firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 10:38:17 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GYwhVxOK1yX0-Y_4nObidl6e6E-Vw2mpRK5-JbhCwJy4s1Di4J6rIw==
Age: 2375
nprins.vip/watch-this
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /watch-this HTTP/1.1
Host: nprins.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 04 Oct 2022 11:17:51 GMT
Content-Length: 0
Cache-Control: no-cache, no-store
Expires: -1
Location: https://www.enron20.com/?view=module-3
Engine: Rebrandly.redirect, version 2.1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9955bda9c9ef64bc5700a14af0bae25e
8de7b7469e905af0374bdfcc3006bbb844f13e94
1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2570
Expires: Tue, 04 Oct 2022 12:00:42 GMT
Date: Tue, 04 Oct 2022 11:17:52 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: g8L-j-07AD5ndfVWLctTcWV5kIcaTTJnzYW8WASSYhyAaSw16uwWQQ==
age: 20965
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 11:17:52 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 14f0431357ee30876cab369cabd62562
b7a9a525a67e1102f80e1e52a2c0e162baf3d070
65dab30734ea29e3467c8d16ebe454009734bde6fc545018f5ec350a2fa3594e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "65DAB30734EA29E3467C8D16EBE454009734BDE6FC545018F5EC350A2FA3594E"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21553
Expires: Tue, 04 Oct 2022 17:17:05 GMT
Date: Tue, 04 Oct 2022 11:17:52 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 04 Oct 2022 10:29:33 GMT
Expires: Tue, 04 Oct 2022 11:17:08 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: wnGXt-h2FOlvZnANf8ukZHTQ5FVZ5MJ9CQiOLo_YN7Zn-rCphjahjw==
Age: 2899
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 14f0431357ee30876cab369cabd62562
b7a9a525a67e1102f80e1e52a2c0e162baf3d070
65dab30734ea29e3467c8d16ebe454009734bde6fc545018f5ec350a2fa3594e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "65DAB30734EA29E3467C8D16EBE454009734BDE6FC545018F5EC350A2FA3594E"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21553
Expires: Tue, 04 Oct 2022 17:17:05 GMT
Date: Tue, 04 Oct 2022 11:17:52 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 16ebfb2aa621547ecf581e26fc828a7d
f78993331f6f5b8af6409a9ad2fc50b77070f68a
0f81fd1d6be9ccc04b74f0348aafe642c7b9ab7dffb7e8a679b5d67cc2e5fac3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3156
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:53 GMT
Last-Modified: Tue, 04 Oct 2022 10:25:17 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BY/DhQFyUvB8zUXb7p6mXQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: PpmG2yYO9sMmwt15j4/ZY6o9h6o=
cdnjs.cloudflare.com/ajax/libs/jsencrypt/2.3.1/jsencrypt.min.js
200 OK 16 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jsencrypt/2.3.1/jsencrypt.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (13814)
Hash e5e4097d09b3f47c8f128dd657d9522a
6106bf701b5761445d7636e44ac654706b3736ee
a81fdcab5a72200658d11fd509f43c23cc64bc717f0a807c5f40b22a44f2cb5a
GET /ajax/libs/jsencrypt/2.3.1/jsencrypt.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 15539
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec6-db4e"
last-modified: Mon, 04 May 2020 16:11:50 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1267420
expires: Sun, 24 Sep 2023 11:17:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t8o3c3G813hIq4MHkd9Nm%2Bm1y0RUPGClN%2BqHXdG9vxvwgmlnWHd6i3pPCjJO6bAlW97vs%2FbpyOSXCZJsY94zoUPWeeP8wcXPsyyeNIfK7%2BtQu5XXyKAAbGyBljv0U1vSoN8aa87Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 754d838259f81c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fdf91f6e6430159255a855cfa8db51bd
6c1283d1b8dc5e95d3f1b01d40f11ddacea7907a
6f023549dea5615ad2c405c3c1ab1d9ef8f0c8792646644c13b15bd63a642633
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6285
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:53 GMT
Last-Modified: Tue, 04 Oct 2022 09:33:08 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
code.jquery.com/jquery-3.6.0.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:53 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1664882273.dop010.sk1.t,1664882273.cds068.sk1.hn,1664882273.cds210.sk1.c
X-Firefox-Spdy: h2
code.jquery.com/ui/1.13.1/jquery-ui.min.js
200 OK 68 kB URL HTTP/2 code.jquery.com/ui/1.13.1/jquery-ui.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (64399)
Hash 2ce23f2617e67daa4190fc0ce26473c7
fb6286e6faf45fee885cff5876ddfef90cf3ba8c
d2e40aec79c3ba5416d1af1bbdc8c093207dbf89ef63c2fbf77ff6ac05ed4cb3
GET /ui/1.13.1/jquery-ui.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:53 GMT
content-encoding: gzip
content-length: 67637
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:40 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd700-3e46a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1664882273.dop010.sk1.t,1664882273.cds068.sk1.hn,1664882273.cds257.sk1.c
X-Firefox-Spdy: h2
www.paypalobjects.com/api/checkout.js
200 OK 240 kB URL HTTP/2 www.paypalobjects.com/api/checkout.js
IP
Size 240 kB (239948 bytes)
Hash 1a79f774e86cef470e40f60a7573f57c
04dfedfead801ead6998d693940d937acdbb7142
452c8b8b984b8a666fda43e2ee92f9ac4836a5db0e1a031bb4cb7577b5713725
GET /api/checkout.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: gzip
content-type: application/javascript; charset=utf-8
etag: W/"6266d4b0-16d23e"
last-modified: Mon, 25 Apr 2022 17:04:48 GMT
paypal-debug-id: 40438cc6522a4
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:17:53 GMT
x-served-by: cache-sjc10043-SJC, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 4, 441
x-timer: S1664882274.708260,VS0,VE0
vary: Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 239948
X-Firefox-Spdy: h2
static.zuora.com/Resources/libs/hosted/1.3.1/zuora-min.js
200 OK 6.6 kB URL HTTP/1.1 static.zuora.com/Resources/libs/hosted/1.3.1/zuora-min.js
IP
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (2265)
Hash dec5e172127825104fc0c160beb0d68b
e5fa94ebc271bd98a4ad4ecb9f31318d6a85e180
96b73848910e65aac41504595d3fbb0d818c67bfd26238212d5e0eb00db03d0b
GET /Resources/libs/hosted/1.3.1/zuora-min.js HTTP/1.1
Host: static.zuora.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Server: nginx
Last-Modified: Tue, 06 Sep 2022 07:06:54 GMT
ETag: "6316f18e-4724"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 04 Oct 2022 11:17:53 GMT
Content-Length: 6646
Connection: keep-alive
www.paypal.com/tagmanager/pptm.js?id=secure.rogueeconomics.com&source=checkoutjs&t=xo&v=4.0.336
200 OK 4.3 kB URL HTTP/2 www.paypal.com/tagmanager/pptm.js?id=secure.rogueeconomics.com&source=checkoutjs&t=xo&v=4.0.336
IP
File type ASCII text, with very long lines (12084), with no line terminators
Hash da1b94bdea2eb1769e74df6fbd2c1a2e
4c7f6b5318ffd3d36b6b431f4bd113b55d8f14a7
45cc4e008a654e4ef3f3b3eb0ca92f52ade64445039059b5395b11734b033be4
GET /tagmanager/pptm.js?id=secure.rogueeconomics.com&source=checkoutjs&t=xo&v=4.0.336 HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-kxLHwDd4a3J66ldvV3skUxE4fCvy0dWqlLq9oa5v1GDEpE9A' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
etag: W/"2f34-zQQ0FVqIlbkbuS4WgpPW/nUPXC4"
paypal-debug-id: f900764358e53
traceparent: 00-0000000000000000000f900764358e53-ae0ccea72fc094e7-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:17:54 GMT
age: 40621
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11564-HHN, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 33, 1
x-timer: S1664882274.217197,VS0,VE2
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f900764358e53-c98b49cd7172b545-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 4299
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1664882273770&g=0&completeurl=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D
200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1664882273770&g=0&completeurl=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1664882273770&g=0&completeurl=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
date: Tue, 04 Oct 2022 11:17:54 GMT
expires: Tue, 04 Oct 2022 11:17:54 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 4ae85a24431a1
pragma: no-cache
server: ECAcc (frc/4D07)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=181
set-cookie: ts=vreXpYrS%3D1759576674%26vteXpYrS%3D1664884074%26vr%3Da2b770501830a46177212841ffffffff%26vt%3Da2b770501830a46177212841fffffffe; Expires=Sat, 04 Oct 2025 11:17:54 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3Da2b770501830a46177212841ffffffff%26vt%3Da2b770501830a46177212841fffffffe; Expires=Sat, 04 Oct 2025 11:17:54 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-00000000000000000004ae85a24431a1-c330f3f1a41489f0-01
content-length: 42
X-Firefox-Spdy: h2
secure.rogueeconomics.com/store/PROD/js/mymixpanel.js
200 OK 1.2 kB URL HTTP/2 secure.rogueeconomics.com/store/PROD/js/mymixpanel.js
IP
Hash e15c42289eff4e264c870bac37568328
b7c571c05bb860cf6ff013cea8831693df7deb76
db64f4d955f84360feeecc8a2e241730bf2f8f5cdbf065f7ee9e700bd657134f
GET /store/PROD/js/mymixpanel.js HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:54 GMT
content-type: application/javascript
x-amzn-requestid: 488bb579-0fae-41bf-9e2b-b1270f5624ba
last-modified: Thu, 19 Nov 2020 00:44:24 GMT
x-amz-version-id: kgR13lhzSsVCRIE0MlY3UBQ0EPNv4JeB
cf-cache-status: DYNAMIC
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: ZehvVGuzIAMFjUA=
x-amzn-remapped-server: cloudflare
etag: W/"52928b3325fc59cf3a4b91c0e7b59c52"
x-amzn-remapped-date: Tue, 04 Oct 2022 11:17:54 GMT
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront), 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
x-amz-cf-id: c7MBSmsXCSirT-hW8E8tMNSjbdbUbe9zA7wCUQaB6IvDMi3OH0ltkw==
server: cloudflare
cf-ray: 754d83824ceb0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9644
Expires: Tue, 04 Oct 2022 13:58:38 GMT
Date: Tue, 04 Oct 2022 11:17:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9644
Expires: Tue, 04 Oct 2022 13:58:38 GMT
Date: Tue, 04 Oct 2022 11:17:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9644
Expires: Tue, 04 Oct 2022 13:58:38 GMT
Date: Tue, 04 Oct 2022 11:17:54 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8c08f8066cc732de8befd6ccd629a95
22aab05208a01ae5def4d63dc145085630f57bcb
f8a560a0563518d992d0bd2655d2b5c406435a18e874ca00b51374d2ff901770
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9917
x-amzn-requestid: 2dff93d9-795d-4885-9b82-610b0d235a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTGEnIAMF1zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-117afa703663ada75627792c;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DOS5kVEVqBrCVMKRw07fX-6HDgWVb9lJwkVM2pXs0PQHys6CBJUVfQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 48814
