075962719ede9bf2d3ce14f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=136749
Date: Wed, 01 Feb 2023 16:07:55 GMT
Etag: "63da0188-1d7"
Expires: Fri, 03 Feb 2023 06:07:04 GMT
Last-Modified: Wed, 01 Feb 2023 06:07:04 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nMyq7Fmv2I_9MelqcYrcTxXlfLlVmUU20_a1dUeUx1tCT0nchjGoQA==
web.rindegastos.com/document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8
200 OK 4.9 kB URL HTTP/1.1 web.rindegastos.com/document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2474)
Hash bc7d8dcec09d8170d4245871d2f2a564
4550d57a1dd91c4f0787c2d4e742d03f6043ebb8
67aa7ceef686d2662766664f671448d68acfddf305a3ad8a4f095ead318be6b9
GET /document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8 HTTP/1.1
Host: web.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Cookie: _gcl_au=1.1.1611435025.1675267696; _ga_0CNWYJZDVN=GS1.1.1675267696.1.0.1675267696.60.0.0; _ga=GA1.2.963110725.1675267696; _gid=GA1.2.950955467.1675267697; _gat_UA-61358101-1=1; _fbp=fb.1.1675267696756.1520909807; messagesUtk=0da879906a7140ebbc8792099f17732e; __hstc=139960876.3f70ce331619e76fc8e3917acff71d04.1675267697081.1675267697081.1675267697081.1; hubspotutk=3f70ce331619e76fc8e3917acff71d04; __hssrc=1; __hssc=139960876.1.1675267697081
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:07:55 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4886
Connection: keep-alive
Set-Cookie: AWSALB=FAWH5uWCbtni8dFFIfZ6wnGVtmlGdfM6YCheO119n2HQnslG0pheGh6fzARL5zHpebRZTCOK9NTgTFBkL++prPv8OboiLR2ptn6Ctu/RL9Ci75QPzKwfBUUNxwZn; Expires=Wed, 08 Feb 2023 16:07:55 GMT; Path=/
AWSALBCORS=FAWH5uWCbtni8dFFIfZ6wnGVtmlGdfM6YCheO119n2HQnslG0pheGh6fzARL5zHpebRZTCOK9NTgTFBkL++prPv8OboiLR2ptn6Ctu/RL9Ci75QPzKwfBUUNxwZn; Expires=Wed, 08 Feb 2023 16:07:55 GMT; Path=/; SameSite=None; Secure
YUR5aYTheba=v6ooa5rism8ggsiu3obki36id4; expires=Tue, 21-Feb-2023 16:07:55 GMT; Max-Age=1728000; path=/
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de49044c9365e16fec3a6d361cb94728
2b7b69c16de6fda1ae5206f92fe781ee07bd182a
6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 25d633f6e48480df2f415de854796f24
788068106f9ea614da42063466e41aca7b4db0bd
9005058897161edc4d030425427af3617ea16af1f8611a8caa0260e6c50debd0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5015
Cache-Control: max-age=123384
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:56 GMT
Etag: "63d9b9bd-117"
Expires: Fri, 03 Feb 2023 02:24:20 GMT
Last-Modified: Wed, 01 Feb 2023 01:00:45 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de49044c9365e16fec3a6d361cb94728
2b7b69c16de6fda1ae5206f92fe781ee07bd182a
6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ppstatic.s3.amazonaws.com/expenses/css/main54.css?v=20220224
200 OK 77 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/css/main54.css?v=20220224
IP
File type ASCII text, with very long lines (573), with CRLF line terminators
Hash 50104cb9e1edd52d0e13922c8ad67ab0
d96250df8268bd261fe8e04e214234aab2db09ae
f9c3afd49814b03a5ab682e5838794e9167a70746e5ee3e449599c2998459709
GET /expenses/css/main54.css?v=20220224 HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: MfzEPBBLo9bwk5P0Ek4DL1wZhVW0c3dVGHXzuXV6n2buCVnpM0dp0SZ1gRPiK0XlKv+FlgawmWk=
x-amz-request-id: 8KEAD5ZS7R0PR1RH
Date: Wed, 01 Feb 2023 16:07:56 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 24 Feb 2022 14:13:35 GMT
ETag: "50104cb9e1edd52d0e13922c8ad67ab0"
x-amz-version-id: ET_beOaJd46CSp8w9tqpsY3etnErtYCi
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 76682
ppstatic.s3.amazonaws.com/expenses/css/datePicker.css
200 OK 3.2 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/css/datePicker.css
IP
File type ASCII text, with CRLF line terminators
Hash caccb9800bbdc8c1e2729cb538c4cd6d
7e575859f7337b92d4207b6579b94c054afc4cdb
b06b74b85a1c8b44125433ea02b536d5a190cd0406a510f4650e24df3690880b
GET /expenses/css/datePicker.css HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 1vQxwqYeqi8fQLz14N8pQibl3PvWnpMTNCpLIhKdy8fuONGBAFqqQZPjZJ8P5LK2DfqM1rlRmEs=
x-amz-request-id: RTGRZGRHJ85Y6XHM
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Wed, 05 Apr 2017 18:28:06 GMT
ETag: "caccb9800bbdc8c1e2729cb538c4cd6d"
x-amz-version-id: 1jmC3lPCO39gT4Q.VzAFHjQk6MXHBJUN
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 3180
ppstatic.s3.amazonaws.com/expenses/css/tooltipster.bundle.min.css
200 OK 6.5 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/css/tooltipster.bundle.min.css
IP
File type ASCII text, with very long lines (6495), with no line terminators
Hash b15ef24270546e5fe896d3ea387ea134
63910103e8cc5e4bdeb2c289cfbf41f89966ea5b
41ce2509fa9959868717986010e16b6334885fd46bc64d0d3c745a73ed3c41e4
GET /expenses/css/tooltipster.bundle.min.css HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: IdBWhtS7pkjnx1RwuXsVJ69dq5rkVGKfecXmMkuceRld9vrWKd7biYu8Nd6GWbPknm7/K1rYmrI=
x-amz-request-id: RTGHB8PHPN4TZTNE
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Wed, 05 Apr 2017 18:28:05 GMT
ETag: "b15ef24270546e5fe896d3ea387ea134"
x-amz-version-id: Ue0uZuGQcSHE1GxhyUC9_LvTvFo5Ze3q
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 6495
ppstatic.s3.amazonaws.com/expenses/css/tooltipster-sideTip-light.min.css
200 OK 1.8 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/css/tooltipster-sideTip-light.min.css
IP
File type ASCII text, with very long lines (1799), with no line terminators
Hash 69a5477b4beb94b3accb2f5d95e1a42a
b66fa6a4df5d7da4b6bc9fc66d6001cef748e3c5
37a741f36d0ce77a5c3b191d2c4151630fd5643f18fae8acfb2b68699aa49b3f
GET /expenses/css/tooltipster-sideTip-light.min.css HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: SwLySlKfqZRLnM9VZoqvw4qatcg7hFfZ7BUXmfiqJrI8onE2XmgLMzz9yJifjM0OfosTGayRnuY=
x-amz-request-id: RTGQB88AB5549XFY
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Wed, 05 Apr 2017 18:28:04 GMT
ETag: "69a5477b4beb94b3accb2f5d95e1a42a"
x-amz-version-id: CToi1nIQnjkQG43CSdIRPudk2XhwsiWQ
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 1799
ppstatic.s3.amazonaws.com/expenses/js/date.js
200 OK 12 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/date.js
IP
Hash 374ce79d1b314709ed0c44a76ff7aba6
0d5ebdb756cb488ee6dfec452fc1cd8803a4ef8b
5f44b926675e71ca114904c21159edabb035f508976986931f9f9762b483a564
GET /expenses/js/date.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: C7KkhDKZdI01n9Myzr9Sv9IOzs4DQWroX6VZ56rE8UpHKdk8Cw1FMqr5CALTqEOThsR+NyyERmQ=
x-amz-request-id: RTGK2518DD59YSVZ
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Tue, 11 Aug 2015 14:45:22 GMT
ETag: "374ce79d1b314709ed0c44a76ff7aba6"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 12278
ppstatic.s3.amazonaws.com/expenses/js/formato30.js?v=20220224
200 OK 13 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/formato30.js?v=20220224
IP
File type Algol 68 source text\012- Pascal source, ASCII text
