email.blue-invest.co.uk/ec3gq-*A9619497586750CC55FD1DDC32595BEC959B2421
302 Found 2 B URL HTTP/1.1 email.blue-invest.co.uk/ec3gq-*A9619497586750CC55FD1DDC32595BEC959B2421
IP
Hash d0781a20299a0ac7f2473649cf514abc
f73ee080cfb5894aa897c6f45ab0d60954e69f93
73cafed4c2cba0743097670a0615e4958fd6ddae0ea12b077bffcc3581e9afd2
GET /ec3gq-*A9619497586750CC55FD1DDC32595BEC959B2421 HTTP/1.1
Host: email.blue-invest.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 31 Jan 2023 10:37:08 GMT
Server: Apache/2.2.15 (Red Hat)
X-Powered-By: PHP/5.5.17
Location: http://18.134.62.30/pretty.php?url=ec3gq-%2AA9619497586750CC55FD1DDC32595BEC959B2421
Content-Length: 2
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2861
Expires: Tue, 31 Jan 2023 11:24:49 GMT
Date: Tue, 31 Jan 2023 10:37:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3218
Expires: Tue, 31 Jan 2023 11:30:46 GMT
Date: Tue, 31 Jan 2023 10:37:08 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 09:43:17 GMT
content-type: application/json
age: 3231
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11341
Expires: Tue, 31 Jan 2023 13:46:09 GMT
Date: Tue, 31 Jan 2023 10:37:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: o8uSRx/yrka+Kc8w/OunGnjIuUhSLbwhr4vnupUwFEimBf4ctoDgJeEHxliwC5CfqSVIxolaTt4=
x-amz-request-id: AQ4BHEN7756RN1NY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 09:51:07 GMT
age: 2761
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
18.134.62.30/pretty.php?url=ec3gq-%2AA9619497586750CC55FD1DDC32595BEC959B2421
302 Found 0 B URL HTTP/1.1 18.134.62.30/pretty.php?url=ec3gq-%2AA9619497586750CC55FD1DDC32595BEC959B2421
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pretty.php?url=ec3gq-%2AA9619497586750CC55FD1DDC32595BEC959B2421 HTTP/1.1
Host: 18.134.62.30
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 31 Jan 2023 10:37:08 GMT
Server: Apache/2.2.15 (Red Hat)
X-Powered-By: PHP/5.5.17
Set-Cookie: PHPSESSID=475oeagvclhf36cob59sqqavs5; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: https://pages.assuredfutures.co.uk/life-bv
Content-Length: 0
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 10:37:08 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 24df1ff7ace9e44fcbbaf19ac38411e9
aeaa31c30a4971e2bd69df31afc5ecbf62f9e580
f492fb154665ec2bc3d210e21f4e605170f66788fa9200956f170264cbee32b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F492FB154665EC2BC3D210E21F4E605170F66788FA9200956F170264CBEE32B3"
Last-Modified: Tue, 31 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21549
Expires: Tue, 31 Jan 2023 16:36:18 GMT
Date: Tue, 31 Jan 2023 10:37:09 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:37:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:37:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/pr432QvYAZ4
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/pr432QvYAZ4
IP
Hash 599dce2d42339a19d37a27f05e78167b
ce481e548829e8ac17922fee8c8a08d0f757738b
3b045af84a108a7ad4e0c3df459cda57b72d52a2483fb933708988aa310a3bfa
POST /s/gts1d4/pr432QvYAZ4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:37:09 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/pr432QvYAZ4
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/pr432QvYAZ4
IP
Hash 599dce2d42339a19d37a27f05e78167b
ce481e548829e8ac17922fee8c8a08d0f757738b
3b045af84a108a7ad4e0c3df459cda57b72d52a2483fb933708988aa310a3bfa
POST /s/gts1d4/pr432QvYAZ4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:37:09 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/pr432QvYAZ4
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/pr432QvYAZ4
IP
Hash 599dce2d42339a19d37a27f05e78167b
ce481e548829e8ac17922fee8c8a08d0f757738b
3b045af84a108a7ad4e0c3df459cda57b72d52a2483fb933708988aa310a3bfa
POST /s/gts1d4/pr432QvYAZ4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:37:09 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16984
Expires: Tue, 31 Jan 2023 15:20:13 GMT
Date: Tue, 31 Jan 2023 10:37:09 GMT
Connection: keep-alive
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
200 OK 6.1 kB URL HTTP/2 widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19239)
Hash 5add60196e5f96a414fb4b9586764e5d
633f471b3c2fcedeef9cad90cb5bf56f5fe55588
5370f4ba91dda790c7cae92817b812fcbd1ab367cbb4862f5669960ae4e2c9e0
GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 6124
last-modified: Mon, 30 May 2022 14:38:02 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
date: Tue, 31 Jan 2023 04:04:59 GMT
cache-control: max-age=86400
etag: "5add60196e5f96a414fb4b9586764e5d"
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2j9_eyOaUglJSy5gVC-R5hh1_cKqPpM7-IDy_XhWeIO5XbIgRV6s_Q==
age: 23531
X-Firefox-Spdy: h2
g.fastcdn.co/js/Cradle.c8a924beaefacc03f9bd.js
200 OK 23 kB URL HTTP/2 g.fastcdn.co/js/Cradle.c8a924beaefacc03f9bd.js
IP
File type Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Hash 3652c7233d6cd62190c50535f6ea2b6a
c211e4b9755a8c1ddb38d2718cc53d00c279c70f
38b8a469618178932af018b51b2b3d6bd871b7a39636017a85a8624b56417c63
GET /js/Cradle.c8a924beaefacc03f9bd.js HTTP/1.1
Host: g.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduKCUCUhedgW_V20lSVWYQdVBF7xXzPnv5ZGv2FBdwP4EqXPR1EIzHGnLrsVzi8BQUysEKPqwDvw8KOHURnilICZ4F6zlih
vary: X-Goog-Allowed-Resources,Accept-Encoding
x-goog-generation: 1675074484228763
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 22633
content-encoding: gzip
x-goog-hash: crc32c=M7JJVQ==, md5=NlLHIz1s1iGQxQU19uorag==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 22633
server: UploadServer
date: Mon, 30 Jan 2023 11:38:29 GMT
expires: Tue, 30 Jan 2024 11:38:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 10:28:04 GMT
etag: "3652c7233d6cd62190c50535f6ea2b6a"
content-type: application/javascript
age: 82720
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 09:41:42 GMT
age: 3327
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
pages.assuredfutures.co.uk/life-bv
200 OK 170 kB URL HTTP/2 pages.assuredfutures.co.uk/life-bv
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (46258)
Size 170 kB (170161 bytes)
Hash 1adb5420f407ab89cbef8591ec9bf04f
078c90637a60bf7a093935c8c31d12f1def32a9b
b8adaec3c049c129bb24b6313a57826c3ba5bd40093113b709bd227fb399376f
GET /life-bv HTTP/1.1
Host: pages.assuredfutures.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: openresty
date: Tue, 31 Jan 2023 10:37:09 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
etag: W/"9b4f2-und8sS/Rq00gsrKeEJ2bgPyiHQU"
vary: Accept-Encoding
content-encoding: gzip
via: 1.1 google
