Overview

URL threatsim.com/speartraining?id=70340ddea5
IP52.73.28.193
ASNAMAZON-AES
Location United States
Report completed2022-09-27 17:58:36 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (95)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS geoip-js.com (2) 14667 2020-03-31 03:51:38 UTC 2022-09-27 11:47:45 UTC 104.18.38.74
mnemonic passive DNS cm.g.doubleclick.net (2) 202 2013-05-30 23:19:45 UTC 2022-09-27 09:48:09 UTC 142.250.74.130
mnemonic passive DNS munchkin.marketo.net (2) 3550 2012-12-17 00:39:54 UTC 2022-09-27 06:22:36 UTC 88.221.99.189
mnemonic passive DNS ads.avocet.io (2) 4407 2014-10-06 21:45:13 UTC 2022-09-27 10:55:13 UTC 34.243.37.252
mnemonic passive DNS ocsp.starfieldtech.com (2) 6616 2012-06-22 18:08:50 UTC 2022-09-27 05:06:58 UTC 192.124.249.24
mnemonic passive DNS api.company-target.com (1) 3427 2018-01-31 07:07:45 UTC 2022-09-27 05:13:37 UTC 54.230.111.40
mnemonic passive DNS trk.techtarget.com (1) 13348 2019-03-03 04:21:48 UTC 2022-09-27 15:57:22 UTC 104.18.42.39
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-28 17:26:30 UTC 2022-09-27 14:55:40 UTC 143.204.55.35
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-27 05:14:54 UTC 143.204.55.49
mnemonic passive DNS px.ads.linkedin.com (6) 522 2017-08-08 16:28:50 UTC 2022-09-27 09:34:09 UTC 13.107.42.14
mnemonic passive DNS img-getpocket.cdn.mozilla.net (4) 1631 2017-09-01 03:40:57 UTC 2022-09-27 13:22:33 UTC 34.120.237.76
mnemonic passive DNS in.hotjar.com (1) 1746 2018-10-22 17:15:59 UTC 2022-09-27 04:52:55 UTC 52.215.255.196
mnemonic passive DNS www.googleadservices.com (1) 107 2012-07-21 05:05:30 UTC 2022-09-27 16:24:37 UTC 172.217.21.162
mnemonic passive DNS pixel.mathtag.com (1) 1199 2013-01-18 22:11:55 UTC 2022-09-27 04:59:30 UTC 23.38.200.207
mnemonic passive DNS us-u.openx.net (1) 357 2013-08-30 19:43:55 UTC 2022-09-27 05:05:03 UTC 35.244.159.8
mnemonic passive DNS ups.analytics.yahoo.com (1) 287 2019-05-09 15:57:40 UTC 2022-09-27 04:58:00 UTC 3.126.56.137
mnemonic passive DNS 1096250-0.chat.api.drift.com (1) 541704 2020-03-24 11:59:30 UTC 2022-09-27 16:00:44 UTC 54.145.180.117
mnemonic passive DNS driftt.imgix.net (1) 14024 2017-01-30 10:46:28 UTC 2022-09-27 09:56:57 UTC 151.101.86.208
mnemonic passive DNS dev.visualwebsiteoptimizer.com (1) 5085 2012-05-21 13:21:05 UTC 2022-09-27 04:59:16 UTC 34.96.102.137
mnemonic passive DNS googleads.g.doubleclick.net (1) 42 2021-02-20 15:43:32 UTC 2022-09-27 13:43:45 UTC 142.250.74.66
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-27 05:14:54 UTC 54.191.210.155
mnemonic passive DNS static.ads-twitter.com (1) 614 2017-01-30 05:00:15 UTC 2022-09-27 04:54:22 UTC 151.101.84.157
mnemonic passive DNS c.bing.com (1) 247 2012-05-22 10:26:32 UTC 2022-09-27 04:54:14 UTC 204.79.197.200
mnemonic passive DNS c.6sc.co (1) 12150 2017-01-29 23:27:07 UTC 2022-09-27 14:18:39 UTC 23.61.214.147
mnemonic passive DNS gwmtracking.com (1) 17343 2017-01-29 16:23:45 UTC 2022-09-27 10:35:33 UTC 216.200.122.11
mnemonic passive DNS bat.bing.com (2) 387 2014-04-08 09:23:16 UTC 2022-09-27 04:54:22 UTC 204.79.197.200
mnemonic passive DNS t.co (2) 569 2012-07-25 19:09:44 UTC 2022-09-27 05:49:12 UTC 104.244.42.197
mnemonic passive DNS threatsim.com (1) 528504 2013-05-18 14:55:19 UTC 2022-09-27 05:10:34 UTC 44.194.254.145
mnemonic passive DNS 4788165.fls.doubleclick.net (1) 671311 2017-11-02 08:05:39 UTC 2022-09-27 10:35:17 UTC 142.250.74.70
mnemonic passive DNS status.geotrust.com (3) 3662 2017-12-01 08:55:31 UTC 2022-09-27 04:53:05 UTC 93.184.220.29
mnemonic passive DNS ads.avct.cloud (4) 2821 2020-04-01 05:34:34 UTC 2022-09-27 10:55:14 UTC 34.243.37.252
mnemonic passive DNS 309-rhv-619.mktoresp.com (1) 546851 2017-01-31 12:44:09 UTC 2022-09-27 10:35:16 UTC 192.28.144.124
mnemonic passive DNS track.accountinsight.cloud (1) 250809 2018-10-25 11:29:15 UTC 2022-09-27 16:00:39 UTC 158.255.109.19
mnemonic passive DNS d.adroll.com (14) 1530 2015-03-06 22:06:59 UTC 2022-09-27 06:46:22 UTC 99.81.19.53
mnemonic passive DNS sync.outbrain.com (1) 757 2016-08-02 06:37:14 UTC 2022-09-27 04:58:00 UTC 70.42.32.127
mnemonic passive DNS r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-09-27 04:52:25 UTC 23.36.77.32
mnemonic passive DNS www.wombatsecurity.com (1) 750513 2014-12-11 20:39:13 UTC 2022-09-27 05:12:07 UTC 45.60.155.207
mnemonic passive DNS presence.api.drift.com (1) 5901 2019-04-22 17:02:08 UTC 2022-09-27 06:03:08 UTC 52.0.218.127
mnemonic passive DNS vc.hotjar.io (1) 2334 2019-04-16 10:33:25 UTC 2022-09-27 04:53:47 UTC 54.230.111.8
mnemonic passive DNS dsum-sec.casalemedia.com (2) 549 2014-06-26 21:28:31 UTC 2022-09-27 13:21:10 UTC 104.18.19.126
mnemonic passive DNS js.driftt.com (20) 5753 2018-06-14 15:30:16 UTC 2022-09-27 06:03:05 UTC 54.230.111.20
mnemonic passive DNS bootstrap.api.drift.com (1) 6517 2020-08-26 10:26:04 UTC 2022-09-27 06:03:07 UTC 54.147.21.139
mnemonic passive DNS adservice.google.com (2) 76 2021-02-20 16:10:48 UTC 2022-09-27 13:35:02 UTC 142.250.74.162
mnemonic passive DNS www.linkedin.com (3) 608 2014-04-09 13:16:08 UTC 2022-09-27 05:00:21 UTC 13.107.42.14
mnemonic passive DNS www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-09-27 07:51:08 UTC 142.250.74.174
mnemonic passive DNS visitor.reactful.com (3) 121402 2017-01-29 19:04:04 UTC 2022-09-27 16:00:39 UTC 142.250.74.83
mnemonic passive DNS www.facebook.com (1) 99 2017-01-30 05:00:00 UTC 2022-09-27 04:38:43 UTC 157.240.200.35
mnemonic passive DNS analytics.twitter.com (2) 526 2013-04-10 19:53:18 UTC 2022-09-27 04:54:21 UTC 104.244.42.131
mnemonic passive DNS ib.adnxs.com (2) 241 2012-05-23 22:36:14 UTC 2022-09-27 04:58:00 UTC 37.252.171.149
mnemonic passive DNS image2.pubmatic.com (1) 873 2012-05-21 13:21:02 UTC 2022-09-27 12:19:59 UTC 185.64.190.80
mnemonic passive DNS adservice.google.no (2) 96969 2017-09-26 14:23:08 UTC 2022-09-27 04:52:59 UTC 172.217.21.162
mnemonic passive DNS pixel.sitescout.com (2) 3280 2012-05-21 13:21:02 UTC 2022-09-27 14:54:44 UTC 66.155.71.25
mnemonic passive DNS flow.api.drift.com (2) 12085 2020-09-10 12:29:30 UTC 2022-09-27 15:52:49 UTC 3.94.218.138
mnemonic passive DNS www.google.com (2) 7 2016-08-04 12:36:31 UTC 2022-09-27 11:57:58 UTC 142.250.74.164
mnemonic passive DNS metrics.api.drift.com (2) 6235 2018-08-07 15:52:06 UTC 2022-09-27 06:03:06 UTC 3.94.218.138
mnemonic passive DNS ocsp.pki.goog (19) 175 2017-06-14 07:23:31 UTC 2022-09-27 04:53:14 UTC 142.250.74.3
mnemonic passive DNS ocsp.sectigo.com (8) 487 2018-12-17 11:31:55 UTC 2022-09-27 15:13:10 UTC 104.18.32.68
mnemonic passive DNS region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-09-27 05:12:42 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401
mnemonic passive DNS attr.ml-api.io (1) 21370 2018-09-01 04:02:44 UTC 2022-09-27 10:35:18 UTC 54.230.111.74
mnemonic passive DNS www.proofpoint.com (29) 227996 2013-06-03 08:01:03 UTC 2022-09-27 16:00:38 UTC 45.60.155.207
mnemonic passive DNS s.ml-attr.com (1) 17470 2017-01-30 05:31:20 UTC 2022-09-27 10:35:17 UTC 68.67.153.60
mnemonic passive DNS data.adxcel-ec2.com (1) 3678 2017-10-27 04:12:30 UTC 2022-09-27 12:20:01 UTC 54.85.194.140
mnemonic passive DNS s.adroll.com (8) 2553 2012-06-27 18:27:26 UTC 2022-09-27 05:45:16 UTC 143.204.55.75
mnemonic passive DNS www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-09-27 05:08:12 UTC 142.250.74.3
mnemonic passive DNS vars.hotjar.com (1) 1014 2020-11-05 16:23:46 UTC 2022-09-27 13:55:31 UTC 143.204.55.105
mnemonic passive DNS script.hotjar.com (1) 887 2020-11-05 16:23:46 UTC 2022-09-27 12:35:30 UTC 143.204.55.68
mnemonic passive DNS ocsp.godaddy.com (2) 698 2012-05-20 19:28:57 UTC 2022-09-27 04:52:31 UTC 192.124.249.36
mnemonic passive DNS fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-09-27 12:39:40 UTC 142.250.74.10
mnemonic passive DNS secure.adnxs.com (3) 396 2012-05-22 16:37:37 UTC 2022-09-27 04:57:58 UTC 37.252.173.62
mnemonic passive DNS js-agent.newrelic.com (1) 378 2017-01-30 05:00:15 UTC 2022-09-27 04:53:27 UTC 151.101.86.137
mnemonic passive DNS ocsp.digicert.com (13) 86 2012-05-21 07:02:23 UTC 2022-09-27 12:08:14 UTC 93.184.220.29
mnemonic passive DNS epsilon.6sense.com (2) 14208 2019-08-05 02:54:02 UTC 2022-09-27 14:18:40 UTC 52.58.117.7
mnemonic passive DNS connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2022-09-27 04:52:24 UTC 157.240.200.14
mnemonic passive DNS eb2.3lift.com (1) 402 2014-09-24 15:03:42 UTC 2022-09-27 08:43:42 UTC 13.248.245.213
mnemonic passive DNS www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-27 04:52:54 UTC 142.250.74.72
mnemonic passive DNS 10487471.fls.doubleclick.net (1) 708046 2020-12-02 15:44:38 UTC 2022-09-27 10:35:17 UTC 142.250.74.70
mnemonic passive DNS b.6sc.co (6) 6187 2015-12-15 19:22:13 UTC 2022-09-27 14:18:40 UTC 23.61.214.147
mnemonic passive DNS tracking.g2crowd.com (5) 9569 2016-10-09 00:30:20 UTC 2022-09-27 11:30:20 UTC 104.18.36.55
mnemonic passive DNS sync.taboola.com (1) 818 2020-03-24 13:47:58 UTC 2022-09-27 10:55:30 UTC 141.226.228.48
mnemonic passive DNS status.thawte.com (1) 5123 2017-11-27 12:33:51 UTC 2022-09-27 05:15:00 UTC 93.184.220.29
mnemonic passive DNS x.bidswitch.net (2) 286 2017-08-28 15:21:00 UTC 2022-09-27 04:58:00 UTC 3.120.13.175
mnemonic passive DNS c.clarity.ms (1) 803 2021-02-03 23:22:47 UTC 2022-09-27 04:54:14 UTC 20.234.93.27
mnemonic passive DNS ocsp.sca1b.amazontrust.com (10) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 54.230.245.39
mnemonic passive DNS snap.licdn.com (1) 1044 2014-10-06 08:43:45 UTC 2022-09-27 04:52:54 UTC 23.36.76.210
mnemonic passive DNS bam.nr-data.net (1) 630 2015-02-10 00:06:27 UTC 2022-09-27 04:54:22 UTC 162.247.241.14
mnemonic passive DNS static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2022-09-27 04:52:54 UTC 54.230.111.39
mnemonic passive DNS pixel.rubiconproject.com (1) 314 2012-10-09 03:17:38 UTC 2022-09-27 04:58:00 UTC 213.19.162.80
mnemonic passive DNS b.clarity.ms (2) 3462 2021-07-27 12:49:08 UTC 2022-09-27 06:02:16 UTC 20.75.32.255
mnemonic passive DNS targeting.api.drift.com (4) 6312 2019-05-13 05:35:39 UTC 2022-09-27 12:48:10 UTC 3.94.218.138
mnemonic passive DNS j.6sc.co (1) 8237 2015-12-10 09:37:16 UTC 2022-09-27 11:08:17 UTC 23.61.214.147
mnemonic passive DNS apt.techtarget.com (1) 19647 2019-06-22 21:44:57 UTC 2022-09-27 15:57:24 UTC 206.19.49.24
mnemonic passive DNS secure.chip2gift.com (1) 548710 2021-01-13 20:32:15 UTC 2022-09-27 16:00:39 UTC 51.11.20.152
mnemonic passive DNS www.clarity.ms (2) 1404 2018-08-22 07:41:57 UTC 2022-09-27 04:54:13 UTC 13.107.246.53
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-27 04:52:33 UTC 34.117.237.239
mnemonic passive DNS www.googleoptimize.com (1) 1604 2019-07-23 08:23:32 UTC 2022-09-27 05:08:10 UTC 142.250.74.46


Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 52.73.28.193

Date UQ / IDS / BL URL IP
2022-09-27 17:58:36 +0000
0 - 0 - 0 threatsim.com/speartraining?id=70340ddea5 52.73.28.193

Last 5 reports on ASN: AMAZON-AES

Date UQ / IDS / BL URL IP
2022-12-05 10:30:43 +0000
0 - 0 - 2 proxy.quickmail.com/click/1/489329914/3c2cd19 (...) 54.196.16.164
2022-12-05 10:30:42 +0000
0 - 0 - 2 proxy.quickmail.com/click/1/495991923/3c2cd19 (...) 54.157.4.65
2022-12-05 10:30:43 +0000
0 - 0 - 2 proxy.quickmail.com/click/1/495991923/cdffa3d (...) 34.201.80.84
2022-12-05 10:30:42 +0000
0 - 0 - 2 proxy.quickmail.com/click/1/489329914/cdffa3d (...) 54.157.4.65
2022-12-05 10:00:42 +0000
0 - 0 - 2 myemaillauncher.com/ 3.213.246.103

Last 4 reports on domain: threatsim.com

Date UQ / IDS / BL URL IP
2022-09-27 17:58:36 +0000
0 - 0 - 0 threatsim.com/speartraining?id=70340ddea5 52.73.28.193
2022-08-30 17:02:58 +0000
0 - 0 - 0 www.threatsim.com 44.194.254.145
2022-08-30 17:00:24 +0000
0 - 0 - 0 www.threatsim.com 44.194.254.145
2022-08-30 17:00:10 +0000
0 - 0 - 0 threatsim.com 52.73.248.32

Last 4 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-08-30 17:02:58 +0000
0 - 0 - 0 www.threatsim.com 44.194.254.145
2022-08-30 17:00:24 +0000
0 - 0 - 0 www.threatsim.com 44.194.254.145
2022-08-30 17:00:10 +0000
0 - 0 - 0 threatsim.com 52.73.248.32
0 - 0 - 0


JavaScript

Executed Scripts (100)


Executed Evals (2)

#1 JavaScript::Eval (size: 93, repeated: 1) - SHA256: 353180844783a4264e62114625f97e0ac8dfb64ef0874d496e7c4f3b65c6c4f5

                                        (function() {
    return document.querySelector('input[name\x3d"gAClientID"]') ? "set_id" : void 0
})();
                                    

#2 JavaScript::Eval (size: 84, repeated: 1) - SHA256: fcc329b66dedfebc06d02ef1e8ad49ff55c9e129031acce9955274fee2c63281

                                        (function() {
    var b = 19;
    return function(a) {
        a.set("dimension" + b, a.get("clientId"))
    }
})();
                                    

Executed Writes (2)

#1 JavaScript::Write (size: 81, repeated: 1) - SHA256: 76d938b8e8299b9c2f8583b02004109aa841fbd50326f4de48f7e394b2ba6e81

                                        < script src = '//munchkin.marketo.net/munchkin.js'
type = 'text/javascript' > < /script>
                                    

#2 JavaScript::Write (size: 0, repeated: 1) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    


HTTP Transactions (264)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 17:15:30 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4mXLrZeREvJ0qrNOl6zX_d3zD_HTd0TBTEXwdco7t8aX-57N-NhgSQ==
Age: 2574


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            GET /speartraining?id=70340ddea5 HTTP/1.1 
Host: threatsim.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         44.194.254.145
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: awselb/2.0
Date: Tue, 27 Sep 2022 17:58:24 GMT
Content-Length: 134
Connection: keep-alive
Location: https://www.wombatsecurity.com:443/speartraining?id=70340ddea5


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   134
Md5:    4aa7a432bb447f094408f1bd6229c605
Sha1:   1965c4952cc8c082a6307ed67061a57aab6632fa
Sha256: 34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8159
Expires: Tue, 27 Sep 2022 20:14:23 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.49
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RbaYpcqQjhiko7Rsvrge_OcxGV0PunCjM1MdZpGPUZD2caoFxgwwwQ==
age: 30851
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /speartraining?id=70340ddea5 HTTP/1.1 
Host: www.wombatsecurity.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         45.60.155.207
HTTP/1.1 301 Moved Permanently
                                        
Location: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Content-Length: 0
Connection: close

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 27 Sep 2022 17:58:24 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /us/wombat-security-is-now-proofpoint HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Etag: "1664223952"
Last-Modified: Mon, 26 Sep 2022 20:25:52 GMT
Content-Length: 15549
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: origin-when-cross-origin
Feature-Policy: geolocation 'self'
Cache-Control: max-age=46818, public
Expires: Wed, 28 Sep 2022 06:58:42 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:36:09 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvmFZVuLalI=pFLTKeCdfox; path=/; Max-Age=900; Secure; SameSite=None ___utmvaFZVuLalI=wXKJirP; path=/; Max-Age=900; Secure; SameSite=None ___utmvbFZVuLalI=tZG XwwOdalI: CtN; path=/; Max-Age=900; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 12-27150764-0 0CNN RT(1664301504595 19) q(0 -1 -1 0) r(0 -1)


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10233)
Size:   15549
Md5:    f9f701a8404f58335ddfcb233b00ec8c
Sha1:   a12968653207fa896b25981e41dfbd3ca347a2e0
Sha256: 09ed0a9710189ca6f885efac7d15367c56c3b1b2a6404e3ddc7d3af627eaa2ec
                                        
                                            GET /themes/custom/proofpoint/dist/app-drupal/assets/fonts/proofpoint.woff2 HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
                                        
Etag: "01c16c31"
Last-Modified: Sat, 02 Jan 2021 08:56:17 GMT
Content-Length: 18296
X-Content-Type-Options: nosniff
Cache-Control: max-age=720164, public
Expires: Thu, 06 Oct 2022 02:01:08 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:36:09 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 12-27150764-0 0CNN RT(1664301504595 169) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 18296, version 1.0\012- data
Size:   18296
Md5:    57f90b512aba13b017086397ad20b4c9
Sha1:   ccc174c370bab127cf244cb80419a4ed41831a64
Sha256: 88b3102f2889489e2db30d672885b580d0275e944baacebc652c90ce2263d7ab
                                        
                                            GET /themes/custom/proofpoint/dist/app-drupal/assets/fonts/fjalla-one-v7-latin-regular.woff HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
                                        
Etag: "3a88d25f"
Last-Modified: Sat, 02 Jan 2021 08:56:17 GMT
Content-Length: 19976
X-Content-Type-Options: nosniff
Cache-Control: max-age=719622, public
Expires: Thu, 06 Oct 2022 01:52:06 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:36:09 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 12-27150764-0 0CNN RT(1664301504595 183) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 19976, version 1.1\012- data
Size:   19976
Md5:    7710e53ee1e24055dd9ba499766cbf2a
Sha1:   84b6d697b33ebfbdc7e7892d1b51fec3cc3af64b
Sha256: da9b29cad35666ad35df54fc721ff8d0838660640456185a86521e6c506b81cd
                                        
                                            GET /modules/custom/pp_theme/js/modernizr.min.js?v=3.11.7 HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Last-Modified: Wed, 03 Feb 2021 00:23:01 GMT
Content-Length: 2533
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=719622, public
Expires: Thu, 06 Oct 2022 01:52:06 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:36:09 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 12-27150764-0 0CNN RT(1664301504595 199) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  ASCII text, with very long lines (5395)
Size:   2533
Md5:    6f8de51727b3bcd6f1e7c7318836014a
Sha1:   abc2ba8498be2c72fd189627b88fa1dc5b3eb1ce
Sha256: c0193067bd67da90d7a5f2370146665785175266025396d2dace710522e5bbbf
                                        
                                            GET /sites/default/files/css/css_LB-c50DEPlEk6V1MjnKm7YTNx_RPyo6KsW3ytfstdcQ.css HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Etag: "1743d73f"
Last-Modified: Thu, 15 Sep 2022 23:14:09 GMT
Content-Length: 4399
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=720467, public
Expires: Thu, 06 Oct 2022 02:06:11 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:26:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158134-0 0CNN RT(1664301504775 23) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  troff or preprocessor input text\012- assembler source, ASCII text, with very long lines (8279)
Size:   4399
Md5:    e1578cdf6017d67b80243f13d196fec3
Sha1:   c692ab5e968ff42e6d83f49be6937ffcaaf3257d
Sha256: ec684c0453cffac2b4f0ddfe4ae42746c9cd80dc08cefcc84bfcd48a6de51b44
                                        
                                            GET /themes/custom/proofpoint/dist/app-drupal/assets/fonts/RobotoCondensed-Regular-webfont.woff HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
                                        