Hash eb46238c034d15ea34b6e7e098d8a9e4
16d8653b54fbe7b0f3c897857902bcde19a4a308
926acb7dade2a5192733f5c2ec32e7871c3591f364b436ace4181bd01b8b65ba
GET /expenses/js/formato30.js?v=20220224 HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: axxB2nJyJpjFLM6QxPyQQwgLzdOojQYjyud1RKbpwfIN8rxhG2oGxjd8MHFwp0PeKhTmALMnDfo=
x-amz-request-id: RTGWKV0WF1WHXSNA
Date: Wed, 01 Feb 2023 16:07:57 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Fri, 29 Jun 2018 16:17:57 GMT
ETag: "eb46238c034d15ea34b6e7e098d8a9e4"
x-amz-version-id: IR4f9O.zU.P1OSLzYzkcP4.Ai6BV3VhJ
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 13255
ppstatic.s3.amazonaws.com/expenses/js/validaciones1.js?v=20220224
200 OK 12 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/validaciones1.js?v=20220224
IP
File type Unicode text, UTF-8 text, with very long lines (959)
Hash 9615bf8ab37b1bc3e48054d612090dd0
8028055ebc7894f70c423be64f2b920015ea58f7
0244489e3c9dc4bb2ad94802ea990d00ae1ccb9b386c3a9acbf86653ea8b80ed
GET /expenses/js/validaciones1.js?v=20220224 HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: Cj0Ap2ggOQ8uurchX1wmJJSYMr+WIY2eAW2t3YervZuBRj1y3oE3Cbd0ON0V9+F2qiy4WYqGD40=
x-amz-request-id: RTGRD6JSZMWRB257
Date: Wed, 01 Feb 2023 16:07:57 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Fri, 29 Jun 2018 16:17:58 GMT
ETag: "9615bf8ab37b1bc3e48054d612090dd0"
x-amz-version-id: 8_lnZFQiJDQwMqbpZzaxKfUb7KUsv5PV
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 12361
ppstatic.s3.amazonaws.com/expenses/js/tooltipster.bundle.min.js
200 OK 39 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/tooltipster.bundle.min.js
IP
File type ASCII text, with very long lines (32111)
Hash 62adf085c6b904a8425c58015cf476d3
d6027daae195119fd76ca4e53a4576fec3501880
736c0c08baa411f097cdb53c270b645f636cc74d9f3c0d9f31c2413dba8e5f99
GET /expenses/js/tooltipster.bundle.min.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: OxfeY9yAy2G+9U2qMLF14WpD68F0ZpKYTNcABuSZ0bwq+sO6EXPTxqX+4/mzkcMmVho1PwubXOo=
x-amz-request-id: RTGPAH5T7A6B44GZ
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Wed, 05 Apr 2017 18:29:22 GMT
ETag: "62adf085c6b904a8425c58015cf476d3"
x-amz-version-id: ALb3CfmUDqru3ydrMPJw9usP2XFCpSA4
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 39392
ppstatic.s3.amazonaws.com/expenses/js/jquery.datePicker.js
200 OK 44 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/jquery.datePicker.js
IP
File type assembler source, Unicode text, UTF-8 text, with very long lines (477), with CRLF line terminators
Hash b0c26cee7599d645540dc356b421d9f7
96fb8befcf172da3c53e56b986296b6a1dba1443
bee659daf21c4ce2125626060f7a8defd277622284628db71686b9b41b929cc4
GET /expenses/js/jquery.datePicker.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 5GwNqodoBIi+wyFBOgmRIjg218p5kn5CoVY683E8UMXj2RWilmz4/5G9x/zHP+DIi+wSOMeaPxc=
x-amz-request-id: RTGPRPFN5A7FXDSA
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Tue, 11 Aug 2015 14:45:43 GMT
ETag: "b0c26cee7599d645540dc356b421d9f7"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 43739
ppstatic.s3.amazonaws.com/expenses/js/jquery.min.js
200 OK 86 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/jquery.min.js
IP
File type ASCII text, with very long lines (32065)
Hash bb5f9cf31421aebe289fb129d5866718
478d7ded83fbceef05b37553f778aaa4a22ee6a7
3b75fa79f5a776709c5b41245dab02a48830f3d50e317e9bcd1108b05cb8d59b
GET /expenses/js/jquery.min.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: QzDD/yuBQcCkGVKWWkaYuKX7n84GPlX1YqYywSi+Y5WtLNotvOWMz4BQckEzyGeQiQItJJvgeIQ=
x-amz-request-id: RTGXXWS1J9NATM9C
Date: Wed, 01 Feb 2023 16:07:57 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 17 May 2018 21:44:56 GMT
ETag: "bb5f9cf31421aebe289fb129d5866718"
Cache-Control: no-cache
x-amz-version-id: 6t4W9Yo4jMSIjMFraoETOfUlA9Mvw54r
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 85558
ppstatic.s3.amazonaws.com/expenses/css/jquery-ui2.css
200 OK 35 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/css/jquery-ui2.css
IP
File type ASCII text, with very long lines (2363)
Hash f6f0d76ca650be09e00268384d00dc4a
07c6fa02eec3c15e9dbae4646144afeb1b108283
34b0e967524aca9599338d8065c22f7c0b45f7981a0946b6a558de4a7ed75fb1
GET /expenses/css/jquery-ui2.css HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: jw06XOatKCXoGVjxGdH6YMxSQUnIPAHy6j1I4UAOxn0zq9lMnj8bFnuYAZsaOuYywAxnwhqz6Vw=
x-amz-request-id: RTGKQVMSGT03R8EW
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Wed, 05 Apr 2017 18:28:09 GMT
ETag: "f6f0d76ca650be09e00268384d00dc4a"
x-amz-version-id: myqnckGcx6jeIh8tJhfP99A3LsiA3BpO
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 35388
ppstatic.s3.amazonaws.com/expenses/js/gestor-archivos6.js?v=20220224
200 OK 10 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/gestor-archivos6.js?v=20220224
IP
Hash 9a9ce396838a593113305df6433d8cc2
96706158e4309297ecc54b66ce9e0fc81617604c
1b33bfc8c2369ae0e2403aebb1a91bd727ff3494561602072c23b96b5de05325
GET /expenses/js/gestor-archivos6.js?v=20220224 HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: aR7q8MfLisT/uBVKAxMtoAxtgqoezhkvkI+yLLSdCdXU164o169Wa2JwgzoCRVjC4Ngt2GF2JC0=
x-amz-request-id: RTGMJT5E2HB6BF7N
Date: Wed, 01 Feb 2023 16:07:57 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Fri, 29 Jun 2018 16:17:58 GMT
ETag: "9a9ce396838a593113305df6433d8cc2"
x-amz-version-id: MmO4iOfFWDjE7VsntMqWXOAaC.R32HKT
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 10223
ppstatic.s3.amazonaws.com/expenses/js/dropzonejs.js
200 OK 63 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/dropzonejs.js
IP
File type ASCII text, with very long lines (3291)
Hash 9904a99cba14bd9ac0f5b173ced7d0bf
b560fa3e373038a393898d53b9da3ab674e3623a
d808a4d57206818dd5cb6bc788fc77515fd830f5b20aacb6173356ba895eb4d1
GET /expenses/js/dropzonejs.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: bSTrBdoPlzKYi47ocv/ho4tZQSGUMg+ahrQgIwXiqYMjoyux/t4EytHWEB4pQVeb+RXMyLYUpoc=
x-amz-request-id: RTGGFCZ9KZV0PFHD
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Tue, 11 Aug 2015 14:45:26 GMT
ETag: "9904a99cba14bd9ac0f5b173ced7d0bf"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 62986
bam-cell.nr-data.net/jserrors/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=2065&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e
200 OK 24 B URL HTTP/1.1 bam-cell.nr-data.net/jserrors/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=2065&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash bc32ed98d624acb4008f986349a20d26
2d3df8c11d2168ce2c27e0937421d11d85016361
0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /jserrors/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=2065&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e HTTP/1.1
Host: bam-cell.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 963