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
g.fastcdn.co/js/Form.9913500b352375ec139e.js
200 OK 41 kB URL HTTP/2 g.fastcdn.co/js/Form.9913500b352375ec139e.js
IP
File type Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Hash 57ffebccc38c2d36fda70a5e7a046a69
1c21ff1f6b5a910865907c75eb23b6eaa8a77ee2
78b9c62a09b9d6d9a3979210770e273d9722c72bb1295b88f3c8216e5e7fbd00
GET /js/Form.9913500b352375ec139e.js HTTP/1.1
Host: g.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsoV0DWtULIsM7McmpCssiwC9qqIHQCYelUzzjZFngCwQ8bVMhLRXAc60LtRKWZrlY2QMTYntXWdVbnqCrWsGX3
vary: X-Goog-Allowed-Resources,Accept-Encoding
x-goog-generation: 1675107011891758
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 40757
content-encoding: gzip
x-goog-hash: crc32c=MUWAsw==, md5=V//rzMOMLTb9pwpeegRqaQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 40757
server: UploadServer
date: Mon, 30 Jan 2023 20:06:29 GMT
expires: Tue, 30 Jan 2024 20:06:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 19:30:11 GMT
etag: "57ffebccc38c2d36fda70a5e7a046a69"
content-type: application/javascript
age: 52240
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
g.fastcdn.co/js/utils.cd5b4894ab46ac49c25b.js
200 OK 17 kB URL HTTP/2 g.fastcdn.co/js/utils.cd5b4894ab46ac49c25b.js
IP
File type Unicode text, UTF-8 text, with very long lines (49062), with no line terminators
Hash cd15442cf5e42d22fa02ace9ca1d14e2
617a0c40e9af006403743c24dd2989f6b0b270e0
8282f7e3b4f4b3411f5fce200e897d7aa50abcacd4eefcc49ba22c6665e37716
GET /js/utils.cd5b4894ab46ac49c25b.js HTTP/1.1
Host: g.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvc4zhqKVmbPnx1tgMNLrkZZDAGvJX8WMuGAGpQOLgKKRkyx5MSia8bB1RBubRdKaK20xyJFpkecxI0m0JWc0Id7unedGIx
vary: X-Goog-Allowed-Resources,Accept-Encoding
x-goog-generation: 1674958182733118
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17098
content-encoding: gzip
x-goog-hash: crc32c=eSmR5g==, md5=zRVELPXkLSL6Aqzpyh0U4g==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 17098
server: UploadServer
date: Mon, 30 Jan 2023 03:33:30 GMT
expires: Tue, 30 Jan 2024 03:33:30 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 29 Jan 2023 02:09:42 GMT
etag: "cd15442cf5e42d22fa02ace9ca1d14e2"
content-type: application/javascript
age: 111819
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
g.fastcdn.co/js/LegacyVendors.1481b65225ca5f72d9bd.js
200 OK 31 kB URL HTTP/2 g.fastcdn.co/js/LegacyVendors.1481b65225ca5f72d9bd.js
IP
File type Unicode text, UTF-8 text, with very long lines (65442)
Hash 280b6a04085abf8844461f65ddd9beb8
9430a4e1f07e72836574251f218ba7a017a40b96
d22553be3598d78aada91c468f971da6a598adefaa4b7951a217c6e898670857
GET /js/LegacyVendors.1481b65225ca5f72d9bd.js HTTP/1.1
Host: g.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduHk2Roq_dHuym8nXrxR_8pXct6wXj39EahinomlOrUXPniZejabWgd78Lp1ctYFCtV0cPfg1FTSyITd1Db5rVxW8lhQKSv
vary: X-Goog-Allowed-Resources,Accept-Encoding
x-goog-generation: 1675107012392532
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 31306
content-encoding: gzip
x-goog-hash: crc32c=N4fXmg==, md5=KAtqBAhav4hERh9l3dm+uA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 31306
server: UploadServer
date: Mon, 30 Jan 2023 20:06:29 GMT
expires: Tue, 30 Jan 2024 20:06:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 19:30:12 GMT
etag: "280b6a04085abf8844461f65ddd9beb8"
content-type: application/javascript
age: 52240
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.assuredfutures.co.uk/css/bootstrap.min.css
200 OK 4.8 kB URL HTTP/1.1 www.assuredfutures.co.uk/css/bootstrap.min.css
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (683), with CRLF line terminators
Hash 10987e81719a6910df83411ecd4303a9
f9e12e5f67c471a6bec3781e7379f89178776b40
d174b57886bc37a8cf76c01069f408a5605082eed5254bf83999fdcc2bb15175
GET /css/bootstrap.min.css HTTP/1.1
Host: www.assuredfutures.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 4771
Content-Type: text/css
Date: Tue, 31 Jan 2023 10:37:09 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "9a2af7254fffd81:0"
Last-Modified: Wed, 23 Nov 2022 15:20:41 GMT
Set-Cookie: ARRAffinity=5fd84939bea522f8ee668af11ba6220c4115d7a1bb7fddc3ac2028315935f6d3;Path=/;HttpOnly;Secure;Domain=www.assuredfutures.co.uk
ARRAffinitySameSite=5fd84939bea522f8ee668af11ba6220c4115d7a1bb7fddc3ac2028315935f6d3;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.assuredfutures.co.uk
Vary: Accept-Encoding
g.fastcdn.co/js/cm.js
200 OK 18 kB IP
File type Unicode text, UTF-8 text, with very long lines (52118), with no line terminators
Hash 8e466d98fa1f746c74b1b409d20a0cf3
2b3f2532bfdaf277976b673b92b8f8a3d520bb32
3995a88bd03b5dd27bd2e0b94705e6b58c6da314e7f63b69b0fc1197ed607071
GET /js/cm.js HTTP/1.1
Host: g.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycduNYB5BbGFNI0K--vLGvyjo0d7Hi2ncrXhJuxeTPM4pK98XtU17U0KX1axw8czFvcXh67B4el1wowyu5Qpcey0v
vary: X-Goog-Allowed-Resources,Accept-Encoding
x-goog-generation: 1656555137097208
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17906
content-encoding: gzip
x-goog-hash: crc32c=ZpZBfw==, md5=jkZtmPofdGx0sbQJ0goM8w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 17906
server: UploadServer
date: Mon, 30 Jan 2023 13:39:23 GMT
expires: Tue, 30 Jan 2024 13:39:23 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Jun 2022 02:12:17 GMT
etag: "8e466d98fa1f746c74b1b409d20a0cf3"
content-type: application/javascript
age: 75466
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
g.fastcdn.co/js/sptw.e0d3d3700fa08797ac40.js
200 OK 20 kB URL HTTP/2 g.fastcdn.co/js/sptw.e0d3d3700fa08797ac40.js
IP
File type Unicode text, UTF-8 text, with very long lines (61065)
Hash cc583c4bb5191b6069ae4c99c5839f23
9015acda0e4289d54416a9ffc251a27a43e9387a
9b37d0146329009654c5f85d4a78b037297e62dcefd8c1e7747f86ab7e81aaff
GET /js/sptw.e0d3d3700fa08797ac40.js HTTP/1.1
Host: g.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvSvifkquugL_EjlRNlq95uh4hPoYjNQ9m7xq9-9GLjmFRcF-BF3ze5J4XK9t6QU6JFuwUxFT1HKEeOX1iCFK1TqUAHnmB9
vary: X-Goog-Allowed-Resources,Accept-Encoding
x-goog-generation: 1675096453247837
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 20466
content-encoding: gzip
x-goog-hash: crc32c=op73fg==, md5=zFg8S7UZG2BprkyZxYOfIw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 20466
server: UploadServer
date: Mon, 30 Jan 2023 16:38:42 GMT
expires: Tue, 30 Jan 2024 16:38:42 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 16:34:13 GMT
etag: "cc583c4bb5191b6069ae4c99c5839f23"
content-type: application/javascript
