Overview

URL performancemanager4.successfactors.com/sf/emailjobtofriend?jobId=204423&company=dukeuniverP1
IP96.6.19.112
ASNAKAMAI-AS
Location Norway
Report completed2022-09-29 12:55:54 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (11)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-29 04:10:37 UTC 34.120.237.76
mnemonic passive DNS r3.o.lencr.org (3) 344 2020-12-02 08:52:13 UTC 2022-09-29 04:57:37 UTC 23.36.77.32
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-29 04:56:09 UTC 34.117.237.239
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-29 08:58:20 UTC 93.184.220.29
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-29 05:06:32 UTC 52.36.24.174
mnemonic passive DNS shib.oit.duke.edu (12) 513268 2013-01-03 02:07:12 UTC 2022-06-29 08:30:54 UTC 152.3.72.35
mnemonic passive DNS beacon.oit.duke.edu (17) 793749 2016-03-28 21:40:12 UTC 2022-06-20 01:37:46 UTC 152.3.100.240
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-09-29 11:05:08 UTC 143.204.55.27
mnemonic passive DNS performancemanager4.successfactors.com (4) 20679 2017-01-31 06:12:16 UTC 2022-09-29 11:53:33 UTC 96.6.19.112
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-29 05:03:41 UTC 143.204.55.35
mnemonic passive DNS ocsp.usertrust.com (2) 899 2012-05-21 15:43:18 UTC 2022-09-29 05:03:14 UTC 172.64.155.188


Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 96.6.19.112

Date UQ / IDS / BL URL IP
2022-09-29 12:55:54 +0000
0 - 0 - 0 performancemanager4.successfactors.com/sf/ema (...) 96.6.19.112

Last 5 reports on ASN: AKAMAI-AS

Date UQ / IDS / BL URL IP
2022-12-08 22:59:51 +0000
0 - 0 - 1 www.three.co.uk/?id=1681&sv1=affiliate&sv_cam (...) 104.66.112.134
2022-12-08 22:59:43 +0000
0 - 0 - 1 www.three.co.uk/ 104.66.112.134
2022-12-08 22:34:05 +0000
0 - 0 - 0 ircc.qualtrics.com/jfe/form/SV_7OtXDc6ooqueew (...) 2.18.173.116
2022-12-08 21:23:16 +0000
0 - 0 - 1 www.omega.com/en-us/checkout/orderConfirmatio (...) 104.110.14.96
2022-12-08 21:23:00 +0000
0 - 0 - 1 www.omega.com/en-us/contact-us 104.110.14.96

Last 1 reports on domain: successfactors.com

Date UQ / IDS / BL URL IP
2022-09-29 12:55:54 +0000
0 - 0 - 0 performancemanager4.successfactors.com/sf/ema (...) 96.6.19.112

No other reports with similar screenshot



JavaScript

Executed Scripts (11)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (50)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 29 Sep 2022 12:15:52 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Wy7sd0CxDDksKozwqv6yJTeAaHllhrLRmfGgVzfO-cCvtt8XdQvZxg==
Age: 2391


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            GET /sf/emailjobtofriend?jobId=204423&company=dukeuniverP1 HTTP/1.1 
Host: performancemanager4.successfactors.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         96.6.19.112
HTTP/2 302 Found
                                        
