r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11565
Expires: Tue, 06 Dec 2022 22:27:47 GMT
Date: Tue, 06 Dec 2022 19:15:02 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4384
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:02 GMT
Last-Modified: Tue, 06 Dec 2022 18:01:58 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 18:20:25 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3277
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7773
Expires: Tue, 06 Dec 2022 21:24:35 GMT
Date: Tue, 06 Dec 2022 19:15:02 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: B4rwlglaPCh3j5VClGh3B3SQgDEGppwwPjhPYi758t/H+s9DaqqjKMl6GHkSBWgPQJWH0GsnKsI=
x-amz-request-id: 6X3789552BQF0Y16
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 18:47:12 GMT
age: 1670
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
301 Moved Permanently 0 B URL HTTP/1.1 www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9 HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Dec 2022 19:15:03 GMT
Content-Length: 0
Connection: keep-alive
Accept-Ranges: bytes
X-DWSID-SAMESITE: None
Location: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77575915b9120b4d-OSL
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 19:15:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 06 Dec 2022 19:11:20 GMT
cache-control: public,max-age=3600
age: 223
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0f7dcaa590e32cfd1c075255188d5f06
d4bb4954fefdb3b59560b54adf500e806e252e39
195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4363
Cache-Control: max-age=140670
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:03 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 10:19:33 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 25eK6hoy7EGtGqRuEPdWzw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: C+0K/8mzDjtM/PMnCS7/wB7pg6A=
www.popsockets.com/on/demandware.static/-/Library-Sites-AutobahnSharedLibrary/default/dweab14b90/images/homepage/poppuck-thumb-icon-sticker-small.png
200 OK 6.6 kB URL HTTP/2 www.popsockets.com/on/demandware.static/-/Library-Sites-AutobahnSharedLibrary/default/dweab14b90/images/homepage/poppuck-thumb-icon-sticker-small.png
IP
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash e66a0dfa4c25aec6e68d3980cd153a76
0e5af0ef69775200ee48b2991482d95686e6b794
36304f0bd39a0a7cf69b2f71b54b683029bf916b89ca40b56798fffd4d79a6a4
GET /on/demandware.static/-/Library-Sites-AutobahnSharedLibrary/default/dweab14b90/images/homepage/poppuck-thumb-icon-sticker-small.png HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:04 GMT
content-type: image/png
content-length: 6551
x-dw-request-base-id: 2mr0mqCRnGIBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2592000
expires: Fri, 30 Dec 2022 23:01:44 GMT
last-modified: Thu, 10 Feb 2022 14:08:23 GMT
cf-cache-status: HIT
age: 187605
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7757591f1a311c0a-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 2c775ceae5ed5d9f108a45e6882050e6
864d1fbe638284316f1c6525e9e9047f2434c6ab
e92b7a834888c577ccf70a2d8e1cc3a21053e4991d38cbaff5dbd789270f1e85
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3427
Cache-Control: max-age=160623
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:04 GMT
Etag: "638f57c5-118"
Expires: Thu, 08 Dec 2022 15:52:07 GMT
Last-Modified: Tue, 06 Dec 2022 14:55:01 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 280
www.popsockets.com/on/demandware.static/-/Library-Sites-AutobahnSharedLibrary/default/dw1789c3ac/google-play-badge%201.png
200 OK 4.2 kB URL HTTP/2 www.popsockets.com/on/demandware.static/-/Library-Sites-AutobahnSharedLibrary/default/dw1789c3ac/google-play-badge%201.png
IP
File type PNG image data, 136 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash a2d82b900504c2684708f6624ccd3fd7
3a95728c80e23796f75fa08685988b96275df8f7
9610ba53ca460f2fd25c4f0c9a2db784f86c5780dfa15e982208606dee467594
GET /on/demandware.static/-/Library-Sites-AutobahnSharedLibrary/default/dw1789c3ac/google-play-badge%201.png HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:04 GMT
content-type: image/png
content-length: 4211
x-dw-request-base-id: 2mr0H_mdq2IBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2555190
expires: Thu, 15 Dec 2022 08:15:31 GMT
last-modified: Fri, 27 Aug 2021 13:34:28 GMT
cf-cache-status: HIT
age: 502652
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7757591f2a421c0a-OSL
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/js/main.js
200 OK 333 kB URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/js/main.js
IP
Size 333 kB (333218 bytes)
Hash e30ee0564f4572b5193f46e1f8e36e26
de36ccd3d91798fa3a828aa52bd77712a6160754
26ef7e413f51a2a1e674e095dc4e75e37a5c5908a77631a258a52e213a7cfc28
GET /on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/js/main.js HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:04 GMT
content-type: application/javascript
x-dw-request-base-id: JnqoTe3pjmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591897
expires: Thu, 05 Jan 2023 07:06:21 GMT
last-modified: Mon, 05 Dec 2022 14:01:07 GMT
vary: accept-encoding
content-encoding: gzip
cf-cache-status: HIT
age: 43619
server: cloudflare
cf-ray: 7757591eea0b1c0a-OSL
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.static/-/Library-Sites-AutobahnSharedLibrary/default/dw26f6320f/Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917%201.png
200 OK 2.1 kB URL HTTP/2 www.popsockets.com/on/demandware.static/-/Library-Sites-AutobahnSharedLibrary/default/dw26f6320f/Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917%201.png
IP
File type PNG image data, 120 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 0e0ccbec8fcd2b192053137e6d877aca
4e5a642dd23f5d7468d2e535bcab07966de80dc5
98ebebee770a3c19ee704a77636d00124f54dc20b131f19d7c884f2469c7fd1c
GET /on/demandware.static/-/Library-Sites-AutobahnSharedLibrary/default/dw26f6320f/Download_on_the_App_Store_Badge_US-UK_RGB_blk_092917%201.png HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:04 GMT
content-type: image/png
content-length: 2098
x-dw-request-base-id: 2mqzOGBDnGIBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2571970
expires: Sat, 10 Dec 2022 18:06:56 GMT
last-modified: Fri, 27 Aug 2021 13:34:28 GMT
cf-cache-status: HIT
age: 187605
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7757591f2a411c0a-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c10bc583c46449dc192a809398b4e814
ff0f7ad905d32d7f3d01e4054552d0ad551503a5
defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.klaviyo.com/onsite/js/klaviyo.js?company_id=RYELzB
200 OK 1.0 kB URL HTTP/2 static.klaviyo.com/onsite/js/klaviyo.js?company_id=RYELzB
IP
File type ASCII text, with very long lines (2904)
Hash f148c4ccf8e6c1dd843ac08a81fdb4dd
5e456ad99ac4c3e677851f9a98241211d2ccf53f
ba098f8d0c56d998050df25770311be221f7746de9227aa90a5ff36d0e20bb25
GET /onsite/js/klaviyo.js?company_id=RYELzB HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: OPTIONS, GET
cache-control: max-age=1, stale-while-revalidate=10800
content-encoding: gzip
content-type: application/javascript
etag: W/"7f1e7ea994794c44af2116075c11ba94"
server: nginx
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:04 GMT
age: 551
x-served-by: cache-lga21930-LGA, cache-bma1675-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 1
x-timer: S1670354104.330469,VS0,VE1
vary: Accept-Encoding
content-length: 1037
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c10bc583c46449dc192a809398b4e814
ff0f7ad905d32d7f3d01e4054552d0ad551503a5
defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 6b159fdabe241a0f38997a068b31c58a
e97bd85cc2e0a389a07ffbe17f990678cb0955d5
3a825294334cd38686b167d31f0226c236f254228f159a12ade3c3b545dfa0d6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2123
Cache-Control: max-age=110381
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:04 GMT
Etag: "638e989a-1d7"
Expires: Thu, 08 Dec 2022 01:54:45 GMT
Last-Modified: Tue, 06 Dec 2022 01:19:22 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
www.googletagmanager.com/gtm.js?id=GTM-NTHFJK8
200 OK 103 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NTHFJK8
IP
File type ASCII text, with very long lines (42083)
Size 103 kB (103349 bytes)
Hash c159e06defe4ee83bedcaddb825c3268
e6737e5bf988d73d37fc669399743fbc5185ac41
ceaecf4ab75a196a7916f055547f5f3e829f994dadd5973089d22af78194e429
GET /gtm.js?id=GTM-NTHFJK8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Dec 2022 19:15:04 GMT
expires: Tue, 06 Dec 2022 19:15:04 GMT
cache-control: private, max-age=900
last-modified: Tue, 06 Dec 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103349
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.redditstatic.com/ads/pixel.js
200 OK 7.7 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP
File type ASCII text, with very long lines (25224)
Hash 3528fd00b652f61a266eb584d96f4fcc
d89e16aa1323c6c4f1ed3941122020684a599361
77efa9f2ddfdca7a45df37bbcd22fdaeb7b97161a2acd87e21eb78bdeaad1332
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 07 Nov 2022 16:45:46 GMT
etag: "3528fd00b652f61a266eb584d96f4fcc"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:04 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7722
X-Firefox-Spdy: h2
sc-static.net/scevent.min.js
200 OK 12 kB URL HTTP/2 sc-static.net/scevent.min.js
IP
File type ASCII text, with very long lines (27646), with no line terminators
Hash 62585b7e4a4eab6ba3984a2cd4de5365
14e3b07044b095c9b8fd7b84bf00adb32233edb0
8e0a43da6d5b986bdf45ccdc4bfc11742086d59e2dbf2ae3a04701602c6b8bb7
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 11972
server: CloudFront
date: Tue, 06 Dec 2022 19:15:04 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Wed, 07 Dec 2022 17:30:12 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 5189ed92462b822bc9c8a27ceed0cb4e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: HryEf6Y1c4pkpR2gOkG1x-S9yWh6pbk0s52G3Wmv6mPs0aNvcn2Mtg==
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&family=Space+Grotesk:wght@300;400;500;600;700&display=swap
200 OK 1.5 kB URL HTTP/2 fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&family=Space+Grotesk:wght@300;400;500;600;700&display=swap
IP
Hash bb2ab55fe7696690a0b9e5ebc459ccf6
533595387d1a05a362f7148312f3c9aa32df6663
7c4d74b5769f5b6d32ada5acfac9d5be49205c17c85d9064bec321cb9190b492
GET /css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&family=Space+Grotesk:wght@300;400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Dec 2022 19:15:04 GMT
date: Tue, 06 Dec 2022 19:15:04 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4267
Expires: Tue, 06 Dec 2022 20:26:12 GMT
Date: Tue, 06 Dec 2022 19:15:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4267
Expires: Tue, 06 Dec 2022 20:26:12 GMT
Date: Tue, 06 Dec 2022 19:15:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4267
Expires: Tue, 06 Dec 2022 20:26:12 GMT
Date: Tue, 06 Dec 2022 19:15:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4267
Expires: Tue, 06 Dec 2022 20:26:12 GMT
Date: Tue, 06 Dec 2022 19:15:05 GMT
Connection: keep-alive
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/internal/jscript/dwanalytics-22.2.js
200 OK 14 kB URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/internal/jscript/dwanalytics-22.2.js
IP
Hash bda563125968e8dd2de925d5c9dc7b66
0068716d55061995a48fc1e94b05f524dc6a8294
2d1fcbbbc4d1d98cdfe0d3aa41bc7c0c3ad840d8205cf94ceeb0bde057985803
GET /on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/internal/jscript/dwanalytics-22.2.js HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:04 GMT
content-type: application/javascript
x-dw-request-base-id: JnrGTe7pjmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591895
expires: Thu, 05 Jan 2023 07:06:22 GMT
last-modified: Tue, 06 Dec 2022 07:06:22 GMT
vary: accept-encoding
content-encoding: gzip
cf-cache-status: HIT
age: 43617
server: cloudflare
cf-ray: 7757591f3a521c0a-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d72fb8d20c29763234c2817b119d11b
d4924ec714f5157bcb2fddcb5f768188a3dd37dc
e9aa59142e0673ed3f58b36beaca48213c678dbe4655f9c4b64581cb0f6f22f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12830
x-amzn-requestid: 66f5f2fa-8472-4484-bbea-20ece7e98b1f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcsxGDyIAMFX4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e51-146167697890d9312ce3dbac;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WMeay1i2pxnboCB3Qcwb2ray4tnyEzO89tQrHCfGdI3s9kJsMWvzBw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 04:19:52 GMT
age: 53713
etag: "d4924ec714f5157bcb2fddcb5f768188a3dd37dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/internal/jscript/applepay.js
200 OK 15 kB URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/internal/jscript/applepay.js
IP
Hash 625fccb5758a625f600dcc482c30e38f
7ff082ab28567afd39ee32421103ad87b7084918
409914fc7fe5cc322ca3dedfefaf11e7a79497d5b361a7c6d78554b9a752a487
GET /on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/internal/jscript/applepay.js HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:04 GMT
content-type: application/javascript
x-dw-request-base-id: JnrETe7pjmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591895
expires: Thu, 05 Jan 2023 07:06:22 GMT
last-modified: Tue, 06 Dec 2022 07:06:22 GMT
vary: accept-encoding
content-encoding: gzip
cf-cache-status: HIT
age: 43616
server: cloudflare
cf-ray: 7757591f3a591c0a-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7e1b54923ba506fde6b21c5bfb51ccc8
366aa3ab0790c496ea51bc08d1f2ff3358530d9e
a993ca6dc9a1f854f4542f9221e4f90060825ea863974b5163a9d3e284dc4663
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10594
x-amzn-requestid: eee9f193-eef5-44bf-997a-877fa206749e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSyIHpGoAMF1fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64da-0a9190f7698dbf2f73bb1575;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: f-KQCOuDl461V8MBPsSOj1ILCU91Q0pCSENaldkMHR2oZdrEUnHeaA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:03:16 GMT
age: 76309
etag: "366aa3ab0790c496ea51bc08d1f2ff3358530d9e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
na-library.klarnaservices.com/lib.js
200 OK 22 kB URL HTTP/2 na-library.klarnaservices.com/lib.js
IP
File type ASCII text, with very long lines (33410), with no line terminators
Hash ca72ff2f1280ad53301424ee912fd499
ee7ff20a2894f8159a02fa840df69a3233a91383
875be8957370a453c3c7bfdf5cca529f3472082c2040b4c93ca70508b72aaa8b
GET /lib.js HTTP/1.1
Host: na-library.klarnaservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 05 Dec 2022 14:07:44 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Tue, 06 Dec 2022 19:12:17 GMT
cache-control: max-age=900
etag: W/"0b11a831ba69cd6d18297646ff3d4c28"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6zRh47S_fpFWbWf0dRml59bpZO8fepS9UQoAy6EUhB4Tvk3dQG7mww==
age: 167
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d735c66-8946-4145-a67f-e17dd48087bc.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d735c66-8946-4145-a67f-e17dd48087bc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 38b97436af942d5eb1111ca7043259a0
0234fe32c84c4711f0619714f3ac6d3db1b717d3
a76a7721355abbaecd5c8cb5218e7e4626dc345eb26e7541c71bf4ceaa7ae5d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d735c66-8946-4145-a67f-e17dd48087bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11175
x-amzn-requestid: 9c93ddca-1247-44af-a364-e617f69ace26
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSzYEnEoAMFa2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64e2-7d38ea383725901524bc2ca0;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jqWuNfsDgPOsqxlX2HGJdhXm9GnGC-TBafSbSCrztICFgEwcyqc_iA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:22:22 GMT
age: 75163
etag: "0234fe32c84c4711f0619714f3ac6d3db1b717d3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c820a1a94ebf289760de4ba4c5b0b58c
d7a3e823d445cdd0a63e6613699f64d457771fd7
18a6ba2be680be6585364a23a8704030d8de3c1f8a4844a84eae135733da7359
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-123123123>m=2oebu0&_p=1113592101&cid=1088972480.1670354105&ul=en-us&sr=1280x1024&_s=1&sid=1670354104&sct=1&seg=0&dl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&dt=Sites-AMER-Site&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-123123123>m=2oebu0&_p=1113592101&cid=1088972480.1670354105&ul=en-us&sr=1280x1024&_s=1&sid=1670354104&sct=1&seg=0&dl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&dt=Sites-AMER-Site&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-123123123>m=2oebu0&_p=1113592101&cid=1088972480.1670354105&ul=en-us&sr=1280x1024&_s=1&sid=1670354104&sct=1&seg=0&dl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&dt=Sites-AMER-Site&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.popsockets.com
date: Tue, 06 Dec 2022 19:15:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gtm-ntj36f6-mwnlz.uc.r.appspot.com/g/collect?v=2&tid=G-123123123>m=2oebu0&_p=1113592101&cid=1088972480.1670354105&ul=en-us&sr=1280x1024&_fplc=0&_uc=NO&_s=2&cu=USD&sid=1670354104&sct=1&seg=1&dl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&dt=Sites-AMER-Site&en=page_view&ep.event_id=1670354104209_1_gtm.js&_et=2&ep.user_data.address.postal_code=null&ep.user_data.address.first_name=null&ep.user_data.address.last_name=null&ep.user_data.address.region=null&richsstsse