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:07:56 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 792bf1624e5db503-OSL
Access-Control-Allow-Origin: https://app.hubspot.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=we3qu4LSPo3a%2B0WaasgCDCfl1efAjjAgODfiIy5i%2FKEPlPHign87%2B3o6yqxdxISjBvtGw4GPF%2BYGF72Lo5nywMJxAP%2ByBFGGJLhqL96gYc%2B3MfCR0tFQ%2FHsfRLMRJMniMMPe8Jby"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
bam-cell.nr-data.net/events/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=2064&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e
200 OK 24 B URL HTTP/1.1 bam-cell.nr-data.net/events/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=2064&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash bc32ed98d624acb4008f986349a20d26
2d3df8c11d2168ce2c27e0937421d11d85016361
0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/f9d051f404?a=205242107&sa=1&v=1216.487a282&t=Unnamed%20Transaction&rst=2064&ck=1&ref=https://app.hubspot.com/conversations-visitor/3276114/threads/utk/0da879906a7140ebbc8792099f17732e HTTP/1.1
Host: bam-cell.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1411
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 16:07:56 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 792bf1624ca1b4ee-OSL
Access-Control-Allow-Origin: https://app.hubspot.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tPjJiC3teciNlz5mjI8aNnj2Bs3WSajTGDk23DbsheoH3azgyFUM5UDyTb%2F0N2M5dFNasqnkTAbErMWZPo%2F09CL4jf5gQnFsRDZ7EPEIe6tKvsyc8M41u3OraV%2BNkYfUqmMV7WaR"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
ppstatic.s3.amazonaws.com/expenses/js/ajaxupload.js
200 OK 14 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/ajaxupload.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text
Hash 6e1afbb205e505fe40f5644aa608d278
4417c0ae2e753594924f7a332f4f2ade8070330b
1099979aebc07d7ba8c7b02da95afd733083d266cf672329a284cbf7087ebb10
GET /expenses/js/ajaxupload.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 9cJucMkigFMbsMXhPyUFHb+h6ykLA1ybYcyXaRB4HpvHZRc6nI6NYHm/fkC5uifpNp6PidLFB8Q=
x-amz-request-id: RTGXFVDVQQGZK90Q
Date: Wed, 01 Feb 2023 16:07:57 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 17 May 2018 21:44:53 GMT
ETag: "6e1afbb205e505fe40f5644aa608d278"
Cache-Control: no-cache
x-amz-version-id: qCo0lWot.1MaQ.7bupKELNTNhk56.Nn1
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 13965
ppstatic.s3.amazonaws.com/expenses/js/moment.js
200 OK 104 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/moment.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text
Size 104 kB (104409 bytes)
Hash cd9f0b2d1b3e08b28f14cbb6d75217ee
65395e3e55adc5e2953e03c8378faa5cd0e324de
330b77f348bc97849800b9f3af7d1fe52fb6e145525ad494149d7a202c0c3cbf
GET /expenses/js/moment.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 5fM9rbRCMaaPCmLg2dskOutHJe54T2ijrmKsAadHbCs+BjO5hePKcKaOS5vv8CYt5ZlDLKKOXJM=
x-amz-request-id: RTGGF7WQ0ADPPYW1
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Wed, 26 Aug 2015 13:26:05 GMT
ETag: "cd9f0b2d1b3e08b28f14cbb6d75217ee"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 104409
ppstatic.s3.amazonaws.com/expenses/js/highcharts/highcharts.js
200 OK 154 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/highcharts/highcharts.js
IP
File type Unicode text, UTF-8 text, with very long lines (596)
Size 154 kB (153909 bytes)
Hash bdd06f45e34c33dfaaac249f3eb50040
9305510952cfeb4ed26cc43965d070afadc1e021
af5e4f327b79424352a42bf43df71e6a2f52d6f8948b82d6a42b4c2e97f7bfea
GET /expenses/js/highcharts/highcharts.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: cLgdB3QCXVlqUUxlErLAHkRYR5PRDztA5YCTpBHT7a92+k+YlMyocwEj0qD5GXmiSQgpnKvBpss=
x-amz-request-id: RTGREZT73FNJBDTZ
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Thu, 16 Oct 2014 03:29:55 GMT
ETag: "bdd06f45e34c33dfaaac249f3eb50040"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 153909
ppstatic.s3.amazonaws.com/expenses/js/jquery.gdocsviewer2.min.js
200 OK 748 B URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/jquery.gdocsviewer2.min.js
IP
File type ASCII text, with very long lines (575)
Hash 3a328a49ed19de5159e05427341cc6d3
9fdc928c44ce000307dd751e42c08ebd599fac79
038cf89078c60faed0eff6d37c3572524693655ec766c14872c66ab5b8ee1e40
GET /expenses/js/jquery.gdocsviewer2.min.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: EsyBfrbbneqzyrXH2IElP3VIbI8FZu5Xxq36yw7j7WL6UigXtMQUqHhvhuQisR+vGE6EPHHAnZA=
x-amz-request-id: RTGZ92YNNGSVVF3W
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Fri, 05 Feb 2016 12:53:56 GMT
ETag: "3a328a49ed19de5159e05427341cc6d3"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 748
ppstatic.s3.amazonaws.com/expenses/js/account50.js?v=20220224
200 OK 50 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/account50.js?v=20220224
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 344017a9838b5e78b6f3144d92eaff06
ead0e3d4f3692fbe51ae5f56e7663366d84dc95d
be089c8b39c6a09495ce979e76be499e1f5769066318844c28bc3d75a5360b9e
GET /expenses/js/account50.js?v=20220224 HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: WCLPENY81J06IosXpcLIVj+EJwp+B6hOyR5i0zDZmdgSkDVjPPNHA8Gj04AfQMVYQCAuYvOlNi0=
x-amz-request-id: RTGY09GG852FE1DP
Date: Wed, 01 Feb 2023 16:07:57 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 24 Feb 2022 14:14:17 GMT
ETag: "344017a9838b5e78b6f3144d92eaff06"
x-amz-version-id: k5Q9boB7PWEj2aoy369KbtKn9T5v0jEK
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 50096
ppstatic.s3.amazonaws.com/expenses/js/jquery.panzoom.js
200 OK 12 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/jquery.panzoom.js
IP
File type ASCII text, with very long lines (12131)
Hash 9dd3f95de028e069807a46e929345e48
134e3c3b98b0e5139dfaf2644f1c3a28e176ea8c
96e074a0f68fba607a772b6d2dda7598e3d5e75378b185465862b59a07c65f76
GET /expenses/js/jquery.panzoom.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 2yCi0AakzQEk2PTzR/TSc0rvITCJvv9k8k3YsZBXDdBCwh4mcTd74dmBIPIZduBnGtiljflwGKY=
x-amz-request-id: RTGMJHH7NTX5K988
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Tue, 11 Aug 2015 14:45:53 GMT
ETag: "9dd3f95de028e069807a46e929345e48"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 12398
ppstatic.s3.amazonaws.com/expenses/js/jquery-ui2.js
200 OK 471 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/jquery-ui2.js
IP
File type ASCII text, with very long lines (547)
Size 471 kB (470596 bytes)
Hash 04a4db2983450a2970c459ba87b4210a
3efaf11e60ea8c541b6dc26f0ef09f195732587a
0c8e8d7408611519ceda4e759ae9987834a17addc8f0028241ffed7fb0113612
GET /expenses/js/jquery-ui2.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: N++pUiDuM86FPFiKlvW60NGgsDSkOPtuq3muBOi92+1kngwXxGCR7hTXPohKQXyaTbFS1LC1eLU=
x-amz-request-id: RTGY0H6WT3BQYB9M
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Wed, 30 Sep 2015 21:05:47 GMT