age: 64707
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:37:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/pr432QvYAZ4
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/pr432QvYAZ4
IP
Hash 599dce2d42339a19d37a27f05e78167b
ce481e548829e8ac17922fee8c8a08d0f757738b
3b045af84a108a7ad4e0c3df459cda57b72d52a2483fb933708988aa310a3bfa
POST /s/gts1d4/pr432QvYAZ4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:37:09 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash e56fa3c77db13789621c81c0742c8b69
8f0fdd560fb6eff0ad08ce269fb7d1f0dedcca49
845da481e5bcbfe0b91e7992412b42fd562877dd1d118875cd14b9ec994d6bc3
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 31 Jan 2023 10:37:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 30 Jan 2023 20:43:32 GMT
Expires: Tue, 31 Jan 2023 20:43:32 GMT
ETag: "8f0fdd560fb6eff0ad08ce269fb7d1f0dedcca49"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/s/gts1d4/Quq5hzkPw-E
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Quq5hzkPw-E
IP
Hash 7d18ac94e4f9c9e89351844018d7d633
9a17dd526c9ca16c64944b78fe7e25edb1133935
d0c459b33bab9a564c0d580222618eeabfee71bcc1f0b695e677ae966fad2b44
POST /s/gts1d4/Quq5hzkPw-E HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:37:09 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 6df6719286b75f454bb5c5d7d6f230d5
c428d1e5cc15eaa1d85ab1ff830f6b7f368713cc
81ecd8a718dd80cfee307471b17534cbd100b95de2b9defbd9a2bc58a9b36447
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "81ECD8A718DD80CFEE307471B17534CBD100B95DE2B9DEFBD9A2BC58A9B36447"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17939
Expires: Tue, 31 Jan 2023 15:36:08 GMT
Date: Tue, 31 Jan 2023 10:37:09 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 6df6719286b75f454bb5c5d7d6f230d5
c428d1e5cc15eaa1d85ab1ff830f6b7f368713cc
81ecd8a718dd80cfee307471b17534cbd100b95de2b9defbd9a2bc58a9b36447
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "81ECD8A718DD80CFEE307471B17534CBD100B95DE2B9DEFBD9A2BC58A9B36447"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17826
Expires: Tue, 31 Jan 2023 15:34:15 GMT
Date: Tue, 31 Jan 2023 10:37:09 GMT
Connection: keep-alive
cdn.instapagemetrics.com/t/js/3/it.js
200 OK 19 kB URL HTTP/2 cdn.instapagemetrics.com/t/js/3/it.js
IP
File type ASCII text, with very long lines (55107)
Hash 84d2ba50a82d2c43fac196cf9ce05f68
6e6087893d151df569ccab2ec8995c4d3729c88e
77448c32ce49ae314723788c9bc1fc3a886720bbecd58f483d000fdbf0eb2712
GET /t/js/3/it.js HTTP/1.1
Host: cdn.instapagemetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtyU6lFDWCdrz40eoaKGctyvirrrjqDy7at4xkOJ0LOOo1ikZRK6zaUTQGVJT0ikKm55FHI9IHcuc00Kjpw2FC0jg
x-goog-generation: 1632829858360680
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 18709
x-goog-meta-tracker-version: 3
content-encoding: gzip
x-goog-hash: crc32c=9jCvxw==, md5=hNK6UKgtLEP6wZbPnOBfaA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 18709
server: UploadServer
date: Sun, 29 Jan 2023 16:03:06 GMT
expires: Mon, 29 Jan 2024 16:03:06 GMT
cache-control: no-transform
last-modified: Tue, 28 Sep 2021 11:50:58 GMT
etag: "84d2ba50a82d2c43fac196cf9ce05f68"
content-type: application/javascript
age: 153243
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0244831a1d7e16a224c3115488237a6
dcdbb73ee87f64dcd61acd49c73749baa25e8db3
eb540ede25f944b19c36a5772d8d5d1adcddfc620930bf9e6edb4e6a191552fe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB540EDE25F944B19C36A5772D8D5D1ADCDDFC620930BF9E6EDB4E6A191552FE"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10715
Expires: Tue, 31 Jan 2023 13:35:44 GMT
Date: Tue, 31 Jan 2023 10:37:09 GMT
Connection: keep-alive
www.assuredfutures.co.uk/scripts/base.js
200 OK 952 B URL HTTP/1.1 www.assuredfutures.co.uk/scripts/base.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash f003b6145b8f9db0a0ff40e308f68a32
b71ac9e38dc5a96e38c6e330317f56a774cdead1
48516b6ab10c15079ca8bf04d09cd7f788904d5207bbdabaffcd4272da3be0de
GET /scripts/base.js HTTP/1.1
Host: www.assuredfutures.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Length: 952
Content-Type: application/x-javascript
Date: Tue, 31 Jan 2023 10:37:09 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
ETag: "f27864284fffd81:0"
Last-Modified: Wed, 23 Nov 2022 15:20:45 GMT
Set-Cookie: ARRAffinity=5fd84939bea522f8ee668af11ba6220c4115d7a1bb7fddc3ac2028315935f6d3;Path=/;HttpOnly;Secure;Domain=www.assuredfutures.co.uk
ARRAffinitySameSite=5fd84939bea522f8ee668af11ba6220c4115d7a1bb7fddc3ac2028315935f6d3;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.assuredfutures.co.uk
Vary: Accept-Encoding
ocsp.pki.goog/s/gts1d4/Quq5hzkPw-E
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Quq5hzkPw-E
IP
Hash 7d18ac94e4f9c9e89351844018d7d633
9a17dd526c9ca16c64944b78fe7e25edb1133935
d0c459b33bab9a564c0d580222618eeabfee71bcc1f0b695e677ae966fad2b44
POST /s/gts1d4/Quq5hzkPw-E HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:37:09 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.mooso.co.uk/amedia/media/1367/facebook.png
200 OK 814 B URL HTTP/2 cdn.mooso.co.uk/amedia/media/1367/facebook.png
IP
File type PNG image data, 134 x 134, 8-bit/color RGBA, non-interlaced\012- data
Hash 84dd319adb398c45523a3d4d26f52d2f
41239b2cc184c306ca0f6b4928bc67d913e7ba08
9feb4a242f27eba248d04ed5f309b5beb6ba16b323f87c33a50d5c3731237a1a
GET /amedia/media/1367/facebook.png HTTP/1.1
Host: cdn.mooso.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 459807
content-disposition:
content-md5: hN0xmts5jEVSOj1NJvUtLw==
content-type: image/png
date: Tue, 31 Jan 2023 10:37:09 GMT
etag: "0x8D9462B1C21431D"
last-modified: Tue, 13 Jul 2021 18:22:01 GMT
server: ECAcc (ska/F7AA)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: c72f613a-501e-002e-3c31-310096000000
x-ms-version: 2014-02-14
content-length: 814
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LoQfL+Kr9332bJLN3AfrRA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BYGcEalkuHAfD20juoM02YuPkak=
cdn.mooso.co.uk/amedia/media/1367/linkedin.png
200 OK 1.1 kB URL HTTP/2 cdn.mooso.co.uk/amedia/media/1367/linkedin.png
IP
File type PNG image data, 117 x 109, 8-bit/color RGBA, non-interlaced\012- data
Hash d7b7d3a0ff8f9219ff4f039336549887
78d68f5f07f543e55916bd740059e5d7007d5d5f
18342c73369792b23b9ace4c5b5ebea28095600747a86574ebf57f307b06d96b
GET /amedia/media/1367/linkedin.png HTTP/1.1
Host: cdn.mooso.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 459807
content-disposition:
content-md5: 17fToP+Pkhn/TwOTNlSYhw==