content-length: 0
optr_cxt: 01000100000756b126-3ff6-11ed-9af7-c3729fdd3ced00000000-0000-0000-0000-000000000001-1 HTTP ;
x-unique-id: 5581e2f5590a2208c73a5f0967628125
x-event-id: EVENT-UNKNOWN-UNKNOWN-ob3abe231s-20220929085543-1087984
pragma: no-cache
cache-control: no-store,no-cache
expires: Thu, 29 Sep 2022 12:55:43 GMT
location: /saml2/Login?company=dukeuniverP1&RelayState=/sf/emailjobtofriend?jobId=204423&company=dukeuniverP1&_s.crb=pOcM7lMWi1vjVfaJEUPMRSGFJ%252fviOvdftbBQO2fBygw%253d
server: Successfactors
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-itr-target-cluster: defaultCluster
x-itr-server: 5a5b08f38e82cad0fc57f2f0259c75a63d8a2758
date: Thu, 29 Sep 2022 12:55:43 GMT
set-cookie: route=249b98aee44909b0f59698a4504916d0303d7e0d; Path=/; Secure; HttpOnly; SameSite=None OptierRQUUID=0756b126-3ff6-11ed-9af7-c3729fdd3ced; Max-Age=30; Expires=Thu, 29-Sep-2022 12:56:13 GMT; Path=/ %2Fsf%2Femailjobtofriend-markFromServer=true; Max-Age=60; Expires=Thu, 29-Sep-2022 12:56:43 GMT JSESSIONID=E66F724EA8E4ABD6BDF52178C7A4121B.pc4bcf342t; Path=/; Secure; HttpOnly; SameSite=None deeplinkCookieKey=%2fsf%2femailjobtofriend%3fjobId%3d204423%26company%3ddukeuniverP1; Path=/; Secure; HttpOnly; SameSite=None
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19078
Expires: Thu, 29 Sep 2022 18:13:41 GMT
Date: Thu, 29 Sep 2022 12:55:43 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 29 Sep 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mVYCBbxaMXd8Ir7_07n6_gb-Q5JbCVH03qnnMXljXkBEZhxSsWqEpw==
age: 26836
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 29 Sep 2022 12:55:43 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /saml2/Login?company=dukeuniverP1&RelayState=/sf/emailjobtofriend?jobId=204423&company=dukeuniverP1&_s.crb=pOcM7lMWi1vjVfaJEUPMRSGFJ%252fviOvdftbBQO2fBygw%253d HTTP/1.1 
Host: performancemanager4.successfactors.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: route=249b98aee44909b0f59698a4504916d0303d7e0d; OptierRQUUID=0756b126-3ff6-11ed-9af7-c3729fdd3ced; JSESSIONID=E66F724EA8E4ABD6BDF52178C7A4121B.pc4bcf342t; deeplinkCookieKey=%2fsf%2femailjobtofriend%3fjobId%3d204423%26company%3ddukeuniverP1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

                                         
                                         96.6.19.112
HTTP/2 200 OK
content-type: text/html;charset=UTF-8
                                        
optr_cxt: 0100010000078206f0-3ff6-11ed-9af7-c3729fdd3ced00000000-0000-0000-0000-000000000001-1 HTTP ;
x-unique-id: 5a84e97d3ec7776796360fd736cbc36b
x-event-id: EVENT-UNKNOWN-UNKNOWN-ob3abe231s-20220929085543-1087986
cache-control: no-store,no-cache
pragma: no-cache, no-cache
expires: Thu, 29 Sep 2022 12:55:43 GMT, Wed, 31 Dec 1969 23:59:59 GMT
x-request-stats: SQLT=1&CCON=0&FWR=0&NRE=0&CEXT=0&ST=1664456143884&EID=EVENT-UNKNOWN-UNKNOWN-ob3abe231s-20220929085543-1087986&CLOC=0&CREM=0&NWR=0&CPU=30&SVT=35&SQLC=2&SCPU=0&CSUP=2&MEM=10758&UCPU=30&FRE=0
server: Successfactors
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-itr-target-cluster: defaultCluster
x-itr-server: 5a5b08f38e82cad0fc57f2f0259c75a63d8a2758
location:
date: Thu, 29 Sep 2022 12:55:44 GMT
content-length: 1683
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (986)
Size:   1683
Md5:    2484774f165555960a6407a96b18e2a3
Sha1:   5ca7bf20dbc32ef450736a4506fab4d60515f829
Sha256: 6fb7799291c3e22dfd952bfb318bbad4579dcfde138d6924c63fbb5ae179e34c
                                        
                                            GET /ui/extlib/XMLHttpRequest_1.0.5_sf.17/XMLHttpRequest.js HTTP/1.1 
Host: performancemanager4.successfactors.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://performancemanager4.successfactors.com/saml2/Login?company=dukeuniverP1&RelayState=/sf/emailjobtofriend?jobId=204423&company=dukeuniverP1&_s.crb=pOcM7lMWi1vjVfaJEUPMRSGFJ%252fviOvdftbBQO2fBygw%253d
Connection: keep-alive
Cookie: route=249b98aee44909b0f59698a4504916d0303d7e0d; OptierRQUUID=0756b126-3ff6-11ed-9af7-c3729fdd3ced; JSESSIONID=E66F724EA8E4ABD6BDF52178C7A4121B.pc4bcf342t; deeplinkCookieKey=%2fsf%2femailjobtofriend%3fjobId%3d204423%26company%3ddukeuniverP1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         96.6.19.112
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Sat, 22 Jan 2022 05:39:17 GMT
vary: Accept-Encoding
server: Successfactors
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
location:
content-length: 2721
unused62: 8096267
cache-control: public, max-age=314464136
expires: Thu, 16 Sep 2032 04:04:40 GMT
date: Thu, 29 Sep 2022 12:55:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (533)
Size:   2721
Md5:    0cee2b601f0085ca82e01f1cfd895c18
Sha1:   54c7a44886bf3d203a69219cf6093b113df4f0ba
Sha256: 1b3e63deed8e6abd4f8b5871da0335a062eb60b51efea235aae27eb0aed43486
                                        