etag: "22aab05208a01ae5def4d63dc145085630f57bcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
secure.rogueeconomics.com/main-es2015.js
200 OK 152 kB URL HTTP/2 secure.rogueeconomics.com/main-es2015.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 152 kB (152156 bytes)
Hash 7572a64d9d3f48396942c2cf52163779
7ef4d6e1c53febb0d53415308bced78c394b1c00
5a9a9ee2e52b3c9e26f4e70164c08d307b972711effb1a66757b5f63edacc124
GET /main-es2015.js HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:54 GMT
content-type: application/x-javascript
last-modified: Mon, 26 Sep 2022 16:32:29 GMT
etag: W/"5aec314ac787b3e9574adb5b73ac1d79"
x-amz-meta-codebuild-content-sha256: cf2ac11acf4d008b7e0469bb29aedc745c1c3b33cf9f56a0a7d94f2894463297
x-amz-version-id: null
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-2:742663695247:build/BSS-DevOps-Codebuild-Custom-v1-static-builder:ed4ec2e7-d59c-4a41-9ade-adbf9ba7243d
x-amz-meta-codebuild-content-md5: 0808024a499b73cf56efb31b8f31ff7d
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 543tMcKn1YqxPTh84tDwTDkyhELyBJCFmKlY-fbTks0j0IShOLTmtg==
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754d83824cfd0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae824db4a95391149198a4b6b8556c70
db07d58d8feff4ea01866d095e5264ee5c8e1ca3
19e96d204813247697e1858daf9e07d6c4cafd9ab1175a3bf39a7f07f6991521
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11101
x-amzn-requestid: f98e84d9-1e66-4436-b793-219a777f2ba0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqcvE8JoAMFQ2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5784-25bd2b234c1093de70074c92;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: becOxfqUowywFrxzDSeK7F1lFdDVTSHIF1TLC5k5aSlLPpsR6F8gjw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:42:37 GMT
age: 45317
etag: "db07d58d8feff4ea01866d095e5264ee5c8e1ca3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
secure.rogueeconomics.com/store/PROD/js/revampstore/store.min.js
200 OK 22 kB URL HTTP/2 secure.rogueeconomics.com/store/PROD/js/revampstore/store.min.js
IP
File type ASCII text, with CRLF, LF line terminators
Hash ae3b84d754212dd7ec483dfc00ab37f5
9590677221b4f7a557dc06a3e8b9305479e34476
0229f390586778acef24d2b3669ceb7db861574290d94dd5833247853ed1d8b6
GET /store/PROD/js/revampstore/store.min.js HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:54 GMT
content-type: application/javascript
x-amzn-requestid: 824fa05c-5db4-4a5f-871e-dc93fcfdb043
last-modified: Mon, 26 Sep 2022 16:01:33 GMT
x-amz-version-id: 2WRYifcicaETtOTyRhePKXGq30VinZZ1
cf-cache-status: DYNAMIC
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: ZeKmpGllIAMFfQg=
x-amzn-remapped-server: cloudflare
x-amzn-remapped-date: Tue, 04 Oct 2022 08:39:57 GMT
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront), 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
etag: W/"00e6679fa0ff3b6a85758dd3cbbbd033"
x-cache: RefreshHit from cloudfront
x-amz-cf-id: 7QVo0cj_Z_8TFq9jTqnHqW8xluxX8lVDWEjG36KjjCZYpv1wMKH4nA==
server: cloudflare
cf-ray: 754d83823cde0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
secure.rogueeconomics.com/store/PROD/js/mygtm.js
200 OK 5.8 kB URL HTTP/2 secure.rogueeconomics.com/store/PROD/js/mygtm.js
IP
Hash 40a102d1edc3f64574e11f78d18d233d
c010904d42aa0dc4ddc9751712fe52892602c94a
c9a0b91511eb37acc6bbe8a0871d572d2f8be44f3d210c6b8e1e117552a7a114
GET /store/PROD/js/mygtm.js HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:54 GMT
content-type: application/javascript
x-amzn-requestid: 4a210bda-f675-4aef-8881-c81b7ca6c774
last-modified: Thu, 19 Nov 2020 00:44:24 GMT
x-amz-version-id: 4.dw3bbUWT3wk0yaqGtXbpSm9ui25xti
cf-cache-status: DYNAMIC
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: ZehvVFX9IAMFn1w=
x-amzn-remapped-server: cloudflare
etag: W/"f01dbb5bc4745bf1f386572cdf22c8c1"
x-amzn-remapped-date: Tue, 04 Oct 2022 11:17:54 GMT
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront), 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
x-amz-cf-id: Myca2Ien7tXTeLJVz6p0pvofsPK3JANBAn318oqNT5uwwqOk4s3GHA==
server: cloudflare
cf-ray: 754d83823ce10b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 008e95b5e023f1602ab765067dee9ec1
6eb7519c45c733a6632d7b7a47e73031368f413c
9df812099e3613894a6cf6fd94d925ad270bc0c4e40899333d05ec58ef376edd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5598
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:55 GMT
Last-Modified: Tue, 04 Oct 2022 09:44:38 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 727
cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
200 OK 17 kB URL HTTP/2 cdn.mxpnl.com/libs/mixpanel-2-latest.min.js
IP
File type ASCII text, with very long lines (755)
Hash caa762087e9d75cecc34b5d6626cb7b9
fcc68d485c2f42e0f880260c3e104cedf50d0d11
dc0ec55efae4c1f0ff095cf05133cc835e1cc4ff7906d3b7a2d0d86789bfe145
GET /libs/mixpanel-2-latest.min.js HTTP/1.1
Host: cdn.mxpnl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdu_7UkTlYc795949wFlLcEyZ71LjkDIWbGSG0GJjCjbeSg9BP0bmAQuouWR4ylhuIy3aiWG9XUftZ6mTHJT4d57AmvRU8pe
x-goog-generation: 1645129310876382
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17435
content-encoding: gzip
x-goog-hash: crc32c=PPVzJA==, md5=yqdiCH6ddc7MNLXWYmy3uQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
vary: Accept-Encoding
content-length: 17435
access-control-allow-origin: *
server: UploadServer
date: Tue, 04 Oct 2022 11:16:07 GMT
expires: Tue, 04 Oct 2022 11:26:07 GMT
cache-control: public,max-age=600
age: 108
last-modified: Thu, 17 Feb 2022 20:21:50 GMT
etag: "caa762087e9d75cecc34b5d6626cb7b9"
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 008e95b5e023f1602ab765067dee9ec1
6eb7519c45c733a6632d7b7a47e73031368f413c
9df812099e3613894a6cf6fd94d925ad270bc0c4e40899333d05ec58ef376edd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5598
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:55 GMT
Last-Modified: Tue, 04 Oct 2022 09:44:38 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 727
secure.rogueeconomics.com/polyfills-es2015.js
200 OK 207 kB URL HTTP/2 secure.rogueeconomics.com/polyfills-es2015.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 207 kB (207138 bytes)
Hash fcee6fba3d22ab7324b310f3782752ac
90498e6feb49823c56c9438c1a1ebd181e172fa7
4a3eca6610e746150bfb48511690bdb12fd73e79bb0e5da049ff5302b64d65d0
GET /polyfills-es2015.js HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:54 GMT
content-type: application/x-javascript
last-modified: Mon, 26 Sep 2022 16:32:30 GMT
etag: W/"d5682aa68c78318fb29bc868b563803d"
x-amz-meta-codebuild-content-sha256: cf2ac11acf4d008b7e0469bb29aedc745c1c3b33cf9f56a0a7d94f2894463297
x-amz-version-id: null
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-2:742663695247:build/BSS-DevOps-Codebuild-Custom-v1-static-builder:ed4ec2e7-d59c-4a41-9ade-adbf9ba7243d
x-amz-meta-codebuild-content-md5: 0808024a499b73cf56efb31b8f31ff7d
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dMqSW89_QGrVvfl750MexdEyei6qfBRayP874qyM-7Tp9shx49EB_g==
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754d83824cfb0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=a59ca13d-cd9a-4f95-8259-5dbb846993bb&batch_time=1664882274731
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=a59ca13d-cd9a-4f95-8259-5dbb846993bb&batch_time=1664882274731
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 740ef0c61ecf32eebdbb92183d9e2cb9
da2cc63402d399a892e4ddd4a04e3fffd62ae240
1e9b4d1cef0cbc95c0398a093d792a61583ab8a46a729e2e18ab796779986042
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=a59ca13d-cd9a-4f95-8259-5dbb846993bb&batch_time=1664882274731 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16041
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
date: Tue, 04 Oct 2022 11:17:55 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
d3bjnmbj12697.cloudfront.net/_/css/bootstrap/4.5.0/bootstrap.min.css
200 OK 162 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/_/css/bootstrap/4.5.0/bootstrap.min.css
IP
File type ASCII text, with very long lines (65324)
Size 162 kB (161736 bytes)
Hash 14e3036e583d9d5910ed515b6ebebb00
8d9621b0a2d309ce779cb458f04e6d87761c048b
fadadc49b4ca3c49a69a4ce2c17d56cab0a8b52af6b3fae5296ae1a9f56ed453
GET /_/css/bootstrap/4.5.0/bootstrap.min.css HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 161736
Connection: keep-alive
Last-Modified: Wed, 18 May 2022 14:44:35 GMT
x-amz-meta-user-agent: AWSTransfer
x-amz-meta-user-agent-id: efiorani@s-c2cd08720a404b138
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 04 Oct 2022 06:13:08 GMT
ETag: "14e3036e583d9d5910ed515b6ebebb00"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: OPcQckAhDdrUYhIjMdhyX-rpxdsVToi-GNB6ZPCDgBTa0sVSxSXkpg==
Age: 20080
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d3bjnmbj12697.cloudfront.net/re/22/red/2209-enron/css/custom.css
200 OK 110 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/re/22/red/2209-enron/css/custom.css
IP
File type assembler source, ASCII text, with very long lines (837)
Size 110 kB (110481 bytes)
Hash 0b7c729d1ad25c6fa9ff5ecac584da66
ed60d872622040ec4808e72ccc6db91889e02e61
05cdc12572febd811b1417440483f4a7d9fbf2d2d6d8b62255ddb636d6af1b68
GET /re/22/red/2209-enron/css/custom.css HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 110481
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 12:54:34 GMT
x-amz-meta-user-agent: AWSTransfer
x-amz-meta-user-agent-id: efiorani@s-c2cd08720a404b138
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 04 Oct 2022 01:19:44 GMT
ETag: "0b7c729d1ad25c6fa9ff5ecac584da66"
X-Cache: Hit from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Hvg-YF5Y5hyqSIWqqN7jY0EAPHzWbVIDKshsn1wQZAXkMg68wP__HA==
Age: 35893
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5ba23234dfb31276cc3bf9a347508595
a225d0a9ecf5d7f0032816c6f3d4a5ae1f3b27a3
33558bed4856ac3f2a7267965521b316ccd3ccc669877994c6c590e2d2a1b559
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Barlow+Semi+Condensed:ital,wght@0,200;0,300;0,400;0,500;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,700;1,800;1,900&family=Figtree:wght@300;400;500;600;700;800;900&display=swap
200 OK 1.4 kB URL HTTP/2 fonts.googleapis.com/css2?family=Barlow+Semi+Condensed:ital,wght@0,200;0,300;0,400;0,500;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,700;1,800;1,900&family=Figtree:wght@300;400;500;600;700;800;900&display=swap
IP
Hash 2313e976db34c8f06c34ae7a818a889f
f07d621711c0cfe938fe3db075e24d3a90fef4bc
9c8b032524f51abab8607e02eb2889d49249b8d8b1c8415a973321dad74ebc59