200 OK 90 B URL HTTP/2 gtm-ntj36f6-mwnlz.uc.r.appspot.com/g/collect?v=2&tid=G-123123123>m=2oebu0&_p=1113592101&cid=1088972480.1670354105&ul=en-us&sr=1280x1024&_fplc=0&_uc=NO&_s=2&cu=USD&sid=1670354104&sct=1&seg=1&dl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&dt=Sites-AMER-Site&en=page_view&ep.event_id=1670354104209_1_gtm.js&_et=2&ep.user_data.address.postal_code=null&ep.user_data.address.first_name=null&ep.user_data.address.last_name=null&ep.user_data.address.region=null&richsstsse
IP
Hash 169015d9a1c4742ef1b19ab13dfac200
5a31df9e8f8d370f893c6f087c5974cb3e4ddd7f
8dfbc19663da6a43557027f2e6d3e94066517ce50334a83f410e0a4853935d40
GET /g/collect?v=2&tid=G-123123123>m=2oebu0&_p=1113592101&cid=1088972480.1670354105&ul=en-us&sr=1280x1024&_fplc=0&_uc=NO&_s=2&cu=USD&sid=1670354104&sct=1&seg=1&dl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&dt=Sites-AMER-Site&en=page_view&ep.event_id=1670354104209_1_gtm.js&_et=2&ep.user_data.address.postal_code=null&ep.user_data.address.first_name=null&ep.user_data.address.last_name=null&ep.user_data.address.region=null&richsstsse HTTP/1.1
Host: gtm-ntj36f6-mwnlz.uc.r.appspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
vary: Accept-Encoding
set-cookie: FPLC=RlNlSB7GnP2oD4IIzP3ezyMK5i4imIEAtxCfjrQiRya5e%2FhykbV7qrXWB3kjDhVspto%2BqMwZa388G379oMjcQEg7zkA4omFjegu2woaDEKy0V3D9A8RQ1xp5SuPoSw%3D%3D; Max-Age=72000; Domain=popsockets.com; Path=/; Secure
FPID=FPID2.2.z6N%2FYTzKdLpoGXJd8RoAxxgzLEOAR5fMebY4SZXEXXg%3D.1670354105; Max-Age=63072000; Domain=popsockets.com; Path=/; Secure; HttpOnly
cache-control: no-cache
x-content-type-options: nosniff
access-control-allow-origin: https://www.popsockets.com
access-control-allow-credentials: true
content-encoding: gzip
x-cloud-trace-context: d2975f9b550ad37e045dc269f6256bf9
date: Tue, 06 Dec 2022 19:15:05 GMT
server: Google Frontend
content-length: 90
expires: Tue, 06 Dec 2022 19:15:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c820a1a94ebf289760de4ba4c5b0b58c
d7a3e823d445cdd0a63e6613699f64d457771fd7
18a6ba2be680be6585364a23a8704030d8de3c1f8a4844a84eae135733da7359
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.paypal.com/sdk/js?client-id=ARrBxhRujs5iuVAi8s9kFacseA_lZ7vDjNH-g94h9EeaOskSV43_XTXxPljY9m1EMqS6vOprF40vLzGr¤cy=USD&components=messages
200 OK 77 kB URL HTTP/2 www.paypal.com/sdk/js?client-id=ARrBxhRujs5iuVAi8s9kFacseA_lZ7vDjNH-g94h9EeaOskSV43_XTXxPljY9m1EMqS6vOprF40vLzGr¤cy=USD&components=messages
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash ec5992373fd62e39b7e5332a59cd9603
4ebd352b566a0d661ed2636711f02b0ffcd8d3a1
70fc9c223c1be9a01bf7c3a1c1c79b617b49e827f211fd726f784a06cac5cb4b
GET /sdk/js?client-id=ARrBxhRujs5iuVAi8s9kFacseA_lZ7vDjNH-g94h9EeaOskSV43_XTXxPljY9m1EMqS6vOprF40vLzGr¤cy=USD&components=messages HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600, s-maxage=10800
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-qO0AOAvAZ8zu8QHb+qwSCsU1TPYXwBSirzF73VdKuWh+w1tW' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-qO0AOAvAZ8zu8QHb+qwSCsU1TPYXwBSirzF73VdKuWh+w1tW' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/javascript; charset=utf-8
etag: W/"12b65-Tr01K1ZqDWYe0mNnEfArD/zY06E"
p3p: true
paypal-debug-id: f475372508512
traceparent: 00-0000000000000000000f475372508512-ea845bd4f4841796-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:05 GMT
age: 0
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4042-HHN, cache-bma1646-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670354105.749593,VS0,VE797
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f475372508512-ac60b4b0fec600f5-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 76645
X-Firefox-Spdy: h2
www.paypal.com/tagmanager/pptm.js?id=www.popsockets.com&t=xo&v=5.0.343&source=payments_sdk&client_id=ARrBxhRujs5iuVAi8s9kFacseA_lZ7vDjNH-g94h9EeaOskSV43_XTXxPljY9m1EMqS6vOprF40vLzGr&comp=messages&vault=false
200 OK 4.7 kB URL HTTP/2 www.paypal.com/tagmanager/pptm.js?id=www.popsockets.com&t=xo&v=5.0.343&source=payments_sdk&client_id=ARrBxhRujs5iuVAi8s9kFacseA_lZ7vDjNH-g94h9EeaOskSV43_XTXxPljY9m1EMqS6vOprF40vLzGr&comp=messages&vault=false
IP
File type ASCII text, with very long lines (13574)
Hash bbef64a2ce97d43c8cd323e234d05c20
ff9ae766082e12b50829754ebe53cf62c3e9fe86
3ae324de9032d53be996615e7ac3f166c99193c50f695095cc00d5a7f6507ded
GET /tagmanager/pptm.js?id=www.popsockets.com&t=xo&v=5.0.343&source=payments_sdk&client_id=ARrBxhRujs5iuVAi8s9kFacseA_lZ7vDjNH-g94h9EeaOskSV43_XTXxPljY9m1EMqS6vOprF40vLzGr&comp=messages&vault=false HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-2NzazID8OiV+n6YYjTyN6TiZjIUK6O7yDC9ax/n+Gc0NJwf7' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
etag: W/"3531-hA2yJ2yJhCQEc61buQ/t/aqWWoo"
paypal-debug-id: f655566331393
traceparent: 00-0000000000000000000f655566331393-a73d18292571230b-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:05 GMT
age: 9976
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4066-HHN, cache-bma1646-BMA
x-cache: HIT, HIT
x-cache-hits: 5, 1
x-timer: S1670354106.769441,VS0,VE13
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f655566331393-e98f7148479a5f28-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 4743
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/runtime.a051ac18537b0445a7ca.js?cb=1
200 OK 8.1 kB URL HTTP/2 static.klaviyo.com/onsite/js/runtime.a051ac18537b0445a7ca.js?cb=1
IP
File type ASCII text, with very long lines (19473), with no line terminators
Hash 4c62620f2e77ee25311d5d360b22cbb2
c257de07d220a94c3513e2f74d7c7c93ef71c5a6
58ec406b67c8c8add7b0424c494b86e97d74609c0e6127986f299320ba5a1bb6
GET /onsite/js/runtime.a051ac18537b0445a7ca.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: sGvND0fBuU6xpeDhxRm6AUvplE/t8CSV8l6wydwKCjlFDxet+j0neMgV9OP19ZwdZcJMK4qrKO8=
x-amz-request-id: VN0XZ4TDCMH484C6
last-modified: Fri, 02 Dec 2022 20:59:37 GMT
etag: "b7585566b6bd47efd8b995d398e63360"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: zYH_H.AFFWif2RcEsJbRWle_X5uw6ef2
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:05 GMT
age: 557
x-served-by: cache-lga21943-LGA, cache-bma1668-BMA
x-cache: HIT, HIT
x-cache-hits: 4, 642
vary: Accept-Encoding
content-length: 8052
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/vendors~signup_forms.00b04f3c478766c4bc48.js?cb=1
200 OK 12 kB URL HTTP/2 static.klaviyo.com/onsite/js/vendors~signup_forms.00b04f3c478766c4bc48.js?cb=1
IP
File type ASCII text, with very long lines (36947)
Hash c1a35bfad6391bac94503262ab897048
a12b2c0d2804b380a3e2715a5bf82f3a63b6aa09
d3678802f64260cf335b6ee33f98012a740ca9fa6c2184c77baf73b6d0768b4f
GET /onsite/js/vendors~signup_forms.00b04f3c478766c4bc48.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Uo2F8wtaQa8IU+tseW7McR0beMAnzx9hMUGY8dL2o3bpj2mmkuhvyutyXz1hT/Npd6RbUHBo+aY=
x-amz-request-id: AD8F17TVQ3WDCPDA
last-modified: Tue, 25 Oct 2022 15:47:54 GMT
etag: "c1f477932c21f86d37733e422c41d864"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: .u._MKX7WAALs7vW9_tgaPqDl1x5LQP7
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:05 GMT
age: 558
x-served-by: cache-lga21942-LGA, cache-bma1668-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 339
vary: Accept-Encoding
content-length: 12430
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/sharedUtils.69761640c42621bb9f6b.js?cb=1
200 OK 14 kB URL HTTP/2 static.klaviyo.com/onsite/js/sharedUtils.69761640c42621bb9f6b.js?cb=1
IP
File type Unicode text, UTF-8 text, with very long lines (35812), with no line terminators
Hash a1baf3fbaf1ba28fc6ddc4296595bd3d
afc0f9637d33b3313e220c7e32cc42273fb30465
67e2726711105e5a20e9126ee6b2379dff231e1bc096d4ba6c86c77fa8813e44
GET /onsite/js/sharedUtils.69761640c42621bb9f6b.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 7J3VyhDFplokel5YfqQqud+okidrpXZlC2UqJb7aCqvhHHsauXHZoIRNrYsFmWoEnCBSt2qkf9STMSk2lwCMrA==
x-amz-request-id: 4EXN3VPS6WS5CP9W
last-modified: Thu, 01 Dec 2022 18:10:46 GMT
etag: "8af98f75a73a06a7c1ab0477149844e6"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 9ZRH3LX.bRfyWhIOBy6TesVm_.DhK5k8
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:05 GMT
age: 558
x-served-by: cache-lga21968-LGA, cache-bma1668-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 509
vary: Accept-Encoding
content-length: 13866
X-Firefox-Spdy: h2
static.klaviyo.com/onsite/js/signup_forms.d612f536549ef65da525.js?cb=1
200 OK 12 kB URL HTTP/2 static.klaviyo.com/onsite/js/signup_forms.d612f536549ef65da525.js?cb=1
IP
File type Unicode text, UTF-8 text, with very long lines (35268), with no line terminators
Hash ac5ca63d2e0df780515fd4a6d4262a3c
95d6cccf7bb100954b6caec5882976c459a8c707
6cff14eec02f38f1d3a7a3b333895da805bfa6e9ce0e7fa89a0e43b33b705cee
GET /onsite/js/signup_forms.d612f536549ef65da525.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: JLlJahMb93rOAV7xwMQEMf76k7upS3BO13ojtrM6TK98xImuJ6XgpIU4eiTbkDwguXDWAcLu9I4=
x-amz-request-id: R1ZVK7HJQNM2KBM0
last-modified: Mon, 31 Oct 2022 14:55:05 GMT
etag: "d5714319f99b25e20a02cfb3f47dd218"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 3QWJW.wDL4PGEpgdSSYg2_NLTv5Z1ohs
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:05 GMT
age: 558
x-served-by: cache-lga13621-LGA, cache-bma1668-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 338
vary: Accept-Encoding
content-length: 11685
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/fender_analytics.42a910303762129b987c.js?cb=1
200 OK 11 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/fender_analytics.42a910303762129b987c.js?cb=1
IP
File type ASCII text, with very long lines (27749), with no line terminators
Hash 0cfada57d478d97560b453019c523816
4503f32aa052c4ab0be24d9e3d383ce0ca568b0b
9a6fb085ebc0985e24aad977f126412a763fb7920f819e592e9baa1ff6362708
GET /onsite/js/fender_analytics.42a910303762129b987c.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: TVj4JadKocCV4h3NElq7oufjh6VUPmKs/RmMK3GsmHVEIEljMrEcW06e1Di1LhQKmT1Dja0y3h4=
x-amz-request-id: GVJMDN3QM916A9S6
last-modified: Tue, 25 Oct 2022 15:47:53 GMT
etag: "141ae207735ed4c2a3fb9ba628dca228"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 3uoP2mttpPOUARdp4efml6Pc5m5_bVca
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:05 GMT
age: 558
x-served-by: cache-lga21944-LGA, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 448
vary: Accept-Encoding
content-length: 10696
X-Firefox-Spdy: h2
static-tracking.klaviyo.com/onsite/js/static.afc80bee31dc9e622dc1.js?cb=1
200 OK 5.3 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/static.afc80bee31dc9e622dc1.js?cb=1
IP
File type ASCII text, with very long lines (12659), with no line terminators
Hash 11ebf21f15c50424dd6beb159a12b25e
bdd433be7297384f5660dfe49154d266dda64432
c13b107bff92bbb4ed98886fa87d14faba7f3010b9f9d502eaf133e2321c51cb
GET /onsite/js/static.afc80bee31dc9e622dc1.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZFZ8THkCuT87hlNdYT/1gE0cGMwUOTZwHkpxdf7ULnVqWD+3NU8uwHPgGM4vlbagxFgSA7mLY3o=
x-amz-request-id: 8QKB1CHS4E49FXPS
last-modified: Mon, 05 Dec 2022 14:41:22 GMT
etag: "9aa89eda5d828bf8fce2ee83e11483a0"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: jO5CINofch2U3rpuRhEwzIKTUk198WIK
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:05 GMT
age: 558
x-served-by: cache-lga21925-LGA, cache-bma1667-BMA
x-cache: MISS, HIT
x-cache-hits: 0, 517
vary: Accept-Encoding
content-length: 5321
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/fonts/icomoon.ttf?skc9fc
200 OK 12 kB URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/fonts/icomoon.ttf?skc9fc
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash 48224670fbe671c32e44ba16900174c8
80e715c9d47fd60aaee77f1729a499d28bc6308b
8a2e4228968a347c002c0c80c410b1b7b2bbdbdc64653d771d8cacc3525a7df9
GET /on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/fonts/icomoon.ttf?skc9fc HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/css/global.css
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==; _gcl_au=1.1.260335682.1670354104; _ga_123123123=GS1.1.1670354104.1.1.1670354104.0.0.0; _ga=GA1.1.1088972480.1670354105; _rdt_uuid=1670354104544.4aa30926-df06-42b9-8e37-eea844e3c575; _scid=e930bd70-c75e-4a66-90e5-3cb22ccc4161
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:05 GMT
content-type: application/x-font-ttf
content-length: 12404
x-dw-request-base-id: JnrcTe_pjmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2587176
expires: Thu, 05 Jan 2023 07:06:23 GMT
last-modified: Mon, 05 Dec 2022 14:01:09 GMT
cf-cache-status: HIT
age: 28829
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 775759299e171c0a-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/fonts/flags//4x3/us.svg
200 OK 1.1 kB URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/fonts/flags//4x3/us.svg
IP
Hash 30f869e07578c493accb068754db1e6d
fced9425d813ce801fdf23341d3ac811818d341a
93bacbb2f28f376f5dcc8a211514026764fd172ea2c5da21ff7f33d833e11462
GET /on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/fonts/flags//4x3/us.svg HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/css/global.css
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==; _gcl_au=1.1.260335682.1670354104; _ga_123123123=GS1.1.1670354104.1.1.1670354104.0.0.0; _ga=GA1.1.1088972480.1670354105; _rdt_uuid=1670354104544.4aa30926-df06-42b9-8e37-eea844e3c575; _scid=e930bd70-c75e-4a66-90e5-3cb22ccc4161
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:05 GMT
content-type: image/svg+xml
x-dw-request-base-id: JnreTe_pjmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591896
expires: Thu, 05 Jan 2023 07:06:23 GMT
last-modified: Mon, 05 Dec 2022 14:01:08 GMT
cf-cache-status: HIT
age: 43618
vary: Accept-Encoding
server: cloudflare
cf-ray: 775759298e0c1c0a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
200 OK 38 kB URL HTTP/2 fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 37924, version 1.0\012- data
Hash e08be6d5d433944f7ad52902e4d24db5
e2600c1d60d12d397b3ee44411a021231d71e974
450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e
GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37924
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Dec 2022 01:47:01 GMT
expires: Mon, 04 Dec 2023 01:47:01 GMT
cache-control: public, max-age=31536000
age: 235684
last-modified: Mon, 11 Jul 2022 20:54:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/spacegrotesk/v13/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/spacegrotesk/v13/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21096, version 1.0\012- data
Hash edd1beac8f00071cab3e2db58647ff94
8e8128a2cecf6524557cce4a32eb751f5dbe261d
a3298dd9c080ba992e6b3afd31430a7ec37869a5ecda45b854672ec069af4aab
GET /s/spacegrotesk/v13/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21096
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 01:23:57 GMT
expires: Thu, 30 Nov 2023 01:23:57 GMT
cache-control: public, max-age=31536000
age: 582668
last-modified: Tue, 23 Aug 2022 18:43:51 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static-tracking.klaviyo.com/onsite/js/sentry.7cb637d727d84366f2b1.js
200 OK 14 kB URL HTTP/2 static-tracking.klaviyo.com/onsite/js/sentry.7cb637d727d84366f2b1.js
IP
File type Unicode text, UTF-8 text, with very long lines (39984), with no line terminators
Hash 2759dea35890ea765569bb029b70f566
b853ad1d51c2de9aab7f75cfc8235ac3f58d329f
272f20e6309fc49a326a55b4e7a5704456af52e6ab76ee492e39693ac97b3e10
GET /onsite/js/sentry.7cb637d727d84366f2b1.js HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 0LXqV9mcF3W8VAsGJ3MWiW4dkvCTs/szpnMtoKSiOTmIhc5vwFH5dwzwOR6HEQR6/yvJflvleos=
x-amz-request-id: ZXRYJ2RJV42MS77B
last-modified: Thu, 18 Aug 2022 15:08:13 GMT
etag: "46c646cae5b80823d9695afc6ccfed75"
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: R8lThK_9E2KBU5ntkafSwTJbcBdb3cgt
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:05 GMT
age: 558
x-served-by: cache-lga13626-LGA, cache-bma1667-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 91
vary: Accept-Encoding
content-length: 13747
X-Firefox-Spdy: h2
fast.a.klaviyo.com/custom-fonts/api/v1/company-fonts/onsite?company_id=RYELzB
200 OK 426 B URL HTTP/2 fast.a.klaviyo.com/custom-fonts/api/v1/company-fonts/onsite?company_id=RYELzB
IP
File type JSON data\012- , ASCII text, with very long lines (2136), with no line terminators
Hash ac1c7be6e92372a8bcea7e76919f2d42
b968a0b67f15126ec940d523704aca4c4b56fdbf
6c0eba7737e199b8e19686a7e4bcc01a2e2698bbe4e60530015e9004cce9883c
GET /custom-fonts/api/v1/company-fonts/onsite?company_id=RYELzB HTTP/1.1
Host: fast.a.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: GET, HEAD, OPTIONS
cache-control: max-age=10
content-encoding: gzip
content-type: application/json; charset=utf-8
server: nginx
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:06 GMT
age: 2468245
x-served-by: cache-bos4633-BOS, cache-bma1631-BMA
x-cache: HIT, HIT
x-cache-hits: 20481, 1
vary: Accept-Encoding, Cookie
strict-transport-security: max-age=900
content-length: 426
X-Firefox-Spdy: h2
static-forms.klaviyo.com/forms/api/v6/RYELzB/full-forms
200 OK 6.6 kB URL HTTP/2 static-forms.klaviyo.com/forms/api/v6/RYELzB/full-forms
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 19a082ed317981d460b40868a0e333da
de00031b7c4a7670b6fd63541ddaa0daa903300c
97ef29594ceeeb7ca96d4046c22298d463f7335e3e20288efa02bfd0d0212053
GET /forms/api/v6/RYELzB/full-forms HTTP/1.1
Host: static-forms.klaviyo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qYsnKXZ2BJZIMwcD+AyI2vUvmVb5iRZCTBvPEj+cJryt7avvA89XbGApPfU8IwQb0vysb+B0lnk=
x-amz-request-id: 8FV67KSN8T9B2G6A
last-modified: Thu, 01 Dec 2022 20:03:17 GMT
etag: "4a21abf7179a56e12720b649df05358e"
cache-control: max-age=5
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: full-forms/shared full-forms/RYELzB custom-fonts/RYELzB
x-amz-version-id: 3lnxlNI_5INpbRxyar8_XXLg.cDDNe5.