content-type: image/png
date: Tue, 31 Jan 2023 10:37:09 GMT
etag: "0x8D9462B1C20F4F3"
last-modified: Tue, 13 Jul 2021 18:22:01 GMT
server: ECAcc (ska/F6C2)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 22f13feb-801e-0012-5a31-312951000000
x-ms-version: 2014-02-14
content-length: 1051
X-Firefox-Spdy: h2
cdn.mooso.co.uk/amedia/media/1055/aviva.jpg
200 OK 9.5 kB URL HTTP/2 cdn.mooso.co.uk/amedia/media/1055/aviva.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 511x300, components 3\012- data
Hash 9cddee26764e87d8ec8129aa641ba726
cbfc846193718e07419201f3130a787aa52b16b6
f9d2ddcf7da7ac888e870cb9808a77b113993603da2e19c733c8df8e61ba5100
GET /amedia/media/1055/aviva.jpg HTTP/1.1
Host: cdn.mooso.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 459807
content-md5: nN3uJnZOh9jsgSmqZBunJg==
content-type: image/jpeg
date: Tue, 31 Jan 2023 10:37:09 GMT
etag: "0x8D81756F53869CC"
last-modified: Tue, 23 Jun 2020 09:22:32 GMT
server: ECAcc (ska/F6D8)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-copy-completion-time: Tue, 23 Jun 2020 09:22:32 GMT
x-ms-copy-id: 2562ccd0-560f-4e46-8785-b291be67a0fe
x-ms-copy-progress: 9530/9530
x-ms-copy-source: https://arkresources.blob.core.windows.net/amedia/1055%2Faviva.jpg?sv=2018-03-28&ss=b&srt=co&sp=rl&st=2020-06-23T09%3A07%3A14Z&se=2020-06-30T09%3A22%3A14Z
x-ms-copy-status: success
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: ea63750d-501e-005c-4d31-3107d9000000
x-ms-version: 2014-02-14
content-length: 9530
X-Firefox-Spdy: h2
cdn.mooso.co.uk/amedia/media/1058/royallondon.jpg
200 OK 12 kB URL HTTP/2 cdn.mooso.co.uk/amedia/media/1058/royallondon.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 510x300, components 3\012- data
Hash 6e75d555882cb0875cda72c9f2d63ea1
c16180228df3e6dbf8844790c9cf21a8aea0bafa
7d8803f50a512b39b2f6c0d3ad07e9a3fbed6ce9282305cb16bf99ecf35dfa80
GET /amedia/media/1058/royallondon.jpg HTTP/1.1
Host: cdn.mooso.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 459807
content-md5: bnXVVYgssIdc2nLJ8tY+oQ==
content-type: image/jpeg
date: Tue, 31 Jan 2023 10:37:09 GMT
etag: "0x8D81756F557DE5D"
last-modified: Tue, 23 Jun 2020 09:22:32 GMT
server: ECAcc (ska/F6C2)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-copy-completion-time: Tue, 23 Jun 2020 09:22:32 GMT
x-ms-copy-id: 7284d728-6ae0-475b-94c3-420ae9b8bf36
x-ms-copy-progress: 11551/11551
x-ms-copy-source: https://arkresources.blob.core.windows.net/amedia/1058%2Froyallondon.jpg?sv=2018-03-28&ss=b&srt=co&sp=rl&st=2020-06-23T09%3A07%3A14Z&se=2020-06-30T09%3A22%3A14Z
x-ms-copy-status: success
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 85a5dbc8-301e-0017-2631-31fb8a000000
x-ms-version: 2014-02-14
content-length: 11551
X-Firefox-Spdy: h2
cdn.mooso.co.uk/amedia/media/1193/aig.png
200 OK 6.4 kB URL HTTP/2 cdn.mooso.co.uk/amedia/media/1193/aig.png
IP
File type PNG image data, 510 x 300, 8-bit/color RGB, non-interlaced\012- data
Hash f77d48ef4db7d9af4d1837b9084e972d
19833886aeae3128d529c8896d2838247362b834
7c53b9b51715ce0ffa2c25cb8c71750a9347271bb90b66be1ad8770c9176ef38
GET /amedia/media/1193/aig.png HTTP/1.1
Host: cdn.mooso.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
age: 459807
content-md5: 931I70232a9NGDe5CE6XLQ==
content-type: image/png
date: Tue, 31 Jan 2023 10:37:09 GMT
etag: "0x8D81756FBB6CF4C"
last-modified: Tue, 23 Jun 2020 09:22:43 GMT
server: ECAcc (ska/F68E)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-copy-completion-time: Tue, 23 Jun 2020 09:22:43 GMT
x-ms-copy-id: d20b74a8-dbca-49e6-bcb0-8e7d1f9c65a0
x-ms-copy-progress: 6406/6406
x-ms-copy-source: https://arkresources.blob.core.windows.net/amedia/1193%2Faig.png?sv=2018-03-28&ss=b&srt=co&sp=rl&st=2020-06-23T09%3A07%3A14Z&se=2020-06-30T09%3A22%3A14Z
x-ms-copy-status: success
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 81d1c3c8-001e-0033-0431-310d2a000000
x-ms-version: 2014-02-14
content-length: 6406
X-Firefox-Spdy: h2
cdn.mooso.co.uk/amedia/media/1063/nationalassurance.jpg
200 OK 9.7 kB URL HTTP/2 cdn.mooso.co.uk/amedia/media/1063/nationalassurance.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 510x300, components 3\012- data
Hash f2c2a648147a6d54491842ef07e0df33
8871ceab76be01be1aa8c205b454668423895b94
b5aaf8c0259b37e4e292fa8da7399f3f967e1af987629946ce72d1c144f609f7
GET /amedia/media/1063/nationalassurance.jpg HTTP/1.1
Host: cdn.mooso.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 459807
content-md5: 8sKmSBR6bVRJGELvB+DfMw==
content-type: image/jpeg
date: Tue, 31 Jan 2023 10:37:09 GMT
etag: "0x8D81756F5781655"
last-modified: Tue, 23 Jun 2020 09:22:32 GMT
server: ECAcc (ska/F748)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-copy-completion-time: Tue, 23 Jun 2020 09:22:32 GMT
x-ms-copy-id: c258af0d-c975-48b1-937d-e977108e491a
x-ms-copy-progress: 9729/9729
x-ms-copy-source: https://arkresources.blob.core.windows.net/amedia/1063%2Fnationalassurance.jpg?sv=2018-03-28&ss=b&srt=co&sp=rl&st=2020-06-23T09%3A07%3A14Z&se=2020-06-30T09%3A22%3A14Z
x-ms-copy-status: success
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: b686206d-c01e-0071-4b31-31b4aa000000
x-ms-version: 2014-02-14
content-length: 9729
X-Firefox-Spdy: h2
cdn.mooso.co.uk/amedia/media/1054/assurity.jpg
200 OK 11 kB URL HTTP/2 cdn.mooso.co.uk/amedia/media/1054/assurity.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 510x300, components 3\012- data
Hash d551e8cf175b4978e69ba5faf34eae13
3ac862791f573da0200996f2cd7db05eecaffd99
c5b6cea4815c988e671a75afdff86a313d1465de34ef8e5a0e387513c593d2d4
GET /amedia/media/1054/assurity.jpg HTTP/1.1
Host: cdn.mooso.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
age: 459807
content-md5: 1VHozxdbSXjmm6X6806uEw==
content-type: image/jpeg
date: Tue, 31 Jan 2023 10:37:09 GMT
etag: "0x8D81756F53869CC"
last-modified: Tue, 23 Jun 2020 09:22:32 GMT
server: ECAcc (ska/F737)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-copy-completion-time: Tue, 23 Jun 2020 09:22:32 GMT
x-ms-copy-id: 648f522b-346c-4a03-9ac0-21cc1cc256ec
x-ms-copy-progress: 11064/11064
x-ms-copy-source: https://arkresources.blob.core.windows.net/amedia/1054%2Fassurity.jpg?sv=2018-03-28&ss=b&srt=co&sp=rl&st=2020-06-23T09%3A07%3A14Z&se=2020-06-30T09%3A22%3A14Z
x-ms-copy-status: success
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: f3627172-401e-0022-3c31-31979e000000
x-ms-version: 2014-02-14
content-length: 11064
X-Firefox-Spdy: h2
cdn.mooso.co.uk/amedia/media/1064/onefamily-logo.png
200 OK 15 kB URL HTTP/2 cdn.mooso.co.uk/amedia/media/1064/onefamily-logo.png