Etag: "39ed386e"
Last-Modified: Sat, 02 Jan 2021 09:53:20 GMT
Content-Length: 21036
X-Content-Type-Options: nosniff
Cache-Control: max-age=719623, public
Expires: Thu, 06 Oct 2022 01:52:07 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Wed, 27 Sep 2023 00:04:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 7-21472720-0 0CNN RT(1664301504773 24) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 21036, version 1.0\012- data
Size:   21036
Md5:    3f7afdef58cb65d3bd4b071cc0cc1434
Sha1:   521f70f25a26a6521ec9a5a03daf6c5e406c89c3
Sha256: 168ebd89f3a9ffb66f609bdf01034cb2dd90af136676fde9193abb2ac0e517f4
                                        
                                            GET /themes/custom/proofpoint/dist/app-drupal/assets/fonts/RobotoCondensed-Bold-webfont.woff HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
                                        
Etag: "8df65834"
Last-Modified: Sat, 02 Jan 2021 08:56:17 GMT
Content-Length: 21384
X-Content-Type-Options: nosniff
Cache-Control: max-age=719622, public
Expires: Thu, 06 Oct 2022 01:52:06 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:26:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158133-0 0CNN RT(1664301504775 21) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 21384, version 1.0\012- data
Size:   21384
Md5:    e96a912a45cd4d01503ca8da609fa5fe
Sha1:   bb3d3d13ce9c60142f8b9252a76d7135e3dc9a95
Sha256: 68bf74082f8a4c49d604ea4c599e861b5dd032b1497a75231b74ca1b20853dcb
                                        
                                            GET /themes/custom/proofpoint/dist/app-drupal/assets/fonts/fjalla-one-v7-latin-regular.woff2 HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
                                        
Etag: "80852160"
Last-Modified: Sat, 02 Jan 2021 09:53:20 GMT
Content-Length: 16540
X-Content-Type-Options: nosniff
Cache-Control: max-age=720164, public
Expires: Thu, 06 Oct 2022 02:01:08 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Wed, 27 Sep 2023 00:04:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 7-21472721-0 0CNN RT(1664301504774 25) q(0 -1 -1 -1) r(1 -1)


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16540, version 1.0\012- data
Size:   16540
Md5:    48e76c8da8da2e695f7f6b65e5770283
Sha1:   f9484f6642f97c51053397e0edfc2b3de2b4d6b3
Sha256: fe5f2a40422e9a55187b3204161cbce1ba1d03a2eb4fa971bd10451562fed99a
                                        
                                            GET /core/misc/modernizr-additional-tests.js?v=3.11.7 HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Last-Modified: Thu, 28 Oct 2021 00:38:55 GMT
Content-Length: 411
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=719623, public
Expires: Thu, 06 Oct 2022 01:52:07 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:36:09 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 12-27150764-0 0CNN RT(1664301504595 215) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  ASCII text
Size:   411
Md5:    aa3af04c13566633fccba9965859e5d7
Sha1:   34d33785157bb21d9b5a1ea6a6293012688daf1d
Sha256: 4ddecd024c7fbca72155d529a37cf64264a8660a9bc5a7d1ee2d849709d84b76
                                        
                                            GET /sites/default/files/js/js_Mypic69v3AM_k2tnVLPIrzNXY0af6UrC_DJGJz1MY-A.js HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "6e3ea0aa"
Last-Modified: Tue, 23 Aug 2022 16:12:52 GMT
Content-Length: 2188
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=719624, public
Expires: Thu, 06 Oct 2022 01:52:08 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Wed, 27 Sep 2023 00:04:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 7-21472720-0 0CNN RT(1664301504773 45) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (367)
Size:   2188
Md5:    e5102d7d541dcac9bb7efcf4acaa040a
Sha1:   3c95645b2875d832199116302c727c3797f58676
Sha256: 88f1ea823ecee5f53498347c80d566a18317be0929698902b2247206dd3d0d28
                                        
                                            GET /sites/default/files/js/js_fTp1NCDkrbzOO0GeuROEwms-04oF0PfOmAY7SI6oFLk.js HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "6f4d235a"
Last-Modified: Tue, 20 Sep 2022 21:17:11 GMT
Content-Length: 54267
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=720468, public
Expires: Thu, 06 Oct 2022 02:06:12 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:26:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158134-0 0CNN RT(1664301504775 39) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (40218)
Size:   54267
Md5:    6ff601be4f88f6af83655928ad4c4638
Sha1:   f90258779f35d42df51a52eac00449012b622b74
Sha256: 9aefc64a0f6049d0a83d9f50ee1e6ccc256b95991b024c02db642f283fdd1d70
                                        
                                            GET /sites/default/files/js/js_Ib5Ax9-1D73YNfZCo_g5YAJj75PuxL7kIiW_xlAgNzA.js HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Etag: "2c33db84"
Last-Modified: Tue, 20 Sep 2022 22:26:06 GMT
Content-Length: 446285
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=720468, public
Expires: Thu, 06 Oct 2022 02:06:12 GMT
Date: Tue, 27 Sep 2022 17:58:24 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:26:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158133-0 0CNN RT(1664301504775 43) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (4164)
Size:   446285
Md5:    4262cc28e8ab3ca1d97480ca57a74a3d
Sha1:   f14a13b8d7ee922681b1e3fa587974255884edf4
Sha256: 10928d30c6801c1d5f5d92fa40c1f8d2c3f5c5124cd9579693d0d759f7d7a778
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/conversion.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         172.217.21.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 27 Sep 2022 17:58:25 GMT
expires: Tue, 27 Sep 2022 17:58:25 GMT
cache-control: private, max-age=3600
etag: 17680024240845530123
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 17403
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1952)
Size:   17403
Md5:    f65df5bfeba7e45702bc6b4be768c7e3
Sha1:   7d49820b96edede6e587650ecd387cab1b29951d
Sha256: 7d9314961f09f17bb248d0ee2c99481fce2d8d7d9d3297ffe98d2538d2f1caff
                                        
                                            GET /optimize.js?id=GTM-KKGL4NZ HTTP/1.1 
Host: www.googleoptimize.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.46
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 17:58:25 GMT
expires: Tue, 27 Sep 2022 17:58:25 GMT
cache-control: private, max-age=900
last-modified: Tue, 27 Sep 2022 16:34:36 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41650
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2039)
Size:   41650
Md5:    ea15a82cf2ee9cac34bc22b635aa23db
Sha1:   1f81a87af22be7fb1179a6ff9f10e7cb12cb3b7d
Sha256: a034458dfcd5dd657ed08bbca9a8a63f079f273154ebc4b95fd70d9ba1d80175
                                        
                                            GET /munchkin.js HTTP/1.1 
Host: munchkin.marketo.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         88.221.99.189
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "92b41a298690c047b0c4602dd843cba4:1662686319.691662"
Last-Modified: Fri, 09 Sep 2022 01:18:39 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 27 Sep 2022 17:58:25 GMT
Content-Length: 728
Connection: keep-alive
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR", policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"


--- Additional Info ---
Magic:  ASCII text, with very long lines (521)
Size:   728
Md5:    51a92d8c69733d719447dea0416ed039
Sha1:   69f4c1e0b7ebba812bc096708d57627927dff265
Sha256: cb483c0ea4012ac512bcba6204b37622b388c1aefd4ae9028f60abb965f23d29
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 17:10:46 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 27 Sep 2022 17:50:23 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hXb9ppKJNQ-6Qo13FkJjDVsVZymZcxPG27H60wQursAi4CTK6NcaxQ==
Age: 2859


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /sites/default/files/globe.svg HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Etag: "432511db"
Last-Modified: Sat, 07 Mar 2020 01:07:57 GMT
Content-Length: 1939
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=728050, public
Expires: Thu, 06 Oct 2022 04:12:35 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:26:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158135-0 0CNN RT(1664301504776 396) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1939
Md5:    8b9cacf21d5541d90fd47ebfe9248b14
Sha1:   70e4343f2b8f82c97d45e12ee267a66db5cef0dd
Sha256: e2467836f0119f69b0f2be968e398bb6ca2f895c322241193428d677bf32ce05
                                        
                                            GET /sites/default/files/pie-chart.svg HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Etag: "83efa188"
Last-Modified: Sat, 07 Mar 2020 01:07:57 GMT
Content-Length: 545
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=728050, public
Expires: Thu, 06 Oct 2022 04:12:35 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:36:09 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 12-27150764-0 0CNN RT(1664301504595 577) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   545
Md5:    a5a8a67d22edbc08cff09d7a285d97ce
Sha1:   dd973ddac96e7839c40a4bf9439d9bfbbeb1487a
Sha256: 88132ff156c32e4c63bce7189597e9cdba468b9c3faea759cc627b1a70ff924b
                                        
                                            GET /sites/default/files/lightbulb.svg HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Etag: "e3880a8a"
Last-Modified: Sat, 07 Mar 2020 01:07:57 GMT
Content-Length: 787
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=728050, public
Expires: Thu, 06 Oct 2022 04:12:35 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Wed, 27 Sep 2023 00:04:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 7-21472720-0 0CNN RT(1664301504773 399) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   787
Md5:    320b0d977da094f71b0e9a3260245a3c
Sha1:   cbfd220c4e403188d51f1c71f54322ebc9f66a9a
Sha256: 497c272b8d7a948fff0220facfb5492571d576c8eec068fc4c83932bc742b8f9
                                        
                                            GET /sites/default/files/headphones.svg HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Etag: "4c27374d"
Last-Modified: Sat, 07 Mar 2020 01:07:56 GMT
Content-Length: 587
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=728050, public
Expires: Thu, 06 Oct 2022 04:12:35 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Wed, 27 Sep 2023 00:04:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 7-21472721-0 0CNN RT(1664301504774 400) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   587
Md5:    0245bff1e735c1de24b6c4695b5ea2c9
Sha1:   8dfdd69a3af842cc044d490d5daa04b389529440
Sha256: 32fe3193d3028b423ea7fffe711efb4b81e6c2e46899c2453fe7902c0572c320
                                        
                                            GET /themes/custom/proofpoint/dist/app-drupal/assets/logo-reg.svg HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Etag: "13fdd2ef"
Last-Modified: Sat, 02 Jan 2021 08:56:17 GMT
Content-Length: 1124
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=720163, public
Expires: Thu, 06 Oct 2022 02:01:08 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:26:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158134-0 0CNN RT(1664301504775 399) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (486)
Size:   1124
Md5:    d542a1d033891b3a642964393a989168
Sha1:   6664864cc1571005cae8a8a3a19e0f8fc30ff6c7
Sha256: 20a046be6ae24953dca16c6b3e26bdb67e39df34782a0183fee58459184a930c
                                        
                                            GET /sites/default/files/nav-promo-images/ransomware-nav-promo.png HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Etag: "7124de60"
Last-Modified: Sat, 22 Jan 2022 06:01:51 GMT
Content-Length: 621607
X-Content-Type-Options: nosniff
Cache-Control: max-age=719623, public
Expires: Thu, 06 Oct 2022 01:52:08 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:26:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158133-0 0CNN RT(1664301504775 398) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  PNG image data, 696 x 708, 8-bit/color RGB, non-interlaced\012- data
Size:   621607
Md5:    27b0d68be693f778515ed791b33dc61c
Sha1:   9a8b1b9c0aaab098492d2faa589c335cb474a35f
Sha256: 9732077979c7e132e29da395c2788f43f6dd4ab3020b0c0c539744be21339507
                                        
                                            GET /sites/default/files/envelope.svg HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Etag: "d52142c8"
Last-Modified: Sat, 07 Mar 2020 01:07:56 GMT
Content-Length: 767
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=728050, public
Expires: Thu, 06 Oct 2022 04:12:35 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:26:10 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158135-0 0CNN RT(1664301504776 408) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   767
Md5:    c73ce303b098d88d42069923fe6acfb9
Sha1:   ea4251ff3de65d17979fcd4c38ba6ec0fe62f50e
Sha256: db0a486cf987ead41b2a445f1c9ac254f040d3d4e9c8b8fdea41136c31ca79dd
                                        