GET /css2?family=Barlow+Semi+Condensed:ital,wght@0,200;0,300;0,400;0,500;0,700;0,800;0,900;1,200;1,300;1,400;1,500;1,700;1,800;1,900&family=Figtree:wght@300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 11:17:56 GMT
date: Tue, 04 Oct 2022 11:17:56 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 57cc5d61ff284d8b7d0d00e2c8123288
756095bfe5cec0ecc34fd8133a01f0520bcdb2fd
8b88eff074a845557cc2e4435439c9b0598ca418f8cabfa691eb8ab0ceccde90
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 11:17:56 GMT
Last-Modified: Tue, 04 Oct 2022 10:30:49 GMT
Server: ECS (dcb/7FA7)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gszrxXf04rbYfmQfOTNYDngwekVVpyN56TYZhLYFrKgqTebR7hBQxQ==
Age: 2827
www.googletagmanager.com/gtm.js?id=GTM-NRT29V9
200 OK 84 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NRT29V9
IP
File type ASCII text, with very long lines (48318)
Hash fbff3f24a8c360cbd46909ab80c46586
90359136bd921e2864450e37df9e57ab908cf995
dc0c634ea312b14e2c51866eea9fd70567269ec9be25db2b545131b65aa9a3a9
GET /gtm.js?id=GTM-NRT29V9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 04 Oct 2022 11:17:56 GMT
expires: Tue, 04 Oct 2022 11:17:56 GMT
cache-control: private, max-age=900
last-modified: Tue, 04 Oct 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 83720
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5ba23234dfb31276cc3bf9a347508595
a225d0a9ecf5d7f0032816c6f3d4a5ae1f3b27a3
33558bed4856ac3f2a7267965521b316ccd3ccc669877994c6c590e2d2a1b559
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
secure.rogueeconomics.com/styles.css
200 OK 5.9 kB URL HTTP/2 secure.rogueeconomics.com/styles.css
IP
File type ASCII text, with no line terminators
Hash 9aa78516a2e2e7ec3f6568435162a3b4
90aad87627a5d4fbe389e5b2bdfbc89321dd1c5f
4719c282e8a288fe36b279071d6bc060bdce858e3a7ad20e652824f832dc66c7
GET /styles.css HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:54 GMT
content-type: text/css
last-modified: Mon, 26 Sep 2022 16:32:30 GMT
etag: W/"2f35a3d2f42282a4b66d4237a5ea0a2f"
x-amz-meta-codebuild-content-sha256: cf2ac11acf4d008b7e0469bb29aedc745c1c3b33cf9f56a0a7d94f2894463297
x-amz-version-id: null
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-2:742663695247:build/BSS-DevOps-Codebuild-Custom-v1-static-builder:ed4ec2e7-d59c-4a41-9ade-adbf9ba7243d
x-amz-meta-codebuild-content-md5: 0808024a499b73cf56efb31b8f31ff7d
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v_o4qL33lqY0IkFPwuvzAd7OQlUFspURS9S-1YyFegDgpcQAYnoS3A==
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754d8385a8ba0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3f8205970828f99b965cef57695d1e49
61a8747db9d657c7cfd8971cc7415881a89e2e56
54228f801b4d1d80280e8e96c1d7044cb188c512d41994c8000bdb94e8c24ea0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=91106
Date: Tue, 04 Oct 2022 11:17:56 GMT
Etag: "633ac695-1d7"
Expires: Wed, 05 Oct 2022 12:36:22 GMT
Last-Modified: Mon, 03 Oct 2022 11:25:09 GMT
Server: ECS (nyb/1D24)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FGCXws17kMUElFkAJ70oHsK1tGmX25OzCk8hvpb9YVWXKEBtnQCXwQ==
Age: 4273
secure.rogueeconomics.com/snowflake/generic
200 OK 21 B URL HTTP/2 secure.rogueeconomics.com/snowflake/generic
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0b5485f2ffbbf65fc1412050ac43e658
0d7243100772fd39254322310dee9368595d5f0e
64a1ca8c093b60d9abfe26d042cfaacf464c5d928c26e7ce6e5528f1cb1d6899
POST /snowflake/generic HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-api-key: g5wZnpMOAV6d3DVWjACKU9Pz86tj10Es39Avoa3n
Content-Length: 748
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Cookie: _dd_s=logs=1&id=f916d61b-e7ed-45e8-b3b6-a687411fd9a8&created=1664882274513&expire=1664883174522&rum=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:56 GMT
content-type: application/json
content-length: 21
x-amzn-requestid: 56f03f0d-45da-4e4b-a750-b7bd07411791
access-control-allow-origin: *
x-amz-apigw-id: ZehvvFsQIAMFzYQ=
x-amzn-trace-id: Root=1-633c1664-5b3e77fb1041bac20f41b00b
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront), 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
x-amz-cf-id: KP6Tl15uv4YaZTTrrjuZ2QPo9ZE250LH3dvLolH5Brx4f23AxAueMA==
server: cloudflare
cf-ray: 754d83924ea90b69-OSL
X-Firefox-Spdy: h2
secure.rogueeconomics.com/favicon.ico
200 OK 1.8 kB URL HTTP/2 secure.rogueeconomics.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (322)
Hash f82d350cbaf572a43ee8c27c4c872107
1d5ac5dd73a79680a7e71db75adad0e566e2057a
f385860b47000c9afd7bc9f94e7f6724fd54d03eb49ae043f82a7674d7bf185e
GET /favicon.ico HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Cookie: dd_cookie_test_22d58350-aa13-4c8c-bf98-b50f8feced0d=test; _dd_s=logs=1&id=f916d61b-e7ed-45e8-b3b6-a687411fd9a8&created=1664882274513&expire=1664883174522&rum=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:56 GMT
content-type: text/html
last-modified: Mon, 26 Sep 2022 16:32:29 GMT
x-amz-meta-codebuild-content-sha256: cf2ac11acf4d008b7e0469bb29aedc745c1c3b33cf9f56a0a7d94f2894463297
x-amz-version-id: null
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-2:742663695247:build/BSS-DevOps-Codebuild-Custom-v1-static-builder:ed4ec2e7-d59c-4a41-9ade-adbf9ba7243d
x-amz-meta-codebuild-content-md5: 0808024a499b73cf56efb31b8f31ff7d
x-cache: Error from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: V1_PtgEL9zvZA5Yt9bWFfsbn65f6XR3-6tscVy3X2i-ghFg3PjogLg==
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754d838bbf6e0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
gsdpeazjjf.execute-api.us-east-1.amazonaws.com/prod/assets/asset/RED/VideoLandingPage/1663696938030.html/versionId=SroPoWAWLprxt_GvkzoinwOPhxy3v6fC
200 OK 7.2 kB URL HTTP/2 gsdpeazjjf.execute-api.us-east-1.amazonaws.com/prod/assets/asset/RED/VideoLandingPage/1663696938030.html/versionId=SroPoWAWLprxt_GvkzoinwOPhxy3v6fC
IP
File type exported SGML document, Unicode text, UTF-8 text, with very long lines (7184), with no line terminators
Hash 2e1bd5b75ddee08ade2986cb15f7c566
a64e8341a48a58c32d4c30d2ac3d514f80ed296a
b34453bd0a4d26998de7ec430fd3c676392674846b9e2fc4ecb291212ec79816
GET /prod/assets/asset/RED/VideoLandingPage/1663696938030.html/versionId=SroPoWAWLprxt_GvkzoinwOPhxy3v6fC HTTP/1.1
Host: gsdpeazjjf.execute-api.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 7193
date: Tue, 04 Oct 2022 11:17:56 GMT
x-amzn-requestid: a6949edf-0ff6-42d0-9ea1-2b7927fb1aff
access-control-allow-origin: *
x-amz-apigw-id: ZehvvEtQoAMFphQ=
x-amzn-trace-id: Root=1-633c1664-7cc1fc5d08878903464388b6;Sampled=0
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: u6vQ2IYUgPbZTf6DOWYDrZZ-NBtHt9u5SWrgoTDqjo2BgLt5lKaasQ==
X-Firefox-Spdy: h2
secure.rogueeconomics.com/store/PROD/js/postToIframe.js
200 OK 82 kB URL HTTP/2 secure.rogueeconomics.com/store/PROD/js/postToIframe.js
IP
Hash ce9fb9e5677ae419627048f752782b61
7e33f206dd546a0fe1e7ca4109c514856ffa4cd3
5b27e1d40a204bcc082ab809725f97b90dfd07a88c047d68a80dc3fdfdc75552
GET /store/PROD/js/postToIframe.js HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:54 GMT
content-type: application/javascript
x-amzn-requestid: 44d24c30-e4c7-48ce-98f8-7e534677dcba
last-modified: Sat, 22 Sep 2018 10:04:10 GMT
x-amz-version-id: jcZd1q0X4PG.0tDIV.AM4TZ5jHnAmWBj
cf-cache-status: DYNAMIC
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: ZehvVHdmoAMFxBQ=
x-amzn-remapped-server: cloudflare
etag: W/"3934dce8d049fb2790a29e7de331d9c9"
x-amzn-remapped-date: Tue, 04 Oct 2022 11:17:53 GMT
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront), 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
x-amz-cf-id: -6y49wNG8ECr7ED5vixdjyF23XAw5WmbWTdU5g54ifKTtKhXesvjGA==
server: cloudflare
cf-ray: 754d83823ccc0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
d3bjnmbj12697.cloudfront.net/re/22/red/2209-enron/img/RED-bkg-2.jpg
200 OK 23 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/re/22/red/2209-enron/img/RED-bkg-2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3\012- data
Hash 72d972e9022fc78ebfb8154f257169e6
6f5fbba9381915e605f29b353c55045a6c1a97ab
95650d933a6624a82114b17b45594b90479a01967c9e6e88575b433b5814ee02
GET /re/22/red/2209-enron/img/RED-bkg-2.jpg HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://s3.amazonaws.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 22932
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:03:18 GMT
x-amz-meta-user-agent: AWSTransfer
x-amz-meta-user-agent-id: efiorani@s-c2cd08720a404b138
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 04 Oct 2022 06:04:45 GMT
ETag: "72d972e9022fc78ebfb8154f257169e6"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 12DNpxHCkTBqvM1fa6NQ5awcXILMVyL0CCWs4Kt9Nkj0XhT9XNV9Xg==
Age: 18792
d3bjnmbj12697.cloudfront.net/re/22/red/2209-enron/img/RED-Logo-final.png
200 OK 51 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/re/22/red/2209-enron/img/RED-Logo-final.png
IP
File type PNG image data, 1070 x 229, 8-bit/color RGBA, non-interlaced\012- data
Hash 8806ae73082d48d9b6b4f53c47c4ca17
7eba600c403266a2b9fe6f131eb33f08867b913b
1126c2807f2144e8286cd69a67c741d9f3364109392f264698e38acebe558c78
GET /re/22/red/2209-enron/img/RED-Logo-final.png HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 51184
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 14:01:03 GMT
x-amz-meta-user-agent: AWSTransfer
x-amz-meta-user-agent-id: efiorani@s-c2cd08720a404b138
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 04 Oct 2022 11:17:56 GMT
ETag: "8806ae73082d48d9b6b4f53c47c4ca17"
X-Cache: Hit from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: oDiXJzf4cDYc7hXIUtfw6aCUgAamfynDZw9H3mghLCfab4q-R3BuPQ==
Age: 7322
secure.rogueeconomics.com/store/PROD/js/encryption_util.js
200 OK 3.2 kB URL HTTP/2 secure.rogueeconomics.com/store/PROD/js/encryption_util.js
IP
Hash 98cea8a10889174fa0ab9a5c5b95f42b
3313e069637ddf3f8d967581bc36ee23d33e2144
e46de60c9d95fd345a927b4658a7d51fa31237fded9e7e90c651d76a5d088152
GET /store/PROD/js/encryption_util.js HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:54 GMT
content-type: application/javascript
x-amzn-requestid: 83318753-1a93-49bd-bc88-74ba4714429f
last-modified: Thu, 20 Sep 2018 10:42:47 GMT
x-amz-version-id: .RXPgt8IOHDC5kcSlGGlyGGq.lruUQic
cf-cache-status: DYNAMIC
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: ZehvVF1NoAMFy6g=
x-amzn-remapped-server: cloudflare
etag: W/"a4562de2bcce9e6631abf61e5a04728b"
x-amzn-remapped-date: Tue, 04 Oct 2022 11:17:54 GMT
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront), 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
x-amz-cf-id: n4kaWNvwGz7nFN2J0voJmsof6HDmp26-yHL_uCwPTblo2gpswoOz-A==
server: cloudflare
cf-ray: 754d83823ccf0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