                                            GET /ui/perflog/js/perflog_6afbc835fd7bc8ec51a93324df511558.js HTTP/1.1 
Host: performancemanager4.successfactors.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://performancemanager4.successfactors.com/saml2/Login?company=dukeuniverP1&RelayState=/sf/emailjobtofriend?jobId=204423&company=dukeuniverP1&_s.crb=pOcM7lMWi1vjVfaJEUPMRSGFJ%252fviOvdftbBQO2fBygw%253d
Connection: keep-alive
Cookie: route=249b98aee44909b0f59698a4504916d0303d7e0d; OptierRQUUID=0756b126-3ff6-11ed-9af7-c3729fdd3ced; JSESSIONID=E66F724EA8E4ABD6BDF52178C7A4121B.pc4bcf342t; deeplinkCookieKey=%2fsf%2femailjobtofriend%3fjobId%3d204423%26company%3ddukeuniverP1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         96.6.19.112
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Sat, 21 May 2022 05:13:49 GMT
vary: Accept-Encoding
server: Successfactors
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
location:
content-length: 4421
cache-control: public, max-age=312612867
expires: Wed, 25 Aug 2032 17:50:11 GMT
date: Thu, 29 Sep 2022 12:55:44 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (540)
Size:   4421
Md5:    f7f20d4e44b80e5415c21cd8999bbd3d
Sha1:   052cd5ee379230ae132c0aeb89f436531988836f
Sha256: 5582ca4776307f097ba5e7f36b23c85c7e628e1611704f3d47b57b7adb5f9af3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 29 Sep 2022 12:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Thu, 29 Sep 2022 13:26:20 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: imLFlM2OAH8SYw-D3ARB92y9iB1rO2Nl8AHa-Y8mEI8gvT77MWsI_w==
Age: 1571


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6094
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 12:55:44 GMT
Last-Modified: Thu, 29 Sep 2022 11:14:10 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:55:44 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 28 Sep 2022 08:31:38 GMT
Expires: Wed, 05 Oct 2022 08:31:37 GMT
Etag: "3ade23be361798dea9389e81306ffd100ae2a876"
Cache-Control: max-age=575321,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7524dff828ffb500-OSL

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7Wa0+mvXDL31EOGFijdO4w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.36.24.174
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: IBRJXoN5Gi9cNVwg70RYtdVCAxA=

                                        
                                            GET /idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJdb9sgFIb%2FisU9YJOki1GcKltULdK2Wo3Xi91MBI4XNBs8Dizbv6%2FjpFN30d7C%2B3F4DqvbP32X%2FYaA1ruKFCwnGTjtjXU%2FKvK1uaNLcrteoeo7MchNikf3AL8SYMxGo0N5ualICk56hRalUz2gjFruN58%2FScFyOQQfvfYdybaj0ToVp7JjjANKzvFoD8zbyEz6CQxM4tYMfDS1tgN%2BThH8AYwNoCPf7%2B9JdueDhmmYirSqQyDZbluR76Vp50LcaFqWZU7nh0VLVfFO06USN6qFmdAHM0oRE%2BwcRuViRUQuBM1LKsqmEHKxkPMZW5azbySrr2O%2Ft%2B6C4603Hi4ilB%2Bbpqb1%2Fb4h2eMz1lFArhDl1B5e0ns7WCFCOAMj62dgp9OJYdIaEFulow%2FItO%2F5GV9ydlxmXaz4y7Z%2FC%2Fwyxu%2B2te%2Bs%2Fpttus6fPgRQESoSQ4IJbK%2Fi6wMVrJhOrKHtJJXJ4QDathYM4etr7f8%2FZf0E&RelayState=%2Fsf%2Femailjobtofriend%3FjobId%3D204423&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=WNzF91rwQjnsqcHZsoYTQgruRWbuq1PSagMxiTas5Ll6fbg8OBPSFTy62JukUgqQQXJ%2BQXw0lyFY8gXqH0EOkATF9niMh2gy99Sm76Wwp1GqSrfh4RRYTm%2F4W2cPCaxEBLo4%2F%2BnYtT%2FehEBtXOG86yWd3FN8xhLtUIfAtuWCUjQ%3D HTTP/1.1 
Host: shib.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         152.3.72.35
HTTP/1.1 302 302
                                        