                                            GET /sites/default/files/puzzle-piece.svg HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; ___utmvmFZVuLalI=pFLTKeCdfox; ___utmvbFZVuLalI=tZG XwwOdalI: CtN
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Etag: "a28053e8"
Last-Modified: Sat, 07 Mar 2020 01:07:57 GMT
Content-Length: 942
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=728050, public
Expires: Thu, 06 Oct 2022 04:12:35 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Set-Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; expires=Tue, 26 Sep 2023 23:36:09 GMT; HttpOnly; path=/; Domain=.proofpoint.com; Secure; SameSite=None incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==; path=/; Domain=.proofpoint.com; Secure; SameSite=None ___utmvbFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT ___utmvmFZVuLalI=a; Max-Age=0; path=/; expires=Sun, 18 Sep 2022 23:20:10 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 12-27150764-0 0CNN RT(1664301504595 589) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   942
Md5:    e99f8d36bd443de2ed43b0a3bb40da66
Sha1:   cc1dfd763e1f15c65a6691ea447a636f6d862fb7
Sha256: 36e17fd68a00354e86416fd6883a21c3bf0c9afcd46faac093a2278b384fee86
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-MGR7P8X HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 17:58:25 GMT
expires: Tue, 27 Sep 2022 17:58:25 GMT
cache-control: private, max-age=900
last-modified: Tue, 27 Sep 2022 16:34:36 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101141
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (57784)
Size:   101141
Md5:    4d24e67dc8a3a0bfba46aa96c176a753
Sha1:   7c8f30cdaf137fcdab004068de54426ceeda8d5f
Sha256: 3a06dcb6277303f3c1d0dd4395bc80f99873a74db98cd74355ab8c13bf399fb1
                                        
                                            GET /sites/default/files/nav-promo-images/ransomware-bg-img.png HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Etag: "ebf7b974"
Last-Modified: Sat, 22 Jan 2022 06:00:50 GMT
Content-Length: 13846
X-Content-Type-Options: nosniff
Cache-Control: max-age=719623, public
Expires: Thu, 06 Oct 2022 01:52:08 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158135-0 0CNN RT(1664301504776 556) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  PNG image data, 696 x 1228, 8-bit/color RGB, non-interlaced\012- data
Size:   13846
Md5:    0c5cf205423f449e0d7a6d839ce02b8a
Sha1:   ce29670cde9e82b4110ee61b16fc1171956a0133
Sha256: 6907f421de451fd5e7f962c48d39191bd7d86390df35df8b416d3ca0eb558436
                                        
                                            GET /themes/custom/proofpoint/dist/app-drupal/assets/awareness_material.svg?f73d28580404264dc3de47a50f217562= HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/sites/default/files/css/css_Oy-qEPB4csalL8GpxJCxLMA8nMUYoMMMUZ-V6vnelv4.css
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Last-Modified: Fri, 10 Dec 2021 00:09:04 GMT
Content-Length: 2963
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=728051, public
Expires: Thu, 06 Oct 2022 04:12:36 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 7-21472720-0 0CNN RT(1664301504773 561) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (3160)
Size:   2963
Md5:    a919175763330fc8b3664815e57ea6d3
Sha1:   29ecb66f09ab0a7af04e0f2a5567ab4810bd4773
Sha256: 97b991399ad1b95c0649f0d4e63b2d071ffbad69408a6f8b72e16cd8b624fd80
                                        
                                            GET /sites/default/files/solution-hero.jpg HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Etag: "e9bad4df"
Last-Modified: Sat, 07 Mar 2020 01:03:14 GMT
Content-Length: 291796
X-Content-Type-Options: nosniff
Cache-Control: max-age=728052, public
Expires: Thu, 06 Oct 2022 04:12:37 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158133-0 0CNN RT(1664301504775 560) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 2400x1060, components 3\012- data
Size:   291796
Md5:    8eb36c584c19a0dcee192f8b15826762
Sha1:   c22a05ea292a4460aab6103f8181fa3ff8bc43e8
Sha256: 04eb74fa22b88e267b639f3baeb04e945106736b6a31ab3e7b49b2710c72624d
                                        
                                            GET /sites/default/files/cta-banner/cta-bkgd.jpg HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Etag: "475220c5"
Last-Modified: Sat, 07 Mar 2020 01:03:14 GMT
Content-Length: 71740
X-Content-Type-Options: nosniff
Cache-Control: max-age=728052, public
Expires: Thu, 06 Oct 2022 04:12:37 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 12-27150764-0 0CNN RT(1664301504595 740) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2400x430, components 3\012- data
Size:   71740
Md5:    1b550503f81e57bb09e86969fc2c8216
Sha1:   4d9290c9641f7eb80631a5635bf1e49a2831b52e
Sha256: 093c1726201875f30601944aac6583dc0ef73e8e2010f524f8868bf6569a6453
                                        
                                            GET /themes/custom/proofpoint/dist/app-drupal/assets/fonts/RobotoCondensed-Regular-webfont.eot HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/sites/default/files/css/css_Oy-qEPB4csalL8GpxJCxLMA8nMUYoMMMUZ-V6vnelv4.css
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
                                        
Etag: "9af5adb1"
Last-Modified: Sat, 02 Jan 2021 09:53:20 GMT
Content-Length: 34854
X-Content-Type-Options: nosniff
Cache-Control: max-age=724919, public
Expires: Thu, 06 Oct 2022 03:20:24 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 7-21472721-0 0CNN RT(1664301504774 562) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  Embedded OpenType (EOT), Roboto Condensed family\012- data
Size:   34854
Md5:    49089efb9b056f7ab0fab851975c6793
Sha1:   f843e6e5e1e955b815caa52dea544cd0c0ba5783
Sha256: 5d3e87be47632dab824ce6fbca3c443bcd0b917fbd6dfebb455422abf8804cf7
                                        
                                            GET /themes/custom/proofpoint/dist/app-drupal/assets/threat_report.svg?f42f90bf12c969d4d28b5357ebe01c29= HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/sites/default/files/css/css_Oy-qEPB4csalL8GpxJCxLMA8nMUYoMMMUZ-V6vnelv4.css
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Last-Modified: Fri, 10 Dec 2021 00:09:04 GMT
Content-Length: 3768
Content-Encoding: gzip
X-Content-Type-Options: nosniff
Cache-Control: max-age=728051, public
Expires: Thu, 06 Oct 2022 04:12:36 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158134-0 0CNN RT(1664301504775 561) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (3806)
Size:   3768
Md5:    489803db8611faa6d327669f14d8d971
Sha1:   4ffb6d12fa9cd9e2ae691c43ecf9e0e6d541dea2
Sha256: f5e013d0719fc633e3f5fa23f5387021e5396020db65f7da5c916d8e2bbcdd72
                                        
                                            GET /css?family=Oswald:200,300,400,500,600,700|Open+Sans+Condensed:300 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 27 Sep 2022 17:58:25 GMT
date: Tue, 27 Sep 2022 17:58:25 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1244
Md5:    d351e6339bf3bb49b084a2cb901dcf39
Sha1:   6d61254c45fc163f3ddfd9de84a809e35f815347
Sha256: f1f508d0a761ba376582975ee5a7ede4a6e16a3a1df2754788938f0e567edca5
                                        
                                            GET /162/munchkin.js HTTP/1.1 
Host: munchkin.marketo.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         88.221.99.189
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Accept-Ranges: bytes
ETag: "75daf56f6191efe42577301908659c29:1656637152.894482"
Last-Modified: Fri, 01 Jul 2022 00:59:12 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=8640000
Expires: Thu, 05 Jan 2023 17:58:25 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Content-Length: 4677
Connection: keep-alive
P3P: policyref="http://www.marketo.com/w3c/p3p.xml", CP="NOI DSP COR NID CURi OUR NOR"


--- Additional Info ---
Magic:  ASCII text, with very long lines (606)
Size:   4677
Md5:    3e9baed982956735f6e0a0e756d97ed9
Sha1:   9223be6a494a10959101a7942419df7b05b84d73
Sha256: 930a508ed0ea6b4861d19c0738360182514010913c4ebfe9352064ae5006f8a1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /geoip/v2.1/country/me?referrer=https%3A%2F%2Fwww.proofpoint.com HTTP/1.1 
Host: geoip-js.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.18.38.74
HTTP/2 200 OK
content-type: application/vnd.maxmind.com-country+json; charset=UTF-8; version=2.1
                                        
date: Tue, 27 Sep 2022 17:58:25 GMT
content-length: 683
access-control-allow-origin: *
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7516209bff91fabc-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (609), with no line terminators
Size:   683
Md5:    0bc35eb3587274dbfcf49f9df8e2e4c0
Sha1:   4d45584ae34554a2b1968830e6b475772a5f5e94
Sha256: 1ebfc621b1d24934b60bed36dbce9f4c1d97af555bf7b6006519cbea9777493e
                                        
                                            GET /pagead/viewthroughconversion/950296937/?random=1664301503495&cv=9&fst=1664301503495&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tiba=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.66
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 17:58:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1038
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 27-Sep-2022 18:13:25 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2282), with no line terminators
Size:   1038
Md5:    3d9f7eb59192b51e8788fef7b8da3235
Sha1:   e23055d27a73f1983d50942be5629f9c517fa747
Sha256: 2e37f357ef3c213682c920e4353ef94188268690ed4504d8bbebf2257826c6b9
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uUDzE5QDByadSkV9ViDSjQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         54.191.210.155
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8k9+9VWt456czAnY7wpOUsKsTZA=

                                        
                                            GET /themes/custom/proofpoint/apps/drupal/images/favicons/favicon-192x192.png HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Etag: "8c65d5f6"
Last-Modified: Thu, 17 Mar 2022 23:08:04 GMT
Content-Length: 5370
X-Content-Type-Options: nosniff
Cache-Control: max-age=724920, public
Expires: Thu, 06 Oct 2022 03:20:25 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158135-0 0CNN RT(1664301504776 897) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced\012- data
Size:   5370
Md5:    c28f39d3df9cf685bcabbaa9c071d0b1
Sha1:   e5da68de25dbca57eb0429e6f96109235ac637e3
Sha256: ba2270e15baa0eea5623196f619a5abab175e21bc2c118cb4c560d2f5107e432
                                        
                                            GET /themes/custom/proofpoint/apps/drupal/images/favicons/favicon-16x16.png HTTP/1.1 
Host: www.proofpoint.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/us/wombat-security-is-now-proofpoint
Connection: keep-alive
Cookie: visid_incap_177663=YzDJ03GMQ3q62ekoj/SqpcA5M2MAAAAAQUIPAAAAAACZGnG1M36dU1mBOuIko92V; incap_ses_7235_177663=SZRgMQ6m+xd3lZBApuJnZMA5M2MAAAAA5+tT8VDk7JYYdzw5AgKIVw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         45.60.155.207
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Etag: "940bbd69"
Last-Modified: Thu, 17 Mar 2022 23:08:04 GMT
Content-Length: 560
X-Content-Type-Options: nosniff
Cache-Control: max-age=724920, public
Expires: Thu, 06 Oct 2022 03:20:25 GMT
Date: Tue, 27 Sep 2022 17:58:25 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-CDN: Imperva
X-Iinfo: 14-65158133-0 0CNN RT(1664301504775 900) q(0 -1 -1 -1) r(0 -1)


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced\012- data
Size:   560
Md5:    bb9f4bbd38875f7ee9ba74d9c9c71805
Sha1:   1e206f3682c7e1f61614637cbd0ccf572001eaed
Sha256: a9d614d4cb845775b845518a17dea1ec597d5c3007e688f807bb82cc1fedf95d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 06:45:16 GMT
Expires: Tue, 04 Oct 2022 06:45:15 GMT
Etag: "721a2b6af35336944dacf079bfd574fa3a6223bc"
Cache-Control: max-age=563808,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516209d88930b65-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 06:45:16 GMT
Expires: Tue, 04 Oct 2022 06:45:15 GMT
Etag: "721a2b6af35336944dacf079bfd574fa3a6223bc"
Cache-Control: max-age=563808,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516209d8c670b02-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 06:45:16 GMT
Expires: Tue, 04 Oct 2022 06:45:15 GMT
Etag: "721a2b6af35336944dacf079bfd574fa3a6223bc"
Cache-Control: max-age=563808,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516209d9b95b506-OSL