ETag: "04a4db2983450a2970c459ba87b4210a"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 470596
ppstatic.s3.amazonaws.com/expenses/js/font-awesome/css/font-awesome.min.css
200 OK 29 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/font-awesome/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (28900)
Hash 4083f5d376eb849a458cc790b53ba080
fb5b49426dee7f1508500e698d1b3c6b04c8fcce
008a1d103902f15fdb1c191fcb1ce8954330e7b8de43d09abb08555ba609f420
GET /expenses/js/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: dZ7FTy/1OmGpt8E97ePI4em72PMa/WnX/Opfxl7aZlVIC4kWt4sX/2Lf1CjQVrorAlX2m9JDS/c=
x-amz-request-id: RTGTXASXPWVFV9ZX
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Wed, 05 Oct 2016 16:10:59 GMT
ETag: "4083f5d376eb849a458cc790b53ba080"
x-amz-version-id: 5_kOOOaG7DJerDKp8FxPHwxzBf3Fivtm
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 29063
ppstatic.s3.amazonaws.com/expenses/js/html2canvas.min.js
200 OK 166 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/html2canvas.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (64457)
Size 166 kB (166241 bytes)
Hash 0e52edb30e4a8b8d654d5db2a09203a1
d63ed0421a511ffb8f5907ae367c368871092a8c
e5dc6a09d90978d0f0f63aa53ea44b20dd7be7903ef9b1a831e27ad994346ec0
GET /expenses/js/html2canvas.min.js HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: DLYTYg45pp9diAbMBGcfMibahw4QRaKqMGg5N3r4mOAWtqsc4NimZnwq6Dfupmjb/fxP3YDIEP4=
x-amz-request-id: RTGS0RR2MT1SF95D
Date: Wed, 01 Feb 2023 16:07:57 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Wed, 02 Jan 2019 13:12:52 GMT
ETag: "0e52edb30e4a8b8d654d5db2a09203a1"
x-amz-version-id: Mmr7detyCxze9vMZZBuh0XwqmcjvuoER
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 166241
ppstatic.s3.amazonaws.com/expenses/images/new-home/logo_rindegastos_hdr.png
200 OK 17 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/images/new-home/logo_rindegastos_hdr.png
IP
File type PNG image data, 510 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 60b6932c25162cb574edbc934c7ce50d
69bae3f5aabb36115e4e09cf20cf984dc887a196
18c63b4dae26e479dc4c4d41458bc6339d59e768964f44054741142a4812e6e8
GET /expenses/images/new-home/logo_rindegastos_hdr.png HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: v6fiGYgdA1R7r/RUSKGxh3RhNlD2w9KfNJlZoFdRSxx/R9f27+sE4NlKlwF9MVwYJPyPDZN0P3U=
x-amz-request-id: RTGP735MWRTZ7YE6
Date: Wed, 01 Feb 2023 16:07:57 GMT
Last-Modified: Wed, 13 Dec 2017 13:33:34 GMT
ETag: "60b6932c25162cb574edbc934c7ce50d"
Cache-Control: no-cache
x-amz-version-id: nM2d9I4Iq4zkUR48ncMyuIHX2hQG_6Zw
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 16620
ppstatic.s3.amazonaws.com/expenses/images/icon-expenses-ios-152x152.png
200 OK 3.8 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/images/icon-expenses-ios-152x152.png
IP
File type PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced\012- data
Hash 63df7eed418e312e68ff89f8b4481439
42b16982196af6551599ada2057000a9a00722a2
3b747819b66f74855363f0302566954d462bb457920fdef69c1d9a8a38eb09d7
GET /expenses/images/icon-expenses-ios-152x152.png HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: IY0i+wuUs33sqQABk6PedWy4MRYoGZFea+CobehICsanr1OaWaAJ1N+HcJh3XvXmzBB9Nab5bPQ=
x-amz-request-id: 787KVFMJAR137PNX
Date: Wed, 01 Feb 2023 16:07:58 GMT
Last-Modified: Thu, 04 Sep 2014 21:53:59 GMT
ETag: "63df7eed418e312e68ff89f8b4481439"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3753
ppstatic.s3.amazonaws.com/expenses/js/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3
200 OK 72 kB URL HTTP/1.1 ppstatic.s3.amazonaws.com/expenses/js/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3
IP
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
GET /expenses/js/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: ppstatic.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://web.rindegastos.com
Connection: keep-alive
Referer: https://ppstatic.s3.amazonaws.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 1ljf8H/A05SopeQ/O1iYXI66MWs3FI0lbhVNiW/PxuSG4xiS7dQTxoAJU4uY8fSfBZdk4Fq9dx0=
x-amz-request-id: 787NY4424YP8KWQG
Date: Wed, 01 Feb 2023 16:07:58 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3000
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Last-Modified: Wed, 05 Oct 2016 16:13:05 GMT
ETag: "e6cf7c6ec7c2d6f670ae9d762604cb0b"
x-amz-version-id: OHwM4jbC4BbBa0APuMeeOZ58pwuzjSm_
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 71896
ekr.zdassets.com/compose/4f349ffb-427f-4fb0-934a-55bdcc3319d2
200 OK 261 B URL HTTP/2 ekr.zdassets.com/compose/4f349ffb-427f-4fb0-934a-55bdcc3319d2
IP
File type JSON data\012- , ASCII text, with very long lines (325), with no line terminators
Hash b12fbf1a78b6ef3cf31cf360595ff631
64f9986e50b1e2141f78d487cc552991ffd7dca6
3fd8361bbacb0d86ed56d589b885ed9263781cf3d48c3dcef2686561265a25e1
GET /compose/4f349ffb-427f-4fb0-934a-55bdcc3319d2 HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://web.rindegastos.com
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:57 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cdn-cache-control: max-age=60
cache-control: max-age=600, public, stale-while-revalidate=600, stale-if-error=21600
etag: W/"b9c6f60b4030bc972ca8cff280217a53"
x-request-id: 792bf1666bd8b509-SEA, 792bf1666bd8b509-SEA
x-runtime: 0.002369
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y%2BHZL7zUCsD1BiMJxakpONvpFU3En9Y0OCWOcktAcZOQgRef0Acycwukz%2FsTLVUTRzm6X9fv9j6aB8dEETT48y6fkR9Bf3JA1KV6z%2BL8AFqORQshLqR54vmmEM87stNX%2BXU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 792bf1666bd8b509-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/66325/domain/web.rindegastos.com/token
200 OK 104 B URL HTTP/2 cdn.linkedin.oribi.io/partner/66325/domain/web.rindegastos.com/token
IP
Hash f300e2a4e2aa8ab2dbe3727e273fe4dd
5aa7e29e67ba7e1c003ea9902d9e407e9ed1de33
aad40f368d389709abeef0de0ac56af4c39ef25c8a5aa91bc851e6088a4366a6
GET /partner/66325/domain/web.rindegastos.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://web.rindegastos.com
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Wed, 01 Feb 2023 15:52:23 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nhTiBNiOiq126tjy-i7zX4SgjFA1ftn89hnzjD0RO-UBXUhPwh-orQ==
age: 934
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1675267699526&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3732555%26k%3D160985-16182-63d00152f3dc8&tm=gtmv2
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1675267699526&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3732555%26k%3D160985-16182-63d00152f3dc8&tm=gtmv2