d3bjnmbj12697.cloudfront.net/_/js/lr-data/1.1.5/lr-data-re.js
200 OK 13 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/_/js/lr-data/1.1.5/lr-data-re.js
IP
Hash 9f6b19baa4d934287bbd70888e65bdb4
0b5089fe052df45e30b6280ee370fd2225e124e0
0f4ce2124d7e9930bcfb8226858a3230c7b64da0f66f107c777ef5d75155cce5
GET /_/js/lr-data/1.1.5/lr-data-re.js HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 13050
Connection: keep-alive
Last-Modified: Wed, 17 Aug 2022 18:26:50 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 03 Oct 2022 23:28:12 GMT
ETag: "9f6b19baa4d934287bbd70888e65bdb4"
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SHliwj5iX78CZK4DYjwiAhrfQ-Ox4N0XeBnrIl_1hh0USQnTDu2WjA==
Age: 42585
cdn.listrakbi.com/scripts/script.js?m=cAQH8nQQgXEj&v=1
200 OK 20 kB URL HTTP/1.1 cdn.listrakbi.com/scripts/script.js?m=cAQH8nQQgXEj&v=1
IP
File type C source, ASCII text, with very long lines (63065)
Hash 7621cfeff29c10623459ad22e1dc5820
39d12ae1031fef6cd5b741779610a18e47c2eaa2
d889dbffff8fdd1fbb7e7b976449308725b6ec867456aa45142493fc5b9624c6
GET /scripts/script.js?m=cAQH8nQQgXEj&v=1 HTTP/1.1
Host: cdn.listrakbi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
Content-Length: 19514
Connection: keep-alive
Content-Encoding: gzip
Last-Modified: Thu, 26 Sep 2019 14:39:25 GMT
Accept-Ranges: bytes
p3p: policyref="/w3c/p3p.xml", CP="CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI COM NAV INT DEM CNT PRE LOC"
X-ltk: 9/30/2022 12:25:11 PM
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 752e5025bbcc6903-FRA
Date: Tue, 04 Oct 2022 11:17:56 GMT
Cache-Control: public, no-transform, max-age=3600, s-maxage=600
Expires: Tue, 04 Oct 2022 12:10:23 GMT
ETag: "lmGlDXVIKaXImCVsR/K+0Q=="
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gEeYX--QQdqSGEviDkci3Oum7G-X_GXkUkrPSRDFdqPQDTkPrm51WQ==
Age: 453
d3bjnmbj12697.cloudfront.net/_/js/video/1.0.6/vce.js
200 OK 12 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/_/js/video/1.0.6/vce.js
IP
Hash 7ee5e9751c9dbefa2830099e56bbffaa
c37b64499ae79ea9a30a0ed870ef3dec9edfd4fd
ac191f9b3fed6ff83829a3366e90ac1deb4383603ca3bd9e043fedc41d9cc817
GET /_/js/video/1.0.6/vce.js HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 11551
Connection: keep-alive
Date: Tue, 04 Oct 2022 03:39:02 GMT
Last-Modified: Thu, 11 Aug 2022 21:04:47 GMT
ETag: "7ee5e9751c9dbefa2830099e56bbffaa"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ku1VfRJMzw9ZHkKxt5HUtMyzZFe846aO9oDLn1x9GwJ2nJk5RpgcQg==
Age: 27536
d3bjnmbj12697.cloudfront.net/_/js/countdown/1.0.6/c.js
200 OK 8.3 kB URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/_/js/countdown/1.0.6/c.js
IP
Hash 02c87f6b4333434e178c7f68e062e467
2bbdf9ef4b4e79fce3ca8fa593ee67b4ebe94e20
9fdcc5fc0715ff06f1594b585ef10d5d19d3b6232803ca930a555fe72538e074
GET /_/js/countdown/1.0.6/c.js HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 8276
Connection: keep-alive
Last-Modified: Fri, 17 Jun 2022 13:54:21 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Tue, 04 Oct 2022 07:23:50 GMT
ETag: "02c87f6b4333434e178c7f68e062e467"
X-Cache: Hit from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fGVv4WrvQ9E3aO6RretNzvdNmHOCO0VvFmnOMVIbtEPhOJSFtu_A-w==
Age: 14048
players.brightcove.net/5102072647001/njXiZ72Xhp_default/index.min.js
200 OK 228 kB URL HTTP/1.1 players.brightcove.net/5102072647001/njXiZ72Xhp_default/index.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 228 kB (228512 bytes)
Hash 742534dbbb6a68bb8cbd95983c30f1da
2bd61b0f14f9300da76e4f031d96640244a01b33
b9c736a06bebfb81f5a1e242aca56c079591e8b6dc71fc04c4b7fb046ca2635a
GET /5102072647001/njXiZ72Xhp_default/index.min.js HTTP/1.1
Host: players.brightcove.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 228512
x-amz-id-2: pcUX6TcRQw0VgXqFOAWyjjbzxrOedFpUbQS/RqZsDtiC8EwbSKV0Hvr687zy1p2zr32//7+9CO0=
x-amz-request-id: 6K4QK25P5WTJC5JA
x-amz-replication-status: COMPLETED
Last-Modified: Thu, 01 Sep 2022 16:35:24 GMT
ETag: "742534dbbb6a68bb8cbd95983c30f1da"
Content-Encoding: gzip
x-amz-version-id: 7gFUAhz2neJZsOjBYdQLOIoaA.v0Xo8D
Content-Type: application/javascript; charset=utf-8
Server: AmazonS3
Accept-Ranges: bytes
X-Served-By: cache-hhn4077-HHN
X-Cache-Hits: 1
X-Timer: S1662051907.116004,VS0,VE4
Vary: Accept-Encoding
X-BCOV-Response-Mode: 1
Cache-Control: public, max-age=272
Date: Tue, 04 Oct 2022 11:17:57 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
marketingassets.cloudsna.com/prod/images/legacy/bonner/favicon/RogueFavicon.png
200 OK 19 kB URL HTTP/1.1 marketingassets.cloudsna.com/prod/images/legacy/bonner/favicon/RogueFavicon.png
IP
File type PNG image data, 560 x 559, 8-bit/color RGBA, non-interlaced\012- data
Hash 73e7b76455e6df3c58925fe797b39a37
b5140170ed9da2dafee04bf8f911528916e9de23
22b11a5b7c758f0a3be5476f3ffb8f84fa1f9725e712f9f5a083c0278c211001
GET /prod/images/legacy/bonner/favicon/RogueFavicon.png HTTP/1.1
Host: marketingassets.cloudsna.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 11:17:57 GMT
Content-Type: image/png
Content-Length: 18973
Connection: keep-alive
x-amz-id-2: HCQZFZxNgA4NumjB1CuiradpgB0L70CxNKXWfaUMo82OhsXmrWmLi9t17f7zGgKq5em1/hw2ED8=
x-amz-request-id: FQZMMBXVQH3E9YSQ
Last-Modified: Wed, 15 Jul 2020 17:44:43 GMT
x-amz-version-id: zfYwIvnT2JGHJ3m7GKJa.rq.i79tduHI
ETag: "73e7b76455e6df3c58925fe797b39a37"
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754d8396f821b527-OSL
secure.rogueeconomics.com/store/PROD/js/bss-px.min.js
200 OK 2.0 kB URL HTTP/2 secure.rogueeconomics.com/store/PROD/js/bss-px.min.js
IP
File type ASCII text, with very long lines (5176)
Hash 91df0bd0289b1b9e7e59d9c63b06a862
f792fb7577202871278ca8558a373f0933cade2c
fff3c018f5e5e64d45d991a7b1ddb93a23db1814a35f1a178548a0900b33462f
GET /store/PROD/js/bss-px.min.js HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Cookie: _dd_s=logs=1&id=f916d61b-e7ed-45e8-b3b6-a687411fd9a8&created=1664882274513&expire=1664883174522&rum=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:56 GMT
content-type: application/javascript
x-amzn-requestid: 7dc4ff2d-144c-4556-bd62-071a779c3a97
last-modified: Tue, 01 Jun 2021 15:08:33 GMT
x-amz-version-id: fGaHECtcp1774Apxw3QoOeW87E1iGAd2
cf-cache-status: DYNAMIC
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: ZcVu5F2xoAMFSxQ=
x-amzn-remapped-server: cloudflare
x-amzn-remapped-date: Mon, 03 Oct 2022 19:22:07 GMT
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront), 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
etag: W/"3ee3506660c2ef343d6c68a229cd42be"
x-cache: RefreshHit from cloudfront
x-amz-cf-id: 3vpzOgpaBQ1sv85VJfxDc-Qj_rtliDtIZ9EcmW5UZemUMBL9N_4wUg==
server: cloudflare
cf-ray: 754d83924ea30b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/figtree/v1/_Xms-HUzqDCFdgfMm4S9DQ.woff2
200 OK 19 kB URL HTTP/2 fonts.gstatic.com/s/figtree/v1/_Xms-HUzqDCFdgfMm4S9DQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19444, version 1.0\012- data
Hash 0b12cbfee60df52cd529d9a038d68309
2020ffe44b32d16cea08437f7003af33ee90154e
f3fc6e096d6c5457237720083c872fa09fdd7cb5a2153563bfc6cb92f0329103
GET /s/figtree/v1/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 14:22:09 GMT
expires: Thu, 28 Sep 2023 14:22:09 GMT
cache-control: public, max-age=31536000
age: 507348
last-modified: Tue, 09 Aug 2022 02:14:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.comodoca.com/
200 OK 471 B IP
Hash ab11d8aca9aa31607631fc7f58402f11
e6071dc66bd5e784469b6f6faf136f532ba8b1d6
07ffbeecd0976b12f9ac71b5784d8ff7334030046474bf5463774ac9ad5effc0
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 11:17:57 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 15:27:31 GMT
Expires: Mon, 10 Oct 2022 15:27:30 GMT
Etag: "e6071dc66bd5e784469b6f6faf136f532ba8b1d6"
Cache-Control: max-age=600501,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 754d8399ae5db523-OSL
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=c9477156-d736-4725-8b7c-501817f4b5cc&batch_time=1664882276789
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=c9477156-d736-4725-8b7c-501817f4b5cc&batch_time=1664882276789
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash e20dc0953ba67f5b1953438da053d5d2
faa256ddfd76596cb3fd338b9fd3f6596c82c997
5ba5efad59198246e841edd6355b368f4dceb9f165197fa35e52b3358c96b94f
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=c9477156-d736-4725-8b7c-501817f4b5cc&batch_time=1664882276789 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16082
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Tue, 04 Oct 2022 11:17:57 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
secure.rogueeconomics.com/snowflake/generic
200 OK 21 B URL HTTP/2 secure.rogueeconomics.com/snowflake/generic
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0b5485f2ffbbf65fc1412050ac43e658
0d7243100772fd39254322310dee9368595d5f0e
64a1ca8c093b60d9abfe26d042cfaacf464c5d928c26e7ce6e5528f1cb1d6899
POST /snowflake/generic HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-api-key: g5wZnpMOAV6d3DVWjACKU9Pz86tj10Es39Avoa3n
Content-Length: 722
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Cookie: _dd_s=logs=1&id=f916d61b-e7ed-45e8-b3b6-a687411fd9a8&created=1664882274513&expire=1664883174522&rum=1; bssSessionId=940f508a-4432-44c0-a998-20c718ac2aec; MKT677121_MKT679014_AST263193=visited
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:57 GMT
content-type: application/json
content-length: 21
x-amzn-requestid: effab692-c498-4d3c-9866-aee845831254
access-control-allow-origin: *
x-amz-apigw-id: Zehv3EPyoAMFx9A=
x-amzn-trace-id: Root=1-633c1665-6a156e8c38da41b505ec7817
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront), 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
x-amz-cf-id: auwiTZ6l3-tsWiPQd9ap10w0NtXYGFasGf9-Mqn_w0MJRo5WmNhYNQ==
server: cloudflare
cf-ray: 754d8397cc860b69-OSL
X-Firefox-Spdy: h2
secure.rogueeconomics.com/snowflake/logger
200 OK 21 B URL HTTP/2 secure.rogueeconomics.com/snowflake/logger
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0b5485f2ffbbf65fc1412050ac43e658
0d7243100772fd39254322310dee9368595d5f0e
64a1ca8c093b60d9abfe26d042cfaacf464c5d928c26e7ce6e5528f1cb1d6899
POST /snowflake/logger HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-api-key: O1I1d31dqY5iHR07pLHrf7rKAOxDeMhQ2JsWck8c
Content-Length: 496
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Cookie: _dd_s=logs=1&id=f916d61b-e7ed-45e8-b3b6-a687411fd9a8&created=1664882274513&expire=1664883174522&rum=1; bssSessionId=940f508a-4432-44c0-a998-20c718ac2aec; MKT677121_MKT679014_AST263193=visited; _gcl_au=1.1.1323001723.1664882277; lr_cue_MKT677121_MKT679014=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:57 GMT
content-type: application/json
content-length: 21