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "3C9A102C66972BDB14EA7A885D2E0ED2BC5410665673463EFCC06EE12FF0EE5B"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2459
Expires: Tue, 27 Sep 2022 18:39:25 GMT
Date: Tue, 27 Sep 2022 17:58:26 GMT
Connection: keep-alive

                                        
                                            GET /6si.min.js HTTP/1.1 
Host: j.6sc.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.61.214.147
HTTP/2 200 OK
content-type: application/javascript
                                        
accept-ranges: bytes
etag: "630402a0-786e"
last-modified: Mon, 22 Aug 2022 22:26:40 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
content-length: 9594
cache-control: private, no-cache, proxy-revalidate
expires: Tue, 27 Sep 2022 17:58:26 GMT
date: Tue, 27 Sep 2022 17:58:26 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30830), with no line terminators
Size:   9594
Md5:    cebcbc7a648ed5ed0bb18e36f2e4ef0c
Sha1:   176cdac65d9c13b982daac90c68a539592f578d8
Sha256: 0de815477d22a4607e70bf3a8f1df753639782253a41ca49be7dbdb40b5005e9
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/206034.js HTTP/1.1 
Host: secure.chip2gift.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         51.11.20.152
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Content-Length: 16
Connection: keep-alive
Server: Kestrel
Cache-Control: no-store, must-revalidate
Pragma: no-cache
Expires: 0
Request-Context: appId=cid-v1:abe8a76f-f1a2-4b2e-9017-0ea36ffb5c20


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   16
Md5:    33d696a7233a8ad07ea9a012989a0c0f
Sha1:   c3dcfcc70939a3d356ab4433c73751bd2edaf71c
Sha256: e9b3c1ef5622bc620a5c1d364aa9fbec2c9d6230bb5f6ab825825db09dd71f6a
                                        
                                            GET /s?add=5d1dcad3b00320110090d553&ty=j HTTP/1.1 
Host: ads.avocet.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.243.37.252
HTTP/2 307 Temporary Redirect
content-type: text/html; charset=utf-8
                                        
location: https://ads.avct.cloud/s?r=1&add=5d1dcad3b00320110090d553&ty=j
date: Tue, 27 Sep 2022 17:58:26 GMT
content-length: 106
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   106
Md5:    55b83b0928a3f574953337baa1c1eae3
Sha1:   4c6938b3496a9bfbcd5461c648b364f8a080b81f
Sha256: dfab525f4eb77e2bc6a12e30ae3d9e724db2a35ca2b00d6546f8ac9f9294afd9
                                        
                                            GET /s?add=5aba5f53ab79f7f51390a95a&ty=j HTTP/1.1 
Host: ads.avocet.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.243.37.252
HTTP/2 307 Temporary Redirect
content-type: text/html; charset=utf-8
                                        
location: https://ads.avct.cloud/s?r=1&add=5aba5f53ab79f7f51390a95a&ty=j
date: Tue, 27 Sep 2022 17:58:26 GMT
content-length: 106
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   106
Md5:    c8762410dd9010e4e1d739bb53d4c2e3
Sha1:   b5cb15b18260c02ff24777b84f444c9ed6465a72
Sha256: e738ece332f4e5c1bf2c40969166ef47e16abf334d6e63be95a1b6b66f407574
                                        
                                            GET /activityi;src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=8506185023675.792? HTTP/1.1 
Host: 4788165.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.70
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 17:58:26 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 354
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 27-Sep-2022 18:13:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (467), with no line terminators
Size:   354
Md5:    b3ae5ad1e539ce5266ae798eb4fb3aec
Sha1:   b0eb266667c1ac1179f6370b039e42926fb4d7a3
Sha256: fb6f1b8f05af6065a6d515f6fa25b013be01789933a6a76d749689c1c91c088b
                                        
                                            GET /activityi;src=10487471;type=retar0;cat=retar0;ord=1950427717457;gtm=2wg9q0;auiddc=1371536149.1664301504;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint? HTTP/1.1 
Host: 10487471.fls.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.70
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 17:58:26 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 372
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 27-Sep-2022 18:13:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (488), with no line terminators
Size:   372
Md5:    b00824208ea27d2f1e10378e9833bf78
Sha1:   ae19f7b4cf1a99a178e2ae59aa8933b1580d5516
Sha256: 10ae7598d0c690686f38376b6ea913ad47ab62dd763dc97b531fafbcfa922860
                                        
                                            GET / HTTP/1.1 
Host: c.6sc.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.61.214.147
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 7
date: Tue, 27 Sep 2022 17:58:26 GMT
access-control-allow-origin: https://www.proofpoint.com
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   7
Md5:    d97623d172f087d9640da9acd38830ff
Sha1:   515bd358bb7d990930f0e2b3de399db1787a2567
Sha256: fe04a9dc88d3f3be8d4f6bc63a9a80f45a4c6d8460e7551dab849457c091920a
                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5172
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 17:58:26 GMT
Last-Modified: Tue, 27 Sep 2022 16:32:14 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 06:45:16 GMT
Expires: Tue, 04 Oct 2022 06:45:15 GMT
Etag: "721a2b6af35336944dacf079bfd574fa3a6223bc"
Cache-Control: max-age=563808,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516209d792a0b55-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5073
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 17:58:26 GMT
Last-Modified: Tue, 27 Sep 2022 16:33:53 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 06:45:16 GMT
Expires: Tue, 04 Oct 2022 06:45:15 GMT
Etag: "721a2b6af35336944dacf079bfd574fa3a6223bc"
Cache-Control: max-age=563808,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516209d8f800b31-OSL

                                        
                                            GET /s?r=1&add=5aba5f53ab79f7f51390a95a&ty=j HTTP/1.1 
Host: ads.avct.cloud
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.243.37.252
HTTP/2 307 Temporary Redirect
content-type: text/html; charset=utf-8
                                        
location: /s?bounce=true&r=1&add=5aba5f53ab79f7f51390a95a&ty=j
p3p: policyref="http://cdn.avocet.io/w3c/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: uuid=2ad55ebe-247d-449c-82fb-10df7ff20d61; Path=/; Expires=Wed, 27 Sep 2023 17:58:26 GMT; Max-Age=31536000; HttpOnly
date: Tue, 27 Sep 2022 17:58:26 GMT
content-length: 100
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   100
Md5:    d075d40cd4c240036f80ba34f1c88b53
Sha1:   0520a1f4f4025ef85e05dbe7416ac968319b8251
Sha256: 87d0ef0ea24068f3ea212f167ad1942db21b00481bd02fd6608be9f8fef37d5b
                                        
                                            GET /s?r=1&add=5d1dcad3b00320110090d553&ty=j HTTP/1.1 
Host: ads.avct.cloud
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.243.37.252
HTTP/2 307 Temporary Redirect
content-type: text/html; charset=utf-8
                                        
location: /s?bounce=true&r=1&add=5d1dcad3b00320110090d553&ty=j
p3p: policyref="http://cdn.avocet.io/w3c/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
set-cookie: uuid=5ce695df-1d80-4217-a768-4b22c65f58e0; Path=/; Expires=Wed, 27 Sep 2023 17:58:26 GMT; Max-Age=31536000; HttpOnly
date: Tue, 27 Sep 2022 17:58:26 GMT
content-length: 100
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   100
Md5:    5a415ea0626457c99a3625745152d6ea
Sha1:   b3d92a6eff2459e887cbacee7ef68990e4eeb65f
Sha256: 938db091273df8a698f5068532ca7073d9f70ebc05b9608899ade21318e38f51
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 17:58:26 GMT
Last-Modified: Tue, 27 Sep 2022 16:33:07 GMT
Server: ECS (nyb/1D05)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qm-sW4hUTkn-wkd3_D2g0D-jg9-kWT6p2lLm8-_MUZtBPgmwi9mNJA==
Age: 5119

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s?bounce=true&r=1&add=5aba5f53ab79f7f51390a95a&ty=j HTTP/1.1 
Host: ads.avct.cloud
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.243.37.252
HTTP/2 200 OK
content-type: application/javascript
                                        
p3p: policyref="http://cdn.avocet.io/w3c/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
date: Tue, 27 Sep 2022 17:58:26 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /s?bounce=true&r=1&add=5d1dcad3b00320110090d553&ty=j HTTP/1.1 
Host: ads.avct.cloud
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.243.37.252
HTTP/2 200 OK
content-type: application/javascript
                                        
p3p: policyref="http://cdn.avocet.io/w3c/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
date: Tue, 27 Sep 2022 17:58:26 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /ddm/fls/i/src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=8506185023675.792;~oref=https://www.proofpoint.com/ HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4788165.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.162
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 17:58:26 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 355
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (466), with no line terminators
Size:   355
Md5:    ac06e33d0195b0214ee0cc01f240d4bd
Sha1:   07c4a46fa6d7a54b8c0e953fa5239ddc7cd20180
Sha256: 9f3fba026e9c661bf2c14b7cc0ceb2ce0c701a85c7aaa1962c9cce70229e2690
                                        
                                            GET /ddm/fls/i/src=10487471;type=retar0;cat=retar0;ord=1950427717457;gtm=2wg9q0;auiddc=1371536149.1664301504;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10487471.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.162
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 17:58:26 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 372
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (487), with no line terminators
Size:   372
Md5:    3fc17e44c0f4024eafb1297274695021
Sha1:   6903f85a8fd241dfb7fec630b4b6b1cd2d317e44
Sha256: 7f0ebeffb1733d491644070f063d5a30797850945752591ed705734caa213552
                                        
                                            GET /getuidj HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         37.252.173.62
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Tue, 27 Sep 2022 17:58:26 GMT
Content-Length: 11
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.proofpoint.com
AN-X-Request-Uuid: 84f96bf6-e389-403a-9d42-c902a15572f7
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 535.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   11
Md5:    096dc398f48c9a61584478fea3ee50a1
Sha1:   7d0a5f87833db711b2eb52c73638c5e14538a969
Sha256: 31b45c462302ac175bfa43f9e5591491db780ca094f6ecdd2907f25ad578448d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dproofpoint.com%26pId%3d%24UID HTTP/1.1 
Host: s.ml-attr.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         68.67.153.60
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx/1.21.3
Date: Tue, 27 Sep 2022 17:58:26 GMT
Content-Length: 145
Connection: keep-alive
Location: https://secure.adnxs.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dproofpoint.com%26pId%3d%24UID


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   145
Md5:    aade1473d7f8858a24dcca062a0dbd94
Sha1:   8aeb9a7264176bb0ef56ec85f575f4d0b3356403
Sha256: c6e7b48b0953f99cfe41fea8a58a91f80c563f8db3bf38f8bb1ee6e9ad338ab9
                                        
                                            POST /webevents/visitWebPage?_mchNc=1664301503743&_mchCn=&_mchId=309-RHV-619&_mchTk=_mch-proofpoint.com-1664301503741-32934&_mchHo=www.proofpoint.com&_mchPo=&_mchRu=%2Fus%2Fwombat-security-is-now-proofpoint&_mchPc=https%3A&_mchVr=162&_mchEcid=&_mchHa=&_mchRe=&_mchQp= HTTP/1.1 
Host: 309-rhv-619.mktoresp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         192.28.144.124
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Server: nginx/1.20.1
Date: Tue, 27 Sep 2022 17:58:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Request-Id: b2941308-bbc1-4966-9aae-2898e5dcb55c
Content-Encoding: gzip
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   28
Md5:    9dafc521bd59955b4986f0fc3777f77a
Sha1:   5a572b4730d4a2bce2fa35597a0993c649f26c74
Sha256: e4e90a7b8bacdfe395361149a9fd42f9192b68bdf1497e4454d0ab4c4917f746
                                        