IP
File type PNG image data, 510 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 0ade19e506e75e27635dd8300f13f5b4
94ad033a09ce703b1a2b5deb4ba61153cef9c4b5
214f133b6a26fa095428d7a9a647ba8e1fb4132e25676ae2756227a53c216af9
GET /amedia/media/1064/onefamily-logo.png HTTP/1.1
Host: cdn.mooso.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
age: 459807
content-md5: Ct4Z5QbnXidjXdgwDxP1tA==
content-type: image/png
date: Tue, 31 Jan 2023 10:37:09 GMT
etag: "0x8D81756F596793C"
last-modified: Tue, 23 Jun 2020 09:22:32 GMT
server: ECAcc (ska/F6A5)
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-copy-completion-time: Tue, 23 Jun 2020 09:22:32 GMT
x-ms-copy-id: 50400e0d-174a-42e2-8c21-5a1992b507bf
x-ms-copy-progress: 15116/15116
x-ms-copy-source: https://arkresources.blob.core.windows.net/amedia/1064%2Fonefamily-logo.png?sv=2018-03-28&ss=b&srt=co&sp=rl&st=2020-06-23T09%3A07%3A14Z&se=2020-06-30T09%3A22%3A14Z
x-ms-copy-status: success
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 7615ca6b-d01e-006d-4f31-31e6ca000000
x-ms-version: 2014-02-14
content-length: 15116
X-Firefox-Spdy: h2
v.fastcdn.co/a/img/builder2/select-arrow-drop-down.png
200 OK 93 B URL HTTP/2 v.fastcdn.co/a/img/builder2/select-arrow-drop-down.png
IP
File type PNG image data, 21 x 6, 8-bit/color RGBA, non-interlaced\012- data
Hash e057389b79347ab1bd16aa87711f396b
f381bd1d314620f379e506960996aad417e8a903
bd2afc4fe78e8b1727261c64a1b1faa1856978113ae5dd7b525fa5dea87d79f7
GET /a/img/builder2/select-arrow-drop-down.png HTTP/1.1
Host: v.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:09 GMT
content-type: image/png
content-length: 93
access-control-allow-origin: *
access-control-expose-headers: Content-Type
cache-control: public, max-age=14400
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
etag: "e057389b79347ab1bd16aa87711f396b"
expires: Tue, 31 Jan 2023 14:37:09 GMT
last-modified: Mon, 04 Jul 2016 13:52:28 GMT
x-guploader-uploadid: ADPycdthIf4HsQQnGEpKvAhNSXYyc6TwNjwiJzdbOYJmNK1PeWYpKo62nRwXmRborvmU57G1vrePcp5B756Nt4lexEXwrxju_eGL
x-goog-generation: 1467640348854000
x-goog-hash: crc32c=v4gmyA==, md5=4Fc4m3k0erG9FqqHcR85aw==
x-goog-metageneration: 2
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 93
cf-cache-status: HIT
age: 1141
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7921cf786d9a0b4d-OSL
X-Firefox-Spdy: h2
widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=5ee09edd8be2450001656c12
200 OK 3.3 kB URL HTTP/2 widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=5ee09edd8be2450001656c12
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12963)
Hash 2922a85ce6caf46f828c097bf7aa1036
afedbac8e6480a8c59cc6ca3359381731f75795b
12d369c3d585d564678ed15f99b53dad29faa1e05475825ccd0e8f4c50cfb779
GET /trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=5ee09edd8be2450001656c12 HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 3267
date: Tue, 31 Jan 2023 03:02:24 GMT
last-modified: Tue, 04 Oct 2022 10:24:57 GMT
etag: "2922a85ce6caf46f828c097bf7aa1036"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RrPoCzzpOc53Adfk_jdIFitLUEg_tIUvfR3co8Z6BYk4cdMfjJSy2A==
age: 27285
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 10:37:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/main.js
200 OK 30 kB URL HTTP/2 widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/main.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (64281), with no line terminators
Hash 5b76b943a9533254775b33e002b1c884
4c884b91ed0762c5380da136c5d09edb9b4fbd14
003b5a563be7a0444ca3be97ace94a5b4ec478009ffa159767c5873ee61e5bdb
GET /trustboxes/53aa8912dec7e10d38f59f36/main.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=5ee09edd8be2450001656c12
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 29756
date: Tue, 31 Jan 2023 02:40:00 GMT
last-modified: Tue, 04 Oct 2022 10:24:58 GMT
etag: "5b76b943a9533254775b33e002b1c884"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WF69EJaWI3oY5By9fZLjyjUKPofj0I1bGpEF9bKThwJDjAdtEk5gWQ==
age: 28630
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://pages.assuredfutures.co.uk
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 07:08:09 GMT
expires: Sat, 27 Jan 2024 07:08:09 GMT
cache-control: public, max-age=31536000
age: 358140
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.mooso.co.uk/amedia/media/1390/foreverassured.png
200 OK 12 kB URL HTTP/2 cdn.mooso.co.uk/amedia/media/1390/foreverassured.png
IP
File type PNG image data, 510 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash af4695f3d0366cb9d13c88c07d24fb45
ca03e8eaa092638d603bf035b0481a41defa8358
b731014e1e414f9be41597ef3ca36f04bf6443dc60ac1d0310945ff883ed4af1
GET /amedia/media/1390/foreverassured.png HTTP/1.1
Host: cdn.mooso.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-disposition:
content-md5: r0aV89A2bLnRPIjAfST7RQ==
content-type: image/png
date: Tue, 31 Jan 2023 10:37:09 GMT
etag: "0x8D9A45F2D09EA48"
last-modified: Wed, 10 Nov 2021 15:31:33 GMT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 0f430d48-001e-008a-405f-350930000000
x-ms-version: 2014-02-14
content-length: 12482
X-Firefox-Spdy: h2
cdn.mooso.co.uk/amedia/media/1403/assured-futures.svg
200 OK 15 kB URL HTTP/2 cdn.mooso.co.uk/amedia/media/1403/assured-futures.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (15204), with no line terminators
Hash 6c25589a1d75684a9f0e617cb92df681
b4fe6092352d9944b70afe06aa2d755a140b4265
e3840f41d993be495892de3d7649a5aa08c7c5288cfc5a60235804c2ed10386f
GET /amedia/media/1403/assured-futures.svg HTTP/1.1
Host: cdn.mooso.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-disposition:
content-md5: bCVYmh11aEqfDmF8uS32gQ==
content-type: image/svg+xml
date: Tue, 31 Jan 2023 10:37:09 GMT
etag: "0x8DA005160AE16AB"
last-modified: Mon, 07 Mar 2022 15:44:34 GMT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 3ddd7cab-301e-004a-1e5f-35f10e000000
x-ms-version: 2014-02-14
content-length: 15204
X-Firefox-Spdy: h2
cdn.mooso.co.uk/amedia/media/1256/sunlife_logo.jpg
200 OK 30 kB URL HTTP/2 cdn.mooso.co.uk/amedia/media/1256/sunlife_logo.jpg
IP
File type JPEG image data, baseline, precision 8, 510x300, components 3\012- data
Hash 6af055f450659fffcae2576dd4eece8e
e7ea320bf9750e65990cfefc59a9de7557f2c386
1a0b3e348b2e4af82475b2b7bc87ef3a1a68fedece3154308d7c30298fd0f30f
GET /amedia/media/1256/sunlife_logo.jpg HTTP/1.1
Host: cdn.mooso.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-md5: avBV9FBln//K4ldt1O7Ojg==
content-type: image/jpeg