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=66325&time=1675267699526&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3732555%26k%3D160985-16182-63d00152f3dc8&tm=gtmv2 HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1675267699526%26url%3Dhttps%253A%252F%252Fweb.rindegastos.com%252Fdocument%252FexpenseReport%253Fe%253D3732555%2526k%253D160985-16182-63d00152f3dc8%26tm%3Dgtmv2%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQJBtclnw0bt8gAAAYYNvB3wzToHEmwFiR_LnQ9x_DhfNuaj_Lcm6BvGOf9pwczScZ5kEw-C8C0v4A; Max-Age=2592000; Expires=Fri, 03 Mar 2023 16:07:57 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQILhE56wJz68QAAAYYNvB3wZ8qKcK1Mqos0IfamQ5s7jINwgH8u0jEZ_FhBBkCxw9PZZXibMyCIQHaRhtZNmw; Max-Age=2592000; Expires=Fri, 03 Mar 2023 16:07:57 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&731fd5dd-3597-4c40-8805-334b5d98a189"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 01-Feb-2024 16:07:57 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2453:u=1:x=1:i=1675267677:t=1675354077:v=2:sig=AQH97qYINHctu6cOM30tdZmWsewAYToF"; Expires=Thu, 02 Feb 2023 16:07:57 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXzpabU2yt+EWBzh1YURA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: CF0ABD68A4264C2B89BB8F3CA6700131 Ref B: OSL30EDGE0212 Ref C: 2023-02-01T16:07:57Z
date: Wed, 01 Feb 2023 16:07:57 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 9488e77af3193b93c0cf1fb6d7f7573c
94a5e43125a0579ea2db70163df354c8545353a9
69b552c616c8e59aa75a61467547933802a5a7328b05bda3f8d2c69a501a7787
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=148622
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 16:07:57 GMT
Etag: "63da2feb-116"
Expires: Fri, 03 Feb 2023 09:24:59 GMT
Last-Modified: Wed, 01 Feb 2023 09:24:59 GMT
Server: nginx
Content-Length: 278
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1675267699526%26url%3Dhttps%253A%252F%252Fweb.rindegastos.com%252Fdocument%252FexpenseReport%253Fe%253D3732555%2526k%253D160985-16182-63d00152f3dc8%26tm%3Dgtmv2%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1675267699526%26url%3Dhttps%253A%252F%252Fweb.rindegastos.com%252Fdocument%252FexpenseReport%253Fe%253D3732555%2526k%253D160985-16182-63d00152f3dc8%26tm%3Dgtmv2%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D66325%26time%3D1675267699526%26url%3Dhttps%253A%252F%252Fweb.rindegastos.com%252Fdocument%252FexpenseReport%253Fe%253D3732555%2526k%253D160985-16182-63d00152f3dc8%26tm%3Dgtmv2%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://web.rindegastos.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1675267699526&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3732555%26k%3D160985-16182-63d00152f3dc8&tm=gtmv2&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&3b4df99a-28db-4571-8380-62f361711993"; Domain=.linkedin.com; Expires=Thu, 01-Feb-2024 16:07:57 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20230201160757ac01aa07-c71b-4b45-8736-c8ac857b4b40AQFwTvyOF59QrEMy_SnEky2yUkMg8hZP"; Domain=.www.linkedin.com; Expires=Thu, 01-Feb-2024 16:07:57 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzUyNjc2Nzc7MjswMjEd7lOh2XYLBboNU49O7dP+KRwnoAU/k7WMsi0Q2VgSdw==; Domain=.linkedin.com; Expires=Mon, 31 Jul 2023 16:07:57 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2425:u=1:x=1:i=1675267677:t=1675354077:v=2:sig=AQExzuC8Gejtk53bekfAzsimquGmc3iM"; Expires=Thu, 02 Feb 2023 16:07:57 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXzpabXiFSq/cZzke2pTg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 80FA2BB88AF6449BBA2259784BF64FF3 Ref B: OSL30EDGE0212 Ref C: 2023-02-01T16:07:57Z
date: Wed, 01 Feb 2023 16:07:57 GMT
content-length: 0
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1675267699526&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3732555%26k%3D160985-16182-63d00152f3dc8&tm=gtmv2&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=66325&time=1675267699526&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3732555%26k%3D160985-16182-63d00152f3dc8&tm=gtmv2&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=66325&time=1675267699526&url=https%3A%2F%2Fweb.rindegastos.com%2Fdocument%2FexpenseReport%3Fe%3D3732555%26k%3D160985-16182-63d00152f3dc8&tm=gtmv2&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://web.rindegastos.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&f0c0f2e0-c008-47d4-8312-b0f63f259d5c"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 01-Feb-2024 16:07:58 GMT; SameSite=None
lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2480:u=1:x=1:i=1675267678:t=1675354078:v=2:sig=AQFig-T_ppu9EppxEIDRQiM3jTzfaiyl"; Expires=Thu, 02 Feb 2023 16:07:58 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXzpabaA5O7koT+AE+dPg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 29727430FE5C49FEB084A762FD751BA7 Ref B: OSL30EDGE0212 Ref C: 2023-02-01T16:07:57Z
date: Wed, 01 Feb 2023 16:07:57 GMT
content-length: 0
X-Firefox-Spdy: h2
rindegastoshelp.zendesk.com/embeddable/config
200 OK 56 kB URL HTTP/2 rindegastoshelp.zendesk.com/embeddable/config
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (833), with no line terminators
Hash 934b44470e58ed730241c2903e662011
8f8439ec507d0fd81b94b32273dd6ca035d9f513
511be4f3264ea5dc2fc9405bb05b03b95e263668b2fb24f2f4394f2e1ce12e9d
GET /embeddable/config HTTP/1.1
Host: rindegastoshelp.zendesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://web.rindegastos.com/
Origin: https://web.rindegastos.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:58 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers:
access-control-max-age: 7200
cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600
x-zendesk-origin-server: embeddable-app-server-678bfc9b-7xgmq
x-request-id: 792bf16aea8db4fd-IAD
x-runtime: 0.002910
vary: Origin, Accept-Encoding
x-cached: MISS
last-modified: Tue, 31 Jan 2023 20:56:12 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BH7nxrb2hD%2BMt5LhEMkZZtK1pXqClUBzAiNYHxMo1U0HhQeD6BVPizgUacPWyFfOX%2F7gI63uGgsr7q8zfN2Y3TJ9m6oJR85wCdehkmeGnXgsXZlePPwWguelBliY2S4qUTsDRqSCHGT9IzdmHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=da44e7fdb5b1940282520bcf6e7ec87ddb056f85-1675267678; path=/; domain=.rindegastoshelp.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 792bf16aea8db4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/messenger/web-widget-messenger-34c91d3.js
200 OK 127 kB URL HTTP/2 static.zdassets.com/web_widget/latest/messenger/web-widget-messenger-34c91d3.js
IP
File type ASCII text, with very long lines (13900), with no line terminators
Size 127 kB (126968 bytes)
Hash 63004f0b1633bc0a742a341378ed2e4e
f6a39a3d955f5d36df305addf923c77422e8b30c
a2c5ea7f2df3caf87eb7ce3370cca5906ee4641a776faeca238c6b63070eee94
GET /web_widget/latest/messenger/web-widget-messenger-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:58 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: qhXpYB9acjxwMsmUo2wtDAYh0jwUVa+Fd1TQlX1L0PWwGSgWnfAR6isAG9Tj6J1QFOS4LSL6/x2pF0TSWVnwAQ==
x-amz-request-id: 8SC9QK6BQE2B4BDZ
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:14:22 GMT