x-amzn-requestid: 467bf389-7692-439b-95da-870167b968e9
access-control-allow-origin: *
x-amz-apigw-id: Zehv2EQsCYcF3Tg=
x-amzn-trace-id: Root=1-633c1665-4b1d80c04fe479f866f833f1
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1vcCAqpP0l9nFHGMPTz8kjQB4Clc-NqT4Y_GpUJ0_pDMLdUTv8E18g==
server: cloudflare
cf-ray: 754d83987d1f0b69-OSL
X-Firefox-Spdy: h2
vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js
200 OK 7.4 kB URL HTTP/2 vjs.zencdn.net/vttjs/0.15.3/vtt.global.min.js
IP
File type ASCII text, with very long lines (20915)
Hash 4c4ee758d9faee213618ed424bc5e15c
9fd5c3a5cbd0c94eb16d039221f52ccb556a8ebe
869e007fede7f0d842d3737fe03da03c80db0a7bb24ad66d65b9c7c1b2ac3e50
GET /vttjs/0.15.3/vtt.global.min.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 11 May 2022 18:56:37 GMT
etag: "9ab357d51e365493dab6cf243489069b"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Tue, 04 Oct 2022 11:17:57 GMT
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 33501
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 7354
X-Firefox-Spdy: h2
js.trackinggrid.com/lr/
200 OK 435 B IP
File type ASCII text, with very long lines (773), with no line terminators
Hash bc7e3ecef41f79af8529f97abedc0f85
131ef991d966df583585ed8f13d541e058250307
c5fc54e4bc32f76480f86ab30bad0bc5153a7d46dccf79b65e4bf2cda74b129d
GET /lr/ HTTP/1.1
Host: js.trackinggrid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 04 Oct 2022 11:17:56 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
X-Original-Content-Length: 1086
Vary: Accept-Encoding, Accept-Encoding
Etag: W/"PSA-aj-dKcjschi_Z"
Expires: Thu, 03 Nov 2022 05:35:43 GMT
Cache-Control: max-age=2583659
X-Content-Type-Options: nosniff
Content-Encoding: gzip
edge.api.brightcove.com/playback/v1/accounts/5102072647001/videos/6312946533112
200 OK 0 B URL HTTP/2 edge.api.brightcove.com/playback/v1/accounts/5102072647001/videos/6312946533112
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /playback/v1/accounts/5102072647001/videos/6312946533112 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: accept
Referer: https://secure.rogueeconomics.com/
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
access-control-max-age: 86400
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:17:57 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 0
x-timer: S1664882278.628344,VS0,VE0
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 0
X-Firefox-Spdy: h2
edge.api.brightcove.com/playback/v1/accounts/5102072647001/videos/6312946533112
200 OK 4.6 kB URL HTTP/2 edge.api.brightcove.com/playback/v1/accounts/5102072647001/videos/6312946533112
IP
File type JSON data\012- , ASCII text, with very long lines (4612)
Hash 6efea9ce32617162382ddfcad4d87bf4
850885b166b6f398f406ad0c109791cb19b29b1d
91e00266b45445b27d3498761696ffb1c8f6caf07dc301b79ea3e76400a6463b
GET /playback/v1/accounts/5102072647001/videos/6312946533112 HTTP/1.1
Host: edge.api.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json;pk=BCpkADawqM3DFkiqOuM2xAboaHVkuhlFYAn351oRu1J-RKHtTubghWynQd4O8w1U87t77DMnmvEn-dizMXytAsRh2QEUi7K71IAlvIcBr9bbzJDrKp3Qbyb8ErQE0HlCDFAUNSXNquraeZY5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
account-status: APPROVED
bc-override-client-ip: 91.90.42.154
bcov-request-id: 758cae18-8b4a-453f-8a29-5d8ae156214c
content-type: application/json; charset=UTF-8
policy-key-accountid: 5102072647001
policy-key-raw: BCpkADawqM3DFkiqOuM2xAboaHVkuhlFYAn351oRu1J-RKHtTubghWynQd4O8w1U87t77DMnmvEn-dizMXytAsRh2QEUi7K71IAlvIcBr9bbzJDrKp3Qbyb8ErQE0HlCDFAUNSXNquraeZY5
powered-by: BC
powered-from: eu-central-1c
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:17:57 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1673-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664882278.641967,VS0,VE96
access-control-allow-origin: *
access-control-expose-headers: cache-control,content-type,powered-by,powered-from,via,x-cache,x-cache-hits,x-served-by,x-timer,bcov-debug-cache-stats,bcov-instance,x-amz-cf-id,Policy-Key-Geo-Countries,Policy-Key-Geo-Exclude-Countries,Policy-Key-IP-Whitelist,Account-Status,Policy-Key-Raw,Policy-Key-Domains,Policy-Key-Require-Ad-Config,Policy-Key-AccountID,BCOV-Request-ID,BCOV-Error-Code,soapaction
access-control-allow-headers: content-type,accept,accept-language,content-language,bcov-policy,soapaction
access-control-allow-methods: HEAD,GET,OPTIONS
cache-control: max-age=0, no-cache, no-store
content-length: 4613
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 04 Oct 2022 10:41:09 GMT
expires: Tue, 04 Oct 2022 12:41:09 GMT
cache-control: public, max-age=7200
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
age: 2208
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
IP
Hash c045eb5725f1ee90e16e76df615ef716
0dd8525fdd365642f3d52f08df11c7c3e1733f50
e68eb82e105465004a990135ebf40c1bace7b69c525b0e6d653b0d8f112d79f1
POST /s/gts1d4/f4TWTjhlG_M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:57 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11367
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 28 Jul 2022 17:32:37 GMT
accept-ranges: bytes
etag: "80a8697a8a2d81:0"
vary: Accept-Encoding
set-cookie: MUID=1CB7C8ABAFBD63B42A96DA98AE4862E8; domain=.bing.com; expires=Sun, 29-Oct-2023 11:17:57 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 11E36A4A40D04CF2B79E302DA3F71CE7 Ref B: OSL30EDGE0213 Ref C: 2022-10-04T11:17:57Z
date: Tue, 04 Oct 2022 11:17:57 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
IP
Hash c045eb5725f1ee90e16e76df615ef716
0dd8525fdd365642f3d52f08df11c7c3e1733f50
e68eb82e105465004a990135ebf40c1bace7b69c525b0e6d653b0d8f112d79f1
POST /s/gts1d4/f4TWTjhlG_M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:57 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b45b15bb651cc185ea82d91a51f06b5a
44987727be72bb12b4e4fc4fac50145835512750
f0b61426de169cf2efde87ac98d5123ea785004ad05c05932a099b644b2fdf64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
IP
Hash c045eb5725f1ee90e16e76df615ef716
0dd8525fdd365642f3d52f08df11c7c3e1733f50
e68eb82e105465004a990135ebf40c1bace7b69c525b0e6d653b0d8f112d79f1
POST /s/gts1d4/f4TWTjhlG_M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:57 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/conversion_async.js
200 OK 15 kB URL HTTP/2 www.google.com/pagead/conversion_async.js
IP
File type ASCII text, with very long lines (1654)
Hash 8766c5a801f08afceca9b66ff9097e6a
ce7640d1d166eddeb9d40be642ec34652f790713
f448f99b4ad9a9b50daa9c38054cf16ab2b9fcb5d83ddad60571fb6a8a432a99
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 04 Oct 2022 11:17:57 GMT
expires: Tue, 04 Oct 2022 11:17:57 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 17557423932572341828
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 15187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j98&aip=1&a=1465725469&t=pageview&_s=1&dl=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&ul=en-us&de=UTF-8&dt=Rogue%20Economics&sd=24-bit&sr=1280x1024&vp=1280x898&je=0&_u=YEBAAEABAAAAACAAI~&jid=2037851868&gjid=1886254951&cid=950499765.1664882277&tid=UA-163734442-4&_gid=183161837.1664882277&_r=1>m=2wg9s0NRT29V9&z=120072476
200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&aip=1&a=1465725469&t=pageview&_s=1&dl=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&ul=en-us&de=UTF-8&dt=Rogue%20Economics&sd=24-bit&sr=1280x1024&vp=1280x898&je=0&_u=YEBAAEABAAAAACAAI~&jid=2037851868&gjid=1886254951&cid=950499765.1664882277&tid=UA-163734442-4&_gid=183161837.1664882277&_r=1>m=2wg9s0NRT29V9&z=120072476
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j98&aip=1&a=1465725469&t=pageview&_s=1&dl=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&ul=en-us&de=UTF-8&dt=Rogue%20Economics&sd=24-bit&sr=1280x1024&vp=1280x898&je=0&_u=YEBAAEABAAAAACAAI~&jid=2037851868&gjid=1886254951&cid=950499765.1664882277&tid=UA-163734442-4&_gid=183161837.1664882277&_r=1>m=2wg9s0NRT29V9&z=120072476 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://secure.rogueeconomics.com
date: Tue, 04 Oct 2022 11:17:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=5146b65fab813afe64c9bda&account=5102072647001&destination=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&platform_version=6.66.4&player=players.brightcove.com%2F5102072647001%2FnjXiZ72Xhp_default&player_name=NEW%20-%20Marketing%20Player%20-%20Autoplay&source=&event=player_init&time=1664882277069&autoplay=false&seq=0
200 OK 35 B URL HTTP/2 metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=5146b65fab813afe64c9bda&account=5102072647001&destination=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&platform_version=6.66.4&player=players.brightcove.com%2F5102072647001%2FnjXiZ72Xhp_default&player_name=NEW%20-%20Marketing%20Player%20-%20Autoplay&source=&event=player_init&time=1664882277069&autoplay=false&seq=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /v2/tracker?domain=videocloud&platform=video-js&session=5146b65fab813afe64c9bda&account=5102072647001&destination=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&platform_version=6.66.4&player=players.brightcove.com%2F5102072647001%2FnjXiZ72Xhp_default&player_name=NEW%20-%20Marketing%20Player%20-%20Autoplay&source=&event=player_init&time=1664882277069&autoplay=false&seq=0 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
date: Tue, 04 Oct 2022 11:17:57 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cf-images.us-east-1.prod.boltdns.net/v1/static/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/a30944c9-7f08-412c-8793-8b2c0965bf3c/1280x720/match/image.jpg
200 OK 61 kB URL HTTP/1.1 cf-images.us-east-1.prod.boltdns.net/v1/static/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/a30944c9-7f08-412c-8793-8b2c0965bf3c/1280x720/match/image.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc58.134.100", baseline, precision 8, 1280x720, components 3\012- data
Hash f8552ddd8b3f2b0f69d1480d82a70d84
403310e885f4fdec3e69afa76f8474f2bddf98bf
d11052d130ccbd671084bdfafa5547b02d1a42866db854b1e2c8f9ac161b269a
GET /v1/static/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/a30944c9-7f08-412c-8793-8b2c0965bf3c/1280x720/match/image.jpg HTTP/1.1
Host: cf-images.us-east-1.prod.boltdns.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31536000
Date: Thu, 29 Sep 2022 21:04:43 GMT
Expires: Fri, 29 Sep 2023 21:04:43 GMT
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _7-xyYRaY_PkWnLzqKoaj6ZIgATD2srA28fgVQ0fjipvQU1zEXOOhg==
Age: 396794
www.google-analytics.com/j/collect?v=1&_v=j98&a=1465725469&t=pageview&_s=1&dl=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&ul=en-us&de=UTF-8&dt=Rogue%20Economics&sd=24-bit&sr=1280x1024&vp=1280x898&je=0&_u=YEDAAEABAAAAACAAI~&jid=192915490&gjid=100873291&cid=950499765.1664882277&tid=UA-170962029-3&_gid=183161837.1664882277&_r=1>m=2wg9s0NRT29V9&z=803615086