date: Tue, 31 Jan 2023 10:37:09 GMT
etag: "0x8D81756FDF8EA47"
last-modified: Tue, 23 Jun 2020 09:22:46 GMT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-blob-type: BlockBlob
x-ms-copy-completion-time: Tue, 23 Jun 2020 09:22:46 GMT
x-ms-copy-id: 0d481f4e-ee21-46ca-b3a3-547fd242ccd1
x-ms-copy-progress: 30337/30337
x-ms-copy-source: https://arkresources.blob.core.windows.net/amedia/1256%2Fsunlife_logo.jpg?sv=2018-03-28&ss=b&srt=co&sp=rl&st=2020-06-23T09%3A07%3A14Z&se=2020-06-30T09%3A22%3A14Z
x-ms-copy-status: success
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: b4778ec0-001e-0023-805f-35c842000000
x-ms-version: 2014-02-14
content-length: 30337
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:400,700
200 OK 992 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:400,700
IP
Hash 9e399ec76a987e934a86f5f9acd61afb
0739569e1878e752d3c75cb76ee4d61539dfb9aa
5624333c00102fb79b13f510f713c6c2608590bf69ff5d2c5b1ec8716bbcdb22
GET /css?family=Montserrat:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 10:37:09 GMT
date: Tue, 31 Jan 2023 10:37:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.mooso.co.uk/amedia/media/1192/shepherdsfriendly.png
200 OK 76 kB URL HTTP/2 cdn.mooso.co.uk/amedia/media/1192/shepherdsfriendly.png
IP
File type PNG image data, 510 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 0c87a5d9e4e7bfe7cb14a5d134b99d4b
15fba151b2cb678968431361f73f90adaf3efff3
9e961b7ff21df23c6550cd490472beff48e91ee44283397ac93d470da3058765
GET /amedia/media/1192/shepherdsfriendly.png HTTP/1.1
Host: cdn.mooso.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-md5: DIel2eTnv+fLFKXRNLmdSw==
content-type: image/png
date: Tue, 31 Jan 2023 10:37:09 GMT
etag: "0x8D8A108665423EE"
last-modified: Tue, 15 Dec 2020 14:47:52 GMT
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: ed9f8a21-201e-0024-695f-35a421000000
x-ms-version: 2014-02-14
content-length: 76379
X-Firefox-Spdy: h2
v.fastcdn.co/u/c7fc1ba2/60532710-0-protection-review-wi.png
200 OK 49 kB URL HTTP/2 v.fastcdn.co/u/c7fc1ba2/60532710-0-protection-review-wi.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 434fdc8791d98c0541617345adc4deea
ef2f54da012f59c9d94b2028f2c99516a6967ae8
18d93326555200908dcbdfa194c3fd7f90f909ca9285b989f2a2d1b2bd258710
GET /u/c7fc1ba2/60532710-0-protection-review-wi.png HTTP/1.1
Host: v.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:10 GMT
content-type: image/webp
content-length: 49300
cache-control: public, max-age=315360000
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=92609
content-disposition: inline; filename="60532710-0-protection-review-wi.webp"
etag: "57a840c7497cec7be925c423c3f3269b"
expires: Fri, 28 Jan 2033 10:37:10 GMT
last-modified: Tue, 11 Jan 2022 12:10:57 GMT
vary: Accept
x-guploader-uploadid: ADPycdvXShUKbP193iLWGIDq2ElY_jnUYMsmkoWWh0irHZiD6ENGsj33XjzCEGM8NDhC9ljlfriEvU-jx6NYorrbXVPrx_UgaBvL
x-goog-generation: 1641903057639076
x-goog-hash: crc32c=VHuZOw==, md5=V6hAx0l87HvpJcQjw/Mmmw==
x-goog-meta-content-length: 0
x-goog-meta-expires: Sat, 04 Mar 2023 04:10:57 GMT
x-goog-metageneration: 2
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 92609
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 7921cf786d9e0b4d-OSL
X-Firefox-Spdy: h2
v.fastcdn.co/u/c7fc1ba2/63315028-0-split-beach.jpg
200 OK 104 kB URL HTTP/2 v.fastcdn.co/u/c7fc1ba2/63315028-0-split-beach.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2800x700, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 104 kB (103666 bytes)
Hash 94cf9360a5a4e43d701ceacff619bee5
e5443784bf01aad9cd5893d4197123772389ea7a
d74483aaa4d8e0cc78e8065c378abe694fe340dcb25775a488da129001e17043
GET /u/c7fc1ba2/63315028-0-split-beach.jpg HTTP/1.1
Host: v.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:10 GMT
content-type: image/webp
content-length: 103666
cache-control: public, max-age=315360000
cf-bgj: imgq:85,h2pri
cf-polished: qual=85, origFmt=jpeg, origSize=165555
content-disposition: inline; filename="63315028-0-split-beach.webp"
etag: "b0b98e92de96c65ac047ee73a1494cbf"
expires: Fri, 28 Jan 2033 10:37:10 GMT
last-modified: Mon, 09 Jan 2023 07:49:12 GMT
vary: Accept
x-guploader-uploadid: ADPycdsGpQKm8MEs-s2e7R1Ly_Hn6rlm5W2O_QUbpt5c14UvOvYcjxWQ2PNOhDrPw-9AOVqbeJN8eVHEmvkUIyouBOsryhjISHiz
x-goog-generation: 1673250552713559
x-goog-hash: crc32c=6roIfw==, md5=sLmOkt6WxlrAR+5zoUlMvw==
x-goog-meta-content-length: 0
x-goog-meta-expires: Thu, 29 Feb 2024 23:49:12 GMT
x-goog-metageneration: 2
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 165555
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 7921cf785d8a0b4d-OSL
X-Firefox-Spdy: h2
v.fastcdn.co/u/c7fc1ba2/62556208-0-icon-phone.svg
200 OK 652 B URL HTTP/2 v.fastcdn.co/u/c7fc1ba2/62556208-0-icon-phone.svg
IP
Hash d6ffcd380f066768447847b24a375d13
44dc52fc879d9f6770280fd86c65c9ec22ed4c90
00a3381654f39e10960e0042e81f9e81fa2c068d5e62eb528644c9fd0d9880e8
GET /u/c7fc1ba2/62556208-0-icon-phone.svg HTTP/1.1
Host: v.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:09 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdtiF81Z-wWmgq-ngnKiLxgZJEjGqkp6yR8zNqcD2QHgI3Pc5QcKQDH5dVj1fOQYKYGDIm0-yvKi-HZLMXDzNfvZ
cache-control: public, max-age=315360000
expires: Fri, 28 Jan 2033 10:37:09 GMT
last-modified: Thu, 15 Sep 2022 17:30:12 GMT
etag: W/"c586ef3fb50dd75f3618825db1c0a384"
vary: Accept-Encoding
x-goog-generation: 1663263012486661
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 675
x-goog-meta-content-length: 0
x-goog-meta-expires: Mon, 06 Nov 2023 09:30:12 GMT
x-goog-hash: crc32c=axPVnA==, md5=xYbvP7UN1182GIJdscCjhA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
server: cloudflare
cf-ray: 7921cf772c9f0b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054f6b0e2c9a9d95af6e79c237e5314b
e41bf0277e443b4dcf22d262e7d46714f888ee98
2c576c74b511ce9ea243d5c9373e750b3d217c435b2deb06d5aca02d9c3ea8ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2C576C74B511CE9EA243D5C9373E750B3D217C435B2DEB06D5ACA02D9C3EA8CA"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1861
Expires: Tue, 31 Jan 2023 11:08:11 GMT
Date: Tue, 31 Jan 2023 10:37:10 GMT
Connection: keep-alive
heatmap-events-collector.instapage.com/static/lib.js
200 OK 8.6 kB URL HTTP/2 heatmap-events-collector.instapage.com/static/lib.js
IP
Hash b861d8cdf8fde130774d46bb031bd2d9
74f96e65451601d09ed970b284c1f570080af284
9679af65bc65b15c1f24b50e9f29c02fc131b38c6b1e01f88904e5797e0b4f3b
GET /static/lib.js HTTP/1.1