Date: Thu, 29 Sep 2022 12:55:44 GMT
Server: Apache
Cache-Control: no-store
Expires:
Set-Cookie: JSESSIONID=72FA72E35EC5787CF681A5EC6D6E0204; Path=/idp; Secure; HttpOnly
Pragma:
Strict-Transport-Security: max-age=0
Location: /idp/profile/SAML2/Redirect/SSO?execution=e1s1
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive

                                        
                                            GET /idp/profile/SAML2/Redirect/SSO?execution=e1s1 HTTP/1.1 
Host: shib.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: JSESSIONID=72FA72E35EC5787CF681A5EC6D6E0204
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         152.3.72.35
HTTP/1.1 302 302
                                        
Date: Thu, 29 Sep 2022 12:55:44 GMT
Server: Apache
Cache-Control: no-store
Expires:
Pragma:
Strict-Transport-Security: max-age=0
Location: /idp/authn/external?conversation=e1s1
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive

                                        
                                            GET /idp/authn/external?conversation=e1s1 HTTP/1.1 
Host: shib.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: JSESSIONID=72FA72E35EC5787CF681A5EC6D6E0204
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         152.3.72.35
HTTP/1.1 200 200
Content-Type: text/html;charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 12:55:45 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (302)
Size:   19323
Md5:    afeb77b35a90668825f11bb137f1c9d7
Sha1:   690e4c91280bcb41f6f490006be3816e0683dbc9
Sha256: f7bf5246b4f2341b49ca20698f569fbb31d311aa5619475f4780c8e1636b4671
                                        
                                            GET /idp/css/fonts.css HTTP/1.1 
Host: shib.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/idp/authn/external?conversation=e1s1
Cookie: JSESSIONID=72FA72E35EC5787CF681A5EC6D6E0204
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         152.3.72.35
HTTP/1.1 200 200
Content-Type: text/css;charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 12:55:45 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
Accept-Ranges: bytes
ETag: W/"37917-1627470034000"
Last-Modified: Wed, 28 Jul 2021 11:00:34 GMT
Content-Length: 37917
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (432)
Size:   37917
Md5:    1ff3fbbf6490417fb0dc8d76520acbd0
Sha1:   0b302ca48a88e5f9c9171739dfbb085c82abf3bf
Sha256: fbbe6b4fb770b8a4c5860451df8ded85f57254ce6536e19d638801fbf477c4d1
                                        
                                            GET /idp/css/shib.css HTTP/1.1 
Host: shib.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/idp/authn/external?conversation=e1s1
Cookie: JSESSIONID=72FA72E35EC5787CF681A5EC6D6E0204
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         152.3.72.35
HTTP/1.1 200 200
Content-Type: text/css;charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 12:55:45 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
Accept-Ranges: bytes
ETag: W/"3659-1627470034000"
Last-Modified: Wed, 28 Jul 2021 11:00:34 GMT
Content-Length: 3659
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   3659
Md5:    089b998c4d980a8f4e921209ad96b66b
Sha1:   9f9da91418b17291503f941bdc7ce60f7f572a97
Sha256: 010bdfefb185378d585e58113f8afc7c741d0d45ee510a23e2fbd4a525f03d4f
                                        
                                            GET /idp/css/login.css HTTP/1.1 
Host: shib.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/idp/authn/external?conversation=e1s1
Cookie: JSESSIONID=72FA72E35EC5787CF681A5EC6D6E0204
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         152.3.72.35
HTTP/1.1 200 200
Content-Type: text/css;charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 12:55:45 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
Accept-Ranges: bytes
ETag: W/"4741-1627470034000"
Last-Modified: Wed, 28 Jul 2021 11:00:34 GMT
Content-Length: 4741
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   4741
Md5:    b02dc36a28332a0e3eb2dd404f627b94
Sha1:   b5f1f94da9783203e11bcdde8b7573bc5c2e1ffe
Sha256: 79bff0a1b00536f7f3ca283294e4a6a6382ce3cb68c55318d6cf5ff5b647d3f6
                                        