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=1465725469&t=pageview&_s=1&dl=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&ul=en-us&de=UTF-8&dt=Rogue%20Economics&sd=24-bit&sr=1280x1024&vp=1280x898&je=0&_u=YEDAAEABAAAAACAAI~&jid=192915490&gjid=100873291&cid=950499765.1664882277&tid=UA-170962029-3&_gid=183161837.1664882277&_r=1>m=2wg9s0NRT29V9&z=803615086
IP
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j98&a=1465725469&t=pageview&_s=1&dl=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&ul=en-us&de=UTF-8&dt=Rogue%20Economics&sd=24-bit&sr=1280x1024&vp=1280x898&je=0&_u=YEDAAEABAAAAACAAI~&jid=192915490&gjid=100873291&cid=950499765.1664882277&tid=UA-170962029-3&_gid=183161837.1664882277&_r=1>m=2wg9s0NRT29V9&z=803615086 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://secure.rogueeconomics.com
date: Tue, 04 Oct 2022 11:17:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=5146b65fab813afe64c9bda&account=5102072647001&destination=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&platform_version=6.66.4&player=players.brightcove.com%2F5102072647001%2FnjXiZ72Xhp_default&player_name=NEW%20-%20Marketing%20Player%20-%20Autoplay&source=&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5102072647001%2Fvideos%2F6312946533112&time=1664882277073&autoplay=false&seq=1
200 OK 35 B URL HTTP/2 metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=5146b65fab813afe64c9bda&account=5102072647001&destination=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&platform_version=6.66.4&player=players.brightcove.com%2F5102072647001%2FnjXiZ72Xhp_default&player_name=NEW%20-%20Marketing%20Player%20-%20Autoplay&source=&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5102072647001%2Fvideos%2F6312946533112&time=1664882277073&autoplay=false&seq=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /v2/tracker?domain=videocloud&platform=video-js&session=5146b65fab813afe64c9bda&account=5102072647001&destination=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&platform_version=6.66.4&player=players.brightcove.com%2F5102072647001%2FnjXiZ72Xhp_default&player_name=NEW%20-%20Marketing%20Player%20-%20Autoplay&source=&event=catalog_request&url=https%3A%2F%2Fedge.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F5102072647001%2Fvideos%2F6312946533112&time=1664882277073&autoplay=false&seq=1 HTTP/1.1
Host: metrics.brightcove.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 35
content-type: image/gif
cache-control: must-revalidate,no-cache,no-store
strict-transport-security: max-age=300; includeSubDomains
date: Tue, 04 Oct 2022 11:17:57 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/10s/master.m3u8?fastly_token=NjMzYzg0YzVfYzk0MmQxM2E0NGMyZWYzYjZlNGI4OTM2ZDdmNmZmMWE4NmViZmE0YWRmYjQ3YzNjMzMwNDM3ZmRlZjYzZTk2ZA%3D%3D
200 OK 7.3 kB URL HTTP/2 manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/10s/master.m3u8?fastly_token=NjMzYzg0YzVfYzk0MmQxM2E0NGMyZWYzYjZlNGI4OTM2ZDdmNmZmMWE4NmViZmE0YWRmYjQ3YzNjMzMwNDM3ZmRlZjYzZTk2ZA%3D%3D
IP
File type M3U playlist, ASCII text, with very long lines (391)
Hash 507a9b4385fe885d4b5bb6dd2b272bf7
2d49cb48ab665987ef7363338b8eff733b8606d7
5625346cd3589cc38700cfbde109701ea22473067a42e546d07872b1bfd7d8c7
GET /manifest/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/10s/master.m3u8?fastly_token=NjMzYzg0YzVfYzk0MmQxM2E0NGMyZWYzYjZlNGI4OTM2ZDdmNmZmMWE4NmViZmE0YWRmYjQ3YzNjMzMwNDM3ZmRlZjYzZTk2ZA%3D%3D HTTP/1.1
Host: manifest.prod.boltdns.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: s-maxage=10800, max-age=10800
content-type: application/x-mpegURL
x-bolt-device-group: desktop-firefox
x-powered-by: BC
x-powered-from: gantry
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:17:57 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1673-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664882278.923556,VS0,VE72
x-device-group: desktop-firefox
content-length: 7277
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 129fe858bf2aa7291fd2c6dd4cf9d226
e3e048b964b851ebbdcfb5bd80ebdbad13720cf6
addc7e4ddab73c8c7ee50f6d33fc1e4ff73b71cc014e481049a393c3b87b0924
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/f4TWTjhlG_M
IP
Hash c045eb5725f1ee90e16e76df615ef716
0dd8525fdd365642f3d52f08df11c7c3e1733f50
e68eb82e105465004a990135ebf40c1bace7b69c525b0e6d653b0d8f112d79f1
POST /s/gts1d4/f4TWTjhlG_M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:58 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53e0e5a2455fedae0d6308f91d41e445
237c2856f8a89ae3673ea909164557d65268c463
ddba9b3842f879168185b6607551069b312c44de4ec015ca4b43ad154d190bc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-170962029-3&cid=950499765.1664882277&jid=192915490&gjid=100873291&_gid=183161837.1664882277&_u=YEDAAEABAAAAACAAI~&z=1795915297
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-170962029-3&cid=950499765.1664882277&jid=192915490&gjid=100873291&_gid=183161837.1664882277&_u=YEDAAEABAAAAACAAI~&z=1795915297
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-170962029-3&cid=950499765.1664882277&jid=192915490&gjid=100873291&_gid=183161837.1664882277&_u=YEDAAEABAAAAACAAI~&z=1795915297 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://secure.rogueeconomics.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 04 Oct 2022 11:17:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
manifest.prod.boltdns.net/thumbnail/v1/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/0dcf4bd1-56d5-48a4-91e6-3a5ac3de9023/thumbnail.webvtt?fastly_token=NjMzYzg0YzVfYzhkMjcwZThjYzA0MWNiZjMwMjQ0OTZkM2E3NjNiNGU4ZmMxZjYwNDRmMGI2NzZmYzU1MTYwNWI5MjdkNzA3ZQ%3D%3D
200 OK 183 kB URL HTTP/2 manifest.prod.boltdns.net/thumbnail/v1/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/0dcf4bd1-56d5-48a4-91e6-3a5ac3de9023/thumbnail.webvtt?fastly_token=NjMzYzg0YzVfYzhkMjcwZThjYzA0MWNiZjMwMjQ0OTZkM2E3NjNiNGU4ZmMxZjYwNDRmMGI2NzZmYzU1MTYwNWI5MjdkNzA3ZQ%3D%3D
IP
File type ASCII text, with very long lines (343)
Size 183 kB (183207 bytes)
Hash 6c90e7486c3f7039d1ee06389a2e9d53
6b9ea267363c59386f0f6de81ebb86e18a9559f3
4d0974c1cb99203cae1df5dec7c5c93ad96b9d1587b32cd5aa93ef1fccb967dd
GET /thumbnail/v1/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/0dcf4bd1-56d5-48a4-91e6-3a5ac3de9023/thumbnail.webvtt?fastly_token=NjMzYzg0YzVfYzhkMjcwZThjYzA0MWNiZjMwMjQ0OTZkM2E3NjNiNGU4ZmMxZjYwNDRmMGI2NzZmYzU1MTYwNWI5MjdkNzA3ZQ%3D%3D HTTP/1.1
Host: manifest.prod.boltdns.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: s-maxage=10800, max-age=10800
content-type: text/vtt; charset=UTF-8
x-powered-by: BC
x-powered-from: gantry
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:17:58 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1673-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664882278.925983,VS0,VE190
x-device-group: desktop-firefox
content-length: 183207
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 53e0e5a2455fedae0d6308f91d41e445
237c2856f8a89ae3673ea909164557d65268c463
ddba9b3842f879168185b6607551069b312c44de4ec015ca4b43ad154d190bc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/action/0?ti=148019014&tm=gtm002&Ver=2&mid=2abed9a5-4fe1-4af0-89c6-65b6b5c93081&sid=32f8322043d611edb10e515238996bb8&vid=32f82ba043d611eda0882bd92abeb670&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Rogue%20Economics&p=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&r=<=3132&evt=pageLoad&sv=1&rn=344645
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=148019014&tm=gtm002&Ver=2&mid=2abed9a5-4fe1-4af0-89c6-65b6b5c93081&sid=32f8322043d611edb10e515238996bb8&vid=32f82ba043d611eda0882bd92abeb670&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Rogue%20Economics&p=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&r=<=3132&evt=pageLoad&sv=1&rn=344645
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=148019014&tm=gtm002&Ver=2&mid=2abed9a5-4fe1-4af0-89c6-65b6b5c93081&sid=32f8322043d611edb10e515238996bb8&vid=32f82ba043d611eda0882bd92abeb670&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Rogue%20Economics&p=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&r=<=3132&evt=pageLoad&sv=1&rn=344645 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=163C5063448465352C6C425045716418; domain=.bing.com; expires=Sun, 29-Oct-2023 11:17:58 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 107EFA51A77A40C6989A3722BD7C2821 Ref B: OSL30EDGE0213 Ref C: 2022-10-04T11:17:58Z
date: Tue, 04 Oct 2022 11:17:58 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13df37c7a0102aa69d97512e4f3bad4
2c3019bef2f4bc34b3f3dc212b30d4fad04f8b37
cfbc8bfd83a8eb63bf5d189e398e1373222f1d1bde223fba70e3c7b560c708aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/10896638983/?random=1664882277632&cv=9&fst=1664882277632&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9s0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&tiba=Rogue%20Economics&auid=1323001723.1664882277&hn=www.google.com&async=1&rfmt=3&fmt=4
200 OK 1.1 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/10896638983/?random=1664882277632&cv=9&fst=1664882277632&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9s0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&tiba=Rogue%20Economics&auid=1323001723.1664882277&hn=www.google.com&async=1&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2390), with no line terminators
Hash 2bf689a86b384e837c81d458342afd2a
6f5abda260f683134979f975e1241894dec1d7c8
34fd81228ac57d70edb793ddc5fb3230e9272c6a257a8f1db3d357adb2f1ba59
GET /pagead/viewthroughconversion/10896638983/?random=1664882277632&cv=9&fst=1664882277632&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa9s0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fsecure.rogueeconomics.com%2F%3Fcid%3DMKT677121%26eid%3DMKT679014%26assetId%3DAST263193%26page%3D1&tiba=Rogue%20Economics&auid=1323001723.1664882277&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 11:17:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1078
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 04-Oct-2022 11:32:58 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=dec35997-99a3-4c15-b52b-8739ea154510&batch_time=1664882277617
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=dec35997-99a3-4c15-b52b-8739ea154510&batch_time=1664882277617
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9a7906edb5160ffb51fca0b6a6f00b38
0a91771c5dbd8ad3ff0d5bc08ca1db7996382347
39aa1a4bbfc823e6f62da5a16f4ea713f8faf2bb9eb404f045c02aaca9d89b4e