content-type: application/json
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:06 GMT
via: 1.1 varnish
age: 418779
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670354106.052714,VS0,VE7
vary: Accept-Encoding
client-geo-continent: EU
client-geo-country: NO
access-control-expose-headers: client-geo-continent, client-geo-country
access-control-allow-origin: *
content-length: 6574
X-Firefox-Spdy: h2
www.paypalobjects.com/muse/muse.js
200 OK 16 kB URL HTTP/2 www.paypalobjects.com/muse/muse.js
IP
File type ASCII text, with very long lines (55891)
Hash 6aebbe482c72000aea20895991f70478
eff1d3370786f9ee4ea539776bc43ab9bece89ba
2acb950bc7678b9e6c265194821fac386bf555db582ee8c0e2d9e68ff3eaa862
GET /muse/muse.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: gzip
content-type: application/javascript
etag: W/"6271663d-da91"
last-modified: Tue, 03 May 2022 17:28:29 GMT
paypal-debug-id: 84840867de170
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:06 GMT
x-served-by: cache-sjc10029-SJC, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 2, 141319
x-timer: S1670354106.073750,VS0,VE0
vary: Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 16464
X-Firefox-Spdy: h2
www.paypalobjects.com/muse/analytics/index.html
200 OK 17 kB URL HTTP/2 www.paypalobjects.com/muse/analytics/index.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (55410)
Hash 56fc10c2e8100a7e4418dc987c23d7a5
5c11880437f36368f82da60522bfcb0d57b395cf
326df6156907ef357f13bf48a5a3798dd4e692345d04fb4edad8370058d1198a
GET /muse/analytics/index.html HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: gzip
content-type: text/html
etag: W/"6271663d-d994"
last-modified: Tue, 03 May 2022 17:28:29 GMT
paypal-debug-id: 50b39f10d2761
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Dec 2022 19:15:06 GMT
x-served-by: cache-sjc10077-SJC, cache-bma1645-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 160270
x-timer: S1670354106.111919,VS0,VE0
vary: Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 16791
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3ABFZDC2GN9DKJA-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3ABFZDC2GN9DKJA-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a23da661-7900-4bed-b8dd-e3de7c8bfc17&fltp=analytics&mrid=BFZDC2GN9DKJA&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Sites-AMER-Site&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1670354105801&g=0&completeurl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9
200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3ABFZDC2GN9DKJA-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3ABFZDC2GN9DKJA-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a23da661-7900-4bed-b8dd-e3de7c8bfc17&fltp=analytics&mrid=BFZDC2GN9DKJA&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Sites-AMER-Site&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1670354105801&g=0&completeurl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3ABFZDC2GN9DKJA-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3ABFZDC2GN9DKJA-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a23da661-7900-4bed-b8dd-e3de7c8bfc17&fltp=analytics&mrid=BFZDC2GN9DKJA&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Sites-AMER-Site&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1670354105801&g=0&completeurl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9 HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
date: Tue, 06 Dec 2022 19:15:06 GMT
expires: Tue, 06 Dec 2022 19:15:06 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 52fac931dcd73
pragma: no-cache
server: ECAcc (lhd/35EF)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=173
set-cookie: ts=vreXpYrS%3D1765048506%26vteXpYrS%3D1670355906%26vr%3De8dcf6fd1840a5b076b18208ffffffff%26vt%3De8dcf6fd1840a5b076b18208fffffffe; Expires=Sat, 06 Dec 2025 19:15:06 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3De8dcf6fd1840a5b076b18208ffffffff%26vt%3De8dcf6fd1840a5b076b18208fffffffe; Expires=Sat, 06 Dec 2025 19:15:06 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-000000000000000000052fac931dcd73-f2428a82d5c64c68-01
content-length: 42
X-Firefox-Spdy: h2
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 06 Dec 2022 16:19:20 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _yutv2kc_OgUlvVsAuN6NYb5PD9rE7VJaDPZd-QQFc1j1V7-_LTM8Q==
Age: 10547
ocsp.digicert.com/
200 OK 278 B IP
Hash 809368d2b9c9558d9c76e301ad63bec7
4c62b07fddd8a77a76c696601672e65a1dc85a1c
7d890987a02e161f61c7115bf535c713e87ff999158b5fbded8a45b9a2d92a13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5172
Cache-Control: max-age=107978
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:06 GMT
Etag: "638e8350-116"
Expires: Thu, 08 Dec 2022 01:14:44 GMT
Last-Modified: Mon, 05 Dec 2022 23:48:32 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 471 B IP
Hash 312b13b35b1910b385a23f4cd12cedbf
9e8dad169bb2405e885c16c033c191ee7776f1c3
eb489fedcfedaf1a404bc9006446c5139da42c987378641124cf96346cbbd556
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1551
Cache-Control: max-age=125994
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:06 GMT
Etag: "638ed7d5-1d7"
Expires: Thu, 08 Dec 2022 06:15:00 GMT
Last-Modified: Tue, 06 Dec 2022 05:49:09 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash 875abccdd359a64d0e30d80b90b56494
6f74fbc2beb8cf44d9d50c843624c8461b2bbac8
415a3319a1dd5a83a565451d5498174fd6bac0e51df4944848dab9a95ca57053
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2656
Cache-Control: max-age=109833
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:06 GMT
Etag: "638e9463-117"
Expires: Thu, 08 Dec 2022 01:45:39 GMT
Last-Modified: Tue, 06 Dec 2022 01:01:23 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
analytics.tiktok.com/i18n/pixel/events.js?sdkid=C13ULQ5N4T4Q393MIQD0&lib=ttq
200 OK 1.2 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/events.js?sdkid=C13ULQ5N4T4Q393MIQD0&lib=ttq
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2356)
Hash 723357b6637dda9cbc80df8796dfcae6
72b10d3224281fb1702335ce20ddabb934a673bb
69f51370e600daa6bbda046e2c310c4eb0420c9af1b339388436f15ac30940ac
GET /i18n/pixel/events.js?sdkid=C13ULQ5N4T4Q393MIQD0&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 2022120619150649FF94F3701DE604FAF2
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf601c5f6a04a777121cde7d9af65489455e7cd722fe58456d11c8ab1ac716c9fd4bf5dc95c667374e0d74ff4173192490520136086a6fec51f953e07e02aba85139
content-encoding: gzip
expires: Tue, 06 Dec 2022 19:15:06 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Dec 2022 19:15:06 GMT
content-length: 1153
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
set-cookie: _ttp=2IYMXyMNqTAAom7ow24y6xaxlfu; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=0, origin; dur=100
x-origin-response-time: 100,23.36.79.13
x-akamai-request-id: fcf4ffcc
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/main.MTk2NTc4NGU0MQ.js
200 OK 69 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/main.MTk2NTc4NGU0MQ.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (21716)
Hash 6fa6b54cb6bd45806a60e7d8aba1efd2
6758479fe949e635097a9e3917013d94f8d23416
172a6bf2d498068b7485cfbbe3ffcf3edf0cb08dae967873ee17623bab748e3a
GET /i18n/pixel/static/main.MTk2NTc4NGU0MQ.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Cookie: _ttp=2IYMXyMNqTAAom7ow24y6xaxlfu
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20221206132756F4B46C855D9C808CF174
x-tt-trace-host: 01da38724b6c03af27c6a22a4a90be02ba7c21c7d3e03a1c6eb54f2c0a02e79b48555f61a59cd710993a9e267fa31d9b3f264e27678d1c78dfc76682bbc1efeb2195aeaf1bbe4c5e1853f4bdd2fe4d29b2
content-encoding: gzip
content-length: 68693
date: Tue, 06 Dec 2022 19:15:06 GMT
x-cache: TCP_MEM_HIT from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: fcf50167
X-Firefox-Spdy: h2
analytics.tiktok.com/i18n/pixel/static/identify_7373d.js
200 OK 31 kB URL HTTP/2 analytics.tiktok.com/i18n/pixel/static/identify_7373d.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 905f25a6763488baff0582a11e6d4650
cbf906634f07d5e983cb8f5f30195d24a219ca41
73bf06623dd0515ca31a2f3c352cf6efce03e0ff7e7bf3ae990a19745787deda
GET /i18n/pixel/static/identify_7373d.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Cookie: _ttp=2IYMXyMNqTAAom7ow24y6xaxlfu
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20221206132745F774E1DED7BF563B9D05
x-tt-trace-host: 017bcdfb1f342efa6ce7e8ef248837e909b29e38c81383d97aa45a1f344cf919c8a599ec6c025c616e50bcaf3d3e28b0e81315201e77a8c36d9dceb999beae4aa6616a7661fd70d5a724b0816ae855e12b
content-encoding: gzip
content-length: 30877
date: Tue, 06 Dec 2022 19:15:06 GMT
x-cache: TCP_MEM_HIT from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: fcf50233
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3ABFZDC2GN9DKJA-1&page=muse%3Aoffer%3A%3A%3ABFZDC2GN9DKJA-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a23da661-7900-4bed-b8dd-e3de7c8bfc17&es=visitorInfoFlowStarted&mrid=BFZDC2GN9DKJA&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Sites-AMER-Site&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1670354106181&g=0&completeurl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9
200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3ABFZDC2GN9DKJA-1&page=muse%3Aoffer%3A%3A%3ABFZDC2GN9DKJA-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a23da661-7900-4bed-b8dd-e3de7c8bfc17&es=visitorInfoFlowStarted&mrid=BFZDC2GN9DKJA&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Sites-AMER-Site&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1670354106181&g=0&completeurl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Aoffer%3A%3A%3ABFZDC2GN9DKJA-1&page=muse%3Aoffer%3A%3A%3ABFZDC2GN9DKJA-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a23da661-7900-4bed-b8dd-e3de7c8bfc17&es=visitorInfoFlowStarted&mrid=BFZDC2GN9DKJA&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Sites-AMER-Site&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1670354106181&g=0&completeurl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9 HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
date: Tue, 06 Dec 2022 19:15:06 GMT
expires: Tue, 06 Dec 2022 19:15:06 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: a84a36f90dd39
pragma: no-cache
server: ECAcc (lhd/3711)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=180
set-cookie: ts=vreXpYrS%3D1765048506%26vteXpYrS%3D1670355906%26vr%3De8dcf8341840a8a3e117d72fffffffff%26vt%3De8dcf8341840a8a3e117d72ffffffffe; Expires=Sat, 06 Dec 2025 19:15:06 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3De8dcf8341840a8a3e117d72fffffffff%26vt%3De8dcf8341840a8a3e117d72ffffffffe; Expires=Sat, 06 Dec 2025 19:15:06 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000a84a36f90dd39-38f4abd3dcd797a9-01
content-length: 42
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 312b13b35b1910b385a23f4cd12cedbf
9e8dad169bb2405e885c16c033c191ee7776f1c3
eb489fedcfedaf1a404bc9006446c5139da42c987378641124cf96346cbbd556
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1551
Cache-Control: max-age=125994
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:06 GMT
Etag: "638ed7d5-1d7"
Expires: Thu, 08 Dec 2022 06:15:00 GMT
Last-Modified: Tue, 06 Dec 2022 05:49:09 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
b-code.liadm.com/a-028x.min.js
200 OK 11 kB URL HTTP/2 b-code.liadm.com/a-028x.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (30660)
Hash f0b16c74a27a2c9942e255e375a1f108
1ca8d467b892ac9e0c98b4142aee4daf9b5b7cf1
bdd71df95bab31e863b11b9c0da0633d1d6ddd412d4ea0b8c67557e5b1fbe78c
GET /a-028x.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 06 Dec 2022 03:57:17 GMT
cache-control: "public, max-age=86400"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: M6GP4JQltRGnRxxZ-SDZs7HAq-770UDjvnPbqEV_uUo9uzRF1sZ2HQ==
age: 55069
X-Firefox-Spdy: h2
analytics.tiktok.com/api/v2/pixel
200 OK 0 B URL HTTP/2 analytics.tiktok.com/api/v2/pixel
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 846
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Cookie: _ttp=2IYMXyMNqTAAom7ow24y6xaxlfu
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 20221206191506BA41A5AC59D2CB082004
x-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf601c5f6a04a777121cde7d9af65489455e85b28326866efd84ae04897ed66abbc66e4e818c69d5ad7627becc0a41baa1f9db308b669dae7466c0867706a0170b4c
expires: Tue, 06 Dec 2022 19:15:06 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 06 Dec 2022 19:15:06 GMT
x-cache: TCP_MISS from a23-36-79-13.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=16, cdn-cache; desc=MISS, edge; dur=5, origin; dur=110
x-origin-response-time: 110,23.36.79.13
x-akamai-request-id: fcf5025b
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/fonts/flags//4x3/no.svg
200 OK 2.0 kB URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/fonts/flags//4x3/no.svg
IP
Hash 6a115445f2c8ab4b441a555b9275b422
6f5e1370020fc1023d9e3cedd326d16ebb7196ab
9553dba3619da93bd572998950dbf401f835ef3d495cf589a7c3d6b55ea4804a
GET /on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/fonts/flags//4x3/no.svg HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/css/global.css
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==; _gcl_au=1.1.260335682.1670354104; _ga_123123123=GS1.1.1670354104.1.1.1670354104.0.0.0; _ga=GA1.1.1088972480.1670354105; _rdt_uuid=1670354104544.4aa30926-df06-42b9-8e37-eea844e3c575; _scid=e930bd70-c75e-4a66-90e5-3cb22ccc4161; __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NzAzNTQxMDYsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifSwiJGxhc3RfcmVmZXJyZXIiOnsidHMiOjE2NzAzNTQxMDYsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifX0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:06 GMT
content-type: image/svg+xml
x-dw-request-base-id: JnpUDZ3zjmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2579582
expires: Thu, 05 Jan 2023 07:47:41 GMT
last-modified: Mon, 05 Dec 2022 14:01:07 GMT
cf-cache-status: HIT
age: 28827
vary: Accept-Encoding
server: cloudflare
cf-ray: 7757592c39b91c0a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.paypal.com/targeting/graphql
204 No Content 0 B URL HTTP/2 www.paypal.com/targeting/graphql
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /targeting/graphql HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.paypalobjects.com/
Origin: https://www.paypalobjects.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.paypalobjects.com
access-control-expose-headers: Paypal-Debug-Id
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f428796483f25
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 07 Dec 2022 04:01:02 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 06 Dec 2023 19:15:06 GMT; Secure
x-pp-s=eyJ0IjoiMTY3MDM1NDEwNjY0OCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
nsid=s%3AYI1PGpB2B0FfxPWtY-07pGKklI3ZRPAo.yBNsC9aBguSBM0skUS0YKCCuUGF6FCCqv2X%2BfzqJ14o; Path=/; HttpOnly; Secure
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Tue, 06 Dec 2022 19:45:06 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765048506%26vteXpYrS%3D1670355906%26vr%3De8dcf90c1840a1d55f6f66b2fc28900d%26vt%3De8dcf90c1840a1d55f6f66b2fc28900c%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 19:15:06 GMT; HttpOnly; Secure
ts_c=vr%3De8dcf90c1840a1d55f6f66b2fc28900d%26vt%3De8dcf90c1840a1d55f6f66b2fc28900c; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 19:15:06 GMT; Secure
traceparent: 00-0000000000000000000f428796483f25-88b2a55827e004ab-01
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 06 Dec 2022 19:15:06 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn11579-HHN, cache-bma1646-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670354107.541884,VS0,VE195
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.store/Sites-AMER-Site/en_US/__Analytics-Start?url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&res=1280x1024&cookie=1&ref=&title=Sites-AMER-Site&pdf=0&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.8558568638790742&cmpn=&tz=US/Mountain&pcc=USD&pct=&pcat=&dw_dnt=0
200 OK 35 B URL HTTP/2 www.popsockets.com/on/demandware.store/Sites-AMER-Site/en_US/__Analytics-Start?url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&res=1280x1024&cookie=1&ref=&title=Sites-AMER-Site&pdf=0&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.8558568638790742&cmpn=&tz=US/Mountain&pcc=USD&pct=&pcat=&dw_dnt=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /on/demandware.store/Sites-AMER-Site/en_US/__Analytics-Start?url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&res=1280x1024&cookie=1&ref=&title=Sites-AMER-Site&pdf=0&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.8558568638790742&cmpn=&tz=US/Mountain&pcc=USD&pct=&pcat=&dw_dnt=0 HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==; _gcl_au=1.1.260335682.1670354104; _ga_123123123=GS1.1.1670354104.1.1.1670354104.0.0.0; _ga=GA1.1.1088972480.1670354105; _rdt_uuid=1670354104544.4aa30926-df06-42b9-8e37-eea844e3c575; _scid=e930bd70-c75e-4a66-90e5-3cb22ccc4161; __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NzAzNTQxMDYsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifSwiJGxhc3RfcmVmZXJyZXIiOnsidHMiOjE2NzAzNTQxMDYsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifX0=; _tt_enable_cookie=1; _ttp=_XTR0X_zB1-Zyw4Zi3oDQNTrUqF; rmStore=dmid:8567
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:06 GMT
content-type: image/gif
content-length: 35
accept-ranges: bytes
set-cookie: cqcid=fgadbRcUEVy93Vte91dqHE9q24; Path=/; Secure; SameSite=None
x-dw-request-base-id: Jnq3m7qUj2MBAAB_
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7757592e6c0a1c0a-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b4490f8cef475e5c9a441e4c723a1913
d5bab184ec76a21cf48e5564db147b7b8623f2ab
eec45b54950dc924ffdf6b0b9ff91194470023a7cb14a1ca9f4817472a80ec3d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=119714
Date: Tue, 06 Dec 2022 19:15:07 GMT