                                            GET /idp/js/boomerang-oit.js HTTP/1.1 
Host: shib.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/idp/authn/external?conversation=e1s1
Cookie: JSESSIONID=72FA72E35EC5787CF681A5EC6D6E0204
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         152.3.72.35
HTTP/1.1 200 200
Content-Type: application/javascript;charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 12:55:45 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
Accept-Ranges: bytes
ETag: W/"41997-1627470036000"
Last-Modified: Wed, 28 Jul 2021 11:00:36 GMT
Content-Length: 41997
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (32034)
Size:   41997
Md5:    4096ecf4075c0dd5f61e39e6dde0d5d3
Sha1:   4a1fcc101b0f3435112d7bbba05da7b0355fd523
Sha256: 65f6e1aa6535b391426d610736fc92fb244002b7430fbadcd3b6a2892222b8a5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4694
Expires: Thu, 29 Sep 2022 14:13:59 GMT
Date: Thu, 29 Sep 2022 12:55:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4694
Expires: Thu, 29 Sep 2022 14:13:59 GMT
Date: Thu, 29 Sep 2022 12:55:45 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F783cca30-851d-4c3b-97b3-dfc92f711d23.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4093
x-amzn-requestid: 4275d743-8507-4fbe-83d1-cc0da2adef7b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKoPHCMIAMF7wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be34-5ddb717430e7b38e3ee53657;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: H713oiiX6wslZytV_P5NblH5vT7KZ2fv1G3DLKLrH5nw0lHOquia4w==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:40:48 GMT
etag: "c17c7bdfa4b40f9a0634da65c610869e5c410bf1"
age: 54897
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4093
Md5:    aed4d25286420a1405c3274931194002
Sha1:   c17c7bdfa4b40f9a0634da65c610869e5c410bf1
Sha256: f32058bdd49930b927d1f9fdfd204ed054b4f85e0d679eff067d522d42ac504a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 14073
x-amzn-requestid: 4ff72590-e28d-4d4b-af1a-4d62e75e3d66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKnpEsJoAMFlBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be30-38b014a25551aa0a2ab04ccf;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gP4V4fq53Z5BFfjDlx1LCR9AhUPTq0qusBaOY_UEXjJjM6SByqDgXg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:41:45 GMT
etag: "72603efba82d649ce5a7a0ca45dc830c0d9ef012"
age: 54840
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14073
Md5:    11594ce7500d8776bfd5162b17f87d72
Sha1:   72603efba82d649ce5a7a0ca45dc830c0d9ef012
Sha256: 511f5aa33750cd4a02cf3968bf165ffa521e77cb4fb7135b516d7ad14e8b9d01
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75de31dd-bbf0-4a21-bfac-94f0062f4da4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10023
x-amzn-requestid: 0cb6b9a1-0707-4094-b197-5a0add2df717
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK4dHJLIAMFWmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be9c-2d8bbb17157900f126c5bb3c;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wZ2hBqHAdwimAVV3p-CJFrb9zQ-CTN5ar9CB-cu0mZoENYUFTKKPWQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ddaf46a95abcfc80e8eae76235e2127c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:40:43 GMT
age: 54902
etag: "e1067a2dfbc22e7eb196046d57bd1e17604dba75"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10023
Md5:    f4505f57697072468da82e0b536d0d5b
Sha1:   e1067a2dfbc22e7eb196046d57bd1e17604dba75
Sha256: b5e79054f165f38b99f93a8128284f82076523988aeb102b85dd8ff1a2870d00
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb46b76b4-e585-46c3-bf03-5bfe9273000c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3332
x-amzn-requestid: 34214e89-7232-4fd5-9257-adf231670681
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZDb3vGkOIAMFVhg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63314031-3056111d48a5027a2062ad1b;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 06:01:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VosALWNOhCfUDfo2bXgYE0Cx2duyHRaLb5DCn9IydXtoIsYyg9vWhA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:49:13 GMT
age: 54392
etag: "4fc0699c763f67a2602b4b3f46b8b4013d2049c6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3332
Md5:    6ac86079d2901fb11bfaff81d91bb2d2
Sha1:   4fc0699c763f67a2602b4b3f46b8b4013d2049c6
Sha256: 8c25b9129fc01f6ffad911994e91436ab0026ed0b54568757a20ab7f92584467
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0e9057-f203-4080-95b8-652ecd15effa.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7859
x-amzn-requestid: 34d0718f-46d4-446f-bb06-8449bd8f4287
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZIlO4FcBoAMFy0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63334f2b-58ae81c9077e4f1575750f15;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 19:29:47 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: XwUZAphoqael30FgWCRQlHqBpjBOSG7rnlbPNKyojhONZ625gCUI5g==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 07:36:34 GMT
age: 19151
etag: "35ec6e80d324bb215796c590a7ffafbaea55d88e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7859
Md5:    c62a6368c456e9614ca4c8e360a2ef12
Sha1:   35ec6e80d324bb215796c590a7ffafbaea55d88e
Sha256: 90a37acc6beda1aa98a98cb84e00a7e469d6d919a14f4709c5f67a83ae95278d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48e2707b-f3b2-4e52-99ae-03c359b698de.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8754
x-amzn-requestid: 175fc592-ed89-44fb-8cf7-8a4404f59d4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZC5OcHKkIAMFafA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633108c2-2c0c36007bc8bcb56a54e8a1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 02:04:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -AhTOJwgY3-DnA_pYXdBL18wPP_fNeyDmZjkdkQ2J-xrBZSyRcdK3Q==
via: 1.1 71e7943ea0729c284a06faa05a567236.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 20:59:31 GMT
age: 57374
etag: "ba797da9b2d6942161fa02a0e431de4868b84327"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8754
Md5:    556ea631652cbb77ff38dbe3bbc8c4d1
Sha1:   ba797da9b2d6942161fa02a0e431de4868b84327
Sha256: 130dab67cb6d80c741a7f2dadfd536bd6900204880dc3b68b2afbfa53dd3d781
                                        