                                            GET /track/122 HTTP/1.1 
Host: track.accountinsight.cloud
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         158.255.109.19
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Cache-Control: no-cache
Pragma: no-cache
Expires: -1
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 17:58:26 GMT
Content-Length: 2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    9d4568c009d203ab10e33ea9953a0264
Sha1:   dd29ecf524b030a65261e3059c48ab9e1ecb2585
Sha256: 12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pixel/?ad_log=referer&action=content&content_id=%2Fus%2Fwombat-security-is-now-proofpoint&pixid=93500acd-fb24-4d4c-b771-2b769752ab62 HTTP/1.1 
Host: data.adxcel-ec2.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.85.194.140
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 43
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    a5098c60b3b0c879a2c7af6c68b7b53f
Sha1:   939f40be7f1aaf623f62886de4aaba3886df9b65
Sha256: 693d949d8c3fdc7fd4ace7c340b5f177a9f0c5be7bafee8bc93a7d88b7523d75
                                        
                                            GET /ddm/fls/i/src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=8506185023675.792;~oref=https://www.proofpoint.com/ HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         172.217.21.162
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 17:58:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://4788165.fls.doubleclick.net/ddm/fls/r/src=4788165;type=sitew0;cat=proof0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=8506185023675.792;~oref=https://www.proofpoint.com/
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /ddm/fls/i/src=10487471;type=retar0;cat=retar0;ord=1950427717457;gtm=2wg9q0;auiddc=1371536149.1664301504;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         172.217.21.162
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 17:58:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://10487471.fls.doubleclick.net/ddm/fls/r/src=10487471;type=retar0;cat=retar0;ord=1950427717457;gtm=2wg9q0;auiddc=1371536149.1664301504;~oref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 17:58:26 GMT
Last-Modified: Tue, 27 Sep 2022 16:17:24 GMT
Server: ECS (nyb/1D32)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _CjsdjgPmJd3IrPk0bd3dUjXZ82ZJ4MBomcpq3mPlCS568yYtgsElQ==
Age: 6063

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 17:58:26 GMT
Last-Modified: Tue, 27 Sep 2022 16:53:10 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: g2GPgA0FfWur34cfUMuHaAEn1mC1wk2gCKanh4Aq1Ip4pNqqNH_Gyg==
Age: 3916

                                        
                                            GET /li.lms-analytics/insight.min.js HTTP/1.1 
Host: snap.licdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10487471.fls.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.210
HTTP/2 200 OK
content-type: application/x-javascript;charset=utf-8
                                        
last-modified: Fri, 12 Aug 2022 20:23:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=48664
date: Tue, 27 Sep 2022 17:58:26 GMT
content-length: 3063
x-cdn: AKAM
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7751)
Size:   3063
Md5:    57efbbeb3e1d23c82b677511c67c8b0e
Sha1:   f927ba115ef4be362694c22850ddbdd1c1b054d1
Sha256: 873b38d80c8ff1ffcac23ecdb7fb2d17413ae3c217236d8e1e24574b1c4707c6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v3/company/details HTTP/1.1 
Host: epsilon.6sense.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Authorization: Token cf897ce61a58c53c1861f742ebebc2622f6b0fcf
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         52.58.117.7
HTTP/2 200 OK
content-type: application/json
                                        
date: Tue, 27 Sep 2022 17:58:26 GMT
content-length: 249
server: nginx
access-control-allow-origin: https://www.proofpoint.com
access-control-allow-credentials: true
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (445), with no line terminators
Size:   249
Md5:    e6e7168d829a1f16a67b08942690076d
Sha1:   099be4afd94f948c32bf8e696a613d67d59f8245
Sha256: e7538057a0b1e5b73b8ed35bef05a7fe8e9b03dfa0d295ada080fa280638e5e9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 10:36:58 GMT
Expires: Tue, 04 Oct 2022 10:36:57 GMT
Etag: "23db9e1473278516fa89950ed872d4db4ac9d295"
Cache-Control: max-age=577710,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516209fdade0b65-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 24 Sep 2022 19:37:17 GMT
Expires: Sat, 01 Oct 2022 19:37:16 GMT
Etag: "a684aa0fde0f8d576844bcda26814e06fdcfcf7d"
Cache-Control: max-age=350929,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516209fdfc00b02-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5611
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 17:58:26 GMT
Last-Modified: Tue, 27 Sep 2022 16:24:55 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=b6dfb821-8ab9-467f-86d0-9a4c83a5cd66&session=c57fc5b7-cacd-47b4-8f99-10b6cedb6947&event=a_pageload&q=%7B%22pageLoadTime%22%3A%22Tue%2C%2027%20Sep%202022%2017%3A58%3A24%20GMT%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=30b510c6-950b-4424-835a-f95fd6f61179 HTTP/1.1 
Host: b.6sc.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.61.214.147
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
etag: "60bb2e15-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Sat, 05 Jun 2021 07:56:05 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Tue, 27 Sep 2022 17:58:26 GMT
set-cookie: 6suuid=261f1602931c0000c2393363e102000089410600; expires=Thu, 26-Sep-2024 17:58:26 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    f837aa60b6fe83458f790db60d529fc9
Sha1:   14af87ccec7f81bb28d53c84da2fd5a9d5925cda
Sha256: dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
                                        
                                            GET /event/img?mt_id=1442966&mt_adid=226348&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=&ord=1450774192 HTTP/1.1 
Host: pixel.mathtag.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4788165.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.38.200.207
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 43
Access-Control-Allow-Origin: *
Server: MT3 4525 e1952b7 master iad-pixel-x17 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Tue, 27 Sep 2022 17:58:25 GMT
Date: Tue, 27 Sep 2022 17:58:26 GMT
Connection: keep-alive
Set-Cookie: uuid=70836333-39c2-4e00-b6b5-ae6ef6d920a1; domain=.mathtag.com; path=/; expires=Wed, 25-Oct-2023 17:58:26 GMT; SameSite=None; Secure


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /up/d7557a63ab8c88be?url=retargeting&cntr_revenue=&cntr_transactionId=1950427717457&u1=&u2=&u3=&u4=&u5=&cntr_url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint HTTP/1.1 
Host: pixel.sitescout.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10487471.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         66.155.71.25
HTTP/2 302 Found
                                        
set-cookie: ssi=75f6f3cb-1bbf-4276-8c13-1d79db99d839#1664301506789; Domain=.sitescout.com; Expires=Wed, 27-Sep-2023 17:58:26 GMT; Path=/; Secure; SameSite=None
location: https://pixel.sitescout.com/up/d7557a63ab8c88be?cookieQ=1&url=retargeting&cntr_revenue=&cntr_transactionId=1950427717457&u1=&u2=&u3=&u4=&u5=&cntr_url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint
content-length: 0
date: Tue, 27 Sep 2022 17:58:26 GMT
server: AC1.1
X-Firefox-Spdy: h2

                                        
                                            GET /up/d7557a63ab8c88be?cookieQ=1&url=retargeting&cntr_revenue=&cntr_transactionId=1950427717457&u1=&u2=&u3=&u4=&u5=&cntr_url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint HTTP/1.1 
Host: pixel.sitescout.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://10487471.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         66.155.71.25
HTTP/2 200 OK
content-type: image/gif
                                        
cache-control: max-age=0,no-cache,no-store
pragma: no-cache
expires: Tue, 11 Oct 1977 12:34:56 GMT
p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml"
content-length: 43
date: Tue, 27 Sep 2022 17:58:26 GMT
server: AC1.1
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /activity/activity.gif?activityTypeId=31&cid=1268939&version=2.1.1&ref=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&r=1664301504065 HTTP/1.1 
Host: apt.techtarget.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Cookie: __cf_bm=.Qb7l0jeQIjlp7iuiPX8PKadaIKv5rhWW5.LVGPP.e0-1664301506-0-AdHDXD4T9U+lYn/EiO/fg4ogY0BfC5IfNhc7ozBpwbNgEzjpus8JQ58extizXnQQ9IKxl4E/EdviPr5yYAALPQ8=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         206.19.49.24
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 27 Sep 2022 17:58:26 GMT
Server: Apache/2.4.6 (CentOS)
Last-Modified: Tue, 26 Mar 2019 18:30:29 GMT
ETag: "2b-5850384023492"
Accept-Ranges: bytes
Content-Length: 43
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /collect/?pid=169250&conversionId=9734538&fmt=gif HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://4788165.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.107.42.14
HTTP/2 302 Found
                                        
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fpid%3D169250%26conversionId%3D9734538%26fmt%3Dgif%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQKT_gY0BGkL4gAAAYOAGaDKi2mJwQdt7pBtzJdiWpkDQkPi5SGbN4i8PZu29DCr2ZFMgP5PDOGEPg; Max-Age=2592000; Expires=Thu, 27 Oct 2022 17:58:26 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure AnalyticsSyncHistory=AQK4kc4knGdgRQAAAYOAGaDKLozZk6qpIiURv1H65QsmNtpp_tWOBjiaUTTv6czjiskWQsE5gtNz_4qkaos_Bg; Max-Age=2592000; Expires=Thu, 27 Oct 2022 17:58:26 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&98b5a04d-c6d0-4681-83e6-ddd7ba80aa44"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 27-Sep-2023 17:58:26 GMT; SameSite=None lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2392:u=1:x=1:i=1664301506:t=1664387906:v=2:sig=AQGW7Bd7cYqGs7qBQE0JBuchpyqPcv8B"; Expires=Wed, 28 Sep 2022 17:58:26 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXprGQb8zSDzAdKGKw5xQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 0AE9808D173D4CA092436D43B11C23CD Ref B: OSL30EDGE0518 Ref C: 2022-09-27T17:58:26Z
date: Tue, 27 Sep 2022 17:58:26 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /collect?v=2&fmt=js&pid=2782676&time=1664301504478&url=https%3A%2F%2Fadservice.google.com%2F HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://10487471.fls.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.42.14
HTTP/2 302 Found
                                        
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2782676%26time%3D1664301504478%26url%3Dhttps%253A%252F%252Fadservice.google.com%252F%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQLeZwVgXHqL6wAAAYOAGaDtiKtjG0HzmuBgQ6ndldn622-TxByp3CeMVeziGpGMmE045XYxo-mjww; Max-Age=2592000; Expires=Thu, 27 Oct 2022 17:58:26 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure AnalyticsSyncHistory=AQK2DCroNwMGawAAAYOAGaDtouB2e4ua12jb4iSVSyYhR7sCqLvdmncDPEpjATkks1J1dudFjtrxwP6YMceV0Q; Max-Age=2592000; Expires=Thu, 27 Oct 2022 17:58:26 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&5afa87ad-c0fb-4106-839c-5f9872b253c1"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 27-Sep-2023 17:58:26 GMT; SameSite=None lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2351:u=1:x=1:i=1664301506:t=1664387906:v=2:sig=AQHljmRm_z89l4RSynqeFg2jWz7BNBRw"; Expires=Wed, 28 Sep 2022 17:58:26 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXprGQceRwkxyjnPsOIvw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 443CC0F6683244BCB782E5E688CDDBBB Ref B: OSL30EDGE0518 Ref C: 2022-09-27T17:58:26Z
date: Tue, 27 Sep 2022 17:58:26 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /p/v/1/5b7320b8f870815f7f59492b/format/img?gtmcb=2114034409 HTTP/1.1 
Host: gwmtracking.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.200.122.11
HTTP/1.1 302
Content-Type: image/png
                                        