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=dec35997-99a3-4c15-b52b-8739ea154510&batch_time=1664882277617 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16145
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Tue, 04 Oct 2022 11:17:58 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-170962029-3&cid=950499765.1664882277&jid=192915490&_u=YEDAAEABAAAAACAAI~&z=149384306
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-170962029-3&cid=950499765.1664882277&jid=192915490&_u=YEDAAEABAAAAACAAI~&z=149384306
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-170962029-3&cid=950499765.1664882277&jid=192915490&_u=YEDAAEABAAAAACAAI~&z=149384306 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 04 Oct 2022 11:17:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13df37c7a0102aa69d97512e4f3bad4
2c3019bef2f4bc34b3f3dc212b30d4fad04f8b37
cfbc8bfd83a8eb63bf5d189e398e1373222f1d1bde223fba70e3c7b560c708aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 11:17:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/p/action/148019014.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/148019014.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/148019014.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=0C6E7C5C0AB462A619476E6F0B416334; domain=.bing.com; expires=Sun, 29-Oct-2023 11:17:58 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6F4BDC91BF1643779973717CB7BA1855 Ref B: OSL30EDGE0213 Ref C: 2022-10-04T11:17:58Z
date: Tue, 04 Oct 2022 11:17:58 GMT
X-Firefox-Spdy: h2
manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/91d2188b-0c25-4204-b1ea-9339ab697cb6/10s/rendition.m3u8?fastly_token=NjMzYzg0YzVfYWNlZDY0MzdjMzBmMjVhMDEyNDg3MzljMjFhYmVhZWNhMzcxOTc0MWU5NTMyMmZlOWM5NWZjMDU4ZWYyMjBmMQ%3D%3D
200 OK 233 kB URL HTTP/2 manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/91d2188b-0c25-4204-b1ea-9339ab697cb6/10s/rendition.m3u8?fastly_token=NjMzYzg0YzVfYWNlZDY0MzdjMzBmMjVhMDEyNDg3MzljMjFhYmVhZWNhMzcxOTc0MWU5NTMyMmZlOWM5NWZjMDU4ZWYyMjBmMQ%3D%3D
IP
File type M3U playlist, ASCII text, with very long lines (455)
Size 233 kB (233027 bytes)
Hash 7e37011d9b5c380e6a01f7a3b5746641
6fdeb8e2d9cb4e213dca87b6dced794e06e17a9d
46df455e026f2e6aba234374a9a8e769c5a6f4848a061234dda89191a067a87f
GET /manifest/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/91d2188b-0c25-4204-b1ea-9339ab697cb6/10s/rendition.m3u8?fastly_token=NjMzYzg0YzVfYWNlZDY0MzdjMzBmMjVhMDEyNDg3MzljMjFhYmVhZWNhMzcxOTc0MWU5NTMyMmZlOWM5NWZjMDU4ZWYyMjBmMQ%3D%3D HTTP/1.1
Host: manifest.prod.boltdns.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: s-maxage=10800, max-age=10800
content-type: application/x-mpegURL
x-powered-by: BC
x-powered-from: gantry
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:17:58 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1673-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664882278.103377,VS0,VE279
x-device-group: desktop-firefox
content-length: 233027
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=188e08f9-ece4-44b0-a47f-3d854214938f&batch_time=1664882277877
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=188e08f9-ece4-44b0-a47f-3d854214938f&batch_time=1664882277877
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash faad08409f543e633a5111d13b9d6427
c984bd13e2f0184e1b755f6bb7ce12d8ff007056
761aa82da749798a11a03525da8b5196a3e0e3cc4c5b1788646359268dc6742e
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=188e08f9-ece4-44b0-a47f-3d854214938f&batch_time=1664882277877 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 15425
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Tue, 04 Oct 2022 11:17:58 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/91d2188b-0c25-4204-b1ea-9339ab697cb6/40121c76-7009-4d2f-86f1-4c76221ce4b4/5x/segment0.ts?akamai_token=exp=1664910534~acl=/media/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/91d2188b-0c25-4204-b1ea-9339ab697cb6/40121c76-7009-4d2f-86f1-4c76221ce4b4/*~hmac=36ac332a100dfb79435ecce94fcf22e169cdef6623697bac54f1e5c7455b6193
200 OK 2.2 MB URL HTTP/1.1 bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/91d2188b-0c25-4204-b1ea-9339ab697cb6/40121c76-7009-4d2f-86f1-4c76221ce4b4/5x/segment0.ts?akamai_token=exp=1664910534~acl=/media/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/91d2188b-0c25-4204-b1ea-9339ab697cb6/40121c76-7009-4d2f-86f1-4c76221ce4b4/*~hmac=36ac332a100dfb79435ecce94fcf22e169cdef6623697bac54f1e5c7455b6193
IP
ASN #20940 Akamai International B.V.
Size 2.2 MB (2226304 bytes)
Hash fee3420904b947891fd912216a33ddcc
8415b696eead014c64f46f4f432693888ea97248
0cec65d6917201e44a20ca8ac2f1c25866a37a704fe7bc0caa43188687be3d74
GET /media/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/91d2188b-0c25-4204-b1ea-9339ab697cb6/40121c76-7009-4d2f-86f1-4c76221ce4b4/5x/segment0.ts?akamai_token=exp=1664910534~acl=/media/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/91d2188b-0c25-4204-b1ea-9339ab697cb6/40121c76-7009-4d2f-86f1-4c76221ce4b4/*~hmac=36ac332a100dfb79435ecce94fcf22e169cdef6623697bac54f1e5c7455b6193 HTTP/1.1
Host: bcbolt446c5271-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 2226304
ETag: "3edf4e06f4a21576acd82df7b6b57b6e"
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Amz-Cf-Pop: JFK50-P1
X-Amz-Cf-Id: wOU_00cW_bqaIelXn7qayrcX3z4Nu6y0aJo4bWNQS2gyB_kcjWfZng==
Backend-IP: 108.139.46.176
Accept-Ranges: bytes
X-Served-By: cache-ewr18138-EWR
X-Cache-Hits: 1
X-Timer: S1664489211.944332,VS0,VE33
BC-MID: true
Cache-Control: public, max-age=31139202
Expires: Fri, 29 Sep 2023 21:04:40 GMT
Date: Tue, 04 Oct 2022 11:17:58 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 1315351
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/MP2T
Access-Control-Allow-Methods: GET,HEAD,OPTIONS
Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC
Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
manifest.prod.boltdns.net/license/v1/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/40121c76-7009-4d2f-86f1-4c76221ce4b4?fastly_token=NjMzYzg0YzZfYmU4MGI0NjhhNTE5MmIyYzgwMzYxYTE2ZDE2NmI2YjAxZTllYTg2NmJjOGE1NGFhZWE3MDkyZWMxYWFiOWVjNw%3D%3D
200 OK 16 B URL HTTP/2 manifest.prod.boltdns.net/license/v1/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/40121c76-7009-4d2f-86f1-4c76221ce4b4?fastly_token=NjMzYzg0YzZfYmU4MGI0NjhhNTE5MmIyYzgwMzYxYTE2ZDE2NmI2YjAxZTllYTg2NmJjOGE1NGFhZWE3MDkyZWMxYWFiOWVjNw%3D%3D
IP
Hash a194aca9a1a3ace244c381c47745f36a
5cf8d764c04eed0970bcef2838f8442d1b886ca8
19994c88085cc6f8059c8cb313460c67c4b05b3d5a7606c409fbd70350f6f2f2
GET /license/v1/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/40121c76-7009-4d2f-86f1-4c76221ce4b4?fastly_token=NjMzYzg0YzZfYmU4MGI0NjhhNTE5MmIyYzgwMzYxYTE2ZDE2NmI2YjAxZTllYTg2NmJjOGE1NGFhZWE3MDkyZWMxYWFiOWVjNw%3D%3D HTTP/1.1
Host: manifest.prod.boltdns.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
bcov-request-id: 2a7e9ad4-05e5-4c51-a70f-285b7f421235
cache-control: private, max-age=9867
content-type: application/octet-stream
x-hosted-on: Gantry
x-powered-by: BC
x-powered-from: eu-west-1a
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:17:58 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664882278.438419,VS0,VE144
x-device-group: desktop-firefox
content-length: 16
X-Firefox-Spdy: h2
manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/50b99843-bb4b-456a-9679-7dd9fef76dd4/10s/rendition.m3u8?fastly_token=NjMzYzg0YzVfM2VjYWMyMDljNTg5N2U3YWZmNzBmZjA5MTNiY2FmMTY0YmJiMjZkMzFkNmIzZGE5NGZiZmQyYmJmM2QzZGNlZQ%3D%3D
200 OK 235 kB URL HTTP/2 manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/50b99843-bb4b-456a-9679-7dd9fef76dd4/10s/rendition.m3u8?fastly_token=NjMzYzg0YzVfM2VjYWMyMDljNTg5N2U3YWZmNzBmZjA5MTNiY2FmMTY0YmJiMjZkMzFkNmIzZGE5NGZiZmQyYmJmM2QzZGNlZQ%3D%3D
IP
File type M3U playlist, ASCII text, with very long lines (455)
Size 235 kB (234890 bytes)
Hash fa132924e1b938f20a14aa332fa14fa0
284b3d5bbc090c67905187e49e96b35af91fa03c
78fafb0c199517ea33fe7be9d6c0094cc1e940de0200b4674c0e3f55637b9f7c
GET /manifest/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/50b99843-bb4b-456a-9679-7dd9fef76dd4/10s/rendition.m3u8?fastly_token=NjMzYzg0YzVfM2VjYWMyMDljNTg5N2U3YWZmNzBmZjA5MTNiY2FmMTY0YmJiMjZkMzFkNmIzZGE5NGZiZmQyYmJmM2QzZGNlZQ%3D%3D HTTP/1.1
Host: manifest.prod.boltdns.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Server,Range,Content-Length,Content-Range
cache-control: s-maxage=10800, max-age=10800
content-type: application/x-mpegURL
x-powered-by: BC
x-powered-from: gantry
accept-ranges: bytes
date: Tue, 04 Oct 2022 11:17:58 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1673-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664882278.426567,VS0,VE520
x-device-group: desktop-firefox
content-length: 234890
X-Firefox-Spdy: h2
rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=6b93a2b9-fb13-4824-9412-09920a1657d4&batch_time=1664882278269
202 Accepted 53 B URL HTTP/2 rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=6b93a2b9-fb13-4824-9412-09920a1657d4&batch_time=1664882278269
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 2b68c1bceaea8885e44b25c575ddd31a
ffbea93343a49236b9be4ab7c9238254836ee9cc
8b88c576754c73a3338d1f029d8dd0a5dfd747201b13c293a3c61e94fd291ba2
POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.8.0%2Cenv%3APROD%2Cservice%3Acampaign-ui-prod%2Cversion%3A1.0.0&dd-api-key=pub5a93a2e41f99bb3b57d467276cf7c1f0&dd-evp-origin-version=4.8.0&dd-evp-origin=browser&dd-request-id=6b93a2b9-fb13-4824-9412-09920a1657d4&batch_time=1664882278269 HTTP/1.1
Host: rum.browser-intake-datadoghq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 16252
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 202 Accepted
date: Tue, 04 Oct 2022 11:17:58 GMT
content-type: application/json
content-length: 53
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=15724800;
X-Firefox-Spdy: h2
bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/50b99843-bb4b-456a-9679-7dd9fef76dd4/40121c76-7009-4d2f-86f1-4c76221ce4b4/5x/segment0.ts?akamai_token=exp=1664910534~acl=/media/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/50b99843-bb4b-456a-9679-7dd9fef76dd4/40121c76-7009-4d2f-86f1-4c76221ce4b4/*~hmac=4501cf194731c713d67e34965ec525a229b434e2446e4a7f8b3d72ef301fe419
200 OK 295 kB URL HTTP/1.1 bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/50b99843-bb4b-456a-9679-7dd9fef76dd4/40121c76-7009-4d2f-86f1-4c76221ce4b4/5x/segment0.ts?akamai_token=exp=1664910534~acl=/media/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/50b99843-bb4b-456a-9679-7dd9fef76dd4/40121c76-7009-4d2f-86f1-4c76221ce4b4/*~hmac=4501cf194731c713d67e34965ec525a229b434e2446e4a7f8b3d72ef301fe419
IP
ASN #20940 Akamai International B.V.