                                            GET /idp/js/jquery-3.2.1.min.js HTTP/1.1 
Host: shib.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/idp/authn/external?conversation=e1s1
Cookie: JSESSIONID=72FA72E35EC5787CF681A5EC6D6E0204
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         152.3.72.35
HTTP/1.1 200 200
Content-Type: application/javascript;charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 12:55:45 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
Accept-Ranges: bytes
ETag: W/"86659-1627470036000"
Last-Modified: Wed, 28 Jul 2021 11:00:36 GMT
Content-Length: 86659
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32058)
Size:   86659
Md5:    c9f5aeeca3ad37bf2aa006139b935f0a
Sha1:   1055018c28ab41087ef9ccefe411606893dabea2
Sha256: 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
                                        
                                            GET /idp/img/dukelogo-white.png HTTP/1.1 
Host: shib.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/idp/authn/external?conversation=e1s1
Cookie: JSESSIONID=72FA72E35EC5787CF681A5EC6D6E0204
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         152.3.72.35
HTTP/1.1 200 200
Content-Type: image/png;charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 12:55:46 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
Accept-Ranges: bytes
ETag: W/"7184-1627470036000"
Last-Modified: Wed, 28 Jul 2021 11:00:36 GMT
Content-Length: 7184
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 284 x 98, 8-bit/color RGBA, non-interlaced\012- data
Size:   7184
Md5:    a4609170e32457f102e4dcceaff95c86
Sha1:   5f3b5fd684f017d6ae72b9ea1320363ab46776d7
Sha256: cf985ff20a778554fe674150eaeaff989639128204717a576acdd2c5875fb703
                                        
                                            GET /idp/font/Open-Sans-regular/Open-Sans-regular.woff2 HTTP/1.1 
Host: shib.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://shib.oit.duke.edu/idp/css/fonts.css
Cookie: JSESSIONID=72FA72E35EC5787CF681A5EC6D6E0204
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         152.3.72.35
HTTP/1.1 200 200
Content-Type: font/woff2;charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 12:55:46 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
Accept-Ranges: bytes
ETag: W/"10352-1627470034000"
Last-Modified: Wed, 28 Jul 2021 11:00:34 GMT
Content-Length: 10352
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 10352, version 1.6554\012- data
Size:   10352
Md5:    4124088fdd8c315a6d096b65b6cbf428
Sha1:   0477e48f455cbfe729f90389d3fd8aaca6cc483b
Sha256: 732d5765c33eff81c7825dcc5e8cd1eda32dc04f39da7cae66accf9580b1e3a7
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: shib.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/idp/authn/external?conversation=e1s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         152.3.72.35
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Thu, 29 Sep 2022 12:55:46 GMT
Server: Apache
Last-Modified: Mon, 24 Jul 2017 11:48:05 GMT
ETag: "10be-5550ec9b421bf"
Accept-Ranges: bytes
Content-Length: 4286
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Size:   4286
Md5:    00589cfcba88fe0941c83e3784e233cb
Sha1:   97ae097170bddcd72c32df9060170b785416eefe
Sha256: 5f09b7f371c1ef4318993f4466cc4313216f61b8dfac28297f00775b73708314
                                        
                                            GET /idp/font/font-awesome/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: shib.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://shib.oit.duke.edu/idp/css/fonts.css
Cookie: JSESSIONID=72FA72E35EC5787CF681A5EC6D6E0204
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                         
                                         152.3.72.35
HTTP/1.1 200 200
Content-Type: font/woff2;charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 12:55:46 GMT
Server: Apache
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Expires: 0
Pragma: no-cache
Accept-Ranges: bytes
ETag: W/"77160-1627470036000"
Last-Modified: Wed, 28 Jul 2021 11:00:36 GMT
Content-Length: 77160
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 12:55:46 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 08:12:46 GMT
Expires: Thu, 06 Oct 2022 08:12:45 GMT
Etag: "b8e3723f581845a3eb42b81044d17d60600e8955"
Cache-Control: max-age=588247,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7524e005baadb500-OSL