Set-Cookie: kwsu=633339c2f6c7b54435b2e7bc; Max-Age=2147483647; Expires=Sun 15 Oct 2090 14:12:33 GMT; Path=/; Secure; SameSite=None
Location: https://ad.doubleclick.net/ddm/activity/src=8909468;type=invmedia;cat=1l6xh4ap;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1?
Content-Length: 0
Date: Tue, 27 Sep 2022 17:58:26 GMT

                                        
                                            POST /g/collect?v=2&tid=G-B1V8SZE3GL&gtm=2oe9q0&_p=1255455529&cid=1818797698.1664301504&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664301504&sct=1&seg=0&dl=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&dt=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.proofpoint.com
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://www.proofpoint.com
date: Tue, 27 Sep 2022 17:58:26 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fpid%3D169250%26conversionId%3D9734538%26fmt%3Dgif%26liSync%3Dtrue HTTP/1.1 
Host: www.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4788165.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.42.14
HTTP/2 302 Found
                                        
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?pid=169250&conversionId=9734538&fmt=gif&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None bcookie="v=2&ce79a1ad-eefa-41fb-88d4-41f2d42cf20d"; Domain=.linkedin.com; Expires=Wed, 27-Sep-2023 17:58:26 GMT; Path=/; Secure; SameSite=None bscookie="v=1&2022092717582644e7c3db-f1cc-4377-8b2b-20bf203e0738AQFdQ4vVi4IhAw5FxsWb6x72lR4XK6-4"; Domain=.www.linkedin.com; Expires=Wed, 27-Sep-2023 17:58:26 GMT; Path=/; HttpOnly; Secure; SameSite=None li_gc=MTswOzE2NjQzMDE1MDY7MjswMjHmR/jN+eUKk+5AlYE3KgIZmo4vxAYeF2elSUPd8/k3ZQ==; Domain=.linkedin.com; Expires=Sun, 26 Mar 2023 17:58:26 GMT; Path=/; Secure; SameSite=None lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2397:u=1:x=1:i=1664301506:t=1664387906:v=2:sig=AQHEh-rFFicFAiix_MzJYCndmDFaet_Q"; Expires=Wed, 28 Sep 2022 17:58:26 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXprGQeM/3gSQQh4BbnCw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 9C9F2EA6F0244FFD828CA4B8CE483D8D Ref B: OSL30EDGE0518 Ref C: 2022-09-27T17:58:26Z
date: Tue, 27 Sep 2022 17:58:26 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D2782676%26time%3D1664301504478%26url%3Dhttps%253A%252F%252Fadservice.google.com%252F%26liSync%3Dtrue HTTP/1.1 
Host: www.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://10487471.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.42.14
HTTP/2 302 Found
                                        
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=2782676&time=1664301504478&url=https%3A%2F%2Fadservice.google.com%2F&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None bcookie="v=2&0d2b6007-3a4a-4c84-815d-ed72fda4fda4"; Domain=.linkedin.com; Expires=Wed, 27-Sep-2023 17:58:26 GMT; Path=/; Secure; SameSite=None bscookie="v=1&20220927175826e969e9a6-fe9c-4b74-8941-7fe49123833eAQEnx6wAZDFJZLqwem44v28rciBh8XjD"; Domain=.www.linkedin.com; Expires=Wed, 27-Sep-2023 17:58:26 GMT; Path=/; HttpOnly; Secure; SameSite=None li_gc=MTswOzE2NjQzMDE1MDY7MjswMjF9bBGasJ5unj7bPxel/MajN4brgD2uJ3nLFuLiT7VlUg==; Domain=.linkedin.com; Expires=Sun, 26 Mar 2023 17:58:26 GMT; Path=/; Secure; SameSite=None lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2392:u=1:x=1:i=1664301506:t=1664387906:v=2:sig=AQGW7Bd7cYqGs7qBQE0JBuchpyqPcv8B"; Expires=Wed, 28 Sep 2022 17:58:26 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com https://*.qualtrics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXprGQfQc98k/uWw0bx9g==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 3DE713C38A2A47A1973E3BF289BF24A0 Ref B: OSL30EDGE0518 Ref C: 2022-09-27T17:58:26Z
date: Tue, 27 Sep 2022 17:58:26 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dproofpoint.com%26pId%3d%24UID HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         37.252.173.62
HTTP/1.1 307 Redirection
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.21.3
Date: Tue, 27 Sep 2022 17:58:27 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253dproofpoint.com%2526pId%253d%2524UID
AN-X-Request-Uuid: b8bd7ab1-04f5-4b69-84c3-2e16e5519261
Set-Cookie: uuid2=8149778301698690441; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 26-Dec-2022 17:58:27 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 535.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

                                        
                                            GET /j/roundtrip.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.75
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 21:24:31 GMT
X-Amz-Server-Side-Encryption: AES256
X-Amz-Version-Id: Vddx38ZQKv1IbZ14KTosCACMGBmCuRF1
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 27 Sep 2022 17:23:34 GMT
Cache-Control: max-age=3600, must-revalidate
Etag: W/"ce41fb88f59dfd9edbd6253effb535a4"
Vary: Accept-Encoding
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
Age: 2129
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: R7j8RSZ6QKBmQuWMyFCvmkhodNOnum9HQcV7did0E4Ow3BggPYhFIw==


--- Additional Info ---
Magic:  ASCII text, with very long lines (1096)
Size:   16917
Md5:    cdc1509b78fb548643392a6919a4ad6f
Sha1:   6fdf59e351a2e7fade5eeb661a0871ea12db0a7b
Sha256: 58c2118995d5680b9d664ef499babf4b1b7fff2ec59a9bf56eabebe8fde5b4dd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5529
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 17:58:27 GMT
Last-Modified: Tue, 27 Sep 2022 16:26:18 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Tue, 27 Sep 2022 16:41:09 GMT
expires: Tue, 27 Sep 2022 18:41:09 GMT
cache-control: public, max-age=7200
age: 4638
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   19826
Md5:    cae538dcce82598fbe43c0bf443e62dd
Sha1:   cc68ac6be9c5e0087a0000e5735b83270ace30f5
Sha256: 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /uwt.js HTTP/1.1 
Host: static.ads-twitter.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.84.157
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
last-modified: Tue, 30 Aug 2022 20:19:10 GMT
cache-control: no-cache
content-encoding: gzip
etag: "d4de8398858246712016031c834bb061+gzip+gzip"
accept-ranges: bytes
date: Tue, 27 Sep 2022 17:58:27 GMT
x-served-by: cache-iad-kcgs7200072-IAD, cache-bma1675-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15317
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (57443), with no line terminators
Size:   15317
Md5:    1e9c4d503a9e162d8b549dc3d9c040e2
Sha1:   1fa99d7d7e878cdd45567af4b0c3c65542036c1d
Sha256: f936c0124c595fe5d0c7858277f3a5f3bd104de39d36ac92557501fa1dec8563
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 17:58:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/950296937/?random=1664301503495&cv=9&fst=1664298000000&num=1&guid=ON&eid=375603260&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tiba=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&fmt=3&is_vtc=1&random=2029586098&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 17:58:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         204.79.197.200
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: private,max-age=1800
content-length: 11376
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=15072E1048176705139B3C3C4940665B; domain=.bing.com; expires=Sun, 22-Oct-2023 17:58:27 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E0B201D772FC4F93B3E2D2D688DA9344 Ref B: OSL30EDGE0411 Ref C: 2022-09-27T17:58:27Z
date: Tue, 27 Sep 2022 17:58:27 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Size:   11376
Md5:    2fe1e0c50cbb86b0c379ed78416df9c5
Sha1:   3e2c958bf438bc1486502253d613527fde7fdb25
Sha256: 57ab58b1840406037c30d4031235b6a715ee6f96f2574ab1eb93c5f4d6894bcd
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.14
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: L48QB3gZzTZQMBU6fFd/u60cEjq1U2UsItHxLSplDo04dTqocFE3a16i7Lq2FqVIURi1Dd8ZN+v+AuJVt72/BQ==
priority: u=3,i
content-length: 26840
x-fb-trip-id: 1679558926
date: Tue, 27 Sep 2022 17:58:27 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   26840
Md5:    e1327a02d76346c7e23d114e4e508b30
Sha1:   195b8ad875ab8f7a7adf735f1f70aa02b3a2e1a3
Sha256: 331e67b451c6559915b12ab2df810ccdba73b3971c5301b2010b54dd6d391de2
                                        
                                            GET /collect?pid=169250&conversionId=9734538&fmt=gif&liSync=true HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://4788165.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.42.14
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 65
content-encoding: gzip
vary: Accept-Encoding
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&f191360d-e17c-41ea-8dcc-0f571c144ef8"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 27-Sep-2023 17:58:27 GMT; SameSite=None lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2351:u=1:x=1:i=1664301507:t=1664387907:v=2:sig=AQFrRMS1TBYMvZbpxu6HgFWkOLCiDS3H"; Expires=Wed, 28 Sep 2022 17:58:27 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXprGQgyPsO0k1L4JkQvg==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F6C1772483D44783AA34EE300EB91B8B Ref B: OSL30EDGE0518 Ref C: 2022-09-27T17:58:26Z
date: Tue, 27 Sep 2022 17:58:27 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   65
Md5:    8b0d5b18476ae12e2476f3621d54c4a5
Sha1:   2ad669e9d207fbb37e84dda25766dbaeb66d792c
Sha256: 2d7244b6960d26ae56f048f162f02949ca7858be19d9349ec82906e56dfa3cfe
                                        
                                            GET /pagead/1p-user-list/950296937/?random=1664301503495&cv=9&fst=1664298000000&num=1&guid=ON&eid=375603260&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tiba=Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint&fmt=3&is_vtc=1&random=2029586098&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 17:58:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /collect?v=2&fmt=js&pid=2782676&time=1664301504478&url=https%3A%2F%2Fadservice.google.com%2F&liSync=true HTTP/1.1 
Host: px.ads.linkedin.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://10487471.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.42.14
HTTP/2 200 OK
content-type: application/javascript
                                        
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure bcookie="v=2&39e35a4b-73a6-42f4-8c81-24d7ebba146c"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 27-Sep-2023 17:58:27 GMT; SameSite=None lidc="b=VGST09:s=V:r=V:a=V:p=V:g=2397:u=1:x=1:i=1664301507:t=1664387907:v=2:sig=AQFcDwxZyOGmOasmGjRePzTtex2G-OeG"; Expires=Wed, 28 Sep 2022 17:58:27 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lva1
x-li-pop: afd-prod-lva1-x
x-li-proto: http/2
x-li-uuid: AAXprGQhuq2Ms0FnPuMksw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 4B74304D50E94B20A8EF2BC69B5CEE4A Ref B: OSL30EDGE0518 Ref C: 2022-09-27T17:58:27Z
date: Tue, 27 Sep 2022 17:58:27 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /attribution_tracking/conversions/1645.js?p=https://www.proofpoint.com/us/wombat-security-is-now-proofpoint&e= HTTP/1.1 
Host: tracking.g2crowd.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.18.36.55
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
date: Tue, 27 Sep 2022 17:58:26 GMT
cache-control: max-age=600, public
etag: W/"3dae93a05edd9dcfc1864b87178a31e0"
x-request-id: a876c508-042b-477e-b28e-9a97df854c38
x-runtime: 0.003609
strict-transport-security: max-age=604800
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self' *.g2crowd.com *.g2.com; connect-src 'self' *.g2crowd.com *.g2.com; font-src 'self' *.g2crowd.com *.g2.com; form-action 'self' *.g2crowd.com *.g2.com; frame-src 'self' *.g2crowd.com *.g2.com; img-src 'self' *.g2crowd.com *.g2.com; manifest-src 'self' *.g2crowd.com *.g2.com; media-src 'self' *.g2crowd.com *.g2.com; object-src 'self' *.g2crowd.com *.g2.com; script-src 'self' *.g2crowd.com *.g2.com; style-src 'self' *.g2crowd.com *.g2.com; worker-src 'self' *.g2crowd.com *.g2.com
cf-cache-status: DYNAMIC
set-cookie: _session_id=26d0408c28ce7dbd572e2fa3d5bfb7f9; path=/; expires=Tue, 11 Oct 2022 17:58:26 GMT; HttpOnly; secure; SameSite=None __cf_bm=KNrp74DHt2ArWhM7flGHdqa0W1fsJEDLa68T7fHy_kM-1664301506-0-AQAoUGB/BQcrwAjZ3pM4RPmC1McWMHP8bpBZ4/jWWbVitLnKsjpq0441yrRFds+U8ZQt4sKH9TU4hivaH+6CTAc=; path=/; expires=Tue, 27-Sep-22 18:28:26 GMT; domain=.g2crowd.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7516209edf9cb4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   20
Md5:    5b920c7eefbc73bd9199e5c12ff35531
Sha1:   7ad858a5251bad62a254a19b0983676c8ca50898
Sha256: d879481b68705d682b81dd34850bae06ffc7fbf464b16da9a9ef54ecf2e421b3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5529
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 17:58:27 GMT
Last-Modified: Tue, 27 Sep 2022 16:26:18 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3799
Expires: Tue, 27 Sep 2022 19:01:46 GMT
Date: Tue, 27 Sep 2022 17:58:27 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3799
Expires: Tue, 27 Sep 2022 19:01:46 GMT
Date: Tue, 27 Sep 2022 17:58:27 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 634
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 17:58:27 GMT
Last-Modified: Tue, 27 Sep 2022 17:47:53 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 312