Size 295 kB (295168 bytes)
Hash 15ed2ab87014d5d5e1c245d238a328a4
6823b8458007b0de4e62733f69a9b4de1ff1cc9b
67ca59026d228d7da4d779fa8dbe3397b000af3ea7b66e6908f4b91c991f1972
GET /media/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/50b99843-bb4b-456a-9679-7dd9fef76dd4/40121c76-7009-4d2f-86f1-4c76221ce4b4/5x/segment0.ts?akamai_token=exp=1664910534~acl=/media/v1/hls/v4/aes128/5102072647001/fa9551c6-1446-4fd9-a7b2-00b57d8e414d/50b99843-bb4b-456a-9679-7dd9fef76dd4/40121c76-7009-4d2f-86f1-4c76221ce4b4/*~hmac=4501cf194731c713d67e34965ec525a229b434e2446e4a7f8b3d72ef301fe419 HTTP/1.1
Host: bcbolt446c5271-a.akamaihd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://secure.rogueeconomics.com
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 295168
ETag: "f797484f24e3335feda68b4ff9767a76"
Last-Modified: Fri, 01 Jan 2016 00:00:00 GMT
X-Powered-By: BC
X-Powered-From: gantry
X-Amz-Cf-Pop: JFK50-P1
X-Amz-Cf-Id: CRBIimPESFevMo0G2s5J7pUA6gRanSfD1mwXTNAYy9Ae3h1Xgy1JMg==
Backend-IP: 108.139.46.132
Accept-Ranges: bytes
X-Served-By: cache-ewr18137-EWR
X-Cache-Hits: 1
X-Timer: S1664485697.737070,VS0,VE16
BC-MID: true
Cache-Control: public, max-age=31139156
Expires: Fri, 29 Sep 2023 21:03:54 GMT
Date: Tue, 04 Oct 2022 11:17:58 GMT
Connection: keep-alive
Akamai-Mon-Iucid-Del: 1315351
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
Content-Type: video/MP2T
Access-Control-Allow-Methods: GET,HEAD,OPTIONS
Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC
Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
Access-Control-Allow-Origin: *
secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
200 OK 0 B URL HTTP/2 secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
IP
GET /?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1 HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:53 GMT
content-type: text/html
last-modified: Mon, 26 Sep 2022 16:32:29 GMT
x-amz-meta-codebuild-content-sha256: cf2ac11acf4d008b7e0469bb29aedc745c1c3b33cf9f56a0a7d94f2894463297
x-amz-version-id: null
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-2:742663695247:build/BSS-DevOps-Codebuild-Custom-v1-static-builder:ed4ec2e7-d59c-4a41-9ade-adbf9ba7243d
x-amz-meta-codebuild-content-md5: 0808024a499b73cf56efb31b8f31ff7d
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ram-ou8BJp0uLFcM_mFOyl0gOagvZ-LfA3alvRhxKGqb9lBQkanvJw==
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754d837e58d60b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
secure.rogueeconomics.com/store/PROD/plugins/jquery-payment/jquery.payment.min.js
200 OK 0 B URL HTTP/2 secure.rogueeconomics.com/store/PROD/plugins/jquery-payment/jquery.payment.min.js
IP
GET /store/PROD/plugins/jquery-payment/jquery.payment.min.js HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:54 GMT
content-type: application/javascript
x-amzn-requestid: 6eb9f9b9-76aa-4ce7-b122-1fe6c40c64b4
last-modified: Wed, 21 Aug 2019 20:18:01 GMT
x-amz-version-id: uVxF0OX6Rj_lsOZHo0OKGG0I2eVEXwcB
cf-cache-status: DYNAMIC
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: ZehvVHy_IAMF8Sw=
x-amzn-remapped-server: cloudflare
etag: W/"2ccb4360a6b212383716224d0b56bd21"
x-amzn-remapped-date: Tue, 04 Oct 2022 11:17:53 GMT
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront), 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
x-amz-cf-id: 9x76DiHclCx8Fdva7IjRL6Z2aRcSjYHhBl5v99FciSoOVEYkhPPqRw==
server: cloudflare
cf-ray: 754d83823cd40b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.enron20.com/?view=module-3
302 Found 0 B URL HTTP/2 www.enron20.com/?view=module-3
IP
GET /?view=module-3 HTTP/1.1
Host: www.enron20.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Tue, 04 Oct 2022 11:17:52 GMT
content-type: text/html; charset=UTF-8
location: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
cache-control: no-cache, must-revalidate, no-cache="set-cookie"
expires: Sat, 26 Jul 1997 05:00:00 GMT
set-cookie: AWSELB=FF9583C11E99524E416D9C0693769B58C8F2AD4705E0FEB132A0CEE818B2BFD90918EDC224F09A057AE6BEE5A31C5186601F3DCC1352AD6C7BDBC9C5E23503C1A16F4EA856;PATH=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kjaVTImKYBxusCENN2%2FvNT9TDlbizT7XAv5VNJHfpNDO14tJF4BkS1g2hEfYOfwS7ZGV3Dh834uWGFKXrf9T9SK8hHohaLzqXkNd0q5sQiy0DgFXmlmQcvqWpAZ2kZkJKb0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754d837c39bd0b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
secure.rogueeconomics.com/store/PROD/js/listrak.js
200 OK 0 B URL HTTP/2 secure.rogueeconomics.com/store/PROD/js/listrak.js
IP
GET /store/PROD/js/listrak.js HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:54 GMT
content-type: application/javascript
x-amzn-requestid: 0392b435-a837-48ac-abb1-8c95f625f7eb
last-modified: Thu, 28 Jun 2018 20:46:57 GMT
x-amz-version-id: W46Q95OyRSSEl7u8xZsbwfK4bzk35Yt_
cf-cache-status: DYNAMIC
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: ZehvVEzUIAMF88w=
x-amzn-remapped-server: cloudflare
etag: W/"cd9f94dd71125cb7fda1e1088aa19ec3"
x-amzn-remapped-date: Tue, 04 Oct 2022 11:17:53 GMT
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
x-amz-cf-id: 5BHBvdzi6SzCfIYn8H7kULmp93FIvZzietApPKAecX52tB1O2uXutw==
server: cloudflare
cf-ray: 754d83824cea0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
d3bjnmbj12697.cloudfront.net/_/headshots/nc/nomi-prins-3-color-trn-square.png
200 OK 0 B URL HTTP/1.1 d3bjnmbj12697.cloudfront.net/_/headshots/nc/nomi-prins-3-color-trn-square.png
IP
GET /_/headshots/nc/nomi-prins-3-color-trn-square.png HTTP/1.1
Host: d3bjnmbj12697.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 106430
Connection: keep-alive
Last-Modified: Mon, 06 Jun 2022 00:36:44 GMT
x-amz-meta-user-agent: AWSTransfer
x-amz-meta-user-agent-id: djarrell@s-c2cd08720a404b138
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 03 Oct 2022 20:06:05 GMT
ETag: "81328a76453f6f415d9abe59a5c8dd0e"
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zCl9BwKDv9C95J520AJuN6zReUIYHitN6Pd7huJZdYQP_IoYqztvdg==
Age: 54713
s1.listrakbi.com/cAQH8nQQgXEj/session/getIds?callback=ltkCallback7105&gsid=&_sid=&_tid=827351&ps=null&dps=true
200 OK 0 B URL HTTP/2 s1.listrakbi.com/cAQH8nQQgXEj/session/getIds?callback=ltkCallback7105&gsid=&_sid=&_tid=827351&ps=null&dps=true
IP
GET /cAQH8nQQgXEj/session/getIds?callback=ltkCallback7105&gsid=&_sid=&_tid=827351&ps=null&dps=true HTTP/1.1
Host: s1.listrakbi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:57 GMT
content-type: application/x-javascript; charset=utf-8
set-cookie: AWSALB=xgtdwLZ/f9JxZlk6AehK4cfJxCuThcL8X6IUG52ERmHXZ8j/b0vdrHse9sqgqVW5hfH4+5T59gTYw8cqXn0dxnYKUwSX0O956CTuVlqQOAenX2zmrJACylFxyfmm; Expires=Tue, 11 Oct 2022 11:17:57 GMT; Path=/
AWSALBCORS=xgtdwLZ/f9JxZlk6AehK4cfJxCuThcL8X6IUG52ERmHXZ8j/b0vdrHse9sqgqVW5hfH4+5T59gTYw8cqXn0dxnYKUwSX0O956CTuVlqQOAenX2zmrJACylFxyfmm; Expires=Tue, 11 Oct 2022 11:17:57 GMT; Path=/; SameSite=None; Secure
gsid=i6N6k2Pkp1euRQvZmaAcA4b7cOHOR7JGkQmDJSlM%2f6dWD0ALjBz7AoK4fF3Y%2bY1%2bAvhEA2TjCIY%3d; expires=Mon, 04 Oct 2032 11:17:57 GMT; domain=.listrakbi.com; path=/cAQH8nQQgXEj; SameSite=None; secure
scasid=a3c50f5f-a465-44de-bd75-efeef1ee7306; expires=Wed, 04 Oct 2023 11:17:57 GMT; domain=.listrakbi.com; path=/cAQH8nQQgXEj; SameSite=None; secure
usid=722839ac00234f69afa5f484fdfddbd0; expires=Mon, 02 Jan 2023 11:17:57 GMT; domain=.listrakbi.com; path=/; SameSite=None; secure
cache-control: no-cache
pragma: no-cache
expires: -1
p3p: policyref="/w3c/p3p.xml", CP="CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI COM NAV INT DEM CNT PRE LOC"
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 754d839c7cbe0b45-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
secure.rogueeconomics.com/store/PROD/js/HPM2Security-min.js
200 OK 0 B URL HTTP/2 secure.rogueeconomics.com/store/PROD/js/HPM2Security-min.js
IP
GET /store/PROD/js/HPM2Security-min.js HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:54 GMT
content-type: application/javascript
x-amzn-requestid: 2ca596b1-3357-4e47-9927-53bccc10af0c
last-modified: Thu, 20 Sep 2018 10:42:47 GMT
x-amz-version-id: F1zb.i6q7MEDZAdQsvHFruscv_FKHXVQ
cf-cache-status: DYNAMIC
x-amzn-remapped-connection: keep-alive
x-amz-apigw-id: ZehvVFTFoAMF7wA=
x-amzn-remapped-server: cloudflare
etag: W/"5c56f33a7d1fcd065fa2bd0fa7758d42"
x-amzn-remapped-date: Tue, 04 Oct 2022 11:17:54 GMT
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront), 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1, OSL50-P1
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-cache: Miss from cloudfront
x-amz-cf-id: gzfNPf3FFheEcj-9YL2xnTxHzhODz8FnKE_Eu4g_gLZF8_CRVYAqPg==
server: cloudflare
cf-ray: 754d83823cd10b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
secure.rogueeconomics.com/runtime-es2015.js
200 OK 0 B URL HTTP/2 secure.rogueeconomics.com/runtime-es2015.js
IP
GET /runtime-es2015.js HTTP/1.1
Host: secure.rogueeconomics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.rogueeconomics.com/?cid=MKT677121&eid=MKT679014&assetId=AST263193&page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 11:17:54 GMT
content-type: application/x-javascript
last-modified: Mon, 26 Sep 2022 16:32:29 GMT
etag: W/"193974daff264d8d7d9a789f91c41d40"
x-amz-meta-codebuild-content-sha256: cf2ac11acf4d008b7e0469bb29aedc745c1c3b33cf9f56a0a7d94f2894463297
x-amz-version-id: null
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-2:742663695247:build/BSS-DevOps-Codebuild-Custom-v1-static-builder:ed4ec2e7-d59c-4a41-9ade-adbf9ba7243d
x-amz-meta-codebuild-content-md5: 0808024a499b73cf56efb31b8f31ff7d
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: V7z_Uji_IiPl5GR9k77DcPPoYB-q_34gFxjC7x90J8kPlfCZQIf4rQ==
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754d83824cec0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
52.72.49.79
151.101.86.27
104.18.32.68
23.36.76.129
93.184.220.29