etag: W/"214afa5816e69099b4b488860c973e32"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:14:21 GMT
x-amz-version-id: XvguNcD7PtT2v5F4RFpBM0nA_dAxDKpS
cf-cache-status: HIT
age: 37498
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nqtL9acdtVqw2gWV8ZLRIMGQbvxoAbwaHq4tTKK5MClRkU40mfRUEUXp90jvdm5G2zFXcNCNXP9RGRdSWtjSeBpYAwzzOFMlKzR2iLS9xkDWp6q%2Fvy1UCSe2EQAEu%2FzcUhmhPLM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 792bf16cfb5eb50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/messenger/web-widget-9524-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/messenger/web-widget-9524-34c91d3.js
IP
GET /web_widget/latest/messenger/web-widget-9524-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:58 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: g/OFQjuePdmXjVSA6GKbzevM56r24ntKiNZozgJGq/NsH//TJb2lJXdMr5BIeM08y4rtotlGjZ5kstsSKlAnrg==
x-amz-request-id: 8SC6NZ0YKBAXFXAQ
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:14:23 GMT
etag: W/"8368a7ac9bda15d64ba1686611ee7347"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:14:22 GMT
x-amz-version-id: MckhzVyw0GfGC5fk984axP7bRK9rVG_t
cf-cache-status: HIT
age: 37498
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FQpt7FASc%2B7ZINF65jF1%2FYxAHA5pNPLQRAXu6UIV4NrHFdPnWUTEf7YKCLV0te5mZTWkBphJmusf5DFzuVH0iRAwTMhoTfXnPfqYY2tlPZNLd24k3jlsGtqxjF9hINSfykY0Vis%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 792bf16d1b87b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
js.hs-banner.com/v2/3276114/banner.js
200 OK 0 B URL HTTP/2 js.hs-banner.com/v2/3276114/banner.js
IP
GET /v2/3276114/banner.js HTTP/1.1
Host: js.hs-banner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:53 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: qT9NbUvbfKL9x3MoSwJ49ft1Atn8z7vRB1+QlacJBtqtF5PBbOK1m50PF2hwD+cP9QK3NhOynkk=
x-amz-request-id: 1S4ZTEFNY8112JXE
last-modified: Thu, 26 Jan 2023 17:00:07 GMT
etag: W/"0fa6cf4f7e415eb0cd22a4b8dbddb30b"
x-amz-server-side-encryption: AES256
cache-control: max-age=300, public
x-amz-version-id: hmT9SdUBZLa6xTJSldJ1humGDVmywc_Z
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timing
access-control-allow-credentials: true
access-control-max-age: 604800
timing-allow-origin: *
vary: origin, Accept-Encoding
expires: Wed, 01 Feb 2023 16:12:53 GMT
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 792bf14d6c1c0b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.hsappstatic.net/head-dlb/static-1.255/bundle.production.js
200 OK 0 B URL HTTP/2 static.hsappstatic.net/head-dlb/static-1.255/bundle.production.js
IP
GET /head-dlb/static-1.255/bundle.production.js HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:54 GMT
content-type: application/javascript
access-control-allow-origin: https://app.hubspot.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 15:51:53 GMT
etag: W/"ab8919e33a4c517337e452aa75144717"
x-amz-server-side-encryption: AES256
x-amz-version-id: BU1gUK9lO46wXw.GxLMLib8Ax.frs5Yp
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 8b239179bc9927784033910eb0635eea.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: xtofQXG2ev3RCgOyi0bTx8l07xIRv4AsLFlJw8DPm1GswX7mGQLcEA==
cf-cache-status: HIT
age: 170001
expires: Thu, 01 Feb 2024 16:07:54 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y2P1i7b%2FP4CyrmDNG4D5cZZLwUwiu4gmemB6JZwp2rhTX06KaBgPkhwV%2FaPyMOgKjZn3oGp1dx8gx2%2FUvxZhXkUFEM4I0R5Zd4ekyFVJ866HWpqQZnpgf3bsdsH29mrEA4jGnf73taI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 792bf1531f561bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/messenger/web-widget-281-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/messenger/web-widget-281-34c91d3.js
IP
GET /web_widget/latest/messenger/web-widget-281-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:58 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: xdNMN4NCm9gh+mRbttEaWhHcatFqdRvLjSfjZDfBSqRVhwJUr7ogdWN4Kz8CmJke8q62JTO53I8=
x-amz-request-id: 8SCBD2HTE0GDAM1C
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:14:23 GMT
etag: W/"f99b3aecc9c558596aa12a98ec643365"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:14:22 GMT
x-amz-version-id: bElY5qxH6TuyocvPtUEPSD0M3RhevCsp
cf-cache-status: HIT
age: 37497
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q%2BlMOzfqjjCgjK%2BcvBM8SXh%2FHkuqfIiU%2BvgQrg%2Fd6pcl7TLVwm6RuUUpr6hyQimIEEn9wr2zEinJUXG4KvJRhEcQaRhnKNVZZKcIYl5d4b%2BytoozoBxPCY0h4xJA2WRiaStfzPU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 792bf16d1b89b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.rindegastos.com/document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8
200 OK 0 B URL HTTP/2 www.rindegastos.com/document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8
IP
GET /document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8 HTTP/1.1
Host: www.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
date: Wed, 01 Feb 2023 16:07:53 GMT
last-modified: Thu, 19 Jan 2023 14:44:29 GMT
etag: W/"b5cf190fc8260cb543467c55ae0cc6d2"
x-amz-server-side-encryption: AES256
server: AmazonS3
cache-control: public, max-age=0, s-maxage=600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7kH8YsvyzzV5pxLACZ_Xr2PO4NYmfbm_5sOozCN0bFlB9bFTl5mfxA==
X-Firefox-Spdy: h2
www.rindegastos.com/polyfills.778d7d2ca68c77f4.js
200 OK 0 B URL HTTP/2 www.rindegastos.com/polyfills.778d7d2ca68c77f4.js
IP
GET /polyfills.778d7d2ca68c77f4.js HTTP/1.1
Host: www.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 01 Feb 2023 16:07:53 GMT
last-modified: Thu, 19 Jan 2023 14:44:29 GMT
etag: W/"222b0f4ec57bcb8cbd0707a57e799e86"
x-amz-server-side-encryption: AES256
server: AmazonS3
cache-control: public, max-age=0, s-maxage=600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9g3ALDxhKWDNsQNFUXJN23_xgXyqbAfUEEi9nLK1IGZEbSSFxQpqTw==
X-Firefox-Spdy: h2
www.rindegastos.com/runtime.b95b2890cfd3ed70.js
200 OK 0 B URL HTTP/2 www.rindegastos.com/runtime.b95b2890cfd3ed70.js
IP
GET /runtime.b95b2890cfd3ed70.js HTTP/1.1
Host: www.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 01 Feb 2023 16:07:53 GMT
last-modified: Thu, 19 Jan 2023 14:44:29 GMT
etag: W/"435d89e622924a1469495868771e6f13"
x-amz-server-side-encryption: AES256
server: AmazonS3
cache-control: public, max-age=0, s-maxage=600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CDAgPw3A2GsN0L4d3opGdiYHlcAB_dpesUxeMnq0QRGtqSEfCT9gyA==
X-Firefox-Spdy: h2
js.hsleadflows.net/leadflows.js
200 OK 0 B URL HTTP/2 js.hsleadflows.net/leadflows.js
IP
GET /leadflows.js HTTP/1.1
Host: js.hsleadflows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:53 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Thu, 12 Jan 2023 01:15:58 UTC
etag: W/"81f94bb71da5bf7e447ae1cd97c54e62"
x-amz-server-side-encryption: AES256
x-amz-version-id: cBWlZpBPNqCcN4.OsLoqDE.Qz8k.oCDt
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 7bac70c3c5deda2f56c0a3aff53deab0.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD55-P3