Host: heatmap-events-collector.instapage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:09 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: sameorigin
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: same-origin
x-xss-protection: 0
vary: Accept-Encoding
access-control-allow-credentials: true
cache-control: public, must-revalidate, public
expires: Tue, 31 Jan 2023 10:42:09 GMT
accept-ranges: bytes
last-modified: Mon, 30 Jan 2023 17:20:13 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
ec.instapagemetrics.com/t/two
200 OK 0 B URL HTTP/2 ec.instapagemetrics.com/t/two
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /t/two HTTP/1.1
Host: ec.instapagemetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://pages.assuredfutures.co.uk/
Origin: https://pages.assuredfutures.co.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:10 GMT
content-length: 0
access-control-allow-origin: https://pages.assuredfutures.co.uk
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, SP-Anonymous
access-control-max-age: 5
strict-transport-security: max-age=15724800; includeSubDomains
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: sameorigin
X-Firefox-Spdy: h2
ec.instapagemetrics.com/t/two
200 OK 2 B URL HTTP/2 ec.instapagemetrics.com/t/two
IP
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /t/two HTTP/1.1
Host: ec.instapagemetrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=UTF-8
Content-Length: 1938
Origin: https://pages.assuredfutures.co.uk
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:10 GMT
content-type: text/plain; charset=UTF-8
content-length: 2
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: https://pages.assuredfutures.co.uk
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: sameorigin
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3019
Expires: Tue, 31 Jan 2023 11:27:30 GMT
Date: Tue, 31 Jan 2023 10:37:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3019
Expires: Tue, 31 Jan 2023 11:27:30 GMT
Date: Tue, 31 Jan 2023 10:37:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3019
Expires: Tue, 31 Jan 2023 11:27:30 GMT
Date: Tue, 31 Jan 2023 10:37:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 63486f2a937aa8fd013fc2c2d1b32f2d
e8868de34c2f79348c1edad764259eb70bebd7a6
fa6e5ce374031c0df3b3f2d6de823cf1fe08fdaf9957a0722770867cfdec0ed1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13639
x-amzn-requestid: 8131c878-620a-4972-ba8f-1456859acae2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYcJSF0SIAMFe1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d340a1-18c7280940d508c440c0182c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:10:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: L6MnX0h8Bn9-ufqI6yOzQAPhqc4SoJKySgzlm756NaiVrfJpnftIWQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 06:29:38 GMT
age: 14853
etag: "e8868de34c2f79348c1edad764259eb70bebd7a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 976dda397f9292a498ca9db5599c0378
dad9e9c3462907a2475046aee36d57f8309cd44e
7ed9ccf2ff75ca53f5ba56a1d2127e0f09b0ae941cad8b042e8df01ad01e614b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43ae4cd9-2533-48ae-8086-f8fea8a4e269.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6844
x-amzn-requestid: 0542cf46-5045-459f-a35f-f6c0d3f5f7b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flZsxH0YIAMF9ew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86feb-692d50f710a131df2ee49aa8;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:33:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oLMUuQVwUyKMuYAvTkA4wlVDb3-kZjStTJFfUZRb7JwKcK11waY0kQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:42:39 GMT
age: 32072
etag: "dad9e9c3462907a2475046aee36d57f8309cd44e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70d0f84c-475c-41c3-922d-8f0be8fbfff4.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70d0f84c-475c-41c3-922d-8f0be8fbfff4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f6790dfb54452775c77c50890d17669a
a21e3ac869acae92640075dcb9da9ded4b7f0c92
b24238875cca2327ef4df93e5e66303f02b7f64265faebcb033a245c14638817
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70d0f84c-475c-41c3-922d-8f0be8fbfff4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6481
x-amzn-requestid: ca20c9a5-983f-4cde-a833-2a561c13af95
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY-T9FcXoAMFnlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d3774c-665397d31a681a155b8a7d53;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:03:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BpOJ8IlnGRS5RbTLM1pQdk11d9NJLiiUy7oIMbwYykeX5E6OyAAFdw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 17:04:34 GMT
age: 63157
etag: "a21e3ac869acae92640075dcb9da9ded4b7f0c92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 00:33:02 GMT
age: 36249
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a2d26da68a313cc65958fc2692351c2
798c3538f3147ca77d317676ddd1bf040bd0f93b
76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10898
x-amzn-requestid: e29f8dfc-07d4-4136-afaf-e1e067eea2ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zxGshIAMFw5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-5e87d2a44722af9e4e86c3d4;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XYo_QvM8GWDyulOtUb5nVjS9PxOinaRJ3lYvCreeqd_9tHI5yv5xcQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:48:21 GMT
age: 46130
etag: "798c3538f3147ca77d317676ddd1bf040bd0f93b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c4934be94898028e2ab696561b51462
6cf734e2d29938688913daacfb75506d8e004a94
239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Gif_csWkacU59D_hnOrJpK6u2aPI8Ylf2JyQEJZ2RLNMCrXSmmMa9w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:56:35 GMT
age: 31236
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
v.fastcdn.co/u/c7fc1ba2/60294815-0-favicon.ico
200 OK 0 B URL HTTP/2 v.fastcdn.co/u/c7fc1ba2/60294815-0-favicon.ico
IP
GET /u/c7fc1ba2/60294815-0-favicon.ico HTTP/1.1
Host: v.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:10 GMT
content-type: image/x-icon
x-guploader-uploadid: ADPycdsFu8xwqlIpJtL6jBltkUUlU6V694dOmsRhk0k35ikLriFNiGjytt-B95o11k2RHajKjG-lUn1FB8SrWrgmgnqi7lLN5Iym
x-goog-generation: 1639560509109754
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 15406
x-goog-meta-content-length: 0
x-goog-meta-expires: Sun, 05 Feb 2023 01:28:29 GMT
x-goog-hash: crc32c=Ctu/RQ==, md5=hwY30f/jHfgxMEI5/lavMw==
x-goog-storage-class: STANDARD
expires: Fri, 28 Jan 2033 10:37:10 GMT
cache-control: public, max-age=315360000
last-modified: Wed, 15 Dec 2021 09:28:29 GMT