Etag: "638ec29a-1d7"
Expires: Thu, 08 Dec 2022 04:30:21 GMT
Last-Modified: Tue, 06 Dec 2022 04:18:34 GMT
Server: ECS (nyb/1D31)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: J0gL2mO2afLP7bA6uBszaYZROo_7LsgEff9ORYJvwhOfyUNk03UWnw==
Age: 707
p.cquotient.com/pebble?tla=bdfw-AMER&activityType=viewPage&callback=CQuotient._act_callback0&cookieId=fgadbRcUEVy93Vte91dqHE9q24&realm=BFSM&siteId=AMER&instanceType=prd&referrer=¤tLocation=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&ls=true&_=1670354106777&v=v2.34.3&fbPixelId=__UNKNOWN__&json=%7B%22cookieId%22%3A%22fgadbRcUEVy93Vte91dqHE9q24%22%2C%22realm%22%3A%22BFSM%22%2C%22siteId%22%3A%22AMER%22%2C%22instanceType%22%3A%22prd%22%2C%22referrer%22%3A%22%22%2C%22currentLocation%22%3A%22https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9%22%2C%22ls%22%3Atrue%2C%22_%22%3A1670354106777%2C%22v%22%3A%22v2.34.3%22%2C%22fbPixelId%22%3A%22__UNKNOWN__%22%7D
200 OK 252 B URL HTTP/2 p.cquotient.com/pebble?tla=bdfw-AMER&activityType=viewPage&callback=CQuotient._act_callback0&cookieId=fgadbRcUEVy93Vte91dqHE9q24&realm=BFSM&siteId=AMER&instanceType=prd&referrer=¤tLocation=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&ls=true&_=1670354106777&v=v2.34.3&fbPixelId=__UNKNOWN__&json=%7B%22cookieId%22%3A%22fgadbRcUEVy93Vte91dqHE9q24%22%2C%22realm%22%3A%22BFSM%22%2C%22siteId%22%3A%22AMER%22%2C%22instanceType%22%3A%22prd%22%2C%22referrer%22%3A%22%22%2C%22currentLocation%22%3A%22https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9%22%2C%22ls%22%3Atrue%2C%22_%22%3A1670354106777%2C%22v%22%3A%22v2.34.3%22%2C%22fbPixelId%22%3A%22__UNKNOWN__%22%7D
IP
File type ASCII text, with no line terminators
Hash e086904d8cdecbeb4e07d499cc99c8d1
748973b693f30ced929d58c644312bdc6ae90f36
2fe993a3a89c1e87edf8acdcabfa209ffd6f5abd8950f283aa8ece9e361db71c
GET /pebble?tla=bdfw-AMER&activityType=viewPage&callback=CQuotient._act_callback0&cookieId=fgadbRcUEVy93Vte91dqHE9q24&realm=BFSM&siteId=AMER&instanceType=prd&referrer=¤tLocation=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&ls=true&_=1670354106777&v=v2.34.3&fbPixelId=__UNKNOWN__&json=%7B%22cookieId%22%3A%22fgadbRcUEVy93Vte91dqHE9q24%22%2C%22realm%22%3A%22BFSM%22%2C%22siteId%22%3A%22AMER%22%2C%22instanceType%22%3A%22prd%22%2C%22referrer%22%3A%22%22%2C%22currentLocation%22%3A%22https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9%22%2C%22ls%22%3Atrue%2C%22_%22%3A1670354106777%2C%22v%22%3A%22v2.34.3%22%2C%22fbPixelId%22%3A%22__UNKNOWN__%22%7D HTTP/1.1
Host: p.cquotient.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:07 GMT
content-type: text/javascript; charset=utf-8
content-length: 252
strict-transport-security: max-age=15552000; includeSubdomains
set-cookie: uuid=fgadbRcUEVy93Vte91dqHE9q24; Max-Age=34128000; Domain=.cquotient.com; Path=/; Expires=Fri, 05 Jan 2024 19:15:07 GMT
x-content-type-options: nosniff
etag: W/"fc-dIlztpPzDO2SnVjGRDEr3GrpDzY"
x-envoy-upstream-service-time: 3
server: envoy
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/default/dw9e6eb4ce/images/favicons/favicon-16x16.png
200 OK 1.7 kB URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/default/dw9e6eb4ce/images/favicons/favicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash cc1e2d4ee169c03f00cc779e9f924bc3
ff2b99eba32ccf091f87e04c742f99f5ac449738
2f419ffc11d99ee70bd2dd3373e992dab36df645140b941c6d095fa449981a2d
GET /on/demandware.static/Sites-AMER-Site/-/default/dw9e6eb4ce/images/favicons/favicon-16x16.png HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==; _gcl_au=1.1.260335682.1670354104; _ga_123123123=GS1.1.1670354104.1.1.1670354104.0.0.0; _ga=GA1.1.1088972480.1670354105; _rdt_uuid=1670354104544.4aa30926-df06-42b9-8e37-eea844e3c575; _scid=e930bd70-c75e-4a66-90e5-3cb22ccc4161; __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NzAzNTQxMDYsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifSwiJGxhc3RfcmVmZXJyZXIiOnsidHMiOjE2NzAzNTQxMDYsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifX0=; _tt_enable_cookie=1; _ttp=_XTR0X_zB1-Zyw4Zi3oDQNTrUqF; rmStore=dmid:8567; cqcid=fgadbRcUEVy93Vte91dqHE9q24; __cq_uuid=fgadbRcUEVy93Vte91dqHE9q24; __cq_seg=0~0.00!1~0.00!2~0.00!3~0.00!4~0.00!5~0.00!6~0.00!7~0.00!8~0.00!9~0.00
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:07 GMT
content-type: image/png
content-length: 1703
x-dw-request-base-id: Jnry-6objmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2586031
expires: Wed, 04 Jan 2023 16:26:18 GMT
last-modified: Mon, 05 Dec 2022 14:01:09 GMT
cf-cache-status: HIT
age: 23207
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7757593359471c0a-OSL
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/default/dw79c52ad8/images/favicons/favicon-196x196.png
200 OK 13 kB URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/default/dw79c52ad8/images/favicons/favicon-196x196.png
IP
File type PNG image data, 196 x 196, 8-bit/color RGBA, non-interlaced\012- data
Hash f4aea6ef025ec695eb0dcefa6a2d33fa
310090e32aeeeb0c9db91746e4006a7faf8759bf
f1bde98801948d9267bf053b5000bb2a6a8514362f9eac5a633d8748831ee7f2
GET /on/demandware.static/Sites-AMER-Site/-/default/dw79c52ad8/images/favicons/favicon-196x196.png HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==; _gcl_au=1.1.260335682.1670354104; _ga_123123123=GS1.1.1670354104.1.1.1670354104.0.0.0; _ga=GA1.1.1088972480.1670354105; _rdt_uuid=1670354104544.4aa30926-df06-42b9-8e37-eea844e3c575; _scid=e930bd70-c75e-4a66-90e5-3cb22ccc4161; __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NzAzNTQxMDYsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifSwiJGxhc3RfcmVmZXJyZXIiOnsidHMiOjE2NzAzNTQxMDYsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifX0=; _tt_enable_cookie=1; _ttp=_XTR0X_zB1-Zyw4Zi3oDQNTrUqF; rmStore=dmid:8567; cqcid=fgadbRcUEVy93Vte91dqHE9q24; __cq_uuid=fgadbRcUEVy93Vte91dqHE9q24; __cq_seg=0~0.00!1~0.00!2~0.00!3~0.00!4~0.00!5~0.00!6~0.00!7~0.00!8~0.00!9~0.00
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:07 GMT
content-type: image/png
content-length: 13266
x-dw-request-base-id: Jnp5_K4bjmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2590584
expires: Wed, 04 Jan 2023 16:26:22 GMT
last-modified: Mon, 05 Dec 2022 14:01:09 GMT
cf-cache-status: HIT
age: 23207
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7757593349461c0a-OSL
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 06 Dec 2022 18:41:08 GMT
expires: Tue, 06 Dec 2022 20:41:08 GMT
cache-control: public, max-age=7200
age: 2039
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/raRVPOI4L3s
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/raRVPOI4L3s
IP
Hash 6cbe6bac94a7efad07aaa64627b0b447
2b3481e0a12dd6aa32bb1ede6dda7dad48fa8fb6
4547792b05db83fcb1db0e056b37fb15543f311013d4f12fce08c5e07b0af279
POST /s/gts1d4/raRVPOI4L3s HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:07 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d44205a852cedc47da2373b3542f2ca0
884e5d2d7ef372a86e7edc3f8c1dc63a3b4fbe82
f2adb5b3e4b05ad953d43f483497243ae66c148f2af8f39473ddc6fcf2623bb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2868
Cache-Control: max-age=152515
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:07 GMT
Etag: "638f3a4a-1d7"
Expires: Thu, 08 Dec 2022 13:37:02 GMT
Last-Modified: Tue, 06 Dec 2022 12:49:14 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/gtm/optimize.js?id=OPT-586T88X
200 OK 47 kB URL HTTP/2 www.google-analytics.com/gtm/optimize.js?id=OPT-586T88X
IP
File type ASCII text, with very long lines (2396)
Hash 389075ee4ed92661eea1ce0e5ef553fc
e24e9d44182b40ebbccf9000452d4930adc40887
4262e37d1880a291b4ae44cb46ec99cac8b3d6bc60d38d15be8cab47b8fd7198
GET /gtm/optimize.js?id=OPT-586T88X HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Dec 2022 19:15:07 GMT
expires: Tue, 06 Dec 2022 19:15:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46744
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash c11451f004cb0c81c7040847b65b8783
35fa2d688c8e719a009ae34a575cf5f1adbac91a
4b3665319a92d57ff5afadf2519fb8c1a0b4d0436e7ba313c66f6b00c7a7cfc5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 19:15:07 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 05 Dec 2022 03:37:45 GMT
Expires: Mon, 12 Dec 2022 03:37:44 GMT
Etag: "35fa2d688c8e719a009ae34a575cf5f1adbac91a"
Cache-Control: max-age=461556,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77575932cf4ab4f7-OSL
ocsp.pki.goog/s/gts1d4/Q5oOOVFtB78
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Q5oOOVFtB78
IP
Hash ddf3e5f2d10e43cd444d301dd6d217fe
08e603648a40f0d42c83884903ae8c8de43f5e7f
04f938ab751419b76b814a42fd3921ac76c95743a00b15dd853f83b04d84f586
POST /s/gts1d4/Q5oOOVFtB78 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:07 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/969647119/?random=1670354106110&cv=11&fst=1670354106110&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&tiba=Sites-AMER-Site&auid=260335682.1670354104&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 960 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/969647119/?random=1670354106110&cv=11&fst=1670354106110&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&tiba=Sites-AMER-Site&auid=260335682.1670354104&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2049), with no line terminators
Hash 0f07345b01f987c8710e9d8254c9b4dd
02dd36c116afeba70ef807f39caa58598296bf12
f2300fc4f494cf4ca9524f98574a7da4be45744ae5a64bdbc4694369cbc1e2cd
GET /pagead/viewthroughconversion/969647119/?random=1670354106110&cv=11&fst=1670354106110&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&tiba=Sites-AMER-Site&auid=260335682.1670354104&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 19:15:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 960
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 06-Dec-2022 19:30:07 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy-report-only: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: chrome-extension: 'unsafe-inline' 'unsafe-eval';report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 83+W3/r5AbAbZedvaGgbAZ9FcvjAWNWZ/n5Bp0Ik/nrKtXZlGwfk6Aq9VqVjDuLuWwogiYz878hezjxDk3DOeg==
content-length: 27340
x-fb-trip-id: 1904183273
date: Tue, 06 Dec 2022 19:15:07 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 507e55c096a11f9c2852f209a769be80
b838a3bbe25ebc162896e7b7e8116fd28b13402e
25f906ae43f29e65fd976b35a3c72207a04d86a96f1b581b6135c605e00a9fac
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 19:15:07 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 07:02:55 GMT
Expires: Tue, 13 Dec 2022 07:02:54 GMT
Etag: "b838a3bbe25ebc162896e7b7e8116fd28b13402e"
Cache-Control: max-age=560266,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77575933fbdeb509-OSL
s.pinimg.com/ct/core.js
200 OK 1.1 kB IP
File type ASCII text, with very long lines (1146), with no line terminators
Hash 8d9d0550c915347e312e24f00d311e50
cb44712b22cb011b759da4e741b543238839c735
57d73d188a6162bec272876156addbd7b02a2c6941c45653b8d3453e998e0b5b
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "8d9d0550c915347e312e24f00d311e50"
cache-control: max-age=7200
accept-ranges: bytes
content-type: application/javascript
content-length: 1146
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/raRVPOI4L3s
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/raRVPOI4L3s
IP
Hash 6cbe6bac94a7efad07aaa64627b0b447
2b3481e0a12dd6aa32bb1ede6dda7dad48fa8fb6
4547792b05db83fcb1db0e056b37fb15543f311013d4f12fce08c5e07b0af279
POST /s/gts1d4/raRVPOI4L3s HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:07 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
consent.linksynergy.com/consent/v3/p?rmch=cs&domain=www.popsockets.com&sought=false&tp=gdpr&attr_sid=116150&purposes=&vendors=&ext_id=a0d027b6-2052-4aa4-83c8-2d667adbb798
200 OK 37 B URL HTTP/2 consent.linksynergy.com/consent/v3/p?rmch=cs&domain=www.popsockets.com&sought=false&tp=gdpr&attr_sid=116150&purposes=&vendors=&ext_id=a0d027b6-2052-4aa4-83c8-2d667adbb798
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /consent/v3/p?rmch=cs&domain=www.popsockets.com&sought=false&tp=gdpr&attr_sid=116150&purposes=&vendors=&ext_id=a0d027b6-2052-4aa4-83c8-2d667adbb798 HTTP/1.1
Host: consent.linksynergy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
set-cookie: rmuid=75078246-246e-4776-8a82-5cf0dada76e1; Path=/; Domain=linksynergy.com; Expires=Wed, 06 Dec 2023 19:15:07 GMT; Secure; SameSite=None
x-samesite: secure
date: Tue, 06 Dec 2022 19:15:07 GMT
content-length: 37
content-type: image/gif
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/web_widget/popsockets.zendesk.com
200 OK 722 B URL HTTP/2 ekr.zdassets.com/compose/web_widget/popsockets.zendesk.com
IP
File type JSON data\012- , ASCII text, with very long lines (408), with no line terminators
Hash 61b0e08e5667bba623f97d8c81495cb1
7b99136d1504062bd3968b5cad48984ab3515c18
bb2e03a4f1adba7cdc3b9f3944f5e858001405d875a3089b3cacb09ea4a63c2b
GET /compose/web_widget/popsockets.zendesk.com HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:06 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=600, public, s-maxage=60, stale-while-revalidate=600, stale-if-error=3600
etag: W/"e839638161641fc2838421ab3db9e485"
x-request-id: 773152aea908be5b-SEA, 773152aea908be5b-SEA
x-runtime: 0.005661
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=esDf5gWlH0BNMRDYXKJPSvTiKIPmhykNH0KbIOjk9%2FS%2BQ8KYWf4PVwvCeml8O2SQnZICXfeTxw49iiL5qsJqrggdnQrqtySMuYHwNtOhq98JT5J6teCk71WXDZ%2FJseaZQYY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7757592d1fd6b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/ekr/asset_composer.js
200 OK 6.3 kB URL HTTP/2 static.zdassets.com/ekr/asset_composer.js
IP
File type ASCII text, with very long lines (23416), with no line terminators
Hash 75d3dc20899c9fd96c3b6996d3474d23
fac2928f73f390003b3bf97a8a711734eec591d4
4f996eb452e260d3e8aeb14275d1ada4fb5a2a85b0ee7828af32e450b79dd412
GET /ekr/asset_composer.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popsockets.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:06 GMT
content-type: application/javascript
x-amz-id-2: dUZfshkH6s6HIQA7+U0tDhX+A5i1VSOF0AP1wrYwttudGl3FDx99SpKMnalxiwyFmxN4PZcqRnA=
x-amz-request-id: Y9E1NT7ZVNF7R3ZX
x-amz-replication-status: COMPLETED
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: 57KHzv0Z81imwMa0XxScJAmcLiHhq1Ku
cf-cache-status: HIT
age: 43
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c4OCj2paKIgC2fMkFHoRIIyrcD5DYilik%2F1IzDDBFI38iiLuM2%2BvsiR2ruYG6p5blXrH8Wewrty%2FM1n1IaCHmhNQBqwNbponKPtJrI%2Flh5t5CJwetk1dMUwBPWTuf%2F0X9jykzZw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7757592c7973b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9339bfb0393ef6575db48a0481f2556
351fa573fc3ea6626f3258061743cad65e0c4fce
5890254c4fac81ab169d788b9e5f9100f36e1ea2a2a6fe9036c45122aff062b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ut.rd.linksynergy.com/jsp?cn=rmuid&ro=0&cb=___rmuid
200 OK 148 B URL HTTP/2 ut.rd.linksynergy.com/jsp?cn=rmuid&ro=0&cb=___rmuid
IP
File type ASCII text, with no line terminators
Hash cccd397c349b6251751706b94618c017
530d304a59845a470874ade5bc01a2679d47b83e
c90288a0fac8e3e79656bce775378cc57804a3cde322fb04f22d3f3497f14e77
GET /jsp?cn=rmuid&ro=0&cb=___rmuid HTTP/1.1
Host: ut.rd.linksynergy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
set-cookie: rmuid=8902d51d-9845-4ebe-bffc-588c949c8704; Path=/; Domain=linksynergy.com; Expires=Wed, 06 Dec 2023 19:15:07 GMT; Secure; SameSite=None
icts=2022-12-06T19:15:07Z; Path=/; Domain=linksynergy.com; Expires=Wed, 06 Dec 2023 19:15:07 GMT; Secure; SameSite=None
rmuid=8902d51d-9845-4ebe-bffc-588c949c8704; Path=/; Domain=linksynergy.com; Expires=Mon, 06 Mar 2023 19:15:07 GMT; Secure; SameSite=None
x-samesite: secure
date: Tue, 06 Dec 2022 19:15:07 GMT
content-length: 148
content-type: text/plain; charset=utf-8
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/Q5oOOVFtB78
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Q5oOOVFtB78
IP
Hash ddf3e5f2d10e43cd444d301dd6d217fe
08e603648a40f0d42c83884903ae8c8de43f5e7f
04f938ab751419b76b814a42fd3921ac76c95743a00b15dd853f83b04d84f586
POST /s/gts1d4/Q5oOOVFtB78 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:07 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 52bdbc803bd36b5f60acaf9f41b8bac9
a6a7a7c3856f3fd4c5058d6ca9703ac15b9923d9
5c1f00843590261fde8080762031c9de8255ad2611e901716d109217e439487d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1553
Cache-Control: max-age=123432
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:07 GMT
Etag: "638ecdd2-118"
Expires: Thu, 08 Dec 2022 05:32:19 GMT
Last-Modified: Tue, 06 Dec 2022 05:06:26 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 279 B IP
Hash f0b1680e47157c7eed020d868726c5e0
dde51b10e37a754e6fa3fa7462d3882ece7040d0
88c51fed2e4aa5073c1f6d8a37e710a0beb5d384cc1d9cfa885b58582b5b343b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2010
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:07 GMT
Last-Modified: Tue, 06 Dec 2022 18:41:37 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
35.85.84.151/is
200 OK 32 B IP
File type ASCII text, with no line terminators
Hash d1d358bb5380e25759070a1894ca483f
cb4c55e422f2bd08e4b1459ad6d8203862c64d73
83e4041a396cccc5ba0b5f2d1e51beec8424b1be419dcf2321d7a929ef88f0ec
Analyzer Verdict Alert quad9 Sinkholed
GET /is HTTP/1.1
Host: 35.85.84.151
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popsockets.com/
Origin: https://www.popsockets.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 06 Dec 2022 19:15:07 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-5e66f98b4ee957db209dc6f63e3d59dd.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash e0652b84b7b3b650769c759fc520c3f8
0b55d6e28613350c7f41b88f19e726e6751ad03b
94b4c240f83065223dcacdd3f8b69cb229d0616edc3e2041eef3e270d859fc3d
GET /box-5e66f98b4ee957db209dc6f63e3d59dd.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Wed, 23 Nov 2022 13:10:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "e0652b84b7b3b650769c759fc520c3f8"