                                        
                                            GET /images/image-l.gif?t=16644561436270.15313319414190618 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:47 GMT
Content-Length: 35
Last-Modified: Fri, 18 Feb 2022 16:41:20 GMT
Connection: keep-alive
ETag: "620fcc30-23"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1\012- data
Size:   35
Md5:    cfea9e094d58b54abf242e795f0b913f
Sha1:   cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
Sha256: b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
                                        
                                            GET /images/image-l.gif?t=16644561442480.6168983187745991 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:47 GMT
Content-Length: 35
Last-Modified: Fri, 18 Feb 2022 16:41:20 GMT
Connection: keep-alive
ETag: "620fcc30-23"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1\012- data
Size:   35
Md5:    cfea9e094d58b54abf242e795f0b913f
Sha1:   cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
Sha256: b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
                                        
                                            GET /images/image-l.gif?t=16644561443820.8704117125206482 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:47 GMT
Content-Length: 35
Last-Modified: Fri, 18 Feb 2022 16:41:20 GMT
Connection: keep-alive
ETag: "620fcc30-23"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1\012- data
Size:   35
Md5:    cfea9e094d58b54abf242e795f0b913f
Sha1:   cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
Sha256: b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
                                        
                                            GET /images/image-l.gif?t=16644561445160.0746004953985776 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:47 GMT
Content-Length: 35
Last-Modified: Fri, 18 Feb 2022 16:41:20 GMT
Connection: keep-alive
ETag: "620fcc30-23"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1\012- data
Size:   35
Md5:    cfea9e094d58b54abf242e795f0b913f
Sha1:   cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
Sha256: b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
                                        
                                            GET /images/image-l.gif?t=16644561446590.5375583764590905 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:47 GMT
Content-Length: 35
Last-Modified: Fri, 18 Feb 2022 16:41:20 GMT
Connection: keep-alive
ETag: "620fcc30-23"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1\012- data
Size:   35
Md5:    cfea9e094d58b54abf242e795f0b913f
Sha1:   cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
Sha256: b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
                                        
                                            GET /images/image-l.gif?t=16644561447960.2833234068637117 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:47 GMT
Content-Length: 35
Last-Modified: Fri, 18 Feb 2022 16:41:20 GMT
Connection: keep-alive
ETag: "620fcc30-23"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1\012- data
Size:   35
Md5:    cfea9e094d58b54abf242e795f0b913f
Sha1:   cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
Sha256: b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
                                        
                                            GET /images/image-l.gif?t=16644561449290.24674626532216226 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:47 GMT
Content-Length: 35
Last-Modified: Fri, 18 Feb 2022 16:41:20 GMT
Connection: keep-alive
ETag: "620fcc30-23"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1\012- data
Size:   35
Md5:    cfea9e094d58b54abf242e795f0b913f
Sha1:   cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
Sha256: b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
                                        
                                            GET /images/image-l.gif?t=16644561450630.9636229631699227 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:47 GMT
Content-Length: 35
Last-Modified: Fri, 18 Feb 2022 16:41:20 GMT
Connection: keep-alive
ETag: "620fcc30-23"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1\012- data
Size:   35
Md5:    cfea9e094d58b54abf242e795f0b913f
Sha1:   cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
Sha256: b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
                                        
                                            GET /images/image-l.gif?t=16644561451960.15792622215278262 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:48 GMT
Content-Length: 35
Last-Modified: Fri, 18 Feb 2022 16:41:20 GMT
Connection: keep-alive
ETag: "620fcc30-23"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1\012- data
Size:   35
Md5:    cfea9e094d58b54abf242e795f0b913f
Sha1:   cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
Sha256: b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
                                        
                                            GET /images/image-l.gif?t=16644561453300.9687208816462084 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:48 GMT
Content-Length: 35
Last-Modified: Fri, 18 Feb 2022 16:41:20 GMT
Connection: keep-alive
ETag: "620fcc30-23"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 87a, 1 x 1\012- data
Size:   35
Md5:    cfea9e094d58b54abf242e795f0b913f
Sha1:   cbeee1f89a77b67897eea9a54c0ac6b75c18d4b6
Sha256: b03a66cf3c1b8d1757cb7fb0268c86aae035e91a39e18cb571f8fcc3508e1f4d
                                        