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9163
x-amzn-requestid: 8ccd9b1f-bef9-4591-be32-e6dd98f4ee78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlKpEZrIAMFS1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bdd-4a40b9c8281b64c725fec0f1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:38:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lf6qqokEw32egp3ofmJGtUTAt3RD2f9rVq5gskbhrk_VFGweeo0oCQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:49:18 GMT
age: 72549
etag: "84f5a4c8b38acde814bc790e5b514347718d5bb9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9163
Md5:    deb8d1e3b6d7fbc8c8ba478269621676
Sha1:   84f5a4c8b38acde814bc790e5b514347718d5bb9
Sha256: ed14fa766f0708b4166e83b61f160db5671af430917b7c67184bf18d9208742b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5319
x-amzn-requestid: d4c13fa8-eb03-4abf-9516-b74eac712b87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFkreHL5IAMFcOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b16-487923453bd27d6a744b5a31;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:35:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gGfaq_dx7NIHH43-iNn0Ah61HRLT8H3NxPGVoDvkKgBgy8zJWYwRuw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:49:18 GMT
age: 72549
etag: "75df3341e30281fcbf78c7074980356fdf0be8e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5319
Md5:    46e31aa06b8e86a9a5f9ba1cc3feca08
Sha1:   75df3341e30281fcbf78c7074980356fdf0be8e2
Sha256: d1fd4f81b7e0f43de960f0ee024d9e87bcb395f032a4ab0360e3829d1ec8a42b
                                        
                                            GET /pagead/conversion_async.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 27 Sep 2022 17:58:27 GMT
expires: Tue, 27 Sep 2022 17:58:27 GMT
cache-control: private, max-age=3600
etag: 3080337328058561381
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15693
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   10211
Md5:    347dca206e13a3b13953f0ab398310b4
Sha1:   be60bbc96c832ae385cc9ae5828bd32703011b21
Sha256: f6da888a54a0c6c73466f2c2a72dd875514a39d81b760a6b0116b4dd56ef31dd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 634
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 17:58:27 GMT
Last-Modified: Tue, 27 Sep 2022 17:47:53 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 312

                                        
                                            GET /c/hotjar-1456002.js?sv=7 HTTP/1.1 
Host: static.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.39
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
date: Tue, 27 Sep 2022 17:58:27 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/7c6dbf16343e392ee34afc1102fbfd1c
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oZYS3J009LxjADQUGuSmV33O1Gbf-0ZiaC-ejvNoK60nQUkj85A05A==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3790)
Size:   12432
Md5:    9383d713ff4e5958e1684b56832c9741
Sha1:   29568842998615f843b6aeb1fcee2cad9e5bc2ca
Sha256: f9f2273ddf6731d6cdb8799bb62c1371fb9cceee7347f62fca4293d566cf1e25
                                        
                                            GET /box-69edcc3187336f9b0a3fbb4c73be9fe6.html HTTP/1.1 
Host: vars.hotjar.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.105
HTTP/2 200 OK
content-type: text/html
                                        
content-length: 1044
date: Wed, 07 Sep 2022 09:17:07 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "f6a9ca04b0687ea3c0d98e8430c8c77b"
last-modified: Wed, 07 Sep 2022 09:16:57 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ib_qRfLr3W0Bj6ETWj5Ta0TR93ImO40pKCOsdRYAgAI777hEhKpaaA==
age: 1759280
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Size:   1044
Md5:    f6a9ca04b0687ea3c0d98e8430c8c77b
Sha1:   35503b2deb23091a9a9c6c68d4020dbdf879588e
Sha256: 8e4328ecb6b395499567369e3c227231dbdaf361f43ce315934d7a2a3abbed41
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6390
x-amzn-requestid: b2681ff8-ab83-41e6-adef-3e6772c93c3f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGFJ6Gc_oAMF44g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63324f0c-3dbf9f4e2047567b5abdbe74;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 01:17:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8JXEBo_L_xKuKdeoOXEJ6FO7ZVsZVQzUmQFe7fYcxaHRQNEq1HWp6w==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:25:52 GMT
age: 59555
etag: "61676358cdbb2373bc644e66f8a84fbc8cc5daf6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6390
Md5:    14218a43c5e5bbce546735a780c8ccce
Sha1:   61676358cdbb2373bc644e66f8a84fbc8cc5daf6
Sha256: 905b1c30a2273aef69904f2eb1451c756fc1fdba02e86ea5c957629dd056aeda
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7455
x-amzn-requestid: 0887cd56-f324-46cf-a086-709e1c66f354
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGBTdHmhoAMFvIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633248e2-42391706084f335228fe3994;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 00:50:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: vx-yM_jeJvOaa1UizK5OoDJFkvKnajg2ezLF2l2qnN_OhdTE6I4taQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:05:55 GMT
etag: "1a26007f761e439db575fb80fb403031260aecf4"
age: 60752
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7455
Md5:    5274e770cb5a704916c8965659709f4a
Sha1:   1a26007f761e439db575fb80fb403031260aecf4
Sha256: e36e8be75c92feb9b416a46c5918356d8f9694894a799b7c10de21034d33d5ef
                                        
                                            GET /i/adsct?bci=3&eci=2&event_id=3e71e346-69c3-488f-9546-6e71539b4ab8&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=752290ba-16ba-48e8-9569-877e131bc037&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nyk4d&type=javascript&version=2.3.27 HTTP/1.1 
Host: t.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.244.42.197
HTTP/2 200 OK
content-type: image/gif;charset=utf-8
                                        
date: Tue, 27 Sep 2022 17:58:27 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=1de06a14-8546-45d8-a274-266607f992c3; Max-Age=63072000; Expires=Thu, 26 Sep 2024 17:58:27 GMT; Path=/; Domain=t.co; Secure; SameSite=None
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: c4fdcf82ae9059ba
strict-transport-security: max-age=0
x-response-time: 106
x-connection-hash: 287371c3e013999c0c0546280cf12aeb0515f532c73b4c4750f122cf1bfdca62
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    377d257f2d2e294916143c069141c1c5
Sha1:   b7cae69682cf31dd670b65088db8395acda6ed3e
Sha256: ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
                                        
                                            GET /i/adsct?bci=3&eci=2&event_id=8e0d2f68-840c-4f89-811b-70686540e0a2&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=752290ba-16ba-48e8-9569-877e131bc037&tw_document_href=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o73l9&type=javascript&version=2.3.27 HTTP/1.1 
Host: t.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.244.42.197
HTTP/2 200 OK
content-type: image/gif;charset=utf-8
                                        
date: Tue, 27 Sep 2022 17:58:27 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=377093c6-c6d1-48ac-a2e9-1e0a59b3578e; Max-Age=63072000; Expires=Thu, 26 Sep 2024 17:58:27 GMT; Path=/; Domain=t.co; Secure; SameSite=None
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: af0aa5a92e7087a3
strict-transport-security: max-age=0
x-response-time: 103
x-connection-hash: 287371c3e013999c0c0546280cf12aeb0515f532c73b4c4750f122cf1bfdca62
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    377d257f2d2e294916143c069141c1c5
Sha1:   b7cae69682cf31dd670b65088db8395acda6ed3e
Sha256: ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
                                        
                                            GET /j/exp/7YJ7XZCLMRHSVCXIHB5HIT/index.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.75
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
                                        
Content-Length: 0
Connection: keep-alive
Date: Tue, 27 Sep 2022 01:13:02 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/exp/index.js
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
Age: 60325
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rDNNzYn56RJnlmagRdLROo0OCZSrCV9lzAn8toKyvjoBai8wKqooYA==

                                        
                                            GET /j/pre/7YJ7XZCLMRHSVCXIHB5HIT/YV5KYXXEJZATZCT37YRTMK/fpconsent.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.75
HTTP/1.1 302 Moved Temporarily
Content-Type: application/xml
                                        
Content-Length: 0
Connection: keep-alive
Date: Tue, 27 Sep 2022 04:30:34 GMT
Server: AmazonS3
Location: https://s.adroll.com/j/pre/index.js
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
Age: 48473
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ru4-BY8XEEn629TBv2H7Yxx53rwahLwGAoqreGo17gTymgjOP-2A7g==

                                        
                                            GET /v1/beacon/img.gif?token=76d4adecd2340b300ba5d4296ecef89d&svisitor=null&visitor=b6dfb821-8ab9-467f-86d0-9a4c83a5cd66&session=c57fc5b7-cacd-47b4-8f99-10b6cedb6947&event=active_time_track&q=%7B%22currentTime%22%3A%22Tue%2C%2027%20Sep%202022%2017%3A58%3A25%20GMT%22%2C%22lastTrackTime%22%3A%22Tue%2C%2027%20Sep%202022%2017%3A58%3A24%20GMT%22%2C%22timeSpent%22%3A%221179%22%2C%22totalTimeSpent%22%3A%221179%22%7D&isIframe=false&m=%7B%22description%22%3A%22Wombat%20Security%20is%20now%20Proofpoint%20Security%20Awareness%20Training.%20Learn%20about%20the%20integration%20and%20benefits%20you%20get%20with%20Proofpoint.%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22Wombat%20Security%20Is%20Now%20Proofpoint%20%7C%20Proofpoint%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Fwww.proofpoint.com%2Fus%2Fwombat-security-is-now-proofpoint&pageViewId=30b510c6-950b-4424-835a-f95fd6f61179&an_uid=0 HTTP/1.1 
Host: b.6sc.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.proofpoint.com/
Cookie: 6suuid=261f1602931c0000c2393363e102000089410600
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.61.214.147
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
etag: "60bb2e15-2b"
expires: Wed, 19 Apr 2000 11:43:00 GMT
last-modified: Sat, 05 Jun 2021 07:56:05 GMT
pragma: no-cache
server: nginx/1.14.0 (Ubuntu)
x-content-type-options: nosniff
content-length: 43
date: Tue, 27 Sep 2022 17:58:27 GMT
set-cookie: 6suuid=261f1602931c0000c2393363e102000089410600; expires=Thu, 26-Sep-2024 17:58:27 GMT; path=/; domain=.6sc.co; SameSite=None; secure
access-control-allow-origin:
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    f837aa60b6fe83458f790db60d529fc9
Sha1:   14af87ccec7f81bb28d53c84da2fd5a9d5925cda
Sha256: dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
                                        
                                            GET /j/exp/index.js HTTP/1.1 
Host: s.adroll.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.proofpoint.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site