last-modified: Wed, 23 Nov 2022 13:09:18 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c61c9cd8693e9726a85388d7d1796c76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: o_edE7FA4J7YqX4INl2Ao-QA1yyQJ27d_fxFeqaPxeZJSYBKD5r5Iw==
age: 1145101
X-Firefox-Spdy: h2
events.attentivemobile.com/e?v=4.16.16_a23f093a37&pd=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&u=3c006ab8dfe649659132ab53c4d1c563&c=popsockets&ceid=R8J<=1670354107475&tag=modern&cs=1652112362&t=v&r=&m=%7B%22source%22%3A%22a%22%7D&cb=1670354107483
200 OK 0 B URL HTTP/2 events.attentivemobile.com/e?v=4.16.16_a23f093a37&pd=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&u=3c006ab8dfe649659132ab53c4d1c563&c=popsockets&ceid=R8J<=1670354107475&tag=modern&cs=1652112362&t=v&r=&m=%7B%22source%22%3A%22a%22%7D&cb=1670354107483
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /e?v=4.16.16_a23f093a37&pd=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&u=3c006ab8dfe649659132ab53c4d1c563&c=popsockets&ceid=R8J<=1670354107475&tag=modern&cs=1652112362&t=v&r=&m=%7B%22source%22%3A%22a%22%7D&cb=1670354107483 HTTP/1.1
Host: events.attentivemobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:07 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
x-envoy-upstream-service-time: 3
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 77575934fb51b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 52bdbc803bd36b5f60acaf9f41b8bac9
a6a7a7c3856f3fd4c5058d6ca9703ac15b9923d9
5c1f00843590261fde8080762031c9de8255ad2611e901716d109217e439487d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1553
Cache-Control: max-age=123432
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:07 GMT
Etag: "638ecdd2-118"
Expires: Thu, 08 Dec 2022 05:32:19 GMT
Last-Modified: Tue, 06 Dec 2022 05:06:26 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 280
fonts.gstatic.com/s/inter/v12/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZ9hiA.woff2
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/inter/v12/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZ9hiA.woff2
IP
File type gzip compressed data, max compression\012- data
Hash 4e61bf7c5434a0153ebd6d33fe26f817
c938a5cd4cd2b09dcc1ca0202b1e69f8c383f5cd
f38a701bf5e5e219eee10bd23c3beeaac49226b6858993977876517e5acab65f
GET /s/inter/v12/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZ9hiA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16708
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Dec 2022 01:51:09 GMT
expires: Mon, 04 Dec 2023 01:51:09 GMT
cache-control: public, max-age=31536000
age: 235438
last-modified: Mon, 11 Jul 2022 21:02:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 507e55c096a11f9c2852f209a769be80
b838a3bbe25ebc162896e7b7e8116fd28b13402e
25f906ae43f29e65fd976b35a3c72207a04d86a96f1b581b6135c605e00a9fac
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 19:15:07 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 07:02:55 GMT
Expires: Tue, 13 Dec 2022 07:02:54 GMT
Etag: "b838a3bbe25ebc162896e7b7e8116fd28b13402e"
Cache-Control: max-age=560266,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77575934ed94b509-OSL
popsockets.attn.tv/d/?attn_vid=3c006ab8dfe649659132ab53c4d1c563
200 OK 310 B URL HTTP/2 popsockets.attn.tv/d/?attn_vid=3c006ab8dfe649659132ab53c4d1c563
IP
Hash b8150b03503819c73ea0e7257b11a85f
10f5b9addbf274dec1a0b824885a466c87f01712
6f19a5c71b55db8b1f1f703627c0904127833d1c1151cea4fef2faeac78a035c
GET /d/?attn_vid=3c006ab8dfe649659132ab53c4d1c563 HTTP/1.1
Host: popsockets.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popsockets.com/
Origin: https://www.popsockets.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:08 GMT
content-type: application/json
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-origin: *
x-envoy-upstream-service-time: 5
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 775759351ea00b45-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3ABFZDC2GN9DKJA-1&page=muse%3Aoffer%3A%3A%3ABFZDC2GN9DKJA-1%3A%3AvisitorInfo%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a23da661-7900-4bed-b8dd-e3de7c8bfc17&es=visitorInfo&cust=43APFEU2UQAE4&mrid=BFZDC2GN9DKJA&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Sites-AMER-Site&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&unsc=0&identifier_used=DFP&e=im&t=1670354107865&g=0&completeurl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9
200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3ABFZDC2GN9DKJA-1&page=muse%3Aoffer%3A%3A%3ABFZDC2GN9DKJA-1%3A%3AvisitorInfo%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a23da661-7900-4bed-b8dd-e3de7c8bfc17&es=visitorInfo&cust=43APFEU2UQAE4&mrid=BFZDC2GN9DKJA&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Sites-AMER-Site&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&unsc=0&identifier_used=DFP&e=im&t=1670354107865&g=0&completeurl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Aoffer%3A%3A%3ABFZDC2GN9DKJA-1&page=muse%3Aoffer%3A%3A%3ABFZDC2GN9DKJA-1%3A%3AvisitorInfo%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=a23da661-7900-4bed-b8dd-e3de7c8bfc17&es=visitorInfo&cust=43APFEU2UQAE4&mrid=BFZDC2GN9DKJA&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Sites-AMER-Site&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&unsc=0&identifier_used=DFP&e=im&t=1670354107865&g=0&completeurl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9 HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Cookie: tsrce=targetingnodeweb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
date: Tue, 06 Dec 2022 19:15:08 GMT
expires: Tue, 06 Dec 2022 19:15:08 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 87b54b8ec5df5
pragma: no-cache
server: ECAcc (lhd/35C7)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=199
set-cookie: ts=vreXpYrS%3D1765048508%26vteXpYrS%3D1670355908%26vr%3De8dcfed41840a5b51674791affffffff%26vt%3De8dcfed41840a5b51674791afffffffe; Expires=Sat, 06 Dec 2025 19:15:08 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3De8dcfed41840a5b51674791affffffff%26vt%3De8dcfed41840a5b51674791afffffffe; Expires=Sat, 06 Dec 2025 19:15:08 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-000000000000000000087b54b8ec5df5-605510839d5f5dd4-01
content-length: 42
X-Firefox-Spdy: h2
dx.mountain.com/spx?dxver=4.0.0&shaid=33583&tdr=&plh=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&cb=25072850784590term=value
200 50 kB URL HTTP/1.1 dx.mountain.com/spx?dxver=4.0.0&shaid=33583&tdr=&plh=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&cb=25072850784590term=value
IP
Hash 87f0e2c4ed56f1faae6ff0b0a90dce81
031df522b51519a5161374364107fc9068eca2e2
597099a0c1f36da987e35643086ac1e64e8d7db46dc20c89a2224e810b045022
GET /spx?dxver=4.0.0&shaid=33583&tdr=&plh=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&cb=25072850784590term=value HTTP/1.1
Host: dx.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Tue, 06 Dec 2022 19:15:05 GMT
connection: close
popsockets.attn.tv/unrenderedCreative?v=4.16.16&r=&id=3c006ab8dfe649659132ab53c4d1c563&pv=1&l=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&w=1280&h=939&ss_ref=ORGANIC&m=marketing&m=live-sms
204 No Content 0 B URL HTTP/2 popsockets.attn.tv/unrenderedCreative?v=4.16.16&r=&id=3c006ab8dfe649659132ab53c4d1c563&pv=1&l=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&w=1280&h=939&ss_ref=ORGANIC&m=marketing&m=live-sms
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /unrenderedCreative?v=4.16.16&r=&id=3c006ab8dfe649659132ab53c4d1c563&pv=1&l=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&w=1280&h=939&ss_ref=ORGANIC&m=marketing&m=live-sms HTTP/1.1
Host: popsockets.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popsockets.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://www.popsockets.com
Content-Length: 29
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 06 Dec 2022 19:15:08 GMT
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
x-envoy-upstream-service-time: 14
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 775759383a730b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
script.hotjar.com/modules.d53d96d4fefc0e537bd8.js
200 OK 69 kB URL HTTP/2 script.hotjar.com/modules.d53d96d4fefc0e537bd8.js
IP
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 6f3e85a9867f8c1e87f393ee1344782f
9a3e0b1e33cd0bca903fbdb82e43aa71ec23d165
80cf78eadecdac25834fa2be80c9a96f5eba43069c0295d800ec8d14123f7fba
GET /modules.d53d96d4fefc0e537bd8.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 68700
date: Mon, 05 Dec 2022 14:58:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "6f3e85a9867f8c1e87f393ee1344782f"
last-modified: Mon, 05 Dec 2022 14:57:50 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GA3Oboptt6gWdiE3w9bNSUy_2KlgAeIk63zxOz6jM-G-2lxezkv_Zg==
age: 101822
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=5707154&Ver=2&mid=9bc98d1c-6c9b-4846-87db-0ee43c488745&sid=4bd16660759a11ed998cef28d027a2d8&vid=4bd1aab0759a11eda8751ddf5f1b785d&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sites-AMER-Site&kw=PopSockets&p=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&r=<=3364&evt=pageLoad&sv=1&rn=53201
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5707154&Ver=2&mid=9bc98d1c-6c9b-4846-87db-0ee43c488745&sid=4bd16660759a11ed998cef28d027a2d8&vid=4bd1aab0759a11eda8751ddf5f1b785d&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sites-AMER-Site&kw=PopSockets&p=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&r=<=3364&evt=pageLoad&sv=1&rn=53201
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5707154&Ver=2&mid=9bc98d1c-6c9b-4846-87db-0ee43c488745&sid=4bd16660759a11ed998cef28d027a2d8&vid=4bd1aab0759a11eda8751ddf5f1b785d&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Sites-AMER-Site&kw=PopSockets&p=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&r=<=3364&evt=pageLoad&sv=1&rn=53201 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=08EAD0946FC4687E3742C2E66E3169AF; domain=.bing.com; expires=Sun, 31-Dec-2023 19:15:08 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F45682A55D264096B1C3ADD757CB738E Ref B: OSL30EDGE0514 Ref C: 2022-12-06T19:15:08Z
date: Tue, 06 Dec 2022 19:15:07 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5006b8e985c5838b7fd2f2b558a65bc4
183ff15e0faedf346305fd6fe1c70c9c7a1eef4a
fcbfec9f5fd0e10d44778c1df64d8612281cd39881cdfd0aa8ca30d13655655a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1f5c20022cb32dc0af2d8d1d7e75db77
2ad5300acfca140c30aef94d1456a78bfd2511cd
9c02f834b87953589e181fa39ed1a66f9d184d83f469ae959ae0ba0dbe267189
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C02F834B87953589E181FA39ED1A66F9D184D83F469AE959AE0BA0DBE267189"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6597
Expires: Tue, 06 Dec 2022 21:05:05 GMT
Date: Tue, 06 Dec 2022 19:15:08 GMT
Connection: keep-alive
www.google.no/pagead/1p-user-list/969647119/?random=1670354106110&cv=11&fst=1670353200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&tiba=Sites-AMER-Site&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4195384120&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/969647119/?random=1670354106110&cv=11&fst=1670353200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&tiba=Sites-AMER-Site&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4195384120&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/969647119/?random=1670354106110&cv=11&fst=1670353200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&tiba=Sites-AMER-Site&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4195384120&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 19:15:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/969647119/?random=1670354106110&cv=11&fst=1670353200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&tiba=Sites-AMER-Site&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4195384120&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/969647119/?random=1670354106110&cv=11&fst=1670353200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&tiba=Sites-AMER-Site&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4195384120&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/969647119/?random=1670354106110&cv=11&fst=1670353200000&bg=ffffff&guid=ON&async=1>m=2oabu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&tiba=Sites-AMER-Site&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=4195384120&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 06 Dec 2022 19:15:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash a97c490a5f57669e4779f159c4dc7c2e
a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc
440bae73a0f989f36ec69b72d2cd21fab3637efc498af4a5e77d74a55ea7fca7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 19:15:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 01:42:53 GMT
Expires: Sun, 11 Dec 2022 01:42:52 GMT
Etag: "a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc"
Cache-Control: max-age=368263,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77575939fe10b4f7-OSL
s.pinimg.com/ct/lib/main.9a94ee76.js
200 OK 21 kB URL HTTP/2 s.pinimg.com/ct/lib/main.9a94ee76.js
IP
File type Unicode text, UTF-8 text, with very long lines (59858), with no line terminators
Hash e43867aadc515024dd460d8611098a12
c4fd1b2ace2f8a96a38e4b4996be8d7c46fdfd3f
76d528cb411bf6ff7fd77619aa507bec3bdf7f02063add1d9fe9009088f78d98
GET /ct/lib/main.9a94ee76.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "e43867aadc515024dd460d8611098a12"
content-encoding: gzip
accept-ranges: bytes
content-type: application/javascript
content-length: 20728
cache-control: max-age=1209600
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
bat.bing.com/p/action/5707154.js
200 OK 1.4 kB URL HTTP/2 bat.bing.com/p/action/5707154.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash e8ee10cc13cfad60d964765405079d69
164012aa932a2c58bfee408b2b906b3d61d554a1
1eb3d435c23f77d921bd17db8cd0aeeffbe0ced1c1891fda994b0c4d88d9db47
GET /p/action/5707154.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 1445
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=3A9B8F7A62B76FE0272E9D0863426E73; domain=.bing.com; expires=Sun, 31-Dec-2023 19:15:08 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F20CA2E344394100A38C23CDC210D3F1 Ref B: OSL30EDGE0514 Ref C: 2022-12-06T19:15:08Z
date: Tue, 06 Dec 2022 19:15:07 GMT
X-Firefox-Spdy: h2
idsync.rlcdn.com/458359.gif?partner_uid=8902d51d-9845-4ebe-bffc-588c949c8704
307 Temporary Redirect 0 B URL HTTP/2 idsync.rlcdn.com/458359.gif?partner_uid=8902d51d-9845-4ebe-bffc-588c949c8704
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /458359.gif?partner_uid=8902d51d-9845-4ebe-bffc-588c949c8704 HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
cache-control: no-cache, no-store
location: https://idsync.rlcdn.com/1000.gif?memo=CPf8GxIwCiwIARCd5gEaJDg5MDJkNTFkLTk4NDUtNGViZS1iZmZjLTU4OGM5NDljODcwNBAAGg0IvKm-nAYSBQjoBxAAQgBKAA
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: rlas3=IoOIeL8xj3nLWg8QP2msigCAvXX3NmDgzIGtN0wtBj4=; Path=/; Domain=rlcdn.com; Expires=Wed, 06 Dec 2023 19:15:08 GMT; Secure; SameSite=None
pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 04 Feb 2023 19:15:08 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Tue, 06 Dec 2022 19:15:08 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 013b65c5b52bb7855158194ff2024fb8
94eae308d8338735898e90536fc6ba076ff28cdd
bb5ab17efd81056c5f0ab03312011b63acb099c0e249364464391af52428098e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee6bfe50f8e4b9c142f971a55496ac26
8c3fd42aaa7fa3ebdedc4f7b0271b8caae166e64
4582e8e1ada92a279cbc5d82904c7fd27b9d4b95bc06c7a8b3c13168978f0b33
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rs.fullstory.com/rec/page
202 Accepted 78 B URL HTTP/2 rs.fullstory.com/rec/page
IP
File type JSON data\012- , ASCII text
Hash 93e89394e05f2d41cdde6dc9385bdc1c
6f3a948fc525397e3d10c9158e3b3557be20c9a4
aaf59914d0c8fcfbb92c307a9bea4583dec83810f60664a2eaf4cd08df1e3833
POST /rec/page HTTP/1.1
Host: rs.fullstory.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 489
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 202 Accepted
access-control-allow-credentials: true
access-control-allow-origin: https://www.popsockets.com
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Tue, 06 Dec 2022 19:15:08 GMT
content-length: 78
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1f5c20022cb32dc0af2d8d1d7e75db77
2ad5300acfca140c30aef94d1456a78bfd2511cd
9c02f834b87953589e181fa39ed1a66f9d184d83f469ae959ae0ba0dbe267189
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C02F834B87953589E181FA39ED1A66F9D184D83F469AE959AE0BA0DBE267189"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6597
Expires: Tue, 06 Dec 2022 21:05:05 GMT
Date: Tue, 06 Dec 2022 19:15:08 GMT
Connection: keep-alive
idsync.rlcdn.com/1000.gif?memo=CPf8GxIwCiwIARCd5gEaJDg5MDJkNTFkLTk4NDUtNGViZS1iZmZjLTU4OGM5NDljODcwNBAAGg0IvKm-nAYSBQjoBxAAQgBKAA
200 OK 42 B URL HTTP/2 idsync.rlcdn.com/1000.gif?memo=CPf8GxIwCiwIARCd5gEaJDg5MDJkNTFkLTk4NDUtNGViZS1iZmZjLTU4OGM5NDljODcwNBAAGg0IvKm-nAYSBQjoBxAAQgBKAA
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /1000.gif?memo=CPf8GxIwCiwIARCd5gEaJDg5MDJkNTFkLTk4NDUtNGViZS1iZmZjLTU4OGM5NDljODcwNBAAGg0IvKm-nAYSBQjoBxAAQgBKAA HTTP/1.1
Host: idsync.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popsockets.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: image/gif
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: pxrc=CLypvpwGEgUI6AcQAA==; Path=/; Domain=rlcdn.com; Expires=Sat, 04 Feb 2023 19:15:08 GMT; Secure; SameSite=None
timing-allow-origin: *
date: Tue, 06 Dec 2022 19:15:08 GMT
content-length: 42
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash a97c490a5f57669e4779f159c4dc7c2e
a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc
440bae73a0f989f36ec69b72d2cd21fab3637efc498af4a5e77d74a55ea7fca7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 19:15:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 01:42:53 GMT