                                            GET /images/image-0.png?t=16644561454640.9558743532390116 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:48 GMT
Content-Length: 11483
Last-Modified: Fri, 18 Feb 2022 16:41:19 GMT
Connection: keep-alive
ETag: "620fcc2f-2cdb"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 174 x 108, 8-bit/color RGB, non-interlaced\012- data
Size:   11483
Md5:    5bad66448273d89d4b9668821cc3a35b
Sha1:   a8ef060f18d8e30a6120dcf778fdabc54a0c048e
Sha256: 08660f15d924ee09aa01c135c9cc5c35d42f50faa1837361924e3a78b42d1cd0
                                        
                                            GET /images/image-1.png?t=16644561455890.7173596583775794 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:48 GMT
Content-Length: 40658
Last-Modified: Fri, 18 Feb 2022 16:41:19 GMT
Connection: keep-alive
ETag: "620fcc2f-9ed2"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 355 x 221, 8-bit/color RGB, non-interlaced\012- data
Size:   40658
Md5:    29ee8ca4c3f1e057a3669c6ca04b1f1e
Sha1:   c5cc8b2f694d97759337b055f72ca88d1666c698
Sha256: fe7f9aa5f63db7465589dc2376dc98769c65a7744bba988375aacfc24ad27709
                                        
                                            GET /images/image-2.png?t=16644561458360.5127880205149785 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:48 GMT
Content-Length: 164897
Last-Modified: Fri, 18 Feb 2022 16:41:19 GMT
Connection: keep-alive
ETag: "620fcc2f-28421"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 296 x 185, 8-bit/color RGB, non-interlaced\012- data
Size:   164897
Md5:    8cb930fb18ceb28de2f9dd89d50369e6
Sha1:   8ce7b62566954e4b8b0487bb95e61581d73e01df
Sha256: a2d28bff78fdcb50d1449242373bdc8472d6cc30bf25587df305e1d17be7a9dd
                                        
                                            GET /images/image-3.png?t=16644561461990.834312044775006 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:49 GMT
Content-Length: 381756
Last-Modified: Fri, 18 Feb 2022 16:41:19 GMT
Connection: keep-alive
ETag: "620fcc2f-5d33c"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 450 x 282, 8-bit/color RGB, non-interlaced\012- data
Size:   381756
Md5:    7783b2ddf76c414ef7aa44fd62d9a51a
Sha1:   9f2bc509521edbc35b1891b2776846bc9ef461b8
Sha256: 21fcbb9454380f8bbc39aa9c8a652c0e1473c3ec497a44564abcfbc140936575
                                        
                                            GET /images/image-4.png?t=16644561464470.001422592481550411 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:49 GMT
Content-Length: 1234664
Last-Modified: Fri, 18 Feb 2022 16:41:19 GMT
Connection: keep-alive
ETag: "620fcc2f-12d6e8"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 810 x 507, 8-bit/color RGB, non-interlaced\012- data
Size:   1234664
Md5:    3a5f7ed47e8ba2e1015f6628665608d5
Sha1:   7cb56205e4ed311952f7f56adab28f5397d438bb
Sha256: f8332fed0f38cc90c1b90764743b37160efc87f64efec6cbb8e273ee2cce3afd
                                        
                                            GET /images/image-5.png?t=16644561468420.47994733897958486 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:49 GMT
Content-Length: 4509613
Last-Modified: Fri, 18 Feb 2022 16:41:19 GMT
Connection: keep-alive
ETag: "620fcc2f-44cfad"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 1550 x 968, 8-bit/color RGB, non-interlaced\012- data
Size:   4509613
Md5:    18b99b3b1cbe791dd13247d87479ddae
Sha1:   599f7e55c9a1de1b274724d77e6b5ac4ad76179c
Sha256: 945a90ce8435a670f63de148b2cc4c38a8e9cee8a55dbeba677f430fddf62858
                                        
                                            GET /images/image-5.png?t=16644561482280.92351733715423 HTTP/1.1 
Host: beacon.oit.duke.edu
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://shib.oit.duke.edu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         152.3.100.240
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.21.6
Date: Thu, 29 Sep 2022 12:55:51 GMT
Content-Length: 4509613
Last-Modified: Fri, 18 Feb 2022 16:41:19 GMT
Connection: keep-alive
ETag: "620fcc2f-44cfad"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 1550 x 968, 8-bit/color RGB, non-interlaced\012- data
Size:   4509613
Md5:    18b99b3b1cbe791dd13247d87479ddae
Sha1:   599f7e55c9a1de1b274724d77e6b5ac4ad76179c
Sha256: 945a90ce8435a670f63de148b2cc4c38a8e9cee8a55dbeba677f430fddf62858