x-amz-cf-id: Zu_ZQiQdAhDyOFOJNsCmWzGbvRnLMm77EW4cjDwzPE70s-7ohuiGUA==
cache-control: s-maxage=86400, max-age=0
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=lead-flows-js/static-1.1126/bundle/main/lead-flows-release.js&cfRay=792a8a2fe8d3abd4-IAD
x-hs-target-asset: lead-flows-js/static-1.1126/bundle/main/lead-flows-release.js
x-hs-cache-status: MISS
cache-tag: staticjsapp-lead-flows-cloudflare-web-prod,staticjsapp-prod
cf-cache-status: HIT
server: cloudflare
cf-ray: 792bf14d5f3bb524-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/messenger/web-widget-7551-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/messenger/web-widget-7551-34c91d3.js
IP
GET /web_widget/latest/messenger/web-widget-7551-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:58 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: hZNOKi8zS/6SKct+sb02M+AR5cYn3UjtuVqnNhzv9GPeTintHXjOA+kAoMCx9xCbeIj99rTatpKOz5ToYGp1Kg==
x-amz-request-id: 8SCB06QFJNTB99XM
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:14:23 GMT
etag: W/"b6375fecac03a35b22cde2f004c0fa57"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:14:22 GMT
x-amz-version-id: guunTJfmfq6iWmszggvUbuhW5.KJK8QS
cf-cache-status: HIT
age: 37496
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zXNT%2FMK2M4i%2FI2DcMkOTymmjoLV1tS%2F6qINUUweEPaGVJzllNoURBA0A59ThuFocNFHxOUwb3HeCHU%2FgfhLKpuxtefvHvvliuFm2D8kCIUlM6ne8JXgsV%2F%2F%2FPgXle4UkCyk1O2Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 792bf16e2d1fb50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/messenger/web-widget-6940-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/messenger/web-widget-6940-34c91d3.js
IP
GET /web_widget/latest/messenger/web-widget-6940-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:58 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: /y5Z2IAKpqMjBJlnzG7Z6qT3WoR9ujMFO278LWeLd1omAyDGczIqxbo1ejoqJqMf2RAaW7s+gdhPh6srEiAi0A==
x-amz-request-id: 8SC5RSX973QF6R2K
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:14:22 GMT
etag: W/"3ef86e81a648e42867331ae358948d59"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:14:21 GMT
x-amz-version-id: k5mp.dGvc_v.cT1wriCP5ykybGDhfzPg
cf-cache-status: HIT
age: 37496
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5wT5J47xx%2BX5PPRuRRta6OcHcKtI9OMQEzvicXBmVzwD5XV8nk36qQLTRaRBsOcrwPGB0EtwG0fhxjUBkKDGqwLr5rDD8MWu25MYnsCSX41I%2BPIPgqSoyrSCjm8JSQtDi060A%2Fo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 792bf16e3d2db50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/66325/domain/web.rindegastos.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/66325/domain/web.rindegastos.com/token
IP
GET /partner/66325/domain/web.rindegastos.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://web.rindegastos.com
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
date: Wed, 01 Feb 2023 15:52:23 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: i7jTh1HT9fMWwymkGg05dmeK2A_nkE_uYeU1PUV98AjeHvA-5KnPcQ==
age: 934
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/messenger/web-widget-1663-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/messenger/web-widget-1663-34c91d3.js
IP
GET /web_widget/latest/messenger/web-widget-1663-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:58 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: 5JDeVVHPP1Tpw/q8eYqvF6saICWKFMXvS2YLhqCFe1rcUTUmooN57ep7BHfPAzd5JttUQ57MB7w=
x-amz-request-id: 8SC4WMFY2PWV6CCZ
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:14:23 GMT
etag: W/"121c32804f53f19378dc9591681cffc9"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:14:22 GMT
x-amz-version-id: 7ndIOwt8eWXGDs150ovzGgS.FyvyzScI
cf-cache-status: HIT
age: 37498
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QkXcM49LIH4M%2BNLqfNgerOYeQnbB%2FyCbVlTSEOfad59RhzliX6QdrwEOecsJHeUf1jvjp0vAmrrnF2qCpjuILcPFHa5GFF9vTOcQ5fO3vhU2dg5MknlLJX%2Fgy5pBqdSfhK4CYUU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 792bf16d1b8eb50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.rindegastos.com/main.ff44efa23aa4c970.js
200 OK 0 B URL HTTP/2 www.rindegastos.com/main.ff44efa23aa4c970.js
IP
GET /main.ff44efa23aa4c970.js HTTP/1.1
Host: www.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 01 Feb 2023 16:07:53 GMT
last-modified: Thu, 19 Jan 2023 14:44:29 GMT
etag: W/"b18079f52a1d9204e698b6baad187614"
x-amz-server-side-encryption: AES256
server: AmazonS3
cache-control: public, max-age=0, s-maxage=600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 33HOIdQbFYwTFQ4ewW-0TeA-UTfTeMEWLwWmwsYkFA3QdTas5q899w==
X-Firefox-Spdy: h2
forms.hubspot.com/collected-forms/v1/config/json?portalId=3276114&utk=
200 OK 0 B URL HTTP/2 forms.hubspot.com/collected-forms/v1/config/json?portalId=3276114&utk=
IP
GET /collected-forms/v1/config/json?portalId=3276114&utk= HTTP/1.1
Host: forms.hubspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:53 GMT
content-type: application/json;charset=utf-8
vary: origin
x-hubspot-correlation-id: 555677a0-9422-4330-9c6f-13d07b0f6c6e
access-control-allow-credentials: false
access-control-allow-origin: https://www.rindegastos.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: *
access-control-max-age: 180
x-robots-tag: none
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=Xoye.IAc_xBm55FSRn_qFQYQw1vPx_Yf36JJ7rjUdsU-1675267673-0-AU3g5u7nGhSGIRiXwiirmuKcxeVBRdRazy1Dff9YOcRJJ1BTpmtfKrPvFXZf4v/rY3CVUqsgkCENfhJ++w6pvpU=; path=/; expires=Wed, 01-Feb-23 16:37:53 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UXQZwcIrZz6ruynHhXg5Cd5LhDgzR9Bhd7uLqez88397EvI%2Bo1Qrksj2bob%2B0NN%2FtCbyvjGOVFtTk3rT9IWmIwq6MZerJTcBsG0r%2B3a4vL5nePT1qUTubyh2I8%2BwzOZefWzc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 792bf1518e68b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ipinfo.io/91.90.42.154?token=2037724775731b
200 OK 0 B URL HTTP/2 ipinfo.io/91.90.42.154?token=2037724775731b
IP
GET /91.90.42.154?token=2037724775731b HTTP/1.1
Host: ipinfo.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.rindegastos.com
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-type: application/json; charset=utf-8
date: Wed, 01 Feb 2023 16:07:54 GMT
x-envoy-upstream-service-time: 2
strict-transport-security: max-age=2592000; includeSubDomains
vary: Accept-Encoding
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Arimo:400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Arimo:400,700
IP
GET /css?family=Arimo:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 01 Feb 2023 16:07:56 GMT
date: Wed, 01 Feb 2023 16:07:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/messenger/web-widget-3646-34c91d3.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/messenger/web-widget-3646-34c91d3.js
IP