Expires: Sun, 11 Dec 2022 01:42:52 GMT
Etag: "a8cb07e3ef5ff4963a1e303a9770ff752cc62ecc"
Cache-Control: max-age=368263,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7757593abf55b4f7-OSL
www.facebook.com/tr/?id=161049324437142&ev=PageView&dl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&rl=&if=false&ts=1670354108525&cd[dataSource]=EX-GTM&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670354108524.888527502&it=1670354107533&coo=false&eid=1670354104209_1_gtm.js&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=161049324437142&ev=PageView&dl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&rl=&if=false&ts=1670354108525&cd[dataSource]=EX-GTM&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670354108524.888527502&it=1670354107533&coo=false&eid=1670354104209_1_gtm.js&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=161049324437142&ev=PageView&dl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&rl=&if=false&ts=1670354108525&cd[dataSource]=EX-GTM&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670354108524.888527502&it=1670354107533&coo=false&eid=1670354104209_1_gtm.js&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 06 Dec 2022 19:15:08 GMT
X-Firefox-Spdy: h2
vc.hotjar.io/sessions/3168931?s=0.25&r=0.1926049610620112
204 No Content 0 B URL HTTP/2 vc.hotjar.io/sessions/3168931?s=0.25&r=0.1926049610620112
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sessions/3168931?s=0.25&r=0.1926049610620112 HTTP/1.1
Host: vc.hotjar.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-store
date: Tue, 06 Dec 2022 19:15:08 GMT
server: Python/3.7 aiohttp/3.5.4
x-cache: Miss from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Axi7spm07JRXdmUxTd1ktlp67rA8bHC6zV3qHdpywEA-b20560IyIg==
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1670354107601&aid=a-028x&se=e30&duid=93a85bcc3d45--01gkmdsyzb1ywt3s6vc8byr4sp&tna=v2.5.1&pu=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&wpn=lc-bundle&c=PHRpdGxlPlNpdGVzLUFNRVItU2l0ZTwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IlBvcFNvY2tldHMiPg
302 Found 0 B URL HTTP/2 rp.liadm.com/j?dtstmp=1670354107601&aid=a-028x&se=e30&duid=93a85bcc3d45--01gkmdsyzb1ywt3s6vc8byr4sp&tna=v2.5.1&pu=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&wpn=lc-bundle&c=PHRpdGxlPlNpdGVzLUFNRVItU2l0ZTwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IlBvcFNvY2tldHMiPg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /j?dtstmp=1670354107601&aid=a-028x&se=e30&duid=93a85bcc3d45--01gkmdsyzb1ywt3s6vc8byr4sp&tna=v2.5.1&pu=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&wpn=lc-bundle&c=PHRpdGxlPlNpdGVzLUFNRVItU2l0ZTwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IlBvcFNvY2tldHMiPg HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 06 Dec 2022 19:15:08 GMT
content-length: 0
trace-id: 27026c52c9523150
vary: Origin
location: /j?dtstmp=1670354107601&aid=a-028x&se=e30&duid=93a85bcc3d45--01gkmdsyzb1ywt3s6vc8byr4sp&tna=v2.5.1&pu=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&wpn=lc-bundle&c=PHRpdGxlPlNpdGVzLUFNRVItU2l0ZTwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IlBvcFNvY2tldHMiPg&n3pc=true
set-cookie: lidid=ac202225-3b1e-488c-a4e6-561d8c34e119; Max-Age=63072000; Expires=Thu, 05 Dec 2024 19:15:08 GMT; SameSite=None; Path=/; Domain=.liadm.com; Secure; HTTPOnly
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://www.popsockets.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
ct.pinterest.com/user/?tid=2616417841533&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1670354108443&dep=2%2CPAGE_LOAD
200 OK 377 B URL HTTP/2 ct.pinterest.com/user/?tid=2616417841533&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1670354108443&dep=2%2CPAGE_LOAD
IP
File type JSON data\012- , ASCII text, with very long lines (539), with no line terminators
Hash f6314a3333f750a090b7d16565b63b62
b071e68a3c67319a26ff36cd8a2758cc69e72377
341b6a8e9fc8f0cd98feb8442e1c01f066cf2b220749842c5be46d65786c3085
GET /user/?tid=2616417841533&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1670354108443&dep=2%2CPAGE_LOAD HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPVptWmpNalZrTnpJdE9HUmlaQzAwTXpFMExXSmlPVFl0TmpCak5HSXdaVGd3WlRSbA
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.popsockets.com
content-type: application/json; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 4
referrer-policy: origin
x-pinterest-rid: 8538540693772584
date: Tue, 06 Dec 2022 19:15:08 GMT
x-cdn: fastly
content-length: 377
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2616417841533&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1670354108444
200 OK 35 B URL HTTP/2 ct.pinterest.com/v3/?tid=2616417841533&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1670354108444
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2616417841533&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%229a94ee76%22%2C%22ecm_enabled%22%3Afalse%7D&cb=1670354108444 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
access-control-allow-origin: *
x-envoy-upstream-service-time: 2
referrer-policy: origin
x-pinterest-rid: 1432266444681603
date: Tue, 06 Dec 2022 19:15:08 GMT
x-cdn: fastly
content-length: 35
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash fb5ba15917a8e541ae8a4b4b5e492d30
4a1b0bdb1ec017a1450254f8e724169aaff9707c
4dada0192ab052a3611e4dfa9cf18cdd530a24d272e0dc719407f2285c5c3388
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=163306
Date: Tue, 06 Dec 2022 19:15:08 GMT
Etag: "638f5edf-1d7"
Expires: Thu, 08 Dec 2022 16:36:54 GMT
Last-Modified: Tue, 06 Dec 2022 15:25:19 GMT
Server: ECS (nyb/1D2D)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9oRtsrUmg8GtZGk863uChhtisaeKzIhxvLGuOKKwdRu_CXQbaw6ahA==
Age: 4295
cdn.attn.tv/popsockets/dtag.js
200 OK 6.3 kB URL HTTP/2 cdn.attn.tv/popsockets/dtag.js
IP
Hash 968f24c4fb058ac2263ab32341868750
e114990f38c73bc50678392743b0af26303b172e
5d0c2e384dadf87d1258f7773af396f2640970945c298af15bf48ea19d7229c6
GET /popsockets/dtag.js HTTP/1.1
Host: cdn.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
x-amz-replication-status: COMPLETED
last-modified: Thu, 13 Oct 2022 18:46:28 GMT
x-amz-version-id: euYGw0acva3SDOMm9ZI7nGCbmmv_XCUR
server: AmazonS3
content-encoding: gzip
date: Tue, 06 Dec 2022 19:15:08 GMT
cache-control: public, max-age=120
etag: W/"cd0522e42f76b1ae73802382ae062259"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: j4OBw08UIbzDev0nen_TuOhehm0aKwtrqh50WXfKNdArg-TegQ0b-w==
X-Firefox-Spdy: h2
rp.liadm.com/j?dtstmp=1670354107601&aid=a-028x&se=e30&duid=93a85bcc3d45--01gkmdsyzb1ywt3s6vc8byr4sp&tna=v2.5.1&pu=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&wpn=lc-bundle&c=PHRpdGxlPlNpdGVzLUFNRVItU2l0ZTwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IlBvcFNvY2tldHMiPg&n3pc=true
200 OK 13 B URL HTTP/2 rp.liadm.com/j?dtstmp=1670354107601&aid=a-028x&se=e30&duid=93a85bcc3d45--01gkmdsyzb1ywt3s6vc8byr4sp&tna=v2.5.1&pu=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&wpn=lc-bundle&c=PHRpdGxlPlNpdGVzLUFNRVItU2l0ZTwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IlBvcFNvY2tldHMiPg&n3pc=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 97efe0b7ee61e154d57e80758bb797d8
810b4e115fe9f5ae697666febf2a9abf0b21c9ec
efabba3678b85fcab831b778ea2ddaad1e2a1e952584d3566bc39b7ccb3429d9
GET /j?dtstmp=1670354107601&aid=a-028x&se=e30&duid=93a85bcc3d45--01gkmdsyzb1ywt3s6vc8byr4sp&tna=v2.5.1&pu=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&wpn=lc-bundle&c=PHRpdGxlPlNpdGVzLUFNRVItU2l0ZTwvdGl0bGU-PG1ldGEgbmFtZT0iZGVzY3JpcHRpb24iIGNvbnRlbnQ9IlBvcFNvY2tldHMiPg&n3pc=true HTTP/1.1
Host: rp.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Referer: https://www.popsockets.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:09 GMT
content-type: application/json
content-length: 13
trace-id: 6afa608f6ca1fabb
vary: Origin
request-time: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: DENY
x-pixel-event-id: 4bdcb7df-6079-472f-98ff-68e4fbf83d27
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://www.popsockets.com
access-control-allow-credentials: true
x-permitted-cross-domain-policies: master-only
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 736
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.popsockets.com
access-control-allow-credentials: true
date: Tue, 06 Dec 2022 19:15:08 GMT
X-Firefox-Spdy: h2
gs.mountain.com/gs
200 OK 144 B IP
File type ASCII text, with no line terminators
Hash 42f1662ab10b417e782a69a20c0a6379
d78916cbc09141ea84027f4ba780c0952496c4e5
d7c77ebb1136a2ff6889f37057964d2a687621d9f2d20dc12fb2ebf54abcbba9
GET /gs HTTP/1.1
Host: gs.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Cookie: guid=4c796193-759a-11ed-a4ea-0d1be799faad
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Tue, 06 Dec 2022 19:15:09 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 9af59f0d735a86a839dff8cbbf6f1131
e10df889edc46cdad84ba7c8d798ee24eb5ea319
30bb30dc9a6bca0357ec37c5edd199579ea684d17c44811d65e3bbe7b76b9f9f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=169011
Date: Tue, 06 Dec 2022 19:15:09 GMT
Etag: "638f7997-1d7"
Expires: Thu, 08 Dec 2022 18:12:00 GMT
Last-Modified: Tue, 06 Dec 2022 17:19:19 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LYe7CKw7o7Hy5mPEIk6aSrsvD3aGd165tNWFKs77aMh7uLcuLSLvRg==
Age: 3161
popsockets.zendesk.com/embeddable_blip?type=settings&data=eyJzZXR0aW5ncyI6eyJ3ZWJXaWRnZXQiOnsicG9zaXRpb24iOnsiaG9yaXpvbnRhbCI6ImxlZnQifX19LCJidWlkIjoiMmI3NzJmMjBjNmVmNDliMGEyMmEzYjE0NzZiMTRmNzQiLCJzdWlkIjoiZjE2MTQyYWFmZjVlNDQ4NTk3YzBiOWJkMjI1Y2NjMWYiLCJ2ZXJzaW9uIjoiMjBlYjE0YSIsInRpbWVzdGFtcCI6IjIwMjItMTItMDZUMTk6MTU6MDkuMTc3WiIsInVybCI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifQ%3D%3D
200 OK 0 B URL HTTP/2 popsockets.zendesk.com/embeddable_blip?type=settings&data=eyJzZXR0aW5ncyI6eyJ3ZWJXaWRnZXQiOnsicG9zaXRpb24iOnsiaG9yaXpvbnRhbCI6ImxlZnQifX19LCJidWlkIjoiMmI3NzJmMjBjNmVmNDliMGEyMmEzYjE0NzZiMTRmNzQiLCJzdWlkIjoiZjE2MTQyYWFmZjVlNDQ4NTk3YzBiOWJkMjI1Y2NjMWYiLCJ2ZXJzaW9uIjoiMjBlYjE0YSIsInRpbWVzdGFtcCI6IjIwMjItMTItMDZUMTk6MTU6MDkuMTc3WiIsInVybCI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifQ%3D%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embeddable_blip?type=settings&data=eyJzZXR0aW5ncyI6eyJ3ZWJXaWRnZXQiOnsicG9zaXRpb24iOnsiaG9yaXpvbnRhbCI6ImxlZnQifX19LCJidWlkIjoiMmI3NzJmMjBjNmVmNDliMGEyMmEzYjE0NzZiMTRmNzQiLCJzdWlkIjoiZjE2MTQyYWFmZjVlNDQ4NTk3YzBiOWJkMjI1Y2NjMWYiLCJ2ZXJzaW9uIjoiMjBlYjE0YSIsInRpbWVzdGFtcCI6IjIwMjItMTItMDZUMTk6MTU6MDkuMTc3WiIsInVybCI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifQ%3D%3D HTTP/1.1
Host: popsockets.zendesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:09 GMT
content-length: 0
access-control-allow-origin: *
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
x-request-id: 7757593f3856b524-SEA
last-modified: Tue, 06 Dec 2022 19:15:09 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wWb6Qbo30V1S3gU9WPtlGPNKOB47gO%2BQwDCVKNRTl08CS6I0WzD4TtuBuiyy4AM6Wak1ZvuvwWlh6F9PMwcFu6%2Bp9NouHHo9%2BhijE6tZRafy4%2FdrlMk2esldDOgmmmQKHq%2FC0AwYM%2F8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=fee8f308d93343d0be0a34727293d5fcf32a79d5-1670354109; path=/; domain=.popsockets.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7757593f3856b524-OSL
X-Firefox-Spdy: h2
widget-mediator.zopim.com/s/W/ws/4ILkFu+B92hfBfdz/c/1670354109353
101 Switching Protocols 0 B URL HTTP/1.1 widget-mediator.zopim.com/s/W/ws/4ILkFu+B92hfBfdz/c/1670354109353
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/W/ws/4ILkFu+B92hfBfdz/c/1670354109353 HTTP/1.1
Host: widget-mediator.zopim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.popsockets.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Y6SD7mJLAxQYmrzIZHH4Sw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 06 Dec 2022 19:15:09 GMT
Connection: upgrade
Set-Cookie: AWSALB=acoiedxUabrn/64z4FMEaF35V9kfRmmIUi779BRDId4ngj4ufKagjZrXylB9ILj95AVbDSr6/l/ZW0g+A+AeVtISuEaWmLybmf0cbFmG0SLz1BZoBOJuM+HgTCSz; Expires=Tue, 13 Dec 2022 19:15:09 GMT; Path=/
AWSALBCORS=acoiedxUabrn/64z4FMEaF35V9kfRmmIUi779BRDId4ngj4ufKagjZrXylB9ILj95AVbDSr6/l/ZW0g+A+AeVtISuEaWmLybmf0cbFmG0SLz1BZoBOJuM+HgTCSz; Expires=Tue, 13 Dec 2022 19:15:09 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
Sec-WebSocket-Accept: AlHE7LRUNx78tn/FIG4UH9A2vmo=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-20eb14a.js
200 OK 20 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-20eb14a.js
IP
File type ASCII text, with no line terminators
Hash 7ecbeb9fbae3abfe6ebd258f7d0b9ad3
c51d653cfe5d82402b6d029ad66022cc42cbe190
5dc737f70ad8bc7f9aa0e601985b1c5fba3120f71f3bb29387c12b1df54b5059
GET /web_widget/latest/classic/web-widget-chat-incoming-message-notification-20eb14a.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:09 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: WDSD7UFdyEI+FRwZkvcSbEZIKR57siPzst641rkeq7NtSqp5aOgvXGs5++E+voqZFYuF+K1UlW8=
x-amz-request-id: YWYJYQ3P1WVE93M7
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Dec 2022 01:20:22 GMT
etag: W/"659635f5ad1b6653645380f46aa42236"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Sat, 02 Dec 2023 01:20:21 GMT
x-amz-version-id: PfkHGojq8gv90mJHpworL3kIuZV41Ko9
cf-cache-status: HIT
age: 404452
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EV%2BarLPXTXfFTlGUNU%2ByOA5ip1cxnH2r0zgxbAAkylBZkaOtrpuxUGY0Gg4Om9KfRXsohJF6LsaYI9OENtwBNTgv487UmaoO6oKt8yOGP3QlDK6cULm2bk%2FBbB4C3J3x23Anmms%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 775759435cabb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 435
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.popsockets.com
access-control-allow-credentials: true
date: Tue, 06 Dec 2022 19:15:09 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash e5d1007bb5997124d186fa2a7ba2dd27
8c7a1df9611cf72e9ab8963f4d31abb026e68dad
f644b495757c8cad0f6b0da726b5b34e831056f0a2051a36503fac3f78ce698c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4027
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:10 GMT
Last-Modified: Tue, 06 Dec 2022 18:08:03 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash e5d1007bb5997124d186fa2a7ba2dd27
8c7a1df9611cf72e9ab8963f4d31abb026e68dad
f644b495757c8cad0f6b0da726b5b34e831056f0a2051a36503fac3f78ce698c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4065
Cache-Control: max-age=130314
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:10 GMT
Etag: "638edee7-117"
Expires: Thu, 08 Dec 2022 07:27:04 GMT
Last-Modified: Tue, 06 Dec 2022 06:19:19 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 471 B IP
Hash 566c9d37739634118939a7a769e47c3b
d532ef1dc707738bcad35b7049c3948cf46180a0
bb1e62d825c59ec45e4d8774f2f6b8e0b04db329dfcb3b5babf80c35a4588c03
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3117
Cache-Control: max-age=131158
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:10 GMT
Etag: "638ee5e7-1d7"
Expires: Thu, 08 Dec 2022 07:41:08 GMT
Last-Modified: Tue, 06 Dec 2022 06:49:11 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
static.zdassets.com/web_widget/latest/classic/web-widget-chat-sdk-20eb14a.js
200 OK 61 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-sdk-20eb14a.js
IP
File type ASCII text, with very long lines (65307)
Hash 7bff48756323b9b32e4ee5f1331aa47e
8fefaa1386a9a122912e18aed0d11701543e72e2
6c9af3e9d233f3f2448e26139d8a324c56ccb09076bdfce47649907550b666af
GET /web_widget/latest/classic/web-widget-chat-sdk-20eb14a.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:09 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: rZxiBs/C/6f2mNn/c6v4i2+Tc4zCPoOUHVzZiXlvMJ2uafhYL6jSZXDJLCWu/M18MrsQZjt05ac=
x-amz-request-id: D71XHA62VKDR79TV
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Dec 2022 01:20:22 GMT
etag: W/"d366c0776c2bacba354d40e564c3d3e6"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Sat, 02 Dec 2023 01:20:21 GMT
x-amz-version-id: pNxotdukxaYHd8lz__9R8Wkix2OVlAmo
cf-cache-status: HIT
age: 404453
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cO9ZmvvjuYcrFEXq%2FzWVgH4%2FI3Q1QemUw5RSmeXXIjm6RsqBUeNY%2B4VTzOwZGWdMnpAqn3bchnXYywg2i07KVq2ou8VSJh4kTZ4P7TFJBPKeE0aQkXjSV10T9tlXbcD5NBspsRM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7757593f6eb5b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 566c9d37739634118939a7a769e47c3b
d532ef1dc707738bcad35b7049c3948cf46180a0
bb1e62d825c59ec45e4d8774f2f6b8e0b04db329dfcb3b5babf80c35a4588c03
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3151
Cache-Control: max-age=131192
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:10 GMT
Etag: "638ee5e7-1d7"
Expires: Thu, 08 Dec 2022 07:41:42 GMT
Last-Modified: Tue, 06 Dec 2022 06:49:11 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ct.pinterest.com/ct.html
200 OK 323 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash b49b45b63051915a8c657060651eb07f
acaddf8021f220d0e4d30e7c8b3d8330ff781af9
4b00fbca5db49c6e4b29a0c873c43671880bcea1b7b3007655183382a318c2dc
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 0
referrer-policy: origin
x-pinterest-rid: 3247818114076260
date: Tue, 06 Dec 2022 19:15:10 GMT
x-cdn: fastly
content-length: 323
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.43/clarity.js
200 OK 26 kB URL HTTP/2 www.clarity.ms/eus2/s/0.6.43/clarity.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (55029)
Hash 47dcc6d0279c09c68d6d4cab9bc96bfb
30a14084aff0f755141a43eeff130501c23b6eb1
6c7fe8ad4d85ea5c62d20ebe444e6d0a992cc1810aeb73a9069f05ab00969656
GET /eus2/s/0.6.43/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d9082948124e4c"
server: Microsoft-IIS/10.0
x-cache: TCP_HIT
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-azure-ref-originshield: 0C2yPYwAAAADbDkcRdvRjSJJE8S+F2lXyQU1TMDRFREdFMTkwNgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
x-azure-ref: 0vJSPYwAAAACodE6tzHHsT6oZlKvgPQE/U1ZHMjBFREdFMDUwOAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Tue, 06 Dec 2022 19:15:08 GMT