etag: W/"870637d1ffe31df831304239fe56af33"
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 7921cf7a1f5b0b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
v.fastcdn.co/u/c7fc1ba2/62560967-0-icon-health-support-.svg
200 OK 0 B URL HTTP/2 v.fastcdn.co/u/c7fc1ba2/62560967-0-icon-health-support-.svg
IP
GET /u/c7fc1ba2/62560967-0-icon-health-support-.svg HTTP/1.1
Host: v.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:10 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdsbjyt_dBk3SwUilvpQrKwqVfw1xM-klctyWSejaTZzqN_LbhdpnEjv0C_ChBUFE-VyzRNdCUDZcuKHzXD1yTgh
cache-control: public, max-age=315360000
expires: Fri, 28 Jan 2033 10:37:10 GMT
last-modified: Fri, 16 Sep 2022 08:30:39 GMT
etag: W/"9346efb05f81877da19d71780842c821"
vary: Accept-Encoding
x-goog-generation: 1663317039119195
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2656
x-goog-meta-content-length: 0
x-goog-meta-expires: Tue, 07 Nov 2023 00:30:39 GMT
x-goog-hash: crc32c=tRsMbQ==, md5=k0bvsF+Bh32hnXF4CELIIQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
server: cloudflare
cf-ray: 7921cf785d960b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
v.fastcdn.co/u/c7fc1ba2/62560939-0-icon-tick-102264.svg
200 OK 0 B URL HTTP/2 v.fastcdn.co/u/c7fc1ba2/62560939-0-icon-tick-102264.svg
IP
GET /u/c7fc1ba2/62560939-0-icon-tick-102264.svg HTTP/1.1
Host: v.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:10 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdu3Vd8Y-qmnT3N4TrIz_rPk62vDxA4qX8IdOgMv_KzR2bjaHfI959gtnFRZM2YufzxDTPlZ240-FtJIUY7KMt1K
cache-control: public, max-age=315360000
expires: Fri, 28 Jan 2033 10:37:10 GMT
last-modified: Fri, 16 Sep 2022 08:29:32 GMT
etag: W/"049b978644fd40214fff3a2bfefae940"
vary: Accept-Encoding
x-goog-generation: 1663316972475128
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 374
x-goog-meta-content-length: 0
x-goog-meta-expires: Tue, 07 Nov 2023 00:29:32 GMT
x-goog-hash: crc32c=IlVW/w==, md5=BJuXhkT9QCFP/zor/vrpQA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
server: cloudflare
cf-ray: 7921cf786d980b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
v.fastcdn.co/u/c7fc1ba2/62560999-0-assuredRewards-white.svg
200 OK 0 B URL HTTP/2 v.fastcdn.co/u/c7fc1ba2/62560999-0-assuredRewards-white.svg
IP
GET /u/c7fc1ba2/62560999-0-assuredRewards-white.svg HTTP/1.1
Host: v.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:10 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycduXn2nscugOXx7rAFDhKVCp9XokUEpLKw9vgZ7AXtB8YwghMePc1fSYrMHBWDYvvbfg-gb56g2RMfQH-Qzvzfho
cache-control: public, max-age=315360000
expires: Fri, 28 Jan 2033 10:37:10 GMT
last-modified: Fri, 16 Sep 2022 08:34:20 GMT
etag: W/"b94c2783064fbec7828e8ee144883d35"
vary: Accept-Encoding
x-goog-generation: 1663317260684037
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 3398
x-goog-meta-content-length: 0
x-goog-meta-expires: Tue, 07 Nov 2023 00:34:20 GMT
x-goog-hash: crc32c=YvAF4g==, md5=uUwngwZPvseCjo7hRIg9NQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
server: cloudflare
cf-ray: 7921cf785d910b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
v.fastcdn.co/u/c7fc1ba2/62560968-0-icon-prize-draw-whit.svg
200 OK 0 B URL HTTP/2 v.fastcdn.co/u/c7fc1ba2/62560968-0-icon-prize-draw-whit.svg
IP
GET /u/c7fc1ba2/62560968-0-icon-prize-draw-whit.svg HTTP/1.1
Host: v.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:10 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdsn0e5nX5S7ligDLKugZ8vg2ClvYs9aQso3d97ADL4rw22NrwoGGj42CpmgJXXlA4XJ9dPHUKszriaLIEObvQpJ1YoaygBs
cache-control: public, max-age=315360000
expires: Fri, 28 Jan 2033 10:37:10 GMT
last-modified: Fri, 16 Sep 2022 08:30:39 GMT
etag: W/"6b3a14c104f20e76fc86531ee1dc01e7"
vary: Accept-Encoding
x-goog-generation: 1663317039148152
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 2246
x-goog-meta-content-length: 0
x-goog-meta-expires: Tue, 07 Nov 2023 00:30:39 GMT
x-goog-hash: crc32c=MjgvCQ==, md5=azoUwQTyDnb8hlMe4dwB5w==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
server: cloudflare
cf-ray: 7921cf785d930b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
v.fastcdn.co/u/c7fc1ba2/62975794-0-icon-over-50s-cover.svg
200 OK 0 B URL HTTP/2 v.fastcdn.co/u/c7fc1ba2/62975794-0-icon-over-50s-cover.svg
IP
GET /u/c7fc1ba2/62975794-0-icon-over-50s-cover.svg HTTP/1.1
Host: v.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:10 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycduUHl2AtaWun1ziTsF-RHf2TKWRU7q0fHRwE5tR4durrW0KD_GIm8NVe85YBk2VJzqTioTMo6orhCVdrzayIgU2
cache-control: public, max-age=315360000
expires: Fri, 28 Jan 2033 10:37:10 GMT
last-modified: Fri, 11 Nov 2022 13:12:07 GMT
etag: W/"ed453dd60fb65f106071381931e3e219"
vary: Accept-Encoding
x-goog-generation: 1668172327494524
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 941
x-goog-meta-content-length: 0
x-goog-meta-expires: Tue, 02 Jan 2024 05:12:07 GMT
x-goog-hash: crc32c=8rE9hw==, md5=7UU91g+2XxBgcTgZMePiGQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
server: cloudflare
cf-ray: 7921cf785d8c0b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/icon?family=Material+Icons
200 OK 0 B URL HTTP/2 fonts.googleapis.com/icon?family=Material+Icons
IP
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 31 Jan 2023 10:37:09 GMT
date: Tue, 31 Jan 2023 10:37:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
v.fastcdn.co/u/c7fc1ba2/62560964-0-icon-will-white.svg
200 OK 0 B URL HTTP/2 v.fastcdn.co/u/c7fc1ba2/62560964-0-icon-will-white.svg
IP
GET /u/c7fc1ba2/62560964-0-icon-will-white.svg HTTP/1.1
Host: v.fastcdn.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pages.assuredfutures.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 10:37:09 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdv8WC_LH-twYy2Fxe2PWUuFi1ksJP-jVp1-sOZ4DXrf4eaj6QullU78CnIqYUIReyg3gALVEX7X7d3P8pm7dQHtoA
cache-control: public, max-age=315360000
expires: Fri, 28 Jan 2033 10:37:09 GMT
last-modified: Fri, 16 Sep 2022 08:30:39 GMT
etag: W/"95f60cef8ff572c550c4a9d9a9044da6"
vary: Accept-Encoding
x-goog-generation: 1663317039176410
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1164
x-goog-meta-content-length: 0
x-goog-meta-expires: Tue, 07 Nov 2023 00:30:39 GMT
x-goog-hash: crc32c=7o/Isw==, md5=lfYM74/1csVQxKnZqQRNpg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
server: cloudflare
cf-ray: 7921cf772c9b0b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2
18.134.62.30
23.36.76.226
34.117.237.239
104.45.14.249
104.18.8.227