GET /web_widget/latest/messenger/web-widget-3646-34c91d3.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:58 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: svkjoHrUuwT+6xp/0lYkzLD/tanYpqnfwItrPV2qom1nOapBt+R61ndWVO+FMsGda2Nza9cZvG0=
x-amz-request-id: 8SC64M4GJMSHNZFJ
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:14:22 GMT
etag: W/"feb9d7952ea7f3f98336619f8e9743b9"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:14:21 GMT
x-amz-version-id: 5KikaA8uYIWooVQ8.iSxy2xzW9G3NpMR
cf-cache-status: HIT
age: 37498
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5XEs%2FBVhpqLKzJ%2BuOZuj5iz8Absespnd1zgBj54m95C7j5Wk93RoO4hemxqJ0EMQI8PHnT%2F32vd%2BhcBiXiGsjSvxglMg69JOiEBMG%2FcT4N1Bc8IDr2UduS2GkJyBy083IIKj9ow%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 792bf16d1b91b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.rindegastos.com/styles.52c8ea0761f20a0a.css
200 OK 0 B URL HTTP/2 www.rindegastos.com/styles.52c8ea0761f20a0a.css
IP
GET /styles.52c8ea0761f20a0a.css HTTP/1.1
Host: www.rindegastos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/document/expenseReport?e=3732555&k=160985-16182-63d00152f3dc8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Wed, 01 Feb 2023 16:07:53 GMT
last-modified: Thu, 19 Jan 2023 14:44:29 GMT
etag: W/"76c8baf810dac7dd79f807fede51ad08"
x-amz-server-side-encryption: AES256
server: AmazonS3
cache-control: public, max-age=0, s-maxage=600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0Yc7kv0B1Q1_Cm4UIdsQvfUi54GxdkAdHRoRl0xZlSvX-4YHeF_76A==
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/web-widget-framework-c82fe813e62b58e096bc.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-c82fe813e62b58e096bc.js
IP
GET /web_widget/latest/web-widget-framework-c82fe813e62b58e096bc.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:57 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: ndff87uIS/sesGzUKeSADcGds13tZiq25CUrjWZEdXa2jMUAkmL2pmb5JKzj+ohOz6faFpkS9ww=
x-amz-request-id: MJRJ9ZGS34G4N411
x-amz-replication-status: COMPLETED
last-modified: Mon, 30 Jan 2023 01:09:01 GMT
etag: W/"5c97db2a2d29c595e26430d1c8358d6a"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Tue, 30 Jan 2024 01:09:00 GMT
x-amz-version-id: 1cCOlxhNqu17ys_QySYbf1YbpGnPAUXV
cf-cache-status: HIT
age: 37505
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cUiCFA9jN6sfCPUTLFIEa5%2BxvwYZm0BoOjfAOzcA0%2BQ6K7btS22L4oaF2uk%2FZXFc3vONlAWl2kNz60ukq5BFW2wEeVu%2FOBJHHD%2FuXfPtIy1FFiezlcpZrAtGDTUpdkN13yNLdQw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 792bf1692d9bb50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=4f349ffb-427f-4fb0-934a-55bdcc3319d2
200 OK 0 B URL HTTP/2 static.zdassets.com/ekr/snippet.js?key=4f349ffb-427f-4fb0-934a-55bdcc3319d2
IP
GET /ekr/snippet.js?key=4f349ffb-427f-4fb0-934a-55bdcc3319d2 HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://web.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:56 GMT
content-type: application/javascript
x-amz-id-2: VYKORFZEK8ncQjbBiiAK6oiTYdRdkzwPfaxRM/jinB20cI8N0LqXAF6x6uRMZJVhRKA1YH5Ltb2qBhbqYLdq5g==
x-amz-request-id: EBZ4ZRD66V3TGNXR
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
age: 58
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EFK3xcIVd7VNaelmytoDWbn91zcSBCJ7K7gjkTWGPMibrW4%2BG2ogsHiry4CbSAnN9PbLF84BVTQfkqUGFRg57pONiBYuRTtNOI0122E7iIewaNfyhHrRiBG%2B4GdFdDdpMYZ%2B%2FOo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 792bf1601d90b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.hsappstatic.net/conversations-visitor-ui/static-1.14289/sass/visitor.css
200 OK 0 B URL HTTP/2 static.hsappstatic.net/conversations-visitor-ui/static-1.14289/sass/visitor.css
IP
GET /conversations-visitor-ui/static-1.14289/sass/visitor.css HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:54 GMT
content-type: text/css
x-amz-replication-status: COMPLETED
last-modified: Thu, 19 Jan 2023 19:32:55 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 8cTUQYaMqbf6Yv8IIYst6y8hd.mcxuTh
etag: W/"3192955eca3e03437d10c02e718e1960"
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FkO28Fa9v5LSI2tyL3B1VlSlvl_05wXbgeudlFXVTx33gYJ9jY58GQ==
cf-cache-status: HIT
age: 1043635
expires: Thu, 01 Feb 2024 16:07:54 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=paImy7S%2B3SAg%2B%2BC1zTD9IgUTpSnnrBaEGMigmRoVctomVz3RktZoqIH8JCaIXtRViq3L3%2FynyigM9XWRrcReczHr%2BDtDMWoGK9oTgOFTvb%2BDklNuVr%2FRVDJ2rQzkh6XoE4RSX9zC2k8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 792bf1532e2ab500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
js-na1.hs-scripts.com/3276114.js
200 OK 0 B URL HTTP/2 js-na1.hs-scripts.com/3276114.js
IP
GET /3276114.js HTTP/1.1
Host: js-na1.hs-scripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.rindegastos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:53 GMT
content-type: application/javascript;charset=utf-8
x-trace: 2B2B7280E2073FE282A9EAF3BEB1CF2E391BD38341000000000000000000
cache-control: public, max-age=30
vary: origin, Accept-Encoding
x-hubspot-correlation-id: b929f45c-4743-4c46-94e9-c226b4357aac
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-origin: https://www.rindegastos.com
last-modified: Wed, 01 Feb 2023 12:02:43 GMT
cf-cache-status: EXPIRED
server: cloudflare
cf-ray: 792bf14ae945b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.hsappstatic.net/conversations-visitor-ui/static-1.14383/i18n-data-data-locales-en-us.js
200 OK 0 B URL HTTP/2 static.hsappstatic.net/conversations-visitor-ui/static-1.14383/i18n-data-data-locales-en-us.js
IP
GET /conversations-visitor-ui/static-1.14383/i18n-data-data-locales-en-us.js HTTP/1.1
Host: static.hsappstatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://app.hubspot.com
Connection: keep-alive
Referer: https://app.hubspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 16:07:54 GMT
content-type: application/javascript
access-control-allow-origin: https://app.hubspot.com
access-control-allow-methods: GET
access-control-max-age: 3000
access-control-allow-credentials: true
x-amz-replication-status: COMPLETED
last-modified: Fri, 27 Jan 2023 14:58:23 GMT
etag: W/"78a29048c85f5d506eaf8d909683dd3c"
x-amz-server-side-encryption: AES256
x-amz-version-id: iKymcBZKV7wBbnwy0iz9SB_vwwt9ekV9
vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 c45c96601bcfd826db9b745760473666.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-P1
x-amz-cf-id: 4XOx3r1kW0bat1HaK2N7BQoEFUWeDB2ilsfPrWJCWIHhE4suQt94Nw==
cf-cache-status: HIT
age: 179989
expires: Thu, 01 Feb 2024 16:07:54 GMT
cache-control: public, max-age=31536000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FsBd%2BnfBrhWKg3KFs5qD9OnGZirFaqMQjOq5umRiCi1%2B1fjCtaAmhUFBA%2FT2vJAg2XoN39mLhkIhm3j1n5m1QPUOEjZvsf1WMTFwmjZo1rK57ghj7CrehcZXKgPs4%2FZD1j3pVKobitY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 792bf154d9461bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
54.230.111.35
104.19.154.83
93.184.220.29
95.101.11.57
157.240.205.35