X-Firefox-Spdy: h2
tr.snapchat.com/cm/i?pid=28ec369c-27f3-48c4-9de2-e7f45fb0d936&u_scsid=ce663a4a-228a-42db-91d9-cd177c54c095&u_sclid=eb04bee0-7aad-42f1-a0da-1873395dd7cd
200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=28ec369c-27f3-48c4-9de2-e7f45fb0d936&u_scsid=ce663a4a-228a-42db-91d9-cd177c54c095&u_sclid=eb04bee0-7aad-42f1-a0da-1873395dd7cd
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=28ec369c-27f3-48c4-9de2-e7f45fb0d936&u_scsid=ce663a4a-228a-42db-91d9-cd177c54c095&u_sclid=eb04bee0-7aad-42f1-a0da-1873395dd7cd HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:10 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 1
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tr.snapchat.com/p?pid=28ec369c-27f3-48c4-9de2-e7f45fb0d936&ev=PAGE_VIEW&u_em=&intg=gtm&pl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&bt=1d53c387&if=false&m_dcl=3365&m_fcps=3319&m_pi=3175&m_pl=7706&m_pv=v2&m_rd=7730&m_sl=2133&rf=&trackId=1637fb28-9b65-43b4-82f5-37467e504335&ts=1670354110163&u_c1=e930bd70-c75e-4a66-90e5-3cb22ccc4161&u_sclid=eb04bee0-7aad-42f1-a0da-1873395dd7cd&u_scsid=ce663a4a-228a-42db-91d9-cd177c54c095&v=2.0.0
200 OK 68 B URL HTTP/2 tr.snapchat.com/p?pid=28ec369c-27f3-48c4-9de2-e7f45fb0d936&ev=PAGE_VIEW&u_em=&intg=gtm&pl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&bt=1d53c387&if=false&m_dcl=3365&m_fcps=3319&m_pi=3175&m_pl=7706&m_pv=v2&m_rd=7730&m_sl=2133&rf=&trackId=1637fb28-9b65-43b4-82f5-37467e504335&ts=1670354110163&u_c1=e930bd70-c75e-4a66-90e5-3cb22ccc4161&u_sclid=eb04bee0-7aad-42f1-a0da-1873395dd7cd&u_scsid=ce663a4a-228a-42db-91d9-cd177c54c095&v=2.0.0
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /p?pid=28ec369c-27f3-48c4-9de2-e7f45fb0d936&ev=PAGE_VIEW&u_em=&intg=gtm&pl=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&bt=1d53c387&if=false&m_dcl=3365&m_fcps=3319&m_pi=3175&m_pl=7706&m_pv=v2&m_rd=7730&m_sl=2133&rf=&trackId=1637fb28-9b65-43b4-82f5-37467e504335&ts=1670354110163&u_c1=e930bd70-c75e-4a66-90e5-3cb22ccc4161&u_sclid=eb04bee0-7aad-42f1-a0da-1873395dd7cd&u_scsid=ce663a4a-228a-42db-91d9-cd177c54c095&v=2.0.0 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:10 GMT
access-control-allow-origin: *
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBiw0AMAQFwIkkPg81jjQ6heF7F1an6iV5ZxOuDp1y0KA1bYJZsSuRbA4RXv6bqa76MgAAAA==;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: image/png
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 1
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.cookielaw.org/consent/f3f8eb7f-a4c5-4f36-8532-d9c6b12e8fee/f3f8eb7f-a4c5-4f36-8532-d9c6b12e8fee.json
200 OK 1.5 kB URL HTTP/2 cdn.cookielaw.org/consent/f3f8eb7f-a4c5-4f36-8532-d9c6b12e8fee/f3f8eb7f-a4c5-4f36-8532-d9c6b12e8fee.json
IP
File type JSON data\012- , ASCII text, with very long lines (3699), with no line terminators
Hash b1f6f17f868fb4c5e2e938b004fca815
9278d3af4be35758623dce924b173b099b4f325c
c0e0076d76e218b81608ca10f4795ba2b442c00d3eca7f7e4e4e7dddadead360
GET /consent/f3f8eb7f-a4c5-4f36-8532-d9c6b12e8fee/f3f8eb7f-a4c5-4f36-8532-d9c6b12e8fee.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:10 GMT
content-type: application/x-javascript
content-length: 1489
cache-control: public, max-age=86400
content-encoding: gzip
content-md5: sfbxf4aPtMXi6TiwBPyoFQ==
last-modified: Wed, 18 Aug 2021 13:29:53 GMT
etag: 0x8D9624C4371621F
x-ms-request-id: 337dc530-801e-002a-5a76-01ada3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 78129
expires: Wed, 07 Dec 2022 19:15:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 775759460cf8b4f3-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 566c9d37739634118939a7a769e47c3b
d532ef1dc707738bcad35b7049c3948cf46180a0
bb1e62d825c59ec45e4d8774f2f6b8e0b04db329dfcb3b5babf80c35a4588c03
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3117
Cache-Control: max-age=131158
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:10 GMT
Etag: "638ee5e7-1d7"
Expires: Thu, 08 Dec 2022 07:41:08 GMT
Last-Modified: Tue, 06 Dec 2022 06:49:11 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash b746371785ba1bc6cb2cc00c52bde896
20009dbca55e8dcce2a4d2ac36111204c70d53cb
996b87c3a6dcd333df24be291f9e2b7b5631fbc3f0809f04c47cd76043a466f2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3801
Cache-Control: max-age=150564
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 19:15:10 GMT
Etag: "638f2f09-117"
Expires: Thu, 08 Dec 2022 13:04:34 GMT
Last-Modified: Tue, 06 Dec 2022 12:01:13 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
insight.adsrvr.org/track/up?adv=63fw3ye&ref=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&upid=9g9mv97&upv=1.1.0&td1=null&td2=undefined&td3=null&td4=null&td5=null&td6=null&td7=null&td8=null&td9=null&v=
200 OK 76 kB URL HTTP/2 insight.adsrvr.org/track/up?adv=63fw3ye&ref=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&upid=9g9mv97&upv=1.1.0&td1=null&td2=undefined&td3=null&td4=null&td5=null&td6=null&td7=null&td8=null&td9=null&v=
IP
File type gzip compressed data, was "otBannerSdk.js", last modified: Mon Jul 26 18:46:54 2021, from Unix\012- data
Hash 523e98a35ea92fd6e6d32d6728a8c98e
e0951a7bfa0700679aa41a03394286723e697d93
a746202b022948dfc0461cf24b3be5b01d0c08b924b23545f3cba6e2d15b41a9
GET /track/up?adv=63fw3ye&ref=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&upid=9g9mv97&upv=1.1.0&td1=null&td2=undefined&td3=null&td4=null&td5=null&td6=null&td7=null&td8=null&td9=null&v= HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:10 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
200 OK 13 kB URL HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (61428), with no line terminators
Hash 5493f9c60b63408da335b05a76b05375
60b3a6dc885a79964515068083f2de1199aa43eb
4758ea14936eca5022277e0c8cac0b8bb85b01731c6cf85f0f9f14d32ae8c10a
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:10 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7757594699af0b45-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.22.0/assets/v2/otPcCenter.json
200 OK 11 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/assets/v2/otPcCenter.json
IP
File type JSON data\012- , ASCII text, with very long lines (37295)
Hash 18547e97b06ab94df47f203505e4250f
c3fb390706da22139963e285865cf4af77e374cf
35c3b153e612b2809fd668d85c67b873887773d1c13d8cb4f796544c0f7a4141
GET /scripttemplates/6.22.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popsockets.com/
Origin: https://www.popsockets.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:10 GMT
content-type: application/json
content-length: 11387
content-encoding: gzip
content-md5: GFR+l7BquU30fyA1BeQlDw==
last-modified: Thu, 19 Aug 2021 02:39:12 GMT
etag: 0x8D962BA87864242
x-ms-request-id: 6e7c471b-901e-013a-7970-cbdd10000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 78129
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77575947afbab4f3-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.22.0/assets/otFloatingRoundedIcon.json
200 OK 3.8 kB URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/assets/otFloatingRoundedIcon.json
IP
File type JSON data\012- , ASCII text, with very long lines (12399)
Hash fca4a4d1ee66f8bc69308abb4cd0e9d4
0615d5296faa8e78a4f2680ef2f0ae346d3519c3
98dc2f72233c97db508a68f65d46f1a5bd6a12ad5d5cb28bbdbdd7cc88a5ada6
GET /scripttemplates/6.22.0/assets/otFloatingRoundedIcon.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popsockets.com/
Origin: https://www.popsockets.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:10 GMT
content-type: application/json
content-length: 3758
content-encoding: gzip
content-md5: /KSk0e5m+LxpMIq7TNDp1A==
last-modified: Thu, 19 Aug 2021 02:39:12 GMT
etag: 0x8D962BA876C25A4
x-ms-request-id: e8810df3-201e-0167-6470-cb2d14000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 775759479fadb4f3-OSL
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
200 OK 642 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP
Hash 977caa6cd6b7a098b789f34ee3c9342e
8488f77d82865c9fccfa81e1aed41b7216f68555
21d91b618fa0d487dd1134cbe1b9b7d6ee91358749bf47e3708b2c7f9ff33a03
OPTIONS /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.popsockets.com/
Origin: https://www.popsockets.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.popsockets.com
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f3277949a06e5
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 07 Dec 2022 04:01:06 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 06 Dec 2023 19:15:10 GMT; Secure
x-pp-s=eyJ0IjoiMTY3MDM1NDExMDQ0OCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=loggernodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 09 Dec 2022 19:15:10 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg02.phx; Path=/; Domain=paypal.com; Expires=Tue, 06 Dec 2022 19:45:10 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765048510%26vteXpYrS%3D1670355910%26vr%3De8dd07d91840a7a0a2f455e2fbf22daf%26vt%3De8dd07d91840a7a0a2f455e2fbf22dae%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 19:15:10 GMT; HttpOnly; Secure
ts_c=vr%3De8dd07d91840a7a0a2f455e2fbf22daf%26vt%3De8dd07d91840a7a0a2f455e2fbf22dae; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 19:15:10 GMT; Secure
traceparent: 00-0000000000000000000f3277949a06e5-57c02bf88d65c4ed-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 06 Dec 2022 19:15:10 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4082-HHN, cache-bma1646-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670354110.344354,VS0,VE189
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=A7F55AA893594B9993F505DB51273551&RedC=c.clarity.ms&MXFR=1E3C947891846F483CE4860A9584618A
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=A7F55AA893594B9993F505DB51273551&RedC=c.clarity.ms&MXFR=1E3C947891846F483CE4860A9584618A
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=A7F55AA893594B9993F505DB51273551&RedC=c.clarity.ms&MXFR=1E3C947891846F483CE4860A9584618A HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popsockets.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=A7F55AA893594B9993F505DB51273551&MUID=2DDE5C3352BF6C5D197B4E41534A6D95
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=2DDE5C3352BF6C5D197B4E41534A6D95; domain=c.bing.com; expires=Sun, 31-Dec-2023 19:15:11 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B729A9A228F34B49976305DA8DCFEEC1 Ref B: OSL30EDGE0514 Ref C: 2022-12-06T19:15:11Z
date: Tue, 06 Dec 2022 19:15:10 GMT
content-length: 0
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.store/Sites-AMER-Site/en_US/__Analytics-Start?url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&res=1280x1024&cookie=1&ref=&title=Sites-AMER-Site&pdf=0&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.7686875498304141&cmpn=&tz=US/Mountain&pcc=USD&pct=&pcat=&dw_dnt=0
200 OK 35 B URL HTTP/2 www.popsockets.com/on/demandware.store/Sites-AMER-Site/en_US/__Analytics-Start?url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&res=1280x1024&cookie=1&ref=&title=Sites-AMER-Site&pdf=0&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.7686875498304141&cmpn=&tz=US/Mountain&pcc=USD&pct=&pcat=&dw_dnt=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /on/demandware.store/Sites-AMER-Site/en_US/__Analytics-Start?url=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&res=1280x1024&cookie=1&ref=&title=Sites-AMER-Site&pdf=0&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&dwac=0.7686875498304141&cmpn=&tz=US/Mountain&pcc=USD&pct=&pcat=&dw_dnt=0 HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==; _gcl_au=1.1.260335682.1670354104; _ga_123123123=GS1.1.1670354104.1.1.1670354104.0.0.0; _ga=GA1.2.1088972480.1670354105; _rdt_uuid=1670354104544.4aa30926-df06-42b9-8e37-eea844e3c575; _scid=e930bd70-c75e-4a66-90e5-3cb22ccc4161; __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NzAzNTQxMDYsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifSwiJGxhc3RfcmVmZXJyZXIiOnsidHMiOjE2NzAzNTQxMDYsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifX0=; _tt_enable_cookie=1; _ttp=_XTR0X_zB1-Zyw4Zi3oDQNTrUqF; rmStore=dmid:8567; cqcid=fgadbRcUEVy93Vte91dqHE9q24; __cq_uuid=fgadbRcUEVy93Vte91dqHE9q24; __cq_seg=0~0.00!1~0.00!2~0.00!3~0.00!4~0.00!5~0.00!6~0.00!7~0.00!8~0.00!9~0.00; _li_dcdm_c=.popsockets.com; _lc2_fpi=93a85bcc3d45--01gkmdsyzb1ywt3s6vc8byr4sp; _attn_=eyJ1Ijoie1wiY29cIjoxNjcwMzU0MTA3NDc5LFwidW9cIjoxNjcwMzU0MTA3NDc5LFwibWFcIjoyMTkwMCxcImluXCI6ZmFsc2UsXCJ2YWxcIjpcIjNjMDA2YWI4ZGZlNjQ5NjU5MTMyYWI1M2M0ZDFjNTYzXCJ9In0=; __attentive_id=3c006ab8dfe649659132ab53c4d1c563; __attentive_cco=1670354107481; _gid=GA1.2.1132764455.1670354108; _gat_UA-45094809-1=1; _uetsid=4bd16660759a11ed998cef28d027a2d8; _uetvid=4bd1aab0759a11eda8751ddf5f1b785d; __attentive_dv=1; __attentive_pv=1; __attentive_ss_referrer="ORGANIC"; _clck=1rbx104|1|f76|0; _hjSessionUser_3168931=eyJpZCI6IjdiMjY5NDUwLTMwNjItNTk1Ny1hZTFlLTk5NjczM2FhNDFiMiIsImNyZWF0ZWQiOjE2NzAzNTQxMDg0MTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_3168931=eyJpZCI6IjFlOWFiZTg0LWQ2Y2ItNGQyNS05N2M1LTAzNTBjMTRmMjhlOSIsImNyZWF0ZWQiOjE2NzAzNTQxMDg0NTcsImluU2FtcGxlIjpmYWxzZX0=; _hjIncludedInPageviewSample=1; _hjAbsoluteSessionInProgress=1; _fbp=fb.1.1670354108524.888527502; _pin_unauth=dWlkPVptWmpNalZrTnpJdE9HUmlaQzAwTXpFMExXSmlPVFl0TmpCak5HSXdaVGd3WlRSbA; _clsk=vhxi03|1670354109188|1|1|b.clarity.ms/collect; __zlcmid=1DIlQkcztIjL6nS; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Dec+06+2022+19%3A15%3A10+GMT%2B0000+(Coordinated+Universal+Time)&version=6.22.0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.popsockets.com%2F2576087%2Forders%2F1d552990a6e22636a80ca8a2e6184e45%2Fauthenticate%3Fkey%3Da2c47d0bcdb8173929086b5668d54ef9&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1%2CC0005%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:11 GMT
content-type: image/gif
content-length: 35
accept-ranges: bytes
x-dw-request-base-id: JnqLnL6Uj2MBAAB_
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 775759494a7c1c0a-OSL
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=A7F55AA893594B9993F505DB51273551&MUID=2DDE5C3352BF6C5D197B4E41534A6D95
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=A7F55AA893594B9993F505DB51273551&MUID=2DDE5C3352BF6C5D197B4E41534A6D95
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=A7F55AA893594B9993F505DB51273551&MUID=2DDE5C3352BF6C5D197B4E41534A6D95 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popsockets.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Thu, 13 Oct 2022 20:07:05 GMT
accept-ranges: bytes
etag: "40db785d3fdfd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Tue, 06-Dec-2022 19:25:11 GMT; path=/; SameSite=None; Secure;
date: Tue, 06 Dec 2022 19:15:10 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 118842
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://www.popsockets.com
access-control-allow-credentials: true
date: Tue, 06 Dec 2022 19:15:10 GMT
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/6.22.0/assets/otCommonStyles.css
200 OK 0 B URL HTTP/2 cdn.cookielaw.org/scripttemplates/6.22.0/assets/otCommonStyles.css
IP
GET /scripttemplates/6.22.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popsockets.com/
Origin: https://www.popsockets.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:10 GMT
content-type: text/css
content-md5: F/Fs54+x9bQK/ULkNRp4fA==
last-modified: Thu, 19 Aug 2021 02:39:24 GMT
x-ms-request-id: 19516e3a-e01e-009b-0670-cb55de000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 78129
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77575947afbcb4f3-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
unpkg.com/simplebar@latest/dist/simplebar.css
302 Found 0 B URL HTTP/2 unpkg.com/simplebar@latest/dist/simplebar.css
IP
GET /simplebar@latest/dist/simplebar.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 06 Dec 2022 19:15:04 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /simplebar@5.3.9/dist/simplebar.css
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GKMDBBJKHHNRZB46EHABBYZ2-fra
cf-cache-status: HIT
age: 476
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7757591f4964b4e8-OSL
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/js/tagmanager.js
200 OK 0 B URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/js/tagmanager.js
IP
GET /on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/js/tagmanager.js HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:04 GMT
content-type: application/javascript
x-dw-request-base-id: Jnp-TezpjmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591894
expires: Thu, 05 Jan 2023 07:06:20 GMT
last-modified: Mon, 05 Dec 2022 14:01:08 GMT
vary: accept-encoding
content-encoding: gzip
cf-cache-status: HIT
age: 43618
server: cloudflare
cf-ray: 7757591efa171c0a-OSL
X-Firefox-Spdy: h2
cdn.attn.tv/growth-tag-assets/client-configs/popsockets.attn.tv.js
200 OK 0 B URL HTTP/2 cdn.attn.tv/growth-tag-assets/client-configs/popsockets.attn.tv.js
IP
GET /growth-tag-assets/client-configs/popsockets.attn.tv.js HTTP/1.1
Host: cdn.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Wed, 23 Nov 2022 20:44:08 GMT
x-amz-version-id: pn2ZmepRdmVoPkj70saW1lv2oOtGmVCT
server: AmazonS3
content-encoding: gzip
date: Tue, 06 Dec 2022 19:15:09 GMT
cache-control: max-age=120
etag: W/"1c3ee2102bd3fbbfc554da52ec15fe0a"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: s8g8AuqGSLKXaxeMztl-dF-3i49Bb7PRuadjTIjZKgru58raCNbP3g==
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-5324-20eb14a.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-5324-20eb14a.js
IP
GET /web_widget/latest/classic/web-widget-5324-20eb14a.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:09 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: yXFbiUUaccg5iGi1/T9ssyEqBGdfSiimKRz0Ye+YVD8ogC0GC57MjdpV6nEl/NsUa1Ub9FA2yt4=
x-amz-request-id: 9170P4BX7RRZMDHB
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Dec 2022 01:20:22 GMT
etag: W/"1d8c81e9ab2cd9bffc14a740faf2fa1f"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Sat, 02 Dec 2023 01:20:21 GMT
x-amz-version-id: XxrjPEFD4W4mGiD_zI1ySFJZLMDhRYN6
cf-cache-status: HIT
age: 404454
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gxgm2RCy18O6yFVCFCh31SHn57ceBf8B2OU97BEpyk8w2Q2wbh4e5cVclLKFk5sFLESbL85lYX0otcWMbC3hcX%2FHGrBFCtejAFmAHtvnaBnr%2FIfleM0GfVPg%2FACV%2BTGw%2BWlM3Og%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7757593d6b37b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-8165-20eb14a.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-8165-20eb14a.js
IP
GET /web_widget/latest/classic/web-widget-8165-20eb14a.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:09 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: 8v06lzYrxi5ba+Eee+RDpgflSzZhMnE2XXAOkbNPpvw8Rc1/vDvVZdeANGc+o/ToJ+CGleQ4+9c=
x-amz-request-id: 9174G1SFGFVW25DW
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Dec 2022 01:20:22 GMT
etag: W/"d519ea27f763cb6ec80aeec5b45213a7"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Sat, 02 Dec 2023 01:20:21 GMT
x-amz-version-id: AlUKX5tNUp03hO6igu3TiO1IMesmIxxV
cf-cache-status: HIT
age: 404454
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8SRpOnibugZUFIH31%2FGZVk%2BnzCzBykUr2PArRyVeeMei36eiQKPZoL85wV9aE4X7llqCurAGWsQlRgZ3u4dXv06xtLvJvtxbnwe1YXsYcIoF65ZM2UyqlQU%2FNU5tXt7I%2FPzYiuA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7757593d6b35b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/simplebar@latest/dist/simplebar.min.js
302 Found 0 B URL HTTP/2 unpkg.com/simplebar@latest/dist/simplebar.min.js
IP
GET /simplebar@latest/dist/simplebar.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 06 Dec 2022 19:15:04 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /simplebar@5.3.9/dist/simplebar.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GKMDBBJKS1VTMT723G6JQ6WN-fra
cf-cache-status: HIT
age: 476
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7757591fba3cb4e8-OSL
X-Firefox-Spdy: h2
tag.rmp.rakuten.com/116150.ct.js
200 OK 0 B URL HTTP/2 tag.rmp.rakuten.com/116150.ct.js
IP
GET /116150.ct.js HTTP/1.1
Host: tag.rmp.rakuten.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cache-control: max-age=86400
content-encoding: gzip
content-type: text/javascript
last-modified: Tue, 06 Dec 2022 19:15:06 GMT
x-cache: miss
x-dyn: 0
x-samesite: secure
date: Tue, 06 Dec 2022 19:15:06 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.attn.tv/tag/4-latest/unified-tag.js?v=4-latest_263507365a
200 OK 0 B URL HTTP/2 cdn.attn.tv/tag/4-latest/unified-tag.js?v=4-latest_263507365a
IP
GET /tag/4-latest/unified-tag.js?v=4-latest_263507365a HTTP/1.1
Host: cdn.attn.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Dec 2022 17:06:35 GMT
x-amz-version-id: QhkI0JK8557enJlLggAAgHQW71jRWg5R
server: AmazonS3
content-encoding: gzip
date: Tue, 06 Dec 2022 19:13:07 GMT
cache-control: public, max-age=300
etag: W/"0f5f93bc1111322a5cdc724a4b2e24ab"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cnSsU-nFpn6m_7tdxccHWglSDr_R5D0u3qZu7xRK-fvP-frXWfbdGw==
age: 146
X-Firefox-Spdy: h2
www.clarity.ms/tag/dft7bh4g4y?ref=gtm
200 OK 0 B URL HTTP/2 www.clarity.ms/tag/dft7bh4g4y?ref=gtm
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
GET /tag/dft7bh4g4y?ref=gtm HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=cc22d7c2c3294fbdb13166584021da33.20221206.20231206; expires=Wed, 06 Dec 2023 19:15:07 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:b1d896b3-bec7-448b-b764-240152e813e8
x-cache: CONFIG_NOCACHE
x-azure-ref: 0u5SPYwAAAAAfhQ4SeMeeQYpN0SR5f7o0U1ZHMjBFREdFMDUwOAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Tue, 06 Dec 2022 19:15:07 GMT
X-Firefox-Spdy: h2
www.paypal.com/targeting/graphql
200 OK 0 B URL HTTP/2 www.paypal.com/targeting/graphql
IP
POST /targeting/graphql HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.paypalobjects.com/
Content-Type: application/json
Origin: https://www.paypalobjects.com
Content-Length: 319
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.paypalobjects.com
access-control-expose-headers: Paypal-Debug-Id
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https:; script-src 'nonce-Yqdj3BqFAnhQ9mG65f10SBqGlXZnxsMzKRYZzFHoZs+m9SE0' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' ; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' ; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; object-src 'none'; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com;
content-type: application/json; charset=utf-8
etag: W/W/"1be-g1Loyt7jmnStUJo8+0I5indaY0o"
paypal-debug-id: f428796cdcc22
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Wed, 07 Dec 2022 04:01:03 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 06 Dec 2023 19:15:07 GMT; Secure
x-pp-s=eyJ0IjoiMTY3MDM1NDEwNzMzOCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=targetingnodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 09 Dec 2022 19:15:07 GMT; HttpOnly; Secure; SameSite=None
nsid=s%3ATU48nmzTBHqQIbOSZfmUrXYGGn3faQie.m2lJQtUiUnK2FGEAmba8goFw9WnqOBW16P6xz%2F8NLRQ; Path=/; HttpOnly; Secure
l7_az=dcg01.phx; Path=/; Domain=paypal.com; Expires=Tue, 06 Dec 2022 19:45:07 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765048506%26vteXpYrS%3D1670355906%26vr%3De8dcf9fa1840a1d2d467ae2cfc0fc199%26vt%3De8dcf9fa1840a1d2d467ae2cfc0fc198%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 19:15:07 GMT; HttpOnly; Secure
ts_c=vr%3De8dcf9fa1840a1d2d467ae2cfc0fc199%26vt%3De8dcf9fa1840a1d2d467ae2cfc0fc198; Path=/; Domain=paypal.com; Expires=Fri, 05 Dec 2025 19:15:07 GMT; Secure
traceparent: 00-0000000000000000000f428796cdcc22-cf7ed906624664da-01
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Tue, 06 Dec 2022 19:15:07 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4022-HHN, cache-bma1646-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670354107.781196,VS0,VE658
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-3168931.js?sv=6
200 OK 0 B URL HTTP/2 static.hotjar.com/c/hotjar-3168931.js?sv=6
IP
GET /c/hotjar-3168931.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Tue, 06 Dec 2022 19:15:07 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
etag: W/c0754193ab1a86b6f38df6db684efdc2
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VMt-3Igoq2r1UKf_SMnVdD0h4OMcIWWHMQiqYshKz3yCeVR6nMhLcw==
X-Firefox-Spdy: h2
www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
404 Not Found 0 B URL HTTP/2 www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
IP
GET /2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9 HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
date: Tue, 06 Dec 2022 19:15:03 GMT
content-type: text/html;charset=UTF-8
accept-ranges: bytes
set-cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; Path=/; Secure; SameSite=None
dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; Version=1; Comment="Demandware anonymous cookie for site Sites-AMER-Site"; Max-Age=15552000; Expires=Sun, 04-Jun-2023 19:15:03 GMT; Path=/; Secure; SameSite=None
dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; Path=/; Secure; SameSite=None
cquid=||; Path=/; Secure; SameSite=None
__cq_dnt=0; Path=/; Secure; SameSite=None
dw_dnt=0; Path=/; Secure; SameSite=None
dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==; path=/; HttpOnly; Secure; SameSite=None
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'
x-dw-request-base-id: JnqImrKUj2MBAAB_
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Thu, 01 Dec 1994 16:00:00 GMT
vary: accept-encoding
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 775759184b3f1c0a-OSL
X-Firefox-Spdy: h2
assets.zendesk.com/embeddable_framework/main.js
301 Moved Permanently 0 B URL HTTP/2 assets.zendesk.com/embeddable_framework/main.js
IP
GET /embeddable_framework/main.js HTTP/1.1
Host: assets.zendesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 19:15:06 GMT
location: https://static.zdassets.com/ekr/asset_composer.js
cache-control: max-age=3600
expires: Tue, 06 Dec 2022 20:15:06 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WDwZlkGfeDoQIqBnR%2BDH1ozzd1P3lPnWCuv%2BoQAzTm6irhjCFvpp6wACj%2Fh9B4J5X2E%2F5cQRWPOOg00syYHCQ3PGM9YuZZLnturO8upHWzt%2F43hlLeTXioovZv%2FazL2XtZRPhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7757592c296d0b31-OSL
X-Firefox-Spdy: h2
b-code.liadm.com/a-028x.min.js
200 OK 0 B URL HTTP/2 b-code.liadm.com/a-028x.min.js
IP
GET /a-028x.min.js HTTP/1.1
Host: b-code.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Tue, 06 Dec 2022 03:57:17 GMT
cache-control: "public, max-age=86400"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0NaqkLG9a12hZCecRXjXWGFtcLkb94A258jXSFq5AvuTS95WbY0BgA==
age: 55069
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/images/icons/pause.svg
200 OK 0 B URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/images/icons/pause.svg
IP
GET /on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/images/icons/pause.svg HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/css/global.css
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==; _gcl_au=1.1.260335682.1670354104; _ga_123123123=GS1.1.1670354104.1.1.1670354104.0.0.0; _ga=GA1.1.1088972480.1670354105; _rdt_uuid=1670354104544.4aa30926-df06-42b9-8e37-eea844e3c575; _scid=e930bd70-c75e-4a66-90e5-3cb22ccc4161; __kla_id=eyIkcmVmZXJyZXIiOnsidHMiOjE2NzAzNTQxMDYsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifSwiJGxhc3RfcmVmZXJyZXIiOnsidHMiOjE2NzAzNTQxMDYsInZhbHVlIjoiIiwiZmlyc3RfcGFnZSI6Imh0dHBzOi8vd3d3LnBvcHNvY2tldHMuY29tLzI1NzYwODcvb3JkZXJzLzFkNTUyOTkwYTZlMjI2MzZhODBjYThhMmU2MTg0ZTQ1L2F1dGhlbnRpY2F0ZT9rZXk9YTJjNDdkMGJjZGI4MTczOTI5MDg2YjU2NjhkNTRlZjkifX0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:06 GMT
content-type: image/svg+xml
x-dw-request-base-id: Jnr9Te_pjmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591896
expires: Thu, 05 Jan 2023 07:06:23 GMT
last-modified: Mon, 05 Dec 2022 14:01:09 GMT
cf-cache-status: HIT
age: 43619
vary: Accept-Encoding
server: cloudflare
cf-ray: 7757592cea871c0a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-20eb14a.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-20eb14a.js
IP
GET /web_widget/latest/classic/web-widget-locales/classic/en-us-json-20eb14a.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:09 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: FCqhqx+KqE2/4RX7ATDnOHL+f+2M3aMQp8mDjIugkg7IfHIjGsD6GM+hoNbaU8UnL6E4AcQIYxA=
x-amz-request-id: D71PXFCZWD8G41DV
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Dec 2022 01:20:24 GMT
etag: W/"10d9a30eac6ed106c66673278428cd9d"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Sat, 02 Dec 2023 01:20:23 GMT
x-amz-version-id: NMq1o_asHRD4Mzg4dzSn6tA6saSndSio
cf-cache-status: HIT
age: 404451
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zj0r1PmiYqd4jKbq5fjTs180IgNQy4fUMG1wRTV25FxsVtALIEvaXafmc7jvTAosa%2FeWtoJc%2Bm8rLNoNkDM6nmpZ74tiBYMcU3%2Bw8omQziYiGNdSckTJkM2npLNAn6Qz%2Bj7k23I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7757593f3e42b50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-classic-20eb14a.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-classic-20eb14a.js
IP
GET /web_widget/latest/classic/web-widget-classic-20eb14a.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:09 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: HMyZsI3puL0l0jsv4+vt4i7VRCh4ptyvr8k7jyDvrMtfukncRm3d1sj8SYS5Nuf3IFuJqbPYnx4=
x-amz-request-id: 917163RQYCP4MRR8
x-amz-replication-status: COMPLETED
last-modified: Fri, 02 Dec 2022 01:20:22 GMT
etag: W/"4e338fc100e49c60d3f6c26eb42a86e3"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Sat, 02 Dec 2023 01:20:21 GMT
x-amz-version-id: atBkhjb26fG55yAKpnhmxqlvZoIbOzXg
cf-cache-status: HIT
age: 404454
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NvvcwLhrYk6Fg1H%2FxXiFrKsn76yYqoMb0UjLF08%2FZ%2BNxf%2BEEBmCPrfWFcIdXiVnGZRzCCMKoaQsfTNVzvUDltLec1liYtkd77J5bOL1ReET%2Faj1GIewXnjtke6E1uz09EtcPw5s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7757593d3afbb50c-OSL
content-encoding: br
X-Firefox-Spdy: h2
tr.snapchat.com/collector/is_enabled?pids=28ec369c-27f3-48c4-9de2-e7f45fb0d936&tld=com
200 OK 0 B URL HTTP/2 tr.snapchat.com/collector/is_enabled?pids=28ec369c-27f3-48c4-9de2-e7f45fb0d936&tld=com
IP
GET /collector/is_enabled?pids=28ec369c-27f3-48c4-9de2-e7f45fb0d936&tld=com HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:10 GMT
access-control-allow-origin: https://www.popsockets.com
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 1
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
unpkg.com/simplebar@5.3.9/dist/simplebar.css
200 OK 0 B URL HTTP/2 unpkg.com/simplebar@5.3.9/dist/simplebar.css
IP
GET /simplebar@5.3.9/dist/simplebar.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popsockets.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:04 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"f43-B3tgf5pr6cYrs4TOw8CgUAboF8w"
via: 1.1 fly.io
fly-request-id: 01GE0N39D222J2JR3EARW1132X-fra
cf-cache-status: HIT
age: 6032149
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7757591fca52b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/images/logo.svg
200 OK 0 B URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/images/logo.svg
IP
GET /on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/images/logo.svg HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/css/global.css
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==; _gcl_au=1.1.260335682.1670354104; _ga_123123123=GS1.1.1670354104.1.1.1670354104.0.0.0; _ga=GA1.1.1088972480.1670354105; _rdt_uuid=1670354104544.4aa30926-df06-42b9-8e37-eea844e3c575; _scid=e930bd70-c75e-4a66-90e5-3cb22ccc4161
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:05 GMT
content-type: image/svg+xml
x-dw-request-base-id: JnrfTe_pjmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591896
expires: Thu, 05 Jan 2023 07:06:23 GMT
last-modified: Mon, 05 Dec 2022 14:01:09 GMT
cf-cache-status: HIT
age: 43618
vary: Accept-Encoding
server: cloudflare
cf-ray: 775759298e081c0a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
in.hotjar.com/api/v2/client/sites/3168931/visit-data?sv=6
200 OK 0 B URL HTTP/2 in.hotjar.com/api/v2/client/sites/3168931/visit-data?sv=6
IP
POST /api/v2/client/sites/3168931/visit-data?sv=6 HTTP/1.1
Host: in.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 129
Origin: https://www.popsockets.com
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:08 GMT
content-type: application/json
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/css/global.css
200 OK 0 B URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/css/global.css
IP
GET /on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/css/global.css HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/2576087/orders/1d552990a6e22636a80ca8a2e6184e45/authenticate?key=a2c47d0bcdb8173929086b5668d54ef9
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:04 GMT
content-type: text/css
x-dw-request-base-id: JnrCTe7pjmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591897
expires: Thu, 05 Jan 2023 07:06:22 GMT
last-modified: Mon, 05 Dec 2022 14:01:07 GMT
vary: accept-encoding
content-encoding: gzip
cf-cache-status: HIT
age: 43619
server: cloudflare
cf-ray: 7757591efa141c0a-OSL
X-Firefox-Spdy: h2
www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/images/icons/Search.svg
200 OK 0 B URL HTTP/2 www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/images/icons/Search.svg
IP
GET /on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/images/icons/Search.svg HTTP/1.1
Host: www.popsockets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/on/demandware.static/Sites-AMER-Site/-/en_US/v1670310379021/css/global.css
Cookie: sid=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ; dwanonymous_21b229e45bb3e525e0d72fdce2486c23=fgadbRcUEVy93Vte91dqHE9q24; dwac_17dc3ae59a37913e8c4260b12f=pqdVs1sYJbLB0_kBEybXtPvKBkWXKt9dXrQ%3D|dw-only|||USD|false|US%2FMountain|true; cquid=||; __cq_dnt=0; dw_dnt=0; dwsid=ktL28yRacZTwB_sDHAMCt8-_pQXoaIt7b2AnaOJPic-A0BDpVoUgrP5LqZXj20hEy3oCGCjnARtwWKXrrDAxsg==; _gcl_au=1.1.260335682.1670354104; _ga_123123123=GS1.1.1670354104.1.1.1670354104.0.0.0; _ga=GA1.1.1088972480.1670354105; _rdt_uuid=1670354104544.4aa30926-df06-42b9-8e37-eea844e3c575; _scid=e930bd70-c75e-4a66-90e5-3cb22ccc4161
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:05 GMT
content-type: image/svg+xml
x-dw-request-base-id: JnrhTe_pjmMBAAB_
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=2591896
expires: Thu, 05 Jan 2023 07:06:23 GMT
last-modified: Mon, 05 Dec 2022 14:01:09 GMT
cf-cache-status: HIT
age: 43618
vary: Accept-Encoding
server: cloudflare
cf-ray: 775759298e0b1c0a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cquotient.com/js/v2/gretel.min.js
200 OK 0 B URL HTTP/2 cdn.cquotient.com/js/v2/gretel.min.js
IP
GET /js/v2/gretel.min.js HTTP/1.1
Host: cdn.cquotient.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.popsockets.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 02 Aug 2022 19:14:05 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Tue, 06 Dec 2022 10:12:39 GMT
etag: W/"4522775df3bc6a8e53800401880a686c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KxzmcUDw3wmvjsfVOB38F4W-QLcy_hWqjhE1aVvGmAkMHvpE4acZFg==
age: 32546
X-Firefox-Spdy: h2
unpkg.com/simplebar@5.3.9/dist/simplebar.min.js
200 OK 0 B URL HTTP/2 unpkg.com/simplebar@5.3.9/dist/simplebar.min.js
IP
GET /simplebar@5.3.9/dist/simplebar.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.popsockets.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Dec 2022 19:15:04 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"10183-KX7yLFpQy47C6QRABlUFCWYD3Vc"
via: 1.1 fly.io
fly-request-id: 01GE0N39C5GHDYZ13V6PPCMBDD-fra
cf-cache-status: HIT
age: 6032149
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7757591fda69b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
104.17.67.195
108.157.207.244
104.18.43.48
23.33.119.27
31.13.72.12
54.78.147.197
93.184.220.29
157.240.200.35
18.